last executing test programs: 3m15.908729489s ago: executing program 0 (id=17557): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=r1, @ANYBLOB="560609000000000050001980140005004aa0a26cd54dd00216059b4ae508fd03b6cbd87341fd4d6c09000200626f6e64000000001400040013d48dc4a48a8c923281a20249666aa405000200000000000600020039000000"], 0x70}, 0x1, 0x0, 0x0, 0x690}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 3m14.606889177s ago: executing program 0 (id=17562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x4000) sendmsg$nl_route(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000013000100000000000000000004000000", @ANYRES32=r2, @ANYBLOB="c588000005"], 0x20}}, 0x40040000) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x300, r2}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3m13.563760586s ago: executing program 0 (id=17566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 3m13.100346405s ago: executing program 0 (id=17570): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x0, 0x5a}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) close(r0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) 3m12.550925436s ago: executing program 0 (id=17573): unshare(0x22020400) r0 = socket$kcm(0x23, 0x2, 0x0) recvfrom(r0, 0x0, 0xffffffd9, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3m11.397649085s ago: executing program 0 (id=17578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x5dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2m56.248216018s ago: executing program 32 (id=17578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x5dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m42.032366587s ago: executing program 5 (id=17836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60441, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m30.389198831s ago: executing program 5 (id=17841): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m29.775959496s ago: executing program 5 (id=17844): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40000141, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x4, 0x201a}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}}, 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) 1m27.936390852s ago: executing program 5 (id=17848): pipe(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0xf03a0005) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 1m26.442504666s ago: executing program 5 (id=17853): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r1, r0, 0x0, 0x10000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0xf03a0005) 1m25.109206223s ago: executing program 5 (id=17855): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r1, 0x0, 0x20000040) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040000) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000100)=[{&(0x7f0000004f40)="2ca80cd8c165a9779c8db1ce305fb49a6faf3dafd42f12fc08fec19f3dea184f08e9771068188bd01797fe9ad56ed9b1da14be9b22fa4cbd96da9ba9aad9c1814bd1d1266591fa17da1127424544574fc1883dd9e09838f3bfbf88092c675873e762c300a28954c752077df432326385e62615a1f22d69e93d9661dec0eccbd28638aea23a83280cf9d2d40feb941a985a156b6f847c0f16a2fd4392d5fc090046bfa02f09fefd7ed690062f6db6807964f07cea3d9dc2a15c6fb8ed7ddf003c71c50ea3f97ab43856123b8b853493", 0x595}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m9.726337033s ago: executing program 33 (id=17855): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r1, 0x0, 0x20000040) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040000) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000100)=[{&(0x7f0000004f40)="2ca80cd8c165a9779c8db1ce305fb49a6faf3dafd42f12fc08fec19f3dea184f08e9771068188bd01797fe9ad56ed9b1da14be9b22fa4cbd96da9ba9aad9c1814bd1d1266591fa17da1127424544574fc1883dd9e09838f3bfbf88092c675873e762c300a28954c752077df432326385e62615a1f22d69e93d9661dec0eccbd28638aea23a83280cf9d2d40feb941a985a156b6f847c0f16a2fd4392d5fc090046bfa02f09fefd7ed690062f6db6807964f07cea3d9dc2a15c6fb8ed7ddf003c71c50ea3f97ab43856123b8b853493", 0x595}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m2.790140909s ago: executing program 4 (id=17890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7fff, 0x5, 0x401, 0x7}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m1.734510609s ago: executing program 4 (id=17893): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m1.393068469s ago: executing program 4 (id=17894): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffb1, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0x3, 0x18, 0x6, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m1.138976114s ago: executing program 3 (id=17895): openat$rfkill(0xffffffffffffff9c, 0x0, 0xec601, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x4000000) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt(r1, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r1, 0x0, 0x484, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x10000005, 0x8c45, 0xd73}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x20000000, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x0, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x2, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0xfffffffe}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x7, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x8, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0x7, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0xcdf6, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x800, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a79, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0xe09}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0x1000}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x5}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r2}, 0x38) shutdown(r0, 0x1) 1m0.895434611s ago: executing program 1 (id=17897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x6, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x6, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0xc, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x800}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a311039dbee9", 0xfa}], 0x1}, 0x20000885) 58.600223119s ago: executing program 3 (id=17898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 58.100664218s ago: executing program 4 (id=17900): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 57.813729655s ago: executing program 3 (id=17901): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x1000a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) 46.288474827s ago: executing program 1 (id=17903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.230394454s ago: executing program 3 (id=17904): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0000000500"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) close(0xffffffffffffffff) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 43.885064198s ago: executing program 4 (id=17907): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r3, 0x3328}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 43.497704016s ago: executing program 1 (id=17908): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 42.38807188s ago: executing program 1 (id=17909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) close(r4) 42.115762703s ago: executing program 4 (id=17910): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x40841) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000240)={0x0, 0x6, 0x17, &(0x7f0000000200)=""/23}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001004500000025000000190004000400ad000200000000000006040000000000f93132", 0x37}], 0x1) 41.127315769s ago: executing program 1 (id=17911): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7fc, 0x0, 0xa, 0x80, 0x0, 0x1}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1000, 0xfffffffffffffffc}, {0x3, 0x2, 0x80, 0x2}, 0xfffffffc}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x8000, 0x3c}, 0x0, @in6=@empty, 0x3504, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in6=@empty, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x10000, 0x6c}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x3, 0x4, 0x0, 0xabb}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) 39.995895875s ago: executing program 3 (id=17912): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x4, 0x30}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000fedbdf2502000000fc01c8090027000006001500020000001400168004000880"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0xfffffffd, 0x32}, @in=@loopback, {}, {}, {}, 0x100, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r5, &(0x7f0000000140)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcd", 0x1f) 39.333300178s ago: executing program 1 (id=17913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 38.073621201s ago: executing program 3 (id=17914): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 27.082310942s ago: executing program 34 (id=17910): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x40841) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000240)={0x0, 0x6, 0x17, &(0x7f0000000200)=""/23}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001004500000025000000190004000400ad000200000000000006040000000000f93132", 0x37}], 0x1) 24.063005929s ago: executing program 35 (id=17913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 23.01882394s ago: executing program 36 (id=17914): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 21.914781342s ago: executing program 2 (id=17919): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000000000000000000000030000000001"], 0x0, 0x53, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 18.912673724s ago: executing program 2 (id=17920): socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 17.252351357s ago: executing program 2 (id=17921): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x312, 0x0) 16.110050528s ago: executing program 2 (id=17922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0x41}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="92f5f2c45726193b1e3a523706bacd6d69c0c7d89d3e444f4e1d149d14b879c35b6484c09319b9e15cbe82a09deff5e3cd5bf9f9d5fb0fd46a9a9c5676f918a361bdb930bde72de4e82d0a34b533ea72d366ffd1c23a812d74042af6f803135b519e4b72d32d96b5b9ee735588b8ca61f8951147598ec3896e7d3f200dd7cc14b751d473010ab3a106bef3eaeb8d6d43745addb949dce1f68317a8b7760fcd4fa2771326b56c68f5df0573944c7916ac1ab74de2acc455ec112af536650d7e5323dd5e8543"], 0x7c}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x40004) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3f0, 0x218, 0x218, 0x218, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @private=0xa010101, 0x0, 0xff, 0x2, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0xff, 0x80, 0x0, 0x0, 0xff]}}, 0x422f, 0x5, 0xbc, 0x8001, 0x535b, 0x9f, 'pimreg\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x372}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xc5905bd2, 'syz0\x00', {0x6}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @remote, 0x2, 0x1}}}, {{@arp={@multicast1, @local, 0xffffffff, 0x0, 0x6, 0xe, {@mac=@local, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0x1, 0xc45, 0xb, 0xffff, 0x8, 0x9f14, 'veth1_macvtap\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x8, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 15.72667392s ago: executing program 2 (id=17923): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20044840) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xca, &(0x7f0000000040)="0414702a04004da270", 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0400"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.258447916s ago: executing program 2 (id=17924): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x9, &(0x7f0000000200)=@framed={{}, [@generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x46}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 0s ago: executing program 37 (id=17924): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x9, &(0x7f0000000200)=@framed={{}, [@generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x46}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): tlink: 24 bytes leftover after parsing attributes in process `syz.3.15581'. [ 1077.769202][ T7228] lo speed is unknown, defaulting to 1000 [ 1079.493986][ T7254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15595'. [ 1079.575587][ T7228] wg2 speed is unknown, defaulting to 1000 [ 1079.961517][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15599'. [ 1080.018323][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15599'. [ 1080.777530][ T7274] batadv_slave_1: entered promiscuous mode [ 1080.784519][ T7272] batadv_slave_1: left promiscuous mode [ 1081.883106][ T5621] Bluetooth: hci4: link tx timeout [ 1081.884057][ T5621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.890749][ T4048] Bluetooth: hci4: link tx timeout [ 1081.890775][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.915980][ T4048] Bluetooth: hci4: link tx timeout [ 1081.916003][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.916200][ T4048] Bluetooth: hci4: link tx timeout [ 1081.916213][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.916323][ T4048] Bluetooth: hci4: link tx timeout [ 1081.916335][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.917123][ T4048] Bluetooth: hci4: link tx timeout [ 1081.917137][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.919315][ T4048] Bluetooth: hci4: link tx timeout [ 1081.919330][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.919509][ T4048] Bluetooth: hci4: link tx timeout [ 1081.919523][ T4048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1083.535037][ T7337] syzkaller1: entered promiscuous mode [ 1083.535290][ T7337] syzkaller1: entered allmulticast mode [ 1083.935458][ T4048] Bluetooth: hci4: command 0x0406 tx timeout [ 1084.233748][ T7352] lo speed is unknown, defaulting to 1000 [ 1085.318026][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15644'. [ 1085.371887][ T7352] wg2 speed is unknown, defaulting to 1000 [ 1085.476637][ T7376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1086.101183][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15651'. [ 1086.101329][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.245806][ T7390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.935306][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15660'. [ 1087.935348][ T7411] bond0: ARP target 0.0.0.2 is already present [ 1087.935368][ T7411] bond0: option arp_ip_target: invalid value (33554432) [ 1090.048776][ T7451] IPVS: Scheduler module ip_vs_sip not found [ 1090.199469][ T7456] tipc: New replicast peer: 172.20.20.170 [ 1090.208866][ T7456] tipc: Enabled bearer , priority 5 [ 1090.210980][ T7456] tipc: New replicast peer: 0.0.0.0 [ 1090.799430][ T7463] lo speed is unknown, defaulting to 1000 [ 1091.353384][T15511] tipc: Node number set to 4269801488 [ 1091.420444][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15689'. [ 1092.015557][ T7463] wg2 speed is unknown, defaulting to 1000 [ 1093.489128][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15700'. [ 1096.324448][ T7551] netlink: 'syz.3.15712': attribute type 4 has an invalid length. [ 1097.261980][ T7577] lo speed is unknown, defaulting to 1000 [ 1097.975044][ T59] batman_adv: batadv4: MLD Querier disappeared - multicast optimizations disabled [ 1098.224212][ T7591] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1098.729206][ T7591] bond6 (unregistering): Released all slaves [ 1098.814997][ T7605] netlink: 'syz.3.15734': attribute type 1 has an invalid length. [ 1098.915764][ T7577] wg2 speed is unknown, defaulting to 1000 [ 1099.210114][ T7605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1099.409037][ T7607] bond4: (slave gretap1): making interface the new active one [ 1099.424000][ T7607] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1099.669305][ T7620] ip6gre3: entered promiscuous mode [ 1099.669334][ T7620] ip6gre3: entered allmulticast mode [ 1101.445026][ T7653] netlink: 'syz.3.15748': attribute type 16 has an invalid length. [ 1101.445054][ T7653] netlink: 'syz.3.15748': attribute type 17 has an invalid length. [ 1101.645105][ T7661] IPv6: NLM_F_CREATE should be specified when creating new route [ 1101.645465][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.645480][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 1101.653894][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.653919][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 1101.674597][ T7653] lo: left promiscuous mode [ 1101.675899][ T7653] tunl0: left promiscuous mode [ 1101.710045][ T7653] gre0: left promiscuous mode [ 1101.725846][ T7653] erspan0: left promiscuous mode [ 1101.742307][ T7653] ip_vti0: left promiscuous mode [ 1101.768995][ T7653] ip6_vti0: left promiscuous mode [ 1101.769953][ T7653] sit0: left promiscuous mode [ 1101.798012][ T7653] ip6tnl0: left promiscuous mode [ 1101.798798][ T7653] ip6gre0: left promiscuous mode [ 1101.817653][ T7653] syz_tun: left promiscuous mode [ 1101.828614][ T7653] ip6gretap0: left promiscuous mode [ 1102.126319][ T7653] veth1_vlan: left promiscuous mode [ 1102.141611][ T7653] veth0_vlan: left promiscuous mode [ 1102.169226][ T7653] veth0_vlan: entered promiscuous mode [ 1102.218788][ T7653] veth1_vlan: entered promiscuous mode [ 1102.226726][ T7653] macvlan0: left promiscuous mode [ 1102.260629][ T7653] veth0_macvtap: left promiscuous mode [ 1102.261886][ T7653] veth0_macvtap: entered promiscuous mode [ 1102.262107][ T7653] macvtap0: left promiscuous mode [ 1102.408058][ T7653] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1102.411519][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1102.412433][ T7653] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1102.467980][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1102.483677][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1102.562112][ T7674] nbd1: detected capacity change from 0 to 63 [ 1102.571875][ T7674] block nbd1: NBD_DISCONNECT [ 1102.616312][ T7674] block nbd1: Disconnected due to user request. [ 1102.622285][ T4945] blk_print_req_error: 130 callbacks suppressed [ 1102.622309][ T4945] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1102.622337][ T4945] buffer_io_error: 138 callbacks suppressed [ 1102.622347][ T4945] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1102.622393][ T4945] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1102.622414][ T4945] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1102.622428][ T4945] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1102.642636][ T7674] block nbd1: shutting down sockets [ 1102.651003][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1102.651135][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1102.676733][ T7653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1102.701399][ T7653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1102.718056][ T7653] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1102.718837][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.762013][ T4945] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1102.762052][ T4945] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1102.762070][ T4945] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1102.762086][ T4945] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1102.762100][ T4945] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1102.762307][ T4945] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1102.762331][ T4945] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1102.762347][ T4945] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1102.762506][ T4945] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1102.762679][ T4945] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1102.762854][ T4945] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1102.763003][ T4945] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1102.763169][ T4945] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1102.770199][ T7542] ldm_validate_partition_table(): Disk read failed. [ 1102.907714][ T7542] Dev nbd1: unable to read RDB block 0 [ 1102.910944][ T7542] nbd1: unable to read partition table [ 1102.949024][ T7542] ldm_validate_partition_table(): Disk read failed. [ 1102.993582][ T7542] Dev nbd1: unable to read RDB block 0 [ 1103.027273][ T7542] nbd1: unable to read partition table [ 1103.156594][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.157823][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.426754][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.529568][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.549424][ T7686] netlink: 'syz.3.15764': attribute type 11 has an invalid length. [ 1103.549451][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15764'. [ 1104.228092][ T7707] netlink: 'syz.3.15772': attribute type 1 has an invalid length. [ 1104.228116][ T7707] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.15772'. [ 1104.601527][ T7715] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.15775'. [ 1104.621365][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15776'. [ 1105.216001][ T13] wlan0: Trigger new scan to find an IBSS to join [ 1105.303923][ T7724] bond5: entered promiscuous mode [ 1105.344358][ T7724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1105.496546][ T7732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.624237][ T7732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.299861][ T7758] netlink: 'syz.3.15791': attribute type 1 has an invalid length. [ 1106.299889][ T7758] netlink: 'syz.3.15791': attribute type 6 has an invalid length. [ 1106.299905][ T7758] netlink: 'syz.3.15791': attribute type 3 has an invalid length. [ 1107.129787][ T7778] netlink: 116 bytes leftover after parsing attributes in process `syz.3.15800'. [ 1107.129821][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15800'. [ 1107.129837][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15800'. [ 1107.903439][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15805'. [ 1107.903466][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15805'. [ 1107.903491][ T7789] netlink: 'syz.4.15805': attribute type 7 has an invalid length. [ 1108.084378][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15805'. [ 1108.084421][ T7789] netlink: 'syz.4.15805': attribute type 7 has an invalid length. [ 1108.084926][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.096322][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.097035][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.097789][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.260482][ T13] wlan0: Trigger new scan to find an IBSS to join [ 1108.982902][ T7805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 1109.082747][ T7811] __nla_validate_parse: 1 callbacks suppressed [ 1109.082771][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15813'. [ 1109.266704][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 1111.215438][ T59] wlan0: Trigger new scan to find an IBSS to join [ 1112.078919][ T7863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15833'. [ 1112.154453][ T5344] wlan0: Creating new IBSS network, BSSID 22:90:ce:fe:b4:db [ 1112.559353][ T7871] netlink: 'syz.3.15836': attribute type 4 has an invalid length. [ 1114.370320][ T7907] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1114.503302][ T7913] syzkaller1: entered promiscuous mode [ 1114.503331][ T7913] syzkaller1: entered allmulticast mode [ 1116.376891][ T7947] bond6: entered promiscuous mode [ 1116.377431][ T7947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1116.836080][ T7953] syzkaller1: entered promiscuous mode [ 1116.836107][ T7953] syzkaller1: entered allmulticast mode [ 1117.959754][ T7986] pimreg: entered allmulticast mode [ 1118.020628][ T7988] syzkaller1: entered promiscuous mode [ 1118.020654][ T7988] syzkaller1: entered allmulticast mode [ 1118.030504][ T7984] pimreg: left allmulticast mode [ 1118.863707][ T8009] netlink: 'syz.4.15889': attribute type 6 has an invalid length. [ 1120.676828][ T8046] Bluetooth: hci1: too big key_count value 29096 [ 1120.742149][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15904'. [ 1120.742190][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15904'. [ 1120.842998][ T8050] 0ªX¹¦Dö»: entered promiscuous mode [ 1120.851538][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15904'. [ 1120.851578][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15904'. [ 1120.902517][ T8050] 0ªX¹¦Dö»: left promiscuous mode [ 1121.091922][ T8051] 0ªX¹¦Dö»: entered promiscuous mode [ 1121.226824][ T8051] 0ªX¹¦Dö»: left promiscuous mode [ 1121.795978][ T8058] syzkaller1: entered promiscuous mode [ 1121.796384][ T8058] syzkaller1: entered allmulticast mode [ 1122.274720][ T8061] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1123.995516][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15931'. [ 1124.512995][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15936'. [ 1131.453466][ T8245] syz.3.15975 (8245) used greatest stack depth: 17416 bytes left [ 1132.179210][ T8270] bridge0: entered allmulticast mode [ 1135.090426][ T8320] netlink: 160 bytes leftover after parsing attributes in process `syz.2.16006'. [ 1135.265046][ T8324] ip_tables: iptables: counters copy to user failed while replacing table [ 1135.290736][ T8324] xt_hashlimit: size too large, truncated to 1048576 [ 1135.773438][ T8327] geneve5: entered promiscuous mode [ 1135.832555][ T5344] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 37002 - 0 [ 1135.839026][ T5346] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 37002 - 0 [ 1135.839069][ T5346] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 37002 - 0 [ 1135.839099][ T5346] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 37002 - 0 [ 1137.194335][ T8355] netlink: 27 bytes leftover after parsing attributes in process `syz.0.16018'. [ 1137.992463][ T8367] veth0: entered promiscuous mode [ 1138.617559][ T8366] veth0: left promiscuous mode [ 1139.519440][ T8380] netlink: 'syz.2.16030': attribute type 21 has an invalid length. [ 1139.519480][ T8380] netlink: 'syz.2.16030': attribute type 22 has an invalid length. [ 1139.519494][ T8380] netlink: 'syz.2.16030': attribute type 23 has an invalid length. [ 1139.519507][ T8380] netlink: 'syz.2.16030': attribute type 25 has an invalid length. [ 1139.519519][ T8380] netlink: 'syz.2.16030': attribute type 26 has an invalid length. [ 1139.519531][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16030'. [ 1141.808542][ T8407] bridge7: entered promiscuous mode [ 1141.816192][ T8407] bridge7: entered allmulticast mode [ 1142.480643][ T8426] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1143.820956][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16059'. [ 1144.371745][ T8464] pim6reg1: entered promiscuous mode [ 1144.371771][ T8464] pim6reg1: entered allmulticast mode [ 1144.414948][ T5344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1146.410827][ T8511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1146.496060][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16084'. [ 1146.496087][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16084'. [ 1146.496305][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16084'. [ 1146.496321][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16084'. [ 1146.644841][ T8513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1146.744217][ T8520] netlink: 'syz.4.16085': attribute type 4 has an invalid length. [ 1146.798751][ T8521] netlink: 'syz.4.16085': attribute type 4 has an invalid length. [ 1147.584812][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16091'. [ 1147.617211][ T8532] netlink: 'syz.2.16091': attribute type 8 has an invalid length. [ 1147.617238][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16091'. [ 1147.694174][ T8533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16091'. [ 1147.694214][ T8533] netlink: 'syz.2.16091': attribute type 8 has an invalid length. [ 1147.694227][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16091'. [ 1148.236015][ T8544] netlink: 'syz.0.16094': attribute type 13 has an invalid length. [ 1148.496749][ T8544] netlink: 'syz.0.16094': attribute type 13 has an invalid length. [ 1148.512646][ T5344] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.512728][ T5344] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.512762][ T5344] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.512793][ T5344] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.133992][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16102'. [ 1149.134247][ T8564] netlink: 'syz.2.16102': attribute type 1 has an invalid length. [ 1150.551441][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16111'. [ 1150.551481][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16111'. [ 1150.626652][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16111'. [ 1150.626690][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16111'. [ 1151.486983][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16117'. [ 1151.592194][ T8596] xfrm2: entered promiscuous mode [ 1151.592227][ T8596] xfrm2: entered allmulticast mode [ 1151.592717][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16117'. [ 1152.075428][ T8608] veth0_to_bridge: entered promiscuous mode [ 1152.076292][ T8608] macvtap1: entered allmulticast mode [ 1152.076310][ T8608] veth0_to_bridge: entered allmulticast mode [ 1152.278306][ T8608] veth0_to_bridge: left allmulticast mode [ 1152.278340][ T8608] veth0_to_bridge: left promiscuous mode [ 1155.373912][ T8695] pim6reg1: entered promiscuous mode [ 1155.373939][ T8695] pim6reg1: entered allmulticast mode [ 1156.660158][ T8730] bridge0: entered promiscuous mode [ 1156.660186][ T8730] vlan0: entered promiscuous mode [ 1156.660200][ T8730] bridge_slave_0: entered promiscuous mode [ 1156.663063][ T8730] bridge0: entered allmulticast mode [ 1157.436167][ T8755] netlink: 'syz.1.16168': attribute type 7 has an invalid length. [ 1157.442860][ T8755] netlink: 'syz.1.16168': attribute type 7 has an invalid length. [ 1157.589900][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16169'. [ 1157.608673][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16169'. [ 1157.714104][ T8759] netlink: 'syz.0.16170': attribute type 1 has an invalid length. [ 1157.966397][ T8759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.089550][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1158.098464][ T8764] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1158.122594][ T8772] hsr0: entered promiscuous mode [ 1158.248683][ T8772] hsr_slave_0: left promiscuous mode [ 1158.314140][ T1167] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1158.454820][ T8772] hsr_slave_1: left promiscuous mode [ 1158.565493][ T8772] hsr0 (unregistering): left promiscuous mode [ 1159.320911][ T8797] syzkaller1: entered promiscuous mode [ 1159.321158][ T8797] syzkaller1: entered allmulticast mode [ 1159.984980][ T8814] netlink: 'syz.3.16190': attribute type 16 has an invalid length. [ 1159.985005][ T8814] netlink: 'syz.3.16190': attribute type 17 has an invalid length. [ 1160.963000][ T8814] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1164.764150][ T8900] ip6gretap1: entered promiscuous mode [ 1165.171133][ T8908] syzkaller1: entered promiscuous mode [ 1165.171167][ T8908] syzkaller1: entered allmulticast mode [ 1165.377295][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16231'. [ 1165.731270][ T8919] netlink: 'syz.2.16234': attribute type 30 has an invalid length. [ 1166.314201][ T8919] netlink: 'syz.2.16234': attribute type 30 has an invalid length. [ 1166.737961][ T8930] ip_tables: iptables: counters copy to user failed while replacing table [ 1167.155432][ T8934] netlink: 'syz.2.16242': attribute type 1 has an invalid length. [ 1167.232872][ T8934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1167.504621][ T8938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1167.509868][ T8938] bridge0: port 1(bond6) entered blocking state [ 1167.510739][ T8938] bridge0: port 1(bond6) entered disabled state [ 1167.511155][ T8938] bond6: entered allmulticast mode [ 1167.517899][ T8938] bond6: entered promiscuous mode [ 1167.534110][ T8938] bridge0: port 1(bond6) entered blocking state [ 1167.534244][ T8938] bridge0: port 1(bond6) entered listening state [ 1168.309359][ T150] bridge0: port 1(bond6) entered disabled state [ 1168.424554][ T8939] bond6: (slave geneve6): making interface the new active one [ 1168.446780][ T8939] bond6: (slave geneve6): Enslaving as an active interface with an up link [ 1168.705557][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705697][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705713][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705725][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705738][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705751][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705763][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705775][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1168.705788][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1169.472058][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.872084][ T9010] __nla_validate_parse: 6 callbacks suppressed [ 1170.872108][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16267'. [ 1170.922251][ T9010] siw: device registration error -23 [ 1171.409398][ T9017] dummy0: entered promiscuous mode [ 1171.426040][ T9017] gretap0: entered promiscuous mode [ 1171.448139][ T9017] debugfs: 'hsr0' already exists in 'hsr' [ 1171.448168][ T9017] Cannot create hsr debugfs directory [ 1171.448265][ T9017] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1171.484977][ T9017] hsr0: entered allmulticast mode [ 1171.485005][ T9017] dummy0: entered allmulticast mode [ 1171.485101][ T9017] gretap0: entered allmulticast mode [ 1171.488730][ T9019] syzkaller1: entered promiscuous mode [ 1171.488751][ T9019] syzkaller1: entered allmulticast mode [ 1173.092242][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16280'. [ 1175.237139][ T9091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16295'. [ 1175.797096][ T5347] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1178.830817][ T9150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1181.386457][ T9206] netlink: 'syz.3.16341': attribute type 4 has an invalid length. [ 1181.950654][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16346'. [ 1181.950683][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16346'. [ 1182.798304][ T9225] syzkaller1: entered promiscuous mode [ 1182.798328][ T9225] syzkaller1: entered allmulticast mode [ 1182.824567][ T9225] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1183.705764][ T9239] ip_tables: iptables: counters copy to user failed while replacing table [ 1183.850455][ T9243] sock: sock_timestamping_bind_phc: sock not bind to device [ 1184.363930][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16362'. [ 1185.260866][ T9286] netlink: 'syz.1.16373': attribute type 3 has an invalid length. [ 1185.260890][ T9286] netlink: 646 bytes leftover after parsing attributes in process `syz.1.16373'. [ 1187.176820][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16387'. [ 1187.177081][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16387'. [ 1187.445816][ T9339] netlink: 112 bytes leftover after parsing attributes in process `syz.1.16392'. [ 1188.439175][ T9364] netlink: 356 bytes leftover after parsing attributes in process `syz.0.16401'. [ 1188.439404][ T9364] netlink: 356 bytes leftover after parsing attributes in process `syz.0.16401'. [ 1189.014643][ T9369] bond7: option ad_select: invalid value (34) [ 1189.046753][ T9369] bond7 (unregistering): Released all slaves [ 1192.443444][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16437'. [ 1193.079041][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16444'. [ 1193.079085][ T9464] netlink: 'syz.2.16444': attribute type 26 has an invalid length. [ 1193.079100][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16444'. [ 1193.088890][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16444'. [ 1193.088924][ T9464] netlink: 'syz.2.16444': attribute type 26 has an invalid length. [ 1193.088937][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16444'. [ 1193.293954][ T9466] syzkaller1: entered promiscuous mode [ 1193.293980][ T9466] syzkaller1: entered allmulticast mode [ 1194.047929][ T9481] bridge9: entered promiscuous mode [ 1194.047956][ T9481] bridge9: entered allmulticast mode [ 1195.032457][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16460'. [ 1195.516493][ T9514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.729880][ T31] audit: type=1800 audit(1790770470.479:20): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16471" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=16729 res=0 errno=0 [ 1197.167899][ T9541] lo speed is unknown, defaulting to 1000 [ 1198.143371][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.259798][ T9565] syzkaller1: entered promiscuous mode [ 1198.259824][ T9565] syzkaller1: entered allmulticast mode [ 1198.718794][ T9541] wg2 speed is unknown, defaulting to 1000 [ 1201.279805][ T9592] ip6gre2: entered promiscuous mode [ 1201.280054][ T9592] ip6gre2: entered allmulticast mode [ 1201.795944][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16499'. [ 1202.067897][ T9601] veth0_vlan: left promiscuous mode [ 1202.214049][ T9601] veth0_vlan: entered promiscuous mode [ 1202.337095][ T9601] bond0: (slave vlan1): Enslaving as a backup interface with an up link [ 1203.474068][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16511'. [ 1203.806457][ T9627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1204.662720][ T9648] netlink: 'syz.0.16518': attribute type 1 has an invalid length. [ 1204.879624][ T9648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1205.590304][ T9664] netlink: 'syz.4.16524': attribute type 1 has an invalid length. [ 1205.952430][ T9666] gretap1: entered allmulticast mode [ 1205.998295][ T9666] bond1: (slave gretap1): making interface the new active one [ 1206.081816][ T9666] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1207.775807][ T5346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1209.341308][ T9752] PKCS7: Unknown OID: [4] (bad) [ 1209.341328][ T9752] PKCS7: Only support pkcs7_signedData type [ 1210.894024][ T9785] syzkaller1: entered promiscuous mode [ 1210.897265][ T9785] syzkaller1: entered allmulticast mode [ 1213.631003][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16576'. [ 1214.483363][ T9821] netlink: 'syz.3.16583': attribute type 1 has an invalid length. [ 1214.483392][ T9821] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16583'. [ 1214.865898][ T9831] macvlan2: entered promiscuous mode [ 1214.870842][ T9831] macvlan2: entered allmulticast mode [ 1214.871212][ T9831] geneve1: entered promiscuous mode [ 1214.871229][ T9831] geneve1: entered allmulticast mode [ 1214.944119][ T9831] team0: Port device macvlan2 added [ 1217.759989][ T150] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c [ 1219.068389][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068435][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068469][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068501][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068533][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068629][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068662][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068695][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068730][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1219.068761][ T9875] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1222.417508][ T9931] netlink: 'syz.1.16624': attribute type 5 has an invalid length. [ 1224.188639][ T9984] syzkaller1: entered promiscuous mode [ 1224.188666][ T9984] syzkaller1: entered allmulticast mode [ 1225.495985][T10000] gretap2: entered promiscuous mode [ 1225.766354][T10007] netlink: 'syz.1.16646': attribute type 10 has an invalid length. [ 1225.797522][T10007] netlink: 'syz.1.16646': attribute type 10 has an invalid length. [ 1226.540905][T10023] netlink: 'syz.4.16653': attribute type 10 has an invalid length. [ 1226.568057][T10023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.606803][T10024] netlink: 'syz.4.16653': attribute type 10 has an invalid length. [ 1226.618822][T10023] team0: Port device netdevsim1 added [ 1226.772902][ T9972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1226.844792][T10024] team0: Port device netdevsim1 removed [ 1226.868575][T10024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.870702][T10024] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1227.351186][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16655'. [ 1227.669817][T10046] net_ratelimit: 2725 callbacks suppressed [ 1227.669842][T10046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1228.008026][T10053] netlink: 'syz.0.16664': attribute type 1 has an invalid length. [ 1228.064462][T10054] netlink: 'syz.2.16666': attribute type 1 has an invalid length. [ 1228.150727][T10053] bond6: entered promiscuous mode [ 1228.151914][T10053] bond6: entered allmulticast mode [ 1228.154758][T10053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1228.265002][T10057] erspan2: entered allmulticast mode [ 1228.340258][T10057] bond6: (slave erspan2): making interface the new active one [ 1228.340285][T10057] erspan2: entered promiscuous mode [ 1228.510886][T10057] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 1228.778143][T10054] bond7: entered promiscuous mode [ 1228.778632][T10054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.117648][T10060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.118090][T10060] bond7: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1229.118109][T10060] bond7: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1229.121612][T10060] bond7: (slave ip6gre4): making interface the new active one [ 1229.121633][T10060] ip6gre4: entered promiscuous mode [ 1229.123392][T10060] bond7: (slave ip6gre4): Enslaving as an active interface with an up link [ 1230.156892][T10086] netlink: 67 bytes leftover after parsing attributes in process `syz.1.16675'. [ 1230.555396][ T13] IPVS: starting estimator thread 0... [ 1230.644725][T10096] IPVS: using max 25 ests per chain, 60000 per kthread [ 1233.352884][T10086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1233.368878][T10086] A link change request failed with some changes committed already. Interface syzk may have been left with an inconsistent configuration, please check. [ 1233.834898][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16682'. [ 1234.067006][T10111] bond8: option ad_actor_sys_prio: invalid value (0) [ 1234.067034][T10111] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1234.082652][T10111] bond8 (unregistering): Released all slaves [ 1236.095172][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 1236.757574][T10162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16696'. [ 1238.002526][T10187] ip_tables: iptables: counters copy to user failed while replacing table [ 1239.784818][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1240.067090][T10231] netlink: 'syz.0.16722': attribute type 18 has an invalid length. [ 1240.067124][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16722'. [ 1240.079334][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16720'. [ 1240.079606][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16720'. [ 1240.113660][T10231] netlink: 'syz.0.16722': attribute type 18 has an invalid length. [ 1240.113698][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16722'. [ 1240.658765][T10244] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1241.080755][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16733'. [ 1241.165517][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16733'. [ 1243.046401][T10304] syzkaller1: entered promiscuous mode [ 1243.046661][T10304] syzkaller1: entered allmulticast mode [ 1244.675793][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16765'. [ 1245.222995][T10349] bond8: entered promiscuous mode [ 1245.223491][T10349] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1245.985209][T10374] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.779319][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16787'. [ 1247.741473][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16794'. [ 1250.892363][T10462] bond7: entered allmulticast mode [ 1250.892390][T10462] ip6gre4: entered allmulticast mode [ 1251.998508][T10499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1254.796005][T10497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1255.257348][T10542] netlink: 140 bytes leftover after parsing attributes in process `syz.3.16847'. [ 1255.270206][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16847'. [ 1255.312825][T10546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1256.442615][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16861'. [ 1256.460490][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16861'. [ 1256.665198][T10579] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1256.709840][T10581] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1257.236417][T10587] syzkaller1: entered allmulticast mode [ 1257.607096][T10593] netlink: 7 bytes leftover after parsing attributes in process `syz.2.16866'. [ 1259.375339][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16875'. [ 1261.693711][T10635] bridge0: port 2(ip6gretap0) entered blocking state [ 1261.695573][T10635] bridge0: port 2(ip6gretap0) entered forwarding state [ 1261.696122][T10635] bridge0: port 1(syz_tun) entered blocking state [ 1261.696251][T10635] bridge0: port 1(syz_tun) entered forwarding state [ 1262.037155][T10636] syzkaller0: entered promiscuous mode [ 1262.042032][T10636] syzkaller0: entered allmulticast mode [ 1262.060123][T10637] bridge0: port 3(bridge_slave_0) entered blocking state [ 1262.060257][T10637] bridge0: port 3(bridge_slave_0) entered disabled state [ 1262.060433][T10637] bridge_slave_0: entered allmulticast mode [ 1262.102189][T10637] bridge_slave_0: entered promiscuous mode [ 1262.114039][T10637] bridge0: port 3(bridge_slave_0) entered blocking state [ 1262.114222][T10637] bridge0: port 3(bridge_slave_0) entered forwarding state [ 1264.917716][T10673] netlink: 'syz.2.16891': attribute type 1 has an invalid length. [ 1271.762452][T10660] erspan1: entered promiscuous mode [ 1271.776162][ T9964] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1272.027258][T10673] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1272.109119][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16893'. [ 1272.109150][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16893'. [ 1272.231883][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16892'. [ 1272.283057][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16892'. [ 1272.283812][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16893'. [ 1272.283832][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16893'. [ 1272.666086][T10688] gre1: entered promiscuous mode [ 1272.673295][T10692] netlink: 'syz.2.16896': attribute type 1 has an invalid length. [ 1272.936857][T10692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1273.213279][T10694] bond9: (slave macvlan0): Enslaving as an active interface with an up link [ 1273.233492][T10699] ªªªªªª: renamed from vlan0 [ 1273.930873][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16905'. [ 1274.359837][T10731] syzkaller1: entered promiscuous mode [ 1274.359863][T10731] syzkaller1: entered allmulticast mode [ 1275.064062][T10744] netlink: 'syz.2.16911': attribute type 1 has an invalid length. [ 1275.232158][T10744] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1275.605445][T10747] bridge0: port 1(syz_tun) entered disabled state [ 1275.605935][T10747] syz_tun: left allmulticast mode [ 1275.610585][T10747] syz_tun: left promiscuous mode [ 1275.610854][T10747] bridge0: port 1(syz_tun) entered disabled state [ 1275.691458][T10747] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 1277.831407][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16927'. [ 1278.409729][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16931'. [ 1278.478005][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16931'. [ 1280.222265][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16943'. [ 1280.343107][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16946'. [ 1280.716962][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16947'. [ 1281.501144][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16947'. [ 1282.012948][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16954'. [ 1282.012981][T10876] netlink: 'syz.0.16954': attribute type 3 has an invalid length. [ 1282.012995][T10876] netlink: 'syz.0.16954': attribute type 2 has an invalid length. [ 1282.013007][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16954'. [ 1282.848889][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16963'. [ 1282.865659][T10896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16963'. [ 1285.215748][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1285.873170][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16976'. [ 1286.622284][T10952] netlink: 'syz.1.16980': attribute type 4 has an invalid length. [ 1286.622321][T10952] netlink: 17 bytes leftover after parsing attributes in process `syz.1.16980'. [ 1292.887470][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16994'. [ 1292.956885][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16994'. [ 1299.098159][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16995'. [ 1300.171645][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17002'. [ 1302.595419][T11072] netlink: 180 bytes leftover after parsing attributes in process `syz.4.17014'. [ 1303.761611][T11094] netlink: 'syz.3.17023': attribute type 1 has an invalid length. [ 1303.774971][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1303.830774][T11094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1304.099789][T11096] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1304.252237][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.252501][T11094] bond7: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1306.344833][T11131] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1307.022489][T11130] syzkaller0: renamed from gre5 [ 1309.241203][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17045'. [ 1309.923283][T11175] syzkaller1: entered promiscuous mode [ 1309.923541][T11175] syzkaller1: entered allmulticast mode [ 1310.829397][T11186] syzkaller1: entered promiscuous mode [ 1310.829422][T11186] syzkaller1: entered allmulticast mode [ 1313.160707][T11204] netlink: 'syz.3.17053': attribute type 1 has an invalid length. [ 1313.436906][T11204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1313.550340][T11208] macvlan3: entered promiscuous mode [ 1313.550366][T11208] macvlan3: entered allmulticast mode [ 1313.551511][T11208] bond8: entered promiscuous mode [ 1313.589750][T11208] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1313.633493][T11208] bond8: left promiscuous mode [ 1314.649784][T11230] netlink: 'syz.4.17061': attribute type 1 has an invalid length. [ 1315.023934][T11230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1315.387933][T11234] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 1317.725881][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17074'. [ 1317.725912][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17074'. [ 1317.772112][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17074'. [ 1317.772145][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17074'. [ 1318.178545][T11277] syzkaller0: entered promiscuous mode [ 1318.178573][T11277] syzkaller0: entered allmulticast mode [ 1318.334576][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17076'. [ 1321.377347][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1321.449210][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1328.005267][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17094'. [ 1329.646313][T11356] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1331.200395][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17109'. [ 1332.384932][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17113'. [ 1333.954008][T11416] bond9: option updelay: invalid value (18446744073709518847) [ 1333.954036][T11416] bond9: option updelay: allowed values 0 - 2147483647 [ 1334.124115][T11416] bond9 (unregistering): Released all slaves [ 1334.573301][T11424] syzkaller1: entered promiscuous mode [ 1334.573328][T11424] syzkaller1: entered allmulticast mode [ 1334.748129][T11433] netlink: 'syz.0.17121': attribute type 1 has an invalid length. [ 1334.856585][T11436] netlink: 'syz.0.17121': attribute type 10 has an invalid length. [ 1334.856610][T11436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17121'. [ 1335.129848][T11433] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1335.153383][T11434] dummy0: left promiscuous mode [ 1335.220476][T11434] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1335.245792][T11436] dummy0: entered promiscuous mode [ 1335.271183][T11436] bond7: (slave dummy0): Releasing backup interface [ 1335.521443][T11440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17123'. [ 1335.565729][T11450] tipc: Started in network mode [ 1335.565755][T11450] tipc: Node identity 1000001, cluster identity 4369 [ 1335.565777][T11450] tipc: Node number set to 16777217 [ 1335.791029][ T5350] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1335.877510][T11452] tipc: Enabling of bearer rejected, failed to enable media [ 1335.903793][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17129'. [ 1336.355206][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17132'. [ 1336.987152][T11482] netlink: 'syz.4.17137': attribute type 1 has an invalid length. [ 1337.264838][T11482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1337.498845][T11488] bond3: (slave geneve2): making interface the new active one [ 1337.545177][T11488] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1339.056604][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17143'. [ 1339.210237][T11512] netlink: 'syz.2.17145': attribute type 1 has an invalid length. [ 1339.403564][T11512] bond11: entered promiscuous mode [ 1339.430502][T11512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1339.954265][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17152'. [ 1339.954296][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17152'. [ 1340.933053][T11550] netlink: 'syz.1.17157': attribute type 10 has an invalid length. [ 1341.761642][T11567] netlink: 'syz.3.17162': attribute type 1 has an invalid length. [ 1341.986653][T11567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1342.713587][T11587] syzkaller1: entered promiscuous mode [ 1342.713613][T11587] syzkaller1: entered allmulticast mode [ 1343.187748][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17169'. [ 1343.187792][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17169'. [ 1343.265791][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17170'. [ 1344.207543][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17176'. [ 1344.267696][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17176'. [ 1344.514821][ T5344] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.514875][ T5344] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.514911][ T5344] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.514945][ T5344] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.210887][T11632] netlink: 'syz.0.17184': attribute type 1 has an invalid length. [ 1345.316834][T11632] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1345.330027][T11637] netlink: 'syz.3.17185': attribute type 2 has an invalid length. [ 1347.033514][T11659] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.17194'. [ 1347.487048][T11646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.862579][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17202'. [ 1349.097393][T11686] tipc: Enabling of bearer rejected, failed to enable media [ 1349.128219][T11681] lo speed is unknown, defaulting to 1000 [ 1350.329434][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17211'. [ 1350.329468][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17211'. [ 1350.478218][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17212'. [ 1350.486785][T11681] wg2 speed is unknown, defaulting to 1000 [ 1350.510857][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17212'. [ 1350.781678][T11711] netlink: 'syz.3.17215': attribute type 11 has an invalid length. [ 1350.960947][T11715] sctp: [Deprecated]: syz.4.17217 (pid 11715) Use of int in max_burst socket option. [ 1350.960947][T11715] Use struct sctp_assoc_value instead [ 1351.322975][T11722] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.17220'. [ 1354.189161][T11770] netlink: 'syz.1.17236': attribute type 1 has an invalid length. [ 1354.500476][T11770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1355.500877][T11777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1355.502143][T11782] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1355.529482][ T5749] lo speed is unknown, defaulting to 1000 [ 1355.529512][ T5749] syz0: Port: 1 Link DOWN [ 1355.529632][ T3684] lo speed is unknown, defaulting to 1000 [ 1355.937878][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17243'. [ 1357.486763][T11822] trusted_key: syz.0.17251 sent an empty control message without MSG_MORE. [ 1358.070007][T11840] tipc: Enabled bearer , priority 0 [ 1358.091284][T11840] syzkaller0: entered promiscuous mode [ 1358.091308][T11840] syzkaller0: entered allmulticast mode [ 1358.091832][T11840] tipc: Resetting bearer [ 1358.447374][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17259'. [ 1358.938878][T11863] x_tables: duplicate underflow at hook 1 [ 1359.630496][T11870] tipc: Enabling of bearer rejected, failed to enable media [ 1360.829369][T11899] lo speed is unknown, defaulting to 1000 [ 1362.059048][T11899] wg2 speed is unknown, defaulting to 1000 [ 1362.103624][T11927] netlink: 'syz.1.17284': attribute type 1 has an invalid length. [ 1362.103647][T11927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17284'. [ 1365.041934][T11970] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17296'. [ 1365.339377][T11972] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1365.360717][T11972] team0: Device ipvlan2 is already an upper device of the team interface [ 1367.393361][T11997] syzkaller0: left promiscuous mode [ 1367.393388][T11997] syzkaller0: left allmulticast mode [ 1367.393858][T11997] tipc: Resetting bearer [ 1367.775424][ T9964] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1367.803046][T12004] netlink: 'syz.0.17307': attribute type 1 has an invalid length. [ 1368.131377][T12004] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1368.930323][T12018] bond10: entered promiscuous mode [ 1368.930354][T12018] bond10: entered allmulticast mode [ 1368.930761][T12018] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1370.373584][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17318'. [ 1373.877775][T12070] syzkaller1: entered promiscuous mode [ 1373.877800][T12070] syzkaller1: entered allmulticast mode [ 1374.196077][T12077] ip_tables: iptables: counters copy to user failed while replacing table [ 1374.767903][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17339'. [ 1377.116533][T12121] netlink: 'syz.2.17350': attribute type 10 has an invalid length. [ 1377.255452][T12122] netlink: 'syz.2.17350': attribute type 10 has an invalid length. [ 1377.294005][T12121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1377.422761][T12121] team0: Port device netdevsim1 added [ 1377.515289][T12122] team0: Port device netdevsim1 removed [ 1377.589076][T12122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1377.640683][T12122] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1377.746785][T12126] digital: digital_start_poll: Unknown protocol [ 1379.881847][T12183] netlink: 'syz.0.17366': attribute type 10 has an invalid length. [ 1379.903087][T12183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1379.923465][T12183] team0: Port device netdevsim1 added [ 1380.003379][T12183] netlink: 'syz.0.17366': attribute type 10 has an invalid length. [ 1380.551675][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17373'. [ 1380.935067][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17375'. [ 1382.361860][T12248] netlink: 'syz.1.17391': attribute type 2 has an invalid length. [ 1382.628192][T12248] : entered promiscuous mode [ 1383.885924][T12279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17400'. [ 1384.474250][T12293] netlink: 164 bytes leftover after parsing attributes in process `syz.1.17406'. [ 1385.048936][T12304] 0: reclassify loop, rule prio 0, protocol 03 [ 1385.372414][T12312] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 1386.139467][T12329] netlink: 'syz.3.17419': attribute type 12 has an invalid length. [ 1386.360873][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1386.503598][T12333] batman_adv: batadv0: Adding interface: syzkaller0 [ 1386.503618][T12333] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.503649][T12333] batman_adv: batadv0: Interface activated: syzkaller0 [ 1387.347908][T12335] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1387.468304][T12335] batman_adv: batadv0: Removing interface: syzkaller0 [ 1387.662744][T12346] syzkaller0: entered promiscuous mode [ 1387.662769][T12346] syzkaller0: entered allmulticast mode [ 1387.663296][T12346] tipc: Resetting bearer [ 1387.930518][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17427'. [ 1388.116902][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17427'. [ 1388.453726][T12362] netlink: 'syz.4.17432': attribute type 1 has an invalid length. [ 1389.462192][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17436'. [ 1389.593938][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17438'. [ 1389.684826][T12376] xt_CT: No such helper "snmp_trap" [ 1390.628310][T12395] netlink: 'syz.2.17443': attribute type 1 has an invalid length. [ 1390.823759][T12395] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1391.146817][T12397] bond12: (slave veth9): Enslaving as an active interface with a down link [ 1391.350915][T12400] bond9: (slave macvlan0): Removing an active aggregator [ 1391.375903][ T5350] bond9: Warning: Found an uninitialized port [ 1391.398017][T12400] bond9: (slave macvlan0): Releasing backup interface [ 1391.552778][T12400] bond12: (slave macvlan0): making interface the new active one [ 1391.586052][T12400] bond12: (slave macvlan0): Enslaving as an active interface with an up link [ 1393.011144][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17453'. [ 1393.394617][T12437] bridge0: port 1(.`) entered blocking state [ 1393.394722][T12437] bridge0: port 1(.`) entered disabled state [ 1393.394880][T12437] .`: entered allmulticast mode [ 1393.394985][T12437] ¬0Ù: entered allmulticast mode [ 1393.395489][T12437] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1393.589906][T12442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17454'. [ 1393.645969][T12437] .`: entered promiscuous mode [ 1393.645993][T12437] ¬0Ù: entered promiscuous mode [ 1393.647882][T12437] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1393.693327][T12437] bridge0: port 1(.`) entered blocking state [ 1393.693443][T12437] bridge0: port 1(.`) entered forwarding state [ 1394.528554][T12442] hsr_slave_1 (unregistering): left promiscuous mode [ 1395.973479][T12480] syzkaller0: Caught tx_queue_len zero misconfig [ 1396.506201][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17468'. [ 1396.825372][T12496] batman_adv: batadv0: Adding interface: syzkaller0 [ 1396.825393][T12496] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.825425][T12496] batman_adv: batadv0: Interface activated: syzkaller0 [ 1396.934879][T12493] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1397.316018][T12493] batman_adv: batadv0: Removing interface: syzkaller0 [ 1398.249795][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17473'. [ 1399.095725][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17477'. [ 1399.775764][ T5350] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1401.619765][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17489'. [ 1402.382637][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17493'. [ 1403.055025][T12581] tipc: Failed to remove unknown binding: 66,0,0/4:2227992429/2227992430 [ 1403.061150][T12581] tipc: Failed to remove unknown binding: 66,0,0/4:2227992429/2227992430 [ 1403.613836][T12586] syzkaller1: entered promiscuous mode [ 1403.613860][T12586] syzkaller1: entered allmulticast mode [ 1404.120712][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17501'. [ 1404.449089][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17504'. [ 1406.029774][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17512'. [ 1406.218216][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17512'. [ 1407.410278][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17517'. [ 1407.410456][T12644] netlink: 15 bytes leftover after parsing attributes in process `syz.3.17517'. [ 1407.444275][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17517'. [ 1407.444388][T12644] netlink: 15 bytes leftover after parsing attributes in process `syz.3.17517'. [ 1408.075048][T12663] ip_tables: iptables: counters copy to user failed while replacing table [ 1408.911023][T12670] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1409.056881][T12669] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1409.151734][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17526'. [ 1410.322141][T12700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1410.748034][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17536'. [ 1411.052798][T12709] tipc: Enabled bearer , priority 0 [ 1411.237915][T12709] syzkaller0: entered promiscuous mode [ 1411.237944][T12709] syzkaller0: entered allmulticast mode [ 1411.241935][T12709] tipc: Resetting bearer [ 1411.325747][T12714] veth10: entered allmulticast mode [ 1411.478427][T12708] tipc: Resetting bearer [ 1411.816963][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17543'. [ 1411.893902][T12727] netlink: 'syz.4.17544': attribute type 39 has an invalid length. [ 1420.798232][T12708] tipc: Disabling bearer [ 1420.959734][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17547'. [ 1421.239787][T12725] tipc: Resetting bearer [ 1421.501606][T12730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17545'. [ 1421.501636][T12730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17545'. [ 1421.501652][T12730] netlink: 31 bytes leftover after parsing attributes in process `syz.0.17545'. [ 1422.308314][T12755] lo speed is unknown, defaulting to 1000 [ 1422.667353][T12771] netlink: 'syz.0.17557': attribute type 1 has an invalid length. [ 1423.243315][T12771] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1423.349794][T12774] bond11: entered allmulticast mode [ 1423.375617][T12774] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17557'. [ 1423.553513][T12777] bond11: (slave ip6gretap0): making interface the new active one [ 1423.553542][T12777] ip6gretap0: entered allmulticast mode [ 1423.580429][T12777] bond11: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1424.046002][T12788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1424.262922][T12755] wg2 speed is unknown, defaulting to 1000 [ 1424.358294][T12792] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1424.918700][T12802] syzkaller1: entered promiscuous mode [ 1424.918955][T12802] syzkaller1: entered allmulticast mode [ 1425.656400][T12822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17571'. [ 1425.777214][T12828] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17571'. [ 1426.032525][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.032862][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.224362][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.224505][T12828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.224846][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.224969][T12828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.307871][T12828] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17571'. [ 1426.359271][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.359536][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.120993][T12851] bridge_slave_0: left allmulticast mode [ 1427.121027][T12851] bridge_slave_0: left promiscuous mode [ 1427.121288][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.231456][T12851] bridge_slave_1: left allmulticast mode [ 1427.231502][T12851] bridge_slave_1: left promiscuous mode [ 1427.231750][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.436181][T12851] bond0: (slave bond_slave_0): Releasing backup interface [ 1427.570272][T12851] bond0: (slave bond_slave_1): Releasing backup interface [ 1427.669898][T12851] team0: Port device team_slave_0 removed [ 1427.719041][T12851] team0: Port device team_slave_1 removed [ 1427.722924][T12851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.722951][T12851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.768283][T12851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.768313][T12851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.916021][T12851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1428.161940][T12852] team0: Device xfrm0 is of different type [ 1428.260237][T12855] tipc: Started in network mode [ 1428.260273][T12855] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1428.262422][T12855] tipc: Enabled bearer , priority 0 [ 1428.383347][T12854] bond10: (slave syz_tun): Removing an active aggregator [ 1428.396208][T12854] bond10: (slave syz_tun): Releasing backup interface [ 1428.459681][T12854] ip6gretap0: left allmulticast mode [ 1428.459710][T12854] ip6gretap0: left promiscuous mode [ 1428.459933][T12854] bridge0: port 2(ip6gretap0) entered disabled state [ 1428.532240][T12854] .`: left allmulticast mode [ 1428.532269][T12854] ¬0Ù: left allmulticast mode [ 1428.532767][T12854] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1428.537169][T12854] .`: left promiscuous mode [ 1428.537198][T12854] ¬0Ù: left promiscuous mode [ 1428.538190][T12854] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1428.540816][T12854] bridge0: port 1(.`) entered disabled state [ 1428.779268][T12854] bridge_slave_0: left allmulticast mode [ 1428.779732][T12854] bridge_slave_0: left promiscuous mode [ 1428.784301][T12854] bridge0: port 3(bridge_slave_0) entered disabled state [ 1428.909679][T12854] team0: Port device bond_slave_0 removed [ 1428.937277][T12854] .`: (slave 5¬0Ù): Releasing backup interface [ 1428.993108][T12854] team0: Port device team_slave_0 removed [ 1429.020963][T12854] team0: Port device team_slave_1 removed [ 1429.035307][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.035335][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.062344][T12854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1429.471043][T12890] lo: entered promiscuous mode [ 1430.046449][T12890] tunl0: entered promiscuous mode [ 1430.079757][T12890] gre0: entered promiscuous mode [ 1430.376993][T12890] erspan0: entered promiscuous mode [ 1430.406699][T12890] ip_vti0: entered promiscuous mode [ 1430.429338][T12890] ip6_vti0: entered promiscuous mode [ 1430.446257][T12890] sit0: entered promiscuous mode [ 1430.546451][T12890] ip6tnl0: entered promiscuous mode [ 1430.710879][T12890] ip6gre0: entered promiscuous mode [ 1430.776413][T12890] syz_tun: entered promiscuous mode [ 1430.808560][T12890] ip6gretap0: entered promiscuous mode [ 1430.853177][T12890] vcan0: entered promiscuous mode [ 1430.874665][T12890] bond0: entered promiscuous mode [ 1430.874690][T12890] bond_slave_1: entered promiscuous mode [ 1430.901578][T12890] team0: entered promiscuous mode [ 1430.901607][T12890] team_slave_0: entered promiscuous mode [ 1430.901835][T12890] team_slave_1: entered promiscuous mode [ 1430.975644][T12890] nlmon0: entered promiscuous mode [ 1430.991976][T12890] batadv0: entered promiscuous mode [ 1431.010944][T12890] vxcan0: entered promiscuous mode [ 1431.035310][T12890] vxcan1: entered promiscuous mode [ 1431.043371][T12890] veth0: entered promiscuous mode [ 1431.070563][T12890] veth1: entered promiscuous mode [ 1431.095987][T12890] wg0: entered promiscuous mode [ 1431.117428][T12890] wg1: entered promiscuous mode [ 1431.147924][T12890] wg2: entered promiscuous mode [ 1431.171441][T12890] veth0_to_bridge: entered promiscuous mode [ 1431.212068][T12890] veth1_to_bridge: entered promiscuous mode [ 1431.242962][T12890] bridge_slave_1: entered promiscuous mode [ 1431.267674][T12890] veth0_to_bond: entered promiscuous mode [ 1431.268194][T12890] bond_slave_0: entered promiscuous mode [ 1431.303556][T12890] veth1_to_bond: entered promiscuous mode [ 1431.524960][T12890] veth0_to_team: entered promiscuous mode [ 1431.750062][T12890] veth1_to_team: entered promiscuous mode [ 1431.785729][ T150] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1432.041438][T12890] veth0_to_batadv: entered promiscuous mode [ 1432.155792][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.175542][T12890] batadv_slave_0: entered promiscuous mode [ 1432.273084][T12890] veth1_to_batadv: entered promiscuous mode [ 1432.286886][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.286947][T12890] batadv_slave_1: entered promiscuous mode [ 1432.313071][T12890] xfrm0: entered promiscuous mode [ 1432.366948][T12890] veth0_to_hsr: entered promiscuous mode [ 1432.390479][T12890] hsr_slave_0: entered promiscuous mode [ 1432.417753][T12890] veth1_to_hsr: entered promiscuous mode [ 1432.438602][T12890] hsr_slave_1: entered promiscuous mode [ 1432.474950][T12890] veth1_virt_wifi: entered promiscuous mode [ 1432.483592][T12890] veth0_virt_wifi: entered promiscuous mode [ 1432.515728][T12890] virt_wifi0: entered promiscuous mode [ 1432.583698][T12890] macvtap0: entered promiscuous mode [ 1432.592681][T12890] geneve0: entered promiscuous mode [ 1432.625303][T12890] geneve1: entered promiscuous mode [ 1432.659441][T12890] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1432.676872][T12890] ipip0: entered promiscuous mode [ 1432.691369][T12890] geneve2: entered promiscuous mode [ 1432.717001][T12890] syztnl2: entered promiscuous mode [ 1432.750622][T12890] mac80211_hwsim hwsim21 wlan2: entered promiscuous mode [ 1432.768482][T12890] bond1: entered promiscuous mode [ 1432.784709][T12890] vti0: entered promiscuous mode [ 1432.793721][T12890] syztnl0: entered promiscuous mode [ 1432.831677][T12890] bridge1: entered promiscuous mode [ 1432.935503][T12890] ip6gretap1: entered promiscuous mode [ 1433.046478][T12890] sit1: entered promiscuous mode [ 1433.161832][T12890] bond2: entered promiscuous mode [ 1433.284642][T12890] ip6erspan0: entered promiscuous mode [ 1433.318381][T12890] bond3: entered promiscuous mode [ 1433.320090][T12890] ip6tnl1: entered promiscuous mode [ 1433.337872][T12890] ip6tnl2: entered promiscuous mode [ 1433.403162][T12890] mac80211_hwsim hwsim27 wlan3: entered promiscuous mode [ 1433.418116][T12890] gre1: entered promiscuous mode [ 1433.432991][T12890] veth2: entered promiscuous mode [ 1433.449615][T12890] veth3: entered promiscuous mode [ 1433.472321][T12890] gre2: entered promiscuous mode [ 1433.495341][T12890] bridge2: entered promiscuous mode [ 1433.519236][T12890] bridge3: entered promiscuous mode [ 1433.545571][T12890] ): entered promiscuous mode [ 1433.598140][T12890] xfrm1: entered promiscuous mode [ 1433.727136][T12890] ip6tnl3: entered promiscuous mode [ 1433.768812][T12890] bridge4: entered promiscuous mode [ 1433.808938][T12890] ip6tnl4: entered promiscuous mode [ 1433.849189][T12890] bridge5: entered promiscuous mode [ 1433.899919][T12890] bridge6: entered promiscuous mode [ 1433.953518][T12890] bridge7: entered promiscuous mode [ 1433.999515][T12890] geneve3: entered promiscuous mode [ 1434.059300][T12890] bridge8: entered promiscuous mode [ 1434.111132][T12890] vxcan2: entered promiscuous mode [ 1434.146443][T12890] vxcan3: entered promiscuous mode [ 1434.176129][T12890] bridge9: entered promiscuous mode [ 1434.219527][T12890] ip6gre1: entered promiscuous mode [ 1434.285705][T12890] mac80211_hwsim hwsim51 wlan4: entered promiscuous mode [ 1434.329763][T12890] erspan1: entered promiscuous mode [ 1434.360743][T12890] batadv0.5: entered promiscuous mode [ 1434.426793][T12890] mac80211_hwsim hwsim52 wlan5: entered promiscuous mode [ 1434.475012][T12890] ip6tnl5: entered promiscuous mode [ 1434.496613][T12890] bond4: entered promiscuous mode [ 1434.520734][T12890] L: entered promiscuous mode [ 1434.564520][T12890] vti1: entered promiscuous mode [ 1434.566889][T12890] geneve4: entered promiscuous mode [ 1434.601554][T12890] gtp0: entered promiscuous mode [ 1434.622312][T12890] bridge10: entered promiscuous mode [ 1434.651025][T12890] ip6tnl6: entered promiscuous mode [ 1441.281107][T12890] gretap1: entered promiscuous mode [ 1441.452839][T12890] mac80211_hwsim hwsim58 wlan6: entered promiscuous mode [ 1441.473058][T12890] ip6tnl7: entered promiscuous mode [ 1441.487747][T12890] bridge11: entered promiscuous mode [ 1441.525607][T12890] dummy1: entered promiscuous mode [ 1441.629524][T12890] ipip1: entered promiscuous mode [ 1441.645058][T12890] vxlan0: entered promiscuous mode [ 1441.664829][T12890] veth4: entered promiscuous mode [ 1441.682370][T12890] veth5: entered promiscuous mode [ 1441.712396][T12890] ip6tnl8: entered promiscuous mode [ 1441.772125][T12890] mac80211_hwsim hwsim11 syzk: entered promiscuous mode [ 1441.796286][T12890] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 1441.801271][T12890] sit2: entered promiscuous mode [ 1441.855604][T12890] macvlan0: entered promiscuous mode [ 1441.857409][T12890] macvlan1: entered promiscuous mode [ 1441.857584][T12890] macvlan2: entered promiscuous mode [ 1441.988457][T12890] hsr0: entered promiscuous mode [ 1442.001805][T12890] gre3: entered promiscuous mode [ 1442.018806][T12890] ipip2: entered promiscuous mode [ 1442.036202][T12890] bond7: entered promiscuous mode [ 1442.041946][T12890] macvlan3: entered promiscuous mode [ 1442.042149][T12890] macvlan4: entered promiscuous mode [ 1442.081373][T12890] gre4: entered promiscuous mode [ 1442.222647][T12890] gtp1: entered promiscuous mode [ 1442.468319][T12890] vxlan1: entered promiscuous mode [ 1442.525883][T12890] veth6: entered promiscuous mode [ 1442.526084][T12890] veth7: entered promiscuous mode [ 1442.533159][T12890] bridge12: entered promiscuous mode [ 1442.584140][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1442.592835][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1442.593881][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1442.626987][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1442.628104][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1442.674716][T12890] bridge13: entered promiscuous mode [ 1442.680794][T12890] bond8: entered promiscuous mode [ 1442.747997][T12890] vlan0: entered promiscuous mode [ 1442.750569][T12890] bridge14: entered promiscuous mode [ 1442.779837][T12890] veth8: entered promiscuous mode [ 1442.780041][T12890] veth9: entered promiscuous mode [ 1442.825024][T12890] bridge15: entered promiscuous mode [ 1442.920268][T30251] tipc: Node number set to 11578026 [ 1443.928159][T12942] batman_adv: batadv0: Adding interface: syzkaller0 [ 1443.928181][T12942] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.929052][T12942] batman_adv: batadv0: Interface activated: syzkaller0 [ 1443.993575][T12941] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1444.178272][T12941] batman_adv: batadv0: Removing interface: syzkaller0 [ 1444.735127][ T4048] Bluetooth: hci5: command tx timeout [ 1445.008085][T12954] bond4: entered allmulticast mode [ 1445.008565][T12954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1445.226456][T12965] syzkaller0: left promiscuous mode [ 1445.226483][T12965] syzkaller0: left allmulticast mode [ 1445.226976][T12965] tipc: Resetting bearer [ 1445.556470][T12915] lo speed is unknown, defaulting to 1000 [ 1445.942612][T12978] netlink: 'syz.2.17600': attribute type 1 has an invalid length. [ 1446.298603][T12987] netlink: 'syz.2.17600': attribute type 10 has an invalid length. [ 1446.298627][T12987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17600'. [ 1446.350045][T12978] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1446.662864][T12983] bond13: (slave veth13): Enslaving as an active interface with a down link [ 1446.824317][ T4048] Bluetooth: hci5: command tx timeout [ 1447.756940][T12915] wg2 speed is unknown, defaulting to 1000 [ 1448.355113][T13021] syzkaller0: entered promiscuous mode [ 1448.355139][T13021] syzkaller0: entered allmulticast mode [ 1448.895404][ T4048] Bluetooth: hci5: command tx timeout [ 1450.227254][T13061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.699520][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.699646][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.699808][T12915] bridge_slave_0: entered allmulticast mode [ 1450.741845][T12915] bridge_slave_0: entered promiscuous mode [ 1450.761116][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.777376][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.777579][T12915] bridge_slave_1: entered allmulticast mode [ 1450.798572][T12915] bridge_slave_1: entered promiscuous mode [ 1450.888675][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.908334][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.974710][ T4048] Bluetooth: hci5: command tx timeout [ 1451.007642][T12915] team0: Port device team_slave_0 added [ 1451.032045][T12915] team0: Port device team_slave_1 added [ 1451.056092][T13075] netlink: 'syz.4.17620': attribute type 1 has an invalid length. [ 1451.330773][T13075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1451.405826][T13077] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1451.493115][T13087] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1451.522411][T13080] bond5: entered promiscuous mode [ 1451.522439][T13080] bond5: entered allmulticast mode [ 1451.523653][T13074] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1451.609301][T13085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17621'. [ 1451.736964][T13081] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1451.737014][T13081] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1451.737033][T13081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1451.809481][T13075] macvlan3: entered promiscuous mode [ 1451.809688][T13075] macvlan3: entered allmulticast mode [ 1451.872779][T13075] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1452.032296][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.032315][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.032342][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.093709][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.093727][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.093751][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.191129][T13084] syzkaller0: entered promiscuous mode [ 1452.191372][T13084] syzkaller0: entered allmulticast mode [ 1452.194144][T13084] tipc: Resetting bearer [ 1452.493861][T12915] hsr_slave_0: entered promiscuous mode [ 1452.500342][T12915] hsr_slave_1: entered promiscuous mode [ 1452.502721][T12915] debugfs: 'hsr0' already exists in 'hsr' [ 1452.502741][T12915] Cannot create hsr debugfs directory [ 1452.651188][T13103] xt_ipcomp: unknown flags 1D [ 1452.940542][T13104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17625'. [ 1455.285858][T13155] syzkaller0: left promiscuous mode [ 1455.285885][T13155] syzkaller0: left allmulticast mode [ 1455.286730][T13155] tipc: Resetting bearer [ 1455.581510][T12915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1455.646852][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1455.660579][T12915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1455.751182][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1455.758276][T12915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1455.823804][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1455.836348][T12915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1455.896611][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1456.250417][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17643'. [ 1456.312579][T13175] xt_TCPMSS: Only works on TCP SYN packets [ 1456.374849][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.515294][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.542683][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.542802][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.665839][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.665967][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.339083][T13191] syzkaller0: entered promiscuous mode [ 1457.339313][T13191] syzkaller0: entered allmulticast mode [ 1458.803103][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.966125][T13222] netlink: 'syz.4.17654': attribute type 1 has an invalid length. [ 1459.085435][T13222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1459.251893][T13224] bond5: (slave veth0_to_bond): Releasing active interface [ 1459.314053][T13224] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1459.433348][T13222] macvlan3: entered promiscuous mode [ 1459.433619][T13222] macvlan3: entered allmulticast mode [ 1459.442075][T13222] bond6: entered promiscuous mode [ 1459.480159][T13222] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1459.496042][T13222] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1459.502411][T13222] bond6: left promiscuous mode [ 1460.147825][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17658'. [ 1460.300583][T13195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1460.326756][T12915] veth0_vlan: entered promiscuous mode [ 1460.382415][T12915] veth1_vlan: entered promiscuous mode [ 1460.554993][T12915] veth0_macvtap: entered promiscuous mode [ 1460.632162][T12915] veth1_macvtap: entered promiscuous mode [ 1460.762477][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.803718][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.906299][T13251] IPv6: sit5: Disabled Multicast RS [ 1460.944491][ T45] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.944904][ T9964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.944944][ T9964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.074373][ T45] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.610143][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.610167][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.734699][T13260] netlink: 'syz.1.17664': attribute type 1 has an invalid length. [ 1461.919496][T13260] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1462.200563][T13261] bond9: (slave veth11): Enslaving as an active interface with a down link [ 1462.518750][T13263] lo: left promiscuous mode [ 1462.521645][T13263] tunl0: left promiscuous mode [ 1462.523363][T13263] gre0: left promiscuous mode [ 1462.587111][T13263] erspan0: left promiscuous mode [ 1462.616015][T13263] ip_vti0: left promiscuous mode [ 1462.635396][T13263] ip6_vti0: left promiscuous mode [ 1462.662888][T13263] sit0: left promiscuous mode [ 1462.710676][T13263] ip6tnl0: left promiscuous mode [ 1462.727066][T13263] ip6gre0: left promiscuous mode [ 1462.745034][T13263] syz_tun: left promiscuous mode [ 1462.762090][T13263] ip6gretap0: left promiscuous mode [ 1462.781838][T13263] vcan0: left promiscuous mode [ 1462.806116][T13263] bond0: left promiscuous mode [ 1462.829534][T13263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.831519][T13263] team0: left promiscuous mode [ 1462.854789][T13263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.895985][T13263] nlmon0: left promiscuous mode [ 1462.928122][T13263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.944743][T13263] vxcan0: left promiscuous mode [ 1462.969408][T13263] vxcan1: left promiscuous mode [ 1462.982172][T13263] veth0: left promiscuous mode [ 1462.995323][T13263] veth1: left promiscuous mode [ 1463.013292][T13263] wg0: left promiscuous mode [ 1463.041686][T13263] wg1: left promiscuous mode [ 1463.108374][T13263] wg2: left promiscuous mode [ 1463.113687][T13263] veth0_to_bridge: left promiscuous mode [ 1463.152468][T13263] veth1_to_bridge: left promiscuous mode [ 1463.172341][T13263] bridge_slave_1: left promiscuous mode [ 1463.187588][T13263] veth0_to_bond: left promiscuous mode [ 1463.202712][T13263] bond_slave_0: left promiscuous mode [ 1463.202735][T13263] bond_slave_0: left allmulticast mode [ 1463.203521][T13263] veth1_to_bond: left promiscuous mode [ 1463.252413][T13263] bond_slave_1: left promiscuous mode [ 1463.281131][T13263] veth0_to_team: left promiscuous mode [ 1463.293317][T13263] team_slave_0: left promiscuous mode [ 1463.307018][T13263] veth1_to_team: left promiscuous mode [ 1463.323079][T13263] team_slave_1: left promiscuous mode [ 1463.336355][T13263] veth0_to_batadv: left promiscuous mode [ 1463.357748][T13263] batadv_slave_0: left promiscuous mode [ 1463.358705][T13263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.383048][T13263] veth1_to_batadv: left promiscuous mode [ 1463.400664][T13263] batadv_slave_1: left promiscuous mode [ 1463.418969][T13263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.424136][T13263] xfrm0: left promiscuous mode [ 1463.449289][T13263] veth0_to_hsr: left promiscuous mode [ 1463.471859][T13263] hsr_slave_0: left promiscuous mode [ 1463.475143][T13263] veth1_to_hsr: left promiscuous mode [ 1463.501249][T13263] hsr_slave_1: left promiscuous mode [ 1463.502110][T13263] veth1_virt_wifi: left promiscuous mode [ 1463.522195][T13263] veth0_virt_wifi: left promiscuous mode [ 1463.535178][T13263] virt_wifi0: left promiscuous mode [ 1463.552042][T13263] veth0_macvtap: left promiscuous mode [ 1463.570110][T13263] veth0_macvtap: entered promiscuous mode [ 1463.570360][T13263] macvtap0: left promiscuous mode [ 1463.591490][T13263] geneve0: left promiscuous mode [ 1463.655677][T13263] geneve1: left promiscuous mode [ 1463.663702][T13263] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1463.684631][T13263] ipip0: left promiscuous mode [ 1463.691084][T13263] geneve2: left promiscuous mode [ 1463.719994][T13263] syztnl2: left promiscuous mode [ 1463.739427][T13263] mac80211_hwsim hwsim21 wlan2: left promiscuous mode [ 1463.740454][T13263] bond1: left promiscuous mode [ 1463.740810][T13263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1463.776727][ T9964] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1463.782109][T13263] vti0: left promiscuous mode [ 1463.793463][T13263] syztnl0: left promiscuous mode [ 1463.894786][T13263] bridge1: left promiscuous mode [ 1463.896484][T13263] ip6gretap1: left promiscuous mode [ 1463.898072][T13263] sit1: left promiscuous mode [ 1463.899616][T13263] bond2: left promiscuous mode [ 1463.900024][T13263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1463.902063][T13263] ip6erspan0: left promiscuous mode [ 1463.934060][T13263] bond3: left promiscuous mode [ 1463.947158][T13263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1463.948023][T13263] ip6tnl1: left promiscuous mode [ 1463.949296][T13263] ip6tnl2: left promiscuous mode [ 1463.953902][T13263] mac80211_hwsim hwsim27 wlan3: left promiscuous mode [ 1463.984688][T13263] gre1: left promiscuous mode [ 1463.985260][T13263] veth2: left promiscuous mode [ 1463.986125][T13263] veth3: left promiscuous mode [ 1463.986891][T13263] gre2: left promiscuous mode [ 1463.988567][T13263] bridge2: left promiscuous mode [ 1463.988585][T13263] bridge2: left allmulticast mode [ 1463.990398][T13263] bridge3: left promiscuous mode [ 1463.991839][T13263] ): left promiscuous mode [ 1464.337424][T13263] xfrm1: left promiscuous mode [ 1464.341393][T13263] xfrm1: left allmulticast mode [ 1464.360755][T13263] ip6tnl3: left promiscuous mode [ 1464.360806][T13263] ip6tnl3: left allmulticast mode [ 1464.379401][T13263] bridge4: left promiscuous mode [ 1464.393776][T13263] ip6tnl4: left promiscuous mode [ 1464.453756][T13263] bridge5: left promiscuous mode [ 1464.475070][T13263] bridge6: left promiscuous mode [ 1464.494139][T13263] bridge7: left promiscuous mode [ 1464.513769][T13263] geneve3: left promiscuous mode [ 1464.532033][T13263] bridge8: left promiscuous mode [ 1464.556110][T13263] vxcan2: left promiscuous mode [ 1464.556978][T13263] vxcan3: left promiscuous mode [ 1464.580907][T13263] bridge9: left promiscuous mode [ 1464.596741][T13263] ip6gre1: left promiscuous mode [ 1464.596767][T13263] ip6gre1: left allmulticast mode [ 1464.620262][T13263] mac80211_hwsim hwsim51 wlan4: left promiscuous mode [ 1464.633497][T13263] erspan1: left promiscuous mode [ 1464.660395][T13263] batadv0.5: left promiscuous mode [ 1464.660421][T13263] batadv0: left promiscuous mode [ 1464.663499][T13263] mac80211_hwsim hwsim52 wlan5: left promiscuous mode [ 1464.683958][T13263] ip6tnl5: left promiscuous mode [ 1464.683981][T13263] ip6tnl5: left allmulticast mode [ 1464.701314][T13263] bond4: left promiscuous mode [ 1464.701793][T13263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1464.716689][T13263] L: left promiscuous mode [ 1464.734895][T13263] vti1: left promiscuous mode [ 1464.761969][T13263] geneve4: left promiscuous mode [ 1464.814126][T13263] gtp0: left promiscuous mode [ 1464.861529][T13263] bridge10: left promiscuous mode [ 1464.897773][T13263] ip6tnl6: left promiscuous mode [ 1464.948990][T13263] gretap1: left promiscuous mode [ 1464.951077][T13263] mac80211_hwsim hwsim58 wlan6: left promiscuous mode [ 1464.952195][T13263] ip6tnl7: left promiscuous mode [ 1464.977831][T13263] bridge11: left promiscuous mode [ 1464.979590][T13263] dummy1: left promiscuous mode [ 1464.981484][T13263] ipip1: left promiscuous mode [ 1465.005668][T13263] vxlan0: left promiscuous mode [ 1465.008898][T13263] veth4: left promiscuous mode [ 1465.009800][T13263] veth5: left promiscuous mode [ 1465.012217][T13263] ip6tnl8: left promiscuous mode [ 1465.036730][T13263] bond5: left promiscuous mode [ 1465.036756][T13263] bond5: left allmulticast mode [ 1465.037149][T13263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1465.039679][T13263] vlan2: left promiscuous mode [ 1465.039697][T13263] bridge0: left promiscuous mode [ 1465.044139][T13263] ip6gre2: left promiscuous mode [ 1465.044282][T13263] ip6gre2: left allmulticast mode [ 1465.194744][T13263] mac80211_hwsim hwsim11 syzk: left promiscuous mode [ 1465.194773][T13263] A link change request failed with some changes committed already. Interface syzk may have been left with an inconsistent configuration, please check. [ 1465.261232][T13260] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1465.273536][T13260] bond9: (slave batadv1): making interface the new active one [ 1465.293439][T13260] batadv1: entered promiscuous mode [ 1465.294112][T13260] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 1466.153221][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.153246][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.846066][T13323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1468.960883][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17685'. [ 1469.214615][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17685'. [ 1469.869663][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17691'. [ 1469.869695][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17691'. [ 1470.109432][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17692'. [ 1470.618564][T13387] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1470.826936][T13387] bond15 (unregistering): Released all slaves [ 1471.253132][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17695'. [ 1471.622782][T13412] netlink: 'syz.3.17700': attribute type 1 has an invalid length. [ 1471.843743][T13412] bond10: entered promiscuous mode [ 1471.848304][T13412] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1471.981959][T13418] bond10: (slave bridge15): making interface the new active one [ 1471.981989][T13418] bridge15: entered promiscuous mode [ 1472.024003][T13418] bond10: (slave bridge15): Enslaving as an active interface with an up link [ 1475.670472][T13415] vlan5: entered allmulticast mode [ 1475.670500][T13415] bond10: entered allmulticast mode [ 1475.670513][T13415] bridge15: entered allmulticast mode [ 1476.708928][T13457] syzkaller0: entered promiscuous mode [ 1476.708957][T13457] syzkaller0: entered allmulticast mode [ 1476.709442][T13457] tipc: Resetting bearer [ 1476.757080][ T1154] batadv1: left promiscuous mode [ 1478.218530][T13497] netlink: 'syz.5.17720': attribute type 1 has an invalid length. [ 1478.417767][T13497] macvtap1: entered allmulticast mode [ 1478.825284][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.899658][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.026605][T13511] tipc: Enabling of bearer rejected, failed to enable media [ 1479.177378][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17724'. [ 1479.177406][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17724'. [ 1481.327708][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17731'. [ 1481.468462][T13570] tipc: Resetting bearer [ 1481.980187][T13583] netlink: 'syz.5.17734': attribute type 1 has an invalid length. [ 1482.242760][T13587] netlink: 'syz.4.17735': attribute type 1 has an invalid length. [ 1482.466974][T13585] macvlan2: entered promiscuous mode [ 1482.467000][T13585] macvlan2: entered allmulticast mode [ 1482.770773][T13587] bond7: entered promiscuous mode [ 1482.771222][T13587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1483.024742][T13599] bond7: (slave bridge4): making interface the new active one [ 1483.024781][T13599] bridge4: entered promiscuous mode [ 1483.029346][T13599] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1483.616312][T13609] syzkaller0: entered promiscuous mode [ 1483.616586][T13609] syzkaller0: entered allmulticast mode [ 1483.716173][T13619] syzkaller0: entered promiscuous mode [ 1483.716200][T13619] syzkaller0: entered allmulticast mode [ 1483.759720][T13625] tipc: Enabled bearer , priority 0 [ 1483.809169][T13613] tipc: Resetting bearer [ 1483.930753][T13613] tipc: Disabling bearer [ 1484.352041][T13638] xt_ipcomp: unknown flags 1D [ 1486.613992][T13671] netlink: 'syz.2.17753': attribute type 1 has an invalid length. [ 1486.688728][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17753'. [ 1495.801684][ T59] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1497.149093][T13669] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1497.178789][T13671] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1497.649911][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17755'. [ 1497.649942][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17755'. [ 1497.711105][T13694] netlink: 'syz.5.17755': attribute type 4 has an invalid length. [ 1497.711130][T13694] netlink: 152 bytes leftover after parsing attributes in process `syz.5.17755'. [ 1497.782048][T13683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1498.071211][T13688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.121043][T13688] bond1: (slave bond0): making interface the new active one [ 1498.142754][T13688] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1498.227528][T13694] .`: renamed from bond0 (while UP) [ 1498.450451][T13696] syzkaller0: entered promiscuous mode [ 1498.450476][T13696] syzkaller0: entered allmulticast mode [ 1499.048978][T13705] syzkaller0: entered promiscuous mode [ 1499.049005][T13705] syzkaller0: entered allmulticast mode [ 1499.074801][T13709] tipc: Resetting bearer [ 1499.633853][T13720] netlink: 'syz.2.17764': attribute type 1 has an invalid length. [ 1499.700794][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17764'. [ 1500.029108][T13720] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1500.449608][T13744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1500.469632][T13726] bond15: (slave bridge11): making interface the new active one [ 1500.496250][T13726] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 1501.071385][T13746] syzkaller0: entered promiscuous mode [ 1501.071684][T13746] syzkaller0: entered allmulticast mode [ 1501.093639][T13738] tipc: Enabled bearer , priority 0 [ 1501.190419][T13737] tipc: Resetting bearer [ 1501.267878][T13737] tipc: Disabling bearer [ 1502.189516][T13767] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17775'. [ 1502.189545][T13767] netlink: 'syz.4.17775': attribute type 1 has an invalid length. [ 1502.753113][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17776'. [ 1503.161035][T13760] syzkaller0: entered promiscuous mode [ 1503.161059][T13760] syzkaller0: entered allmulticast mode [ 1504.379881][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17783'. [ 1504.950343][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17786'. [ 1504.950380][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950397][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950411][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950425][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950439][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950452][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950466][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950479][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950493][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1504.950506][T13806] netlink: 'syz.4.17786': attribute type 1 has an invalid length. [ 1505.497531][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17788'. [ 1506.269069][T13823] bond16: entered allmulticast mode [ 1506.424229][T13825] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1506.430023][T13825] bond17: entered allmulticast mode [ 1506.434107][T13825] bond16: (slave bond17): Enslaving as an active interface with an up link [ 1506.642686][T13826] bond16 (unregistering): (slave bond17): Releasing backup interface [ 1506.675225][T13826] bond17: left allmulticast mode [ 1506.748653][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17794'. [ 1506.749044][T13826] bond16 (unregistering): Released all slaves [ 1507.385560][T13840] bond0: (slave bridge1): making interface the new active one [ 1507.424391][T13840] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1508.851344][T13881] syzkaller0: entered promiscuous mode [ 1508.851637][T13881] syzkaller0: entered allmulticast mode [ 1509.868950][T13895] syzkaller0: entered promiscuous mode [ 1509.869190][T13895] syzkaller0: entered allmulticast mode [ 1510.528795][T13902] syzkaller0: entered promiscuous mode [ 1510.528821][T13902] syzkaller0: entered allmulticast mode [ 1510.773373][T13916] validate_nla: 40 callbacks suppressed [ 1510.773398][T13916] netlink: 'syz.2.17813': attribute type 1 has an invalid length. [ 1511.001371][T13916] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1511.207474][T13920] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1511.366423][T13921] team0: No ports can be present during mode change [ 1511.846217][T13938] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.060545][T13955] syzkaller0: entered promiscuous mode [ 1513.060570][T13955] syzkaller0: entered allmulticast mode [ 1513.107655][T13955] tipc: Started in network mode [ 1513.107689][T13955] tipc: Node identity 9e54a4b3e391, cluster identity 4711 [ 1513.108140][T13955] tipc: Enabled bearer , priority 0 [ 1513.138309][T13952] tipc: Resetting bearer [ 1513.275377][T13952] tipc: Disabling bearer [ 1513.934746][T13974] tipc: Invalid UDP bearer configuration [ 1513.934799][T13974] tipc: Enabling of bearer rejected, failed to enable media [ 1514.071561][T13981] syzkaller0: entered promiscuous mode [ 1514.071603][T13981] syzkaller0: entered allmulticast mode [ 1514.640102][T13985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.022932][ T1154] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1516.106690][T14007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1516.814807][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17837'. [ 1527.922372][T14039] netlink: 'syz.4.17839': attribute type 1 has an invalid length. [ 1528.096878][T14039] bond8: entered promiscuous mode [ 1528.099903][T14039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1528.256892][T14041] vlan3: entered allmulticast mode [ 1528.256927][T14041] bond8: entered allmulticast mode [ 1528.307296][T14052] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1528.307329][T14052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1528.326017][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17842'. [ 1528.454023][T14039] bond8: (slave bridge5): making interface the new active one [ 1528.454052][T14039] bridge5: entered promiscuous mode [ 1528.474852][T14039] bridge5: entered allmulticast mode [ 1528.500930][T14039] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1528.512825][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17842'. [ 1531.007550][T14078] tc_dump_action: action bad kind [ 1531.276740][T14076] syzkaller0: create flow: hash 323660376 index 2 [ 1531.829702][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17851'. [ 1533.928752][T14127] IPVS: Scheduler module ip_vs_sip not found [ 1533.994544][ C0] TC_ACT_REPEAT abuse ? [ 1533.994635][ C0] TC_ACT_REPEAT abuse ? [ 1534.151204][T14079] syzkaller0: delete flow: hash 323660376 index 2 [ 1541.232885][ T1154] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1544.757772][T14131] syzkaller0: left promiscuous mode [ 1544.757801][T14131] syzkaller0: left allmulticast mode [ 1544.758365][T14131] tipc: Resetting bearer [ 1544.869791][T14120] lo speed is unknown, defaulting to 1000 [ 1544.965091][T14139] netlink: 'syz.4.17858': attribute type 1 has an invalid length. [ 1545.069333][ T4048] Bluetooth: hci5: link tx timeout [ 1545.075075][ T4048] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1545.643616][T14139] bridge6: entered promiscuous mode [ 1545.704016][T14139] bond9: (slave bridge6): making interface the new active one [ 1545.721181][T14139] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1545.778213][T14150] bridge7: entered promiscuous mode [ 1545.802762][T14150] bond9: (slave bridge7): Enslaving as a backup interface with an up link [ 1545.808731][T14157] tipc: Enabled bearer , priority 0 [ 1545.831962][T14155] tipc: Resetting bearer [ 1545.854025][T14138] tipc: Disabling bearer [ 1546.582591][T14120] wg2 speed is unknown, defaulting to 1000 [ 1546.969064][T14173] syzkaller0: entered promiscuous mode [ 1546.969093][T14173] syzkaller0: entered allmulticast mode [ 1547.138660][T14148] Bluetooth: hci5: command 0x0405 tx timeout [ 1548.622652][T14200] lo speed is unknown, defaulting to 1000 [ 1549.899322][T14148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1549.919359][T14148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1549.931858][T14148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1549.946347][T14148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1549.947721][T14148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1550.729702][T14217] tipc: Enabling of bearer rejected, failed to enable media [ 1551.033637][T14200] wg2 speed is unknown, defaulting to 1000 [ 1552.094625][ T4048] Bluetooth: hci1: command tx timeout [ 1552.561523][T14247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1553.239725][ T1167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.975092][ T1167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.997447][T14270] syzkaller0: entered promiscuous mode [ 1553.997682][T14270] syzkaller0: entered allmulticast mode [ 1554.039303][T14279] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.17884'. [ 1554.040723][T14279] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.17884'. [ 1554.177531][ T4048] Bluetooth: hci1: command tx timeout [ 1554.422864][T14209] lo speed is unknown, defaulting to 1000 [ 1554.829520][ T1167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.039568][T14282] veth1_macvtap: left promiscuous mode [ 1555.039811][T14282] macsec0: entered promiscuous mode [ 1555.342024][ T1167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.507842][T14283] veth1_macvtap: entered promiscuous mode [ 1555.508244][T14283] macsec0: left promiscuous mode [ 1555.888831][T14209] wg2 speed is unknown, defaulting to 1000 [ 1556.254808][ T4048] Bluetooth: hci1: command tx timeout [ 1556.417183][T14309] tun0: tun_chr_ioctl cmd 1074025675 [ 1556.417212][T14309] tun0: persist disabled [ 1556.616199][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17888'. [ 1556.617806][T14287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17888'. [ 1556.830269][T14287] bridge0: entered promiscuous mode [ 1556.830297][T14287] bridge0: entered allmulticast mode [ 1557.319700][ T1167] bridge_slave_1: left allmulticast mode [ 1557.319754][ T1167] bridge_slave_1: left promiscuous mode [ 1557.320830][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.377166][ T1167] bridge_slave_0: left allmulticast mode [ 1557.377198][ T1167] bridge_slave_0: left promiscuous mode [ 1557.406540][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.709318][T14338] ip_tables: iptables: counters copy to user failed while replacing table [ 1558.334455][ T4048] Bluetooth: hci1: command tx timeout [ 1559.433816][ T1167] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 1559.540174][ T1167] bond1 (unregistering): (slave .`): Releasing backup interface [ 1559.568687][ T1167] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.647663][ T1167] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.718509][ T1167] .` (unregistering): Released all slaves [ 1559.802844][ T1167] bond1 (unregistering): Released all slaves [ 1559.927569][ T1167] bond0 (unregistering): Released all slaves [ 1559.994264][T14334] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17894'. [ 1561.147480][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17900'. [ 1562.148347][T14376] netlink: 'syz.2.17902': attribute type 1 has an invalid length. [ 1571.877099][ T1167] tipc: Left network mode [ 1571.948201][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17901'. [ 1572.118057][T14376] bond18: entered promiscuous mode [ 1572.118442][T14376] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1572.407200][T14377] ipvlan3: entered allmulticast mode [ 1572.407224][T14377] bond18: entered allmulticast mode [ 1572.437558][T14378] ipvlan4: entered allmulticast mode [ 1572.543916][T14379] bond18: (slave bridge12): making interface the new active one [ 1572.543945][T14379] bridge12: entered promiscuous mode [ 1572.563341][T14379] bridge12: entered allmulticast mode [ 1572.578282][ T45] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1572.626456][T14379] bond18: (slave bridge12): Enslaving as an active interface with an up link [ 1573.253681][ T31] audit: type=1804 audit(1790770846.999:21): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.17905" name="/newroot/3534/cgroup.controllers" dev="tmpfs" ino=17778 res=1 errno=0 [ 1573.253748][ T31] audit: type=1800 audit(1790770846.999:22): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17905" name="cgroup.controllers" dev="tmpfs" ino=17778 res=0 errno=0 [ 1573.692629][T14393] tipc: Enabled bearer , priority 0 [ 1573.743461][T14391] syzkaller0: entered promiscuous mode [ 1573.743489][T14391] syzkaller0: entered allmulticast mode [ 1574.595855][T14391] tipc: Resetting bearer [ 1574.825030][T14391] tipc: Disabling bearer [ 1576.877625][ T1167] hsr_slave_0: left promiscuous mode [ 1576.880097][ T1167] hsr_slave_1: left promiscuous mode [ 1576.899456][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.899504][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.917161][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.917403][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.208851][ T1167] veth1_macvtap: left promiscuous mode [ 1577.208937][ T1167] veth0_macvtap: left promiscuous mode [ 1577.209059][ T1167] veth1_vlan: left promiscuous mode [ 1577.209170][ T1167] veth0_vlan: left promiscuous mode [ 1578.539600][T14438] netlink: 'syz.4.17910': attribute type 15 has an invalid length. [ 1578.539629][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17910'. [ 1579.307398][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 1579.393216][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 1579.982010][T14209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.982132][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.982312][T14209] bridge_slave_0: entered allmulticast mode [ 1580.014667][T14209] bridge_slave_0: entered promiscuous mode [ 1580.029210][T14209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.034080][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.051069][T14209] bridge_slave_1: entered allmulticast mode [ 1580.062519][T14209] bridge_slave_1: entered promiscuous mode [ 1580.149535][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1580.165754][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17912'. [ 1580.631361][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17914'. [ 1580.631390][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17914'. [ 1582.452171][T14473] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1591.618680][T14148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1591.625077][T14148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1591.634683][T14148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1591.649757][T14148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1591.653342][T14148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1593.695363][ T4048] Bluetooth: hci5: command tx timeout [ 1594.425140][T14468] tipc: Resetting bearer [ 1594.720072][T14148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1594.724315][T14148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1594.727365][T14148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1594.751671][T14148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1594.752833][T14148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1595.267130][T14209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.288303][T14209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.305108][T14437] lo speed is unknown, defaulting to 1000 [ 1595.586746][ T5344] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.586789][ T5344] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.774667][ T4048] Bluetooth: hci5: command tx timeout [ 1596.215161][ T5350] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.215198][ T5350] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.215332][ T5350] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.215357][ T5350] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.508051][T14209] team0: Port device team_slave_0 added [ 1596.546895][T14209] team0: Port device team_slave_1 added [ 1596.561288][T14148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1596.563973][T14148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1596.583400][T14148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1596.596421][T14148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1596.601833][T14148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1596.814370][ T4048] Bluetooth: hci6: command tx timeout [ 1596.969577][T14209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.969597][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.969624][T14209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.991673][T14209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.991692][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.991715][T14209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.376071][T14500] sit0: left promiscuous mode [ 1597.854406][ T4048] Bluetooth: hci5: command tx timeout [ 1598.203246][T14500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1598.209269][T14500] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1598.343613][T15511] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1598.592540][T14500] geneve4: left promiscuous mode [ 1598.593470][T14500] ip6gre3: left promiscuous mode [ 1598.610665][T14500] geneve5: left promiscuous mode [ 1598.621772][T14500] ip6gretap1: left promiscuous mode [ 1598.673724][T14500] bond7: left promiscuous mode [ 1598.673754][T14500] ip6gre4: left promiscuous mode [ 1598.688976][T14500] bond8: left promiscuous mode [ 1598.741366][ T4048] Bluetooth: hci7: command tx timeout [ 1598.773440][T14500] bond11: left promiscuous mode [ 1598.894405][ T4048] Bluetooth: hci6: command tx timeout [ 1598.918800][T14500] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1598.999393][T14500] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1599.057520][T14500] bond18: left promiscuous mode [ 1599.093532][T14500] bridge12: left promiscuous mode [ 1599.125796][T14500] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1599.142239][T14500] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1599.145042][ T5749] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1599.290251][T11188] lo speed is unknown, defaulting to 1000 [ 1599.290294][T11188] syz0: Port: 1 Link ACTIVE [ 1599.389058][T14437] wg2 speed is unknown, defaulting to 1000 [ 1599.860946][ T150] bond12: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1599.869188][ T5749] lo speed is unknown, defaulting to 1000 [ 1599.929430][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1599.934529][ T4048] Bluetooth: hci5: command tx timeout [ 1600.017655][T14209] hsr_slave_0: entered promiscuous mode [ 1600.018846][T14209] hsr_slave_1: entered promiscuous mode [ 1600.022109][T14209] debugfs: 'hsr0' already exists in 'hsr' [ 1600.022131][T14209] Cannot create hsr debugfs directory [ 1600.302128][ T158] bond6: left allmulticast mode [ 1600.315806][ T158] bridge0: port 1(bond6) entered disabled state [ 1600.814881][ T4048] Bluetooth: hci7: command tx timeout [ 1600.974528][ T4048] Bluetooth: hci6: command tx timeout [ 1602.441225][T14540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1602.504961][T14540] x_tables: duplicate underflow at hook 1 [ 1602.565548][T14540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1602.789562][T14542] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.894236][ T4048] Bluetooth: hci7: command tx timeout [ 1603.048447][T14542] rdma_rxe: rxe_newlink: failed to add bond0 [ 1603.055874][ T4048] Bluetooth: hci6: command tx timeout [ 1604.984276][ T4048] Bluetooth: hci7: command tx timeout [ 1609.362283][T14148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1609.389787][T14148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1609.391731][T14148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1609.408826][T14148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1609.421597][T14148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.535419][ T4048] Bluetooth: hci0: command tx timeout [ 1613.614274][ T4048] Bluetooth: hci0: command tx timeout [ 1615.704494][ T4048] Bluetooth: hci0: command tx timeout [ 1617.774845][ T4048] Bluetooth: hci0: command tx timeout [ 1618.835412][T14148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1618.863942][T14148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1618.875290][T14148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1618.876279][T14148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1618.883906][T14148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.054576][T14148] Bluetooth: hci3: command tx timeout [ 1623.136161][T14148] Bluetooth: hci3: command tx timeout [ 1625.214417][T14148] Bluetooth: hci3: command tx timeout [ 1627.294331][T14148] Bluetooth: hci3: command tx timeout [ 1651.800150][ T4048] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1651.813506][ T4048] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1651.821861][ T4048] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1651.823589][ T4048] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1651.838940][ T4048] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1654.014374][T14148] Bluetooth: hci8: command tx timeout [ 1654.800261][ T4048] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1654.812916][ T4048] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1654.813982][ T4048] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1654.817566][ T4048] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1654.818248][ T4048] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1656.094584][ T4048] Bluetooth: hci8: command tx timeout [ 1656.402217][T14148] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1656.425016][T14148] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1656.452736][T14148] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1656.461014][T14148] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1656.461661][T14148] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1656.897100][T14148] Bluetooth: hci9: command tx timeout [ 1658.174607][T14148] Bluetooth: hci8: command tx timeout [ 1658.494674][T14148] Bluetooth: hci10: command tx timeout [ 1658.978371][T14148] Bluetooth: hci9: command tx timeout [ 1660.264603][T14148] Bluetooth: hci8: command tx timeout [ 1660.588648][ T4048] Bluetooth: hci10: command tx timeout [ 1661.054420][ T4048] Bluetooth: hci9: command tx timeout [ 1662.654632][ T4048] Bluetooth: hci10: command tx timeout [ 1663.135016][ T4048] Bluetooth: hci9: command tx timeout [ 1664.735267][ T4048] Bluetooth: hci10: command tx timeout [ 1669.949479][T14148] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1669.971932][T14148] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1669.972859][T14148] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1669.983456][T14148] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1669.985819][T14148] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1672.094961][ T4048] Bluetooth: hci11: command tx timeout [ 1674.175183][ T4048] Bluetooth: hci11: command tx timeout [ 1676.254971][ T4048] Bluetooth: hci11: command tx timeout [ 1676.437499][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 1678.336341][T14148] Bluetooth: hci11: command tx timeout [ 1679.244047][ T5621] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1679.247946][ T5621] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1679.288185][ T5621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1679.307378][ T5621] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1679.308156][ T5621] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1681.457659][T14148] Bluetooth: hci12: command tx timeout [ 1683.544324][T14148] Bluetooth: hci12: command tx timeout [ 1685.628444][T14148] Bluetooth: hci12: command tx timeout [ 1687.695695][T14148] Bluetooth: hci12: command tx timeout [ 1711.895203][ T5621] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1711.901941][ T5621] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1711.904253][ T5621] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1711.945542][ T5621] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1711.946276][ T5621] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1714.014340][T14148] Bluetooth: hci13: command tx timeout [ 1715.366470][T14604] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1715.371859][T14604] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1715.372965][T14605] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1715.398754][T14605] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1715.418860][T14605] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1716.094509][T14605] Bluetooth: hci13: command tx timeout [ 1716.867652][T14148] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1716.898080][T14148] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1716.899790][T14148] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1716.929506][T14148] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1716.930744][T14148] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1717.388365][T14605] Bluetooth: hci5: command 0x0406 tx timeout [ 1717.388380][T14148] Bluetooth: hci6: command 0x0406 tx timeout [ 1717.455729][ T4048] Bluetooth: hci14: command tx timeout [ 1718.174433][ T5621] Bluetooth: hci13: command tx timeout [ 1719.054555][ T5621] Bluetooth: hci15: command tx timeout [ 1719.540851][ T5621] Bluetooth: hci14: command tx timeout [ 1720.255898][ T5621] Bluetooth: hci13: command tx timeout [ 1721.138299][ T4048] Bluetooth: hci15: command tx timeout [ 1721.614861][ T4048] Bluetooth: hci14: command tx timeout [ 1722.505811][ T4048] Bluetooth: hci7: command 0x0406 tx timeout [ 1723.232356][ T5621] Bluetooth: hci15: command tx timeout [ 1723.694591][ T5621] Bluetooth: hci14: command tx timeout [ 1725.294366][ T5621] Bluetooth: hci15: command tx timeout [ 1730.042200][ T4048] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1730.053480][ T4048] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1730.085365][ T4048] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1730.086406][ T4048] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1730.087137][ T4048] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1732.194759][ T4048] Bluetooth: hci16: command tx timeout [ 1732.754870][ T4048] Bluetooth: hci0: command 0x0406 tx timeout [ 1734.254320][ T5621] Bluetooth: hci16: command tx timeout [ 1736.334347][ T5621] Bluetooth: hci16: command tx timeout [ 1738.414669][ T5621] Bluetooth: hci16: command tx timeout [ 1739.367142][ T4048] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1739.389915][ T4048] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1739.390840][ T4048] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1739.393175][ T4048] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1739.393866][ T4048] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1741.454450][ T5621] Bluetooth: hci17: command tx timeout [ 1742.978401][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1743.551562][ T4048] Bluetooth: hci17: command tx timeout [ 1745.617038][ T4048] Bluetooth: hci17: command tx timeout [ 1747.703795][ T4048] Bluetooth: hci17: command tx timeout [ 1757.534687][ T32] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 1757.534716][ T32] Not tainted syzkaller #0 [ 1757.534727][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.534736][ T32] task:kworker/0:1 state:D stack:23776 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1757.534796][ T32] Workqueue: events netdev_work_proc [ 1757.534927][ T32] Call Trace: [ 1757.534935][ T32] [ 1757.534950][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1757.535029][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1757.535082][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.535117][ T32] ? schedule+0x90/0x2b0 [ 1757.535144][ T32] schedule+0x164/0x2b0 [ 1757.535169][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.535191][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.535221][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.535249][ T32] ? netdev_work_proc+0x209/0x780 [ 1757.535281][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.535314][ T32] ? kthread+0x38b/0x480 [ 1757.535349][ T32] ? preempt_schedule_thunk ** replaying previous printk message ** [ 1757.535349][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1757.535377][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1757.535399][ T32] ? netdev_work_proc+0x12b/0x780 [ 1757.535426][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1757.535458][ T32] netdev_work_proc+0x209/0x780 [ 1757.535490][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 1757.535523][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.535566][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1757.535594][ T32] process_scheduled_works+0xc3d/0x1630 [ 1757.535654][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1757.535687][ T32] ? assign_work+0x3cf/0x5d0 [ 1757.535718][ T32] worker_thread+0xa47/0xfb0 [ 1757.535775][ T32] kthread+0x38b/0x480 [ 1757.535796][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1757.535820][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.535841][ T32] ret_from_fork+0x514/0xb70 [ 1757.535878][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.535898][ T32] ? __switch_to+0xc89/0x1420 [ 1757.535942][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.535964][ T32] ret_from_fork_asm+0x1a/0x30 [ 1757.536011][ T32] [ 1757.536028][ T32] INFO: task kworker/u8:3:45 blocked for more than 143 seconds. [ 1757.536042][ T32] Not tainted syzkaller #0 [ 1757.536052][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.536061][ T32] task:kworker/u8:3 state:D stack:22352 pid:45 tgid:45 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1757.536112][ T32] Workqueue: events_unbound linkwatch_event [ 1757.536215][ T32] Call Trace: [ 1757.536222][ T32] [ 1757.536235][ T32] __schedule+0x17db/0x58f0 [ 1757.536290][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.536331][ T32] ? schedule+0x90/0x2b0 [ 1757.536359][ T32] schedule+0x164/0x2b0 [ 1757.536383][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.536405][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.536435][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.536463][ T32] ? linkwatch_event+0xe/0x60 [ 1757.536494][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.536519][ T32] ? lock_acquire+0x115/0x350 [ 1757.536548][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.536572][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1757.536598][ T32] linkwatch_event+0xe/0x60 [ 1757.536625][ T32] process_scheduled_works+0xc3d/0x1630 [ 1757.536685][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1757.536718][ T32] ? assign_work+0x3cf/0x5d0 [ 1757.536750][ T32] worker_thread+0xa47/0xfb0 [ 1757.536792][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1757.536831][ T32] kthread+0x38b/0x480 [ 1757.536851][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1757.536875][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.536896][ T32] ret_from_fork+0x514/0xb70 [ 1757.536919][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.536939][ T32] ? __switch_to+0xc89/0x1420 [ 1757.536969][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.536991][ T32] ret_from_fork_asm+0x1a/0x30 [ 1757.537037][ T32] [ 1757.537114][ T32] INFO: task dhcpcd:5279 blocked for more than 143 seconds. [ 1757.537128][ T32] Not tainted syzkaller #0 [ 1757.537138][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.537146][ T32] task:dhcpcd state:D stack:21384 pid:5279 tgid:5279 ppid:5278 task_flags:0x400140 flags:0x00080000 [ 1757.537195][ T32] Call Trace: [ 1757.537202][ T32] [ 1757.537215][ T32] __schedule+0x17db/0x58f0 [ 1757.537270][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.537311][ T32] ? schedule+0x90/0x2b0 [ 1757.537338][ T32] schedule+0x164/0x2b0 [ 1757.537362][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.537384][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.537414][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.537442][ T32] ? rtnl_dump_ifinfo+0xa18/0x1420 [ 1757.537470][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.537509][ T32] ? __nla_parse+0x40/0x60 [ 1757.537588][ T32] rtnl_dump_ifinfo+0xa18/0x1420 [ 1757.537631][ T32] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1757.537660][ T32] ? stack_trace_save+0xa9/0x100 [ 1757.537680][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1757.537704][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1757.537811][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.537835][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1757.537862][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 1757.537884][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1757.537903][ T32] ? netlink_dump+0x1e7/0xee0 [ 1757.537989][ T32] ? netlink_dump+0x1e7/0xee0 [ 1757.538021][ T32] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1757.538046][ T32] rtnl_dumpit+0xcc/0x200 [ 1757.538075][ T32] netlink_dump+0x711/0xee0 [ 1757.538103][ T32] ? __netlink_lookup+0xc6/0x8b0 [ 1757.538143][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 1757.538183][ T32] ? netlink_lookup+0x30/0x200 [ 1757.538210][ T32] ? netlink_lookup+0x30/0x200 [ 1757.538245][ T32] __netlink_dump_start+0x589/0x7b0 [ 1757.538281][ T32] rtnetlink_rcv_msg+0xa48/0xc00 [ 1757.538311][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1757.538332][ T32] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1757.538356][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.538380][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.538403][ T32] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1757.538426][ T32] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1757.538465][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.538495][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.538521][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.538566][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.538594][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.538629][ T32] netlink_unicast+0x7bd/0x940 [ 1757.538670][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.538700][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.538730][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.538757][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.538776][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.538801][ T32] __sys_sendto+0x408/0x5a0 [ 1757.538832][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.538891][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1757.538917][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.538946][ T32] do_syscall_64+0x166/0x520 [ 1757.538970][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.538991][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.539013][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.539038][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.539059][ T32] RIP: 0033:0x7fe41d447407 [ 1757.539078][ T32] RSP: 002b:00007ffd608f9570 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1757.539098][ T32] RAX: ffffffffffffffda RBX: 00007fe41d3bd780 RCX: 00007fe41d447407 [ 1757.539113][ T32] RDX: 0000000000000014 RSI: 00007ffd608f9600 RDI: 000000000000002d [ 1757.539125][ T32] RBP: 00007ffd608f95e4 R08: 00007ffd608f95e4 R09: 000000000000000c [ 1757.539139][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd60919ef0 [ 1757.539151][ T32] R13: 00007fe41d3bd708 R14: 00007ffd608f96e0 R15: 00007ffd60909cc0 [ 1757.539186][ T32] [ 1757.539258][ T32] INFO: task kworker/u8:11:9964 blocked for more than 143 seconds. [ 1757.539272][ T32] Not tainted syzkaller #0 [ 1757.539282][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.539290][ T32] task:kworker/u8:11 state:D stack:23400 pid:9964 tgid:9964 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1757.539350][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 1757.539415][ T32] Call Trace: [ 1757.539421][ T32] [ 1757.539434][ T32] __schedule+0x17db/0x58f0 [ 1757.539490][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.539523][ T32] ? schedule+0x90/0x2b0 [ 1757.539550][ T32] schedule+0x164/0x2b0 [ 1757.539575][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.539595][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.539624][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.539652][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 1757.539677][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.539724][ T32] addrconf_dad_work+0x116/0x15c0 [ 1757.539757][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1757.539788][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.539814][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1757.539839][ T32] process_scheduled_works+0xc3d/0x1630 [ 1757.539901][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1757.539934][ T32] ? assign_work+0x3cf/0x5d0 [ 1757.539966][ T32] worker_thread+0xa47/0xfb0 [ 1757.540007][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1757.540046][ T32] kthread+0x38b/0x480 [ 1757.540067][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1757.540091][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.540112][ T32] ret_from_fork+0x514/0xb70 [ 1757.540135][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.540154][ T32] ? __switch_to+0xc89/0x1420 [ 1757.540183][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.540205][ T32] ret_from_fork_asm+0x1a/0x30 [ 1757.540252][ T32] [ 1757.540270][ T32] INFO: task kworker/0:3:13257 blocked for more than 143 seconds. [ 1757.540284][ T32] Not tainted syzkaller #0 [ 1757.540294][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.540310][ T32] task:kworker/0:3 state:D stack:24520 pid:13257 tgid:13257 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1757.540361][ T32] Workqueue: events switchdev_deferred_process_work [ 1757.540411][ T32] Call Trace: [ 1757.540418][ T32] [ 1757.540431][ T32] __schedule+0x17db/0x58f0 [ 1757.540475][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1757.540508][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.540541][ T32] ? schedule+0x90/0x2b0 [ 1757.540568][ T32] schedule+0x164/0x2b0 [ 1757.540592][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.540614][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.540643][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.540672][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 1757.540699][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.540724][ T32] ? lock_acquire+0x115/0x350 [ 1757.540755][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.540779][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1757.540804][ T32] switchdev_deferred_process_work+0xe/0x20 [ 1757.540828][ T32] process_scheduled_works+0xc3d/0x1630 [ 1757.540888][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1757.540922][ T32] ? assign_work+0x3cf/0x5d0 [ 1757.540953][ T32] worker_thread+0xa47/0xfb0 [ 1757.540995][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1757.541034][ T32] kthread+0x38b/0x480 [ 1757.541054][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1757.541077][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.541099][ T32] ret_from_fork+0x514/0xb70 [ 1757.541122][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.541142][ T32] ? __switch_to+0xc89/0x1420 [ 1757.541171][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.541193][ T32] ret_from_fork_asm+0x1a/0x30 [ 1757.541240][ T32] [ 1757.541253][ T32] INFO: task syz-executor:14209 blocked for more than 143 seconds. [ 1757.541267][ T32] Not tainted syzkaller #0 [ 1757.541276][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.541285][ T32] task:syz-executor state:D stack:23240 pid:14209 tgid:14209 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1757.541342][ T32] Call Trace: [ 1757.541349][ T32] [ 1757.541361][ T32] __schedule+0x17db/0x58f0 [ 1757.541402][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1757.541436][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.541469][ T32] ? schedule+0x90/0x2b0 [ 1757.541496][ T32] schedule+0x164/0x2b0 [ 1757.541521][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.541542][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.541572][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.541601][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1757.541628][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.541663][ T32] ? ns_capable+0x89/0xe0 [ 1757.541698][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1757.541722][ T32] ? refcount_inc+0x46/0x70 [ 1757.541747][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1757.541785][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.541815][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.541843][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.541880][ T32] ? lock_acquire+0x115/0x350 [ 1757.541908][ T32] ? lock_acquire+0x115/0x350 [ 1757.541939][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1757.541978][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.542006][ T32] ? __kernel_text_address+0xd/0x30 [ 1757.542027][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1757.542050][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.542069][ T32] ? arch_stack_walk+0xfb/0x150 [ 1757.542104][ T32] ? lock_acquire+0x115/0x350 [ 1757.542125][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.542163][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.542184][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.542207][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1757.542229][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.542253][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.542278][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.542321][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.542351][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.542378][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.542421][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.542448][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.542484][ T32] netlink_unicast+0x7bd/0x940 [ 1757.542523][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.542554][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.542583][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.542609][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.542628][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.542651][ T32] __sys_sendto+0x408/0x5a0 [ 1757.542681][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.542702][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.542739][ T32] ? fput_close_sync+0x11f/0x240 [ 1757.542784][ T32] ? kmem_cache_free+0x471/0x650 [ 1757.542817][ T32] ? rcu_is_watching+0x16/0xb0 [ 1757.542848][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.542877][ T32] do_syscall_64+0x166/0x520 [ 1757.542900][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.542920][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.542945][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.542964][ T32] RIP: 0033:0x7f1a4315e98e [ 1757.542981][ T32] RSP: 002b:00007ffc47d7d9e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1757.543001][ T32] RAX: ffffffffffffffda RBX: 0000555572c50500 RCX: 00007f1a4315e98e [ 1757.543014][ T32] RDX: 0000000000000020 RSI: 00007f1a43f54670 RDI: 0000000000000003 [ 1757.543027][ T32] RBP: 0000000000000001 R08: 00007ffc47d7da64 R09: 000000000000000c [ 1757.543039][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1757.543051][ T32] R13: 0000000000000000 R14: 00007f1a43f54670 R15: 0000000000000000 [ 1757.543085][ T32] [ 1757.543095][ T32] INFO: task syz.4.17910:14437 blocked for more than 143 seconds. [ 1757.543109][ T32] Not tainted syzkaller #0 [ 1757.543119][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.543127][ T32] task:syz.4.17910 state:D stack:25520 pid:14437 tgid:14435 ppid:6462 task_flags:0x400140 flags:0x00080002 [ 1757.543178][ T32] Call Trace: [ 1757.543184][ T32] [ 1757.543198][ T32] __schedule+0x17db/0x58f0 [ 1757.543237][ T32] ? kernel_text_address+0xa5/0xe0 [ 1757.543263][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1757.543292][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.543332][ T32] ? schedule+0x90/0x2b0 [ 1757.543358][ T32] schedule+0x164/0x2b0 [ 1757.543384][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.543405][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.543435][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.543463][ T32] ? ip_tunnel_init_net+0x2ee/0x870 [ 1757.543536][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.543583][ T32] ip_tunnel_init_net+0x2ee/0x870 [ 1757.543612][ T32] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1757.543645][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1757.543664][ T32] ? __kmalloc_noprof+0x1ab/0x720 [ 1757.543681][ T32] ? ops_init+0x7b/0x5d0 [ 1757.543755][ T32] vti_init_net+0x2f/0x100 [ 1757.543800][ T32] ops_init+0x35d/0x5d0 [ 1757.543834][ T32] setup_net+0x118/0x350 [ 1757.543860][ T32] ? __pfx_setup_net+0x10/0x10 [ 1757.543883][ T32] ? down_read_killable+0x1bb/0x3b0 [ 1757.543911][ T32] ? __ns_common_init+0x2fc/0x4a0 [ 1757.543942][ T32] copy_net_ns+0x53b/0x780 [ 1757.543969][ T32] create_new_namespaces+0x3f0/0x6b0 [ 1757.543999][ T32] ? security_capable+0x7e/0x2c0 [ 1757.554240][ T32] unshare_nsproxy_namespaces+0x149/0x190 [ 1757.554282][ T32] ksys_unshare+0x5a7/0x950 [ 1757.554336][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1757.554365][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 1757.554392][ T32] __x64_sys_unshare+0x38/0x50 [ 1757.554417][ T32] do_syscall_64+0x166/0x520 [ 1757.554439][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.554457][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.554476][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.554500][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.554518][ T32] RIP: 0033:0x7f454759e159 [ 1757.554535][ T32] RSP: 002b:00007f454853d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1757.554558][ T32] RAX: ffffffffffffffda RBX: 00007f4547825fa0 RCX: 00007f454759e159 [ 1757.554571][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 1757.554582][ T32] RBP: 00007f454763506b R08: 0000000000000000 R09: 0000000000000000 [ 1757.554594][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.554606][ T32] R13: 00007f4547826038 R14: 00007f4547825fa0 R15: 00007fffbb0f6998 [ 1757.554638][ T32] [ 1757.554648][ T32] INFO: task syz-executor:14475 blocked for more than 143 seconds. [ 1757.554662][ T32] Not tainted syzkaller #0 [ 1757.554671][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.554680][ T32] task:syz-executor state:D stack:26616 pid:14475 tgid:14475 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1757.554731][ T32] Call Trace: [ 1757.554737][ T32] [ 1757.554749][ T32] __schedule+0x17db/0x58f0 [ 1757.554786][ T32] ? arch_stack_walk+0xfb/0x150 [ 1757.554820][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.554851][ T32] ? schedule+0x90/0x2b0 [ 1757.554874][ T32] schedule+0x164/0x2b0 [ 1757.554897][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.554917][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.554938][ T32] ? do_syscall_64+0x166/0x520 [ 1757.554965][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.554991][ T32] ? register_nexthop_notifier+0x8b/0x290 [ 1757.555017][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.555061][ T32] register_nexthop_notifier+0x8b/0x290 [ 1757.555092][ T32] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1757.555114][ T32] ? net_generic+0x1e/0x240 [ 1757.555510][ T32] ? net_generic+0x1e/0x240 [ 1757.555530][ T32] ? net_generic+0x1e/0x240 [ 1757.555551][ T32] ? __asan_memset+0x22/0x50 [ 1757.555574][ T32] ops_init+0x35d/0x5d0 [ 1757.555607][ T32] setup_net+0x118/0x350 [ 1757.555656][ T32] ? __pfx_setup_net+0x10/0x10 [ 1757.555677][ T32] ? down_read_killable+0x1bb/0x3b0 [ 1757.555702][ T32] ? __ns_common_init+0x2fc/0x4a0 [ 1757.555731][ T32] copy_net_ns+0x53b/0x780 [ 1757.555757][ T32] create_new_namespaces+0x3f0/0x6b0 [ 1757.555784][ T32] ? security_capable+0x7e/0x2c0 [ 1757.555814][ T32] unshare_nsproxy_namespaces+0x149/0x190 [ 1757.555842][ T32] ksys_unshare+0x5a7/0x950 [ 1757.555874][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1757.555913][ T32] __x64_sys_unshare+0x38/0x50 [ 1757.555938][ T32] do_syscall_64+0x166/0x520 [ 1757.555959][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.555977][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.556000][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.556017][ T32] RIP: 0033:0x7fac55f9f427 [ 1757.556033][ T32] RSP: 002b:00007fff5aff1de8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1757.556052][ T32] RAX: ffffffffffffffda RBX: 00007fac56225f40 RCX: 00007fac55f9f427 [ 1757.556064][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1757.556076][ T32] RBP: 00007fac562267b8 R08: 0000000000000000 R09: 0000000000000000 [ 1757.556087][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1757.556098][ T32] R13: 0000000000000003 R14: 00007fff5aff2028 R15: 0000000000000000 [ 1757.556129][ T32] [ 1757.556137][ T32] INFO: task syz-executor:14483 blocked for more than 143 seconds. [ 1757.556151][ T32] Not tainted syzkaller #0 [ 1757.556160][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.556168][ T32] task:syz-executor state:D stack:26616 pid:14483 tgid:14483 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1757.556216][ T32] Call Trace: [ 1757.556223][ T32] [ 1757.556234][ T32] __schedule+0x17db/0x58f0 [ 1757.556285][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.556324][ T32] ? schedule+0x90/0x2b0 [ 1757.556348][ T32] schedule+0x164/0x2b0 [ 1757.556371][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.556390][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.556417][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.556444][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1757.556468][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.556501][ T32] ? ns_capable+0x89/0xe0 [ 1757.556525][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1757.556546][ T32] ? rtnl_newlink+0x912/0x1c30 [ 1757.556571][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1757.556606][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.556632][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.556660][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.556695][ T32] ? lock_acquire+0x115/0x350 [ 1757.556721][ T32] ? lock_acquire+0x115/0x350 [ 1757.556749][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1757.556778][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.556803][ T32] ? __kernel_text_address+0xd/0x30 [ 1757.556823][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1757.556844][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.556862][ T32] ? arch_stack_walk+0xfb/0x150 [ 1757.556894][ T32] ? lock_acquire+0x115/0x350 [ 1757.556913][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.556951][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.556973][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.556994][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1757.557018][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.557042][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.557068][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.557103][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.557133][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.557159][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.557202][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.557230][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.557263][ T32] netlink_unicast+0x7bd/0x940 [ 1757.557309][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.557338][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.557365][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.557389][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.557406][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.557430][ T32] __sys_sendto+0x408/0x5a0 [ 1757.557458][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.557477][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.557512][ T32] ? fput_close_sync+0x11f/0x240 [ 1757.557534][ T32] ? kmem_cache_free+0x471/0x650 [ 1757.557564][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1757.557596][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.557622][ T32] do_syscall_64+0x166/0x520 [ 1757.557643][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.557661][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.557680][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.557702][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.557720][ T32] RIP: 0033:0x7f42dcb5e98e [ 1757.557736][ T32] RSP: 002b:00007ffffff44e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1757.557754][ T32] RAX: ffffffffffffffda RBX: 000055558a487500 RCX: 00007f42dcb5e98e [ 1757.557767][ T32] RDX: 000000000000002c RSI: 00007f42dd954670 RDI: 0000000000000003 [ 1757.557779][ T32] RBP: 0000000000000001 R08: 00007ffffff44f04 R09: 000000000000000c [ 1757.557790][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1757.557801][ T32] R13: 0000000000000000 R14: 00007f42dd954670 R15: 0000000000000000 [ 1757.557833][ T32] [ 1757.557841][ T32] INFO: task syz-executor:14490 blocked for more than 143 seconds. [ 1757.557854][ T32] Not tainted syzkaller #0 [ 1757.557863][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.557871][ T32] task:syz-executor state:D stack:26616 pid:14490 tgid:14490 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1757.557920][ T32] Call Trace: [ 1757.557927][ T32] [ 1757.557938][ T32] __schedule+0x17db/0x58f0 [ 1757.557989][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.558020][ T32] ? schedule+0x90/0x2b0 [ 1757.558043][ T32] schedule+0x164/0x2b0 [ 1757.558066][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.558086][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.558113][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.558139][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1757.558247][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.558282][ T32] ? __nla_parse+0x40/0x60 [ 1757.558319][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1757.558345][ T32] ? __kernel_text_address+0xd/0x30 [ 1757.558367][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.558393][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1757.558442][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1757.558467][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.558487][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1757.558508][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.558529][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.558552][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.558584][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.558611][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.558635][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.558675][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.558701][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.558733][ T32] netlink_unicast+0x7bd/0x940 [ 1757.558769][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.558797][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.558824][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.558847][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.558863][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.558885][ T32] __sys_sendto+0x408/0x5a0 [ 1757.558913][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.558932][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.558965][ T32] ? fput_close_sync+0x11f/0x240 [ 1757.558987][ T32] ? kmem_cache_free+0x471/0x650 [ 1757.559016][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1757.559048][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.559074][ T32] do_syscall_64+0x166/0x520 [ 1757.559095][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.559112][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.559130][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.559153][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.559170][ T32] RIP: 0033:0x7fc50655e98e [ 1757.559185][ T32] RSP: 002b:00007ffd71a550a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1757.559203][ T32] RAX: ffffffffffffffda RBX: 000055556aaf6500 RCX: 00007fc50655e98e [ 1757.559216][ T32] RDX: 0000000000000028 RSI: 00007fc507354670 RDI: 0000000000000003 [ 1757.559227][ T32] RBP: 0000000000000001 R08: 00007ffd71a55124 R09: 000000000000000c [ 1757.559238][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1757.559249][ T32] R13: 0000000000000000 R14: 00007fc507354670 R15: 0000000000000000 [ 1757.559279][ T32] [ 1757.559286][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1757.559298][ T32] INFO: task syz.2.17924:14545 blocked for more than 143 seconds. [ 1757.559319][ T32] Not tainted syzkaller #0 [ 1757.559327][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.559335][ T32] task:syz.2.17924 state:D stack:28808 pid:14545 tgid:14544 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 1757.559386][ T32] Call Trace: [ 1757.559392][ T32] [ 1757.559403][ T32] __schedule+0x17db/0x58f0 [ 1757.559454][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.559484][ T32] ? schedule+0x90/0x2b0 [ 1757.559507][ T32] schedule+0x164/0x2b0 [ 1757.559530][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.559550][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.559577][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.559603][ T32] ? dev_ioctl+0x83c/0x1150 [ 1757.559650][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.559681][ T32] ? dev_load+0x21/0x1f0 [ 1757.559705][ T32] ? dev_load+0x21/0x1f0 [ 1757.559728][ T32] dev_ioctl+0x83c/0x1150 [ 1757.559754][ T32] sock_ioctl+0x753/0x7e0 [ 1757.559783][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1757.559812][ T32] ? __fget_files+0x3a2/0x420 [ 1757.559843][ T32] ? __fget_files+0x2a/0x420 [ 1757.559870][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1757.559896][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1757.559922][ T32] __se_sys_ioctl+0xfc/0x170 [ 1757.559945][ T32] do_syscall_64+0x166/0x520 [ 1757.559966][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.559983][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.560002][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.560024][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.560041][ T32] RIP: 0033:0x7f4a6db9e159 [ 1757.560057][ T32] RSP: 002b:00007f4a6eb44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.560074][ T32] RAX: ffffffffffffffda RBX: 00007f4a6de25fa0 RCX: 00007f4a6db9e159 [ 1757.560087][ T32] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000005 [ 1757.560098][ T32] RBP: 00007f4a6dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1757.560109][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.560120][ T32] R13: 00007f4a6de26038 R14: 00007f4a6de25fa0 R15: 00007ffcea953cf8 [ 1757.560152][ T32] [ 1757.560158][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1757.560167][ T32] INFO: task syz.2.17924:14546 blocked for more than 143 seconds. [ 1757.560179][ T32] Not tainted syzkaller #0 [ 1757.560188][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.560196][ T32] task:syz.2.17924 state:D stack:25840 pid:14546 tgid:14544 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 1757.560243][ T32] Call Trace: [ 1757.560249][ T32] [ 1757.560261][ T32] __schedule+0x17db/0x58f0 [ 1757.560319][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.560349][ T32] ? schedule+0x90/0x2b0 [ 1757.560373][ T32] schedule+0x164/0x2b0 [ 1757.560396][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.560416][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.560443][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.560470][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1757.560493][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.560526][ T32] ? ns_capable+0x89/0xe0 [ 1757.560550][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1757.560572][ T32] ? refcount_inc+0x46/0x70 [ 1757.560594][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1757.560625][ T32] ? kasan_save_free_info+0x40/0x50 [ 1757.560652][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.560671][ T32] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1757.560695][ T32] ? netlink_deliver_tap+0x19c/0x1b0 [ 1757.560719][ T32] ? netlink_unicast+0x781/0x940 [ 1757.560740][ T32] ? netlink_sendmsg+0x813/0xb40 [ 1757.560755][ T32] ? sock_sendmsg_nosec+0x14e/0x190 [ 1757.560771][ T32] ? __sys_sendto+0x408/0x5a0 [ 1757.560789][ T32] ? __x64_sys_sendto+0xde/0x100 [ 1757.560809][ T32] ? do_syscall_64+0x166/0x520 [ 1757.560829][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.560886][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 1757.560904][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.560931][ T32] ? nlmon_xmit+0xb0/0x100 [ 1757.560974][ T32] ? kmem_cache_free+0x182/0x650 [ 1757.561002][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.561029][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1757.561083][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1757.561106][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.561127][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1757.561158][ T32] ? lock_acquire+0x115/0x350 [ 1757.561178][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.561212][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.561233][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.561258][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.561279][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.561311][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 1757.561371][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.561398][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.561422][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.561463][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.561488][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.561520][ T32] netlink_unicast+0x7bd/0x940 [ 1757.561556][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.561585][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.561612][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.561635][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.561651][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.561673][ T32] __sys_sendto+0x408/0x5a0 [ 1757.561701][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.561754][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1757.561779][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.561805][ T32] do_syscall_64+0x166/0x520 [ 1757.561825][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.561843][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.561861][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.561884][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.561901][ T32] RIP: 0033:0x7f4a6db5e98e [ 1757.561917][ T32] RSP: 002b:00007f4a6eb21e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1757.561934][ T32] RAX: ffffffffffffffda RBX: 00007f4a6eb236c0 RCX: 00007f4a6db5e98e [ 1757.561946][ T32] RDX: 0000000000000020 RSI: 00007f4a6eb22000 RDI: 0000000000000006 [ 1757.561958][ T32] RBP: 0000000000000000 R08: 00007f4a6eb21f04 R09: 000000000000000c [ 1757.561969][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1757.561979][ T32] R13: 00007f4a6eb21f58 R14: 00007f4a6eb22000 R15: 0000000000000000 [ 1757.562010][ T32] [ 1757.562017][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1757.562026][ T32] INFO: task syz.2.17924:14547 blocked for more than 143 seconds. [ 1757.562038][ T32] Not tainted syzkaller #0 [ 1757.562047][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.562055][ T32] task:syz.2.17924 state:D stack:26928 pid:14547 tgid:14544 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 1757.562104][ T32] Call Trace: [ 1757.562110][ T32] [ 1757.562122][ T32] __schedule+0x17db/0x58f0 [ 1757.562171][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.562202][ T32] ? schedule+0x90/0x2b0 [ 1757.562226][ T32] schedule+0x164/0x2b0 [ 1757.562249][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.562268][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.562295][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.562350][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1757.562374][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.562407][ T32] ? ns_capable+0x89/0xe0 [ 1757.562430][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1757.562451][ T32] ? refcount_inc+0x46/0x70 [ 1757.562473][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1757.562504][ T32] ? kasan_save_free_info+0x40/0x50 [ 1757.562530][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.562549][ T32] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1757.562574][ T32] ? netlink_deliver_tap+0x19c/0x1b0 [ 1757.562597][ T32] ? netlink_unicast+0x781/0x940 [ 1757.562619][ T32] ? netlink_sendmsg+0x813/0xb40 [ 1757.562635][ T32] ? sock_sendmsg_nosec+0x14e/0x190 [ 1757.562651][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 1757.562672][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 1757.562693][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1757.562714][ T32] ? do_syscall_64+0x166/0x520 [ 1757.562734][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.562790][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 1757.562809][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.562835][ T32] ? nlmon_xmit+0xb0/0x100 [ 1757.562852][ T32] ? kmem_cache_free+0x182/0x650 [ 1757.562880][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.562906][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1757.562935][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1757.562958][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1757.563006][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1757.563027][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.563054][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.563075][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.563099][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 1757.563135][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.563162][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.563186][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.563227][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.563252][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.563284][ T32] netlink_unicast+0x7bd/0x940 [ 1757.563328][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.563356][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.563383][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.563405][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.563423][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.563445][ T32] ____sys_sendmsg+0x54e/0x850 [ 1757.563475][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1757.563508][ T32] ? import_iovec+0x73/0xa0 [ 1757.563589][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1757.563611][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.563634][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1757.563662][ T32] ? futex_wait+0x2a2/0x390 [ 1757.563732][ T32] ? __fget_files+0x2a/0x420 [ 1757.563756][ T32] ? __fget_files+0x3a2/0x420 [ 1757.563793][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1757.563822][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1757.563872][ T32] do_syscall_64+0x166/0x520 [ 1757.563893][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.563912][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.563932][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.563956][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.563975][ T32] RIP: 0033:0x7f4a6db9e159 [ 1757.563992][ T32] RSP: 002b:00007f4a6eb02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1757.564012][ T32] RAX: ffffffffffffffda RBX: 00007f4a6de26180 RCX: 00007f4a6db9e159 [ 1757.602800][ T32] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1757.602822][ T32] RBP: 00007f4a6dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1757.602834][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.602846][ T32] R13: 00007f4a6de26218 R14: 00007f4a6de26180 R15: 00007ffcea953cf8 [ 1757.602878][ T32] [ 1757.602887][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1757.602897][ T32] INFO: task syz-executor:14550 blocked for more than 143 seconds. [ 1757.602912][ T32] Not tainted syzkaller #0 [ 1757.602922][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1757.602930][ T32] task:syz-executor state:D stack:26616 pid:14550 tgid:14550 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1757.602983][ T32] Call Trace: [ 1757.602990][ T32] [ 1757.603002][ T32] __schedule+0x17db/0x58f0 [ 1757.603060][ T32] ? __pfx___schedule+0x10/0x10 [ 1757.603092][ T32] ? schedule+0x90/0x2b0 [ 1757.603117][ T32] schedule+0x164/0x2b0 [ 1757.603140][ T32] schedule_preempt_disabled+0x13/0x30 [ 1757.603160][ T32] __mutex_lock+0x7c1/0x1550 [ 1757.603188][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1757.603213][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1757.603242][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1757.603284][ T32] ? __nla_parse+0x40/0x60 [ 1757.603314][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1757.603340][ T32] ? __kernel_text_address+0xd/0x30 [ 1757.603363][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.603389][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1757.603438][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1757.603463][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1757.603485][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1757.603508][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1757.603529][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.603552][ T32] ? __lock_acquire+0x747/0x2de0 [ 1757.603585][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1757.603614][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1757.603638][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.603679][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.603704][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1757.603737][ T32] netlink_unicast+0x7bd/0x940 [ 1757.603774][ T32] netlink_sendmsg+0x813/0xb40 [ 1757.603803][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.603830][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.603853][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.603871][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1757.603893][ T32] __sys_sendto+0x408/0x5a0 [ 1757.603921][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1757.611547][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1757.611582][ T32] __x64_sys_sendto+0xde/0x100 [ 1757.611610][ T32] do_syscall_64+0x166/0x520 [ 1757.611632][ T32] ? trace_irq_disable+0x3b/0x140 [ 1757.611650][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.611669][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1757.611692][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.611710][ T32] RIP: 0033:0x7f5f2cb5e98e [ 1757.611727][ T32] RSP: 002b:00007ffd8798e3e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1757.611748][ T32] RAX: ffffffffffffffda RBX: 000055557c2b9500 RCX: 00007f5f2cb5e98e [ 1757.611761][ T32] RDX: 0000000000000028 RSI: 00007f5f2d954670 RDI: 0000000000000003 [ 1757.611773][ T32] RBP: 0000000000000001 R08: 00007ffd8798e464 R09: 000000000000000c [ 1757.611784][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1757.611795][ T32] R13: 0000000000000000 R14: 00007f5f2d954670 R15: 0000000000000000 [ 1757.611826][ T32] [ 1757.611835][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1757.631735][ T32] [ 1757.631735][ T32] Showing all locks held in the system: [ 1757.631752][ T32] locks held by kworker/0:1/10: 3, on CPU#0: [ 1757.631769][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.631829][ T32] #1: ffffc900000f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.631876][ T32] #2: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1757.631929][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1757.631941][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1757.631987][ T32] #1: ffffffff9ad462d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1757.632130][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1757.632142][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1757.632195][ T32] locks held by kworker/u8:3/45: 3, on CPU#1: [ 1757.632207][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632262][ T32] #1: ffffc90000b57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632309][ T32] #2: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1757.632364][ T32] locks held by kworker/u8:6/150: 5, last CPU#1: [ 1757.632377][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632424][ T32] #1: ffffc90002dafc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632472][ T32] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1757.632524][ T32] #3: ffffffff8ee38ca0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1757.632568][ T32] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1757.632619][ T32] locks held by kworker/u8:7/158: 4, last CPU#1: [ 1757.632632][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632678][ T32] #1: ffffc90002e4fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.632725][ T32] #2: ffffffff90246088 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1757.632772][ T32] #3: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1757.638062][ T32] locks held by dhcpcd/5279: 2, on CPU#1: [ 1757.638080][ T32] #0: ffff88803e6156e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1757.638137][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa18/0x1420 [ 1757.638192][ T32] locks held by getty/5370: 2, on CPU#1: [ 1757.638203][ T32] #0: ffff8880321a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1757.638315][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1757.638363][ T32] locks held by syz-executor/5604: 1, last CPU#1: [ 1757.638376][ T32] #0: ffff88802ab21d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1757.638454][ T32] locks held by kworker/u8:11/9964: 3, on CPU#1: [ 1757.638466][ T32] #0: ffff888032190940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.638514][ T32] #1: ffffc900195e7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.638561][ T32] #2: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1757.638608][ T32] locks held by kworker/1:3/12913: 1, last CPU#1: [ 1757.638621][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 1757.638667][ T32] locks held by kworker/0:3/13257: 3, on CPU#0: [ 1757.638679][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.638726][ T32] #1: ffffc90003907c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1757.638772][ T32] #2: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1757.638822][ T32] locks held by syz-executor/14209: 1, on CPU#1: [ 1757.638833][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1757.638880][ T32] locks held by syz.4.17910/14437: 2, on CPU#1: [ 1757.638892][ T32] #0: ffffffff90246088 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1757.638936][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ee/0x870 [ 1757.638980][ T32] locks held by syz-executor/14475: 2, on CPU#1: [ 1757.638992][ T32] #0: ffffffff90246088 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1757.639034][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 1757.639098][ T32] locks held by syz-executor/14483: 1, on CPU#1: [ 1757.639111][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1757.639155][ T32] locks held by syz-executor/14490: 1, on CPU#1: [ 1757.639168][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.639218][ T32] locks held by syz.2.17924/14545: 1, on CPU#1: [ 1757.639230][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1757.639351][ T32] locks held by syz.2.17924/14546: 1, on CPU#1: [ 1757.639370][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1757.639415][ T32] locks held by syz.2.17924/14547: 2, on CPU#1: [ 1757.639427][ T32] #0: ffffffff907c0be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1757.639479][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1757.642563][ T32] locks held by syz-executor/14550: 1, on CPU#1: [ 1757.642580][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642634][ T32] locks held by syz-executor/14556: 1, on CPU#1: [ 1757.642647][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642697][ T32] locks held by syz-executor/14563: 1, on CPU#1: [ 1757.642710][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642761][ T32] locks held by syz-executor/14569: 1, on CPU#0: [ 1757.642774][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642825][ T32] locks held by syz-executor/14576: 1, on CPU#1: [ 1757.642838][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642888][ T32] locks held by syz-executor/14581: 1, on CPU#1: [ 1757.642900][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.642951][ T32] locks held by syz-executor/14589: 1, on CPU#0: [ 1757.642964][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643014][ T32] locks held by syz-executor/14594: 1, on CPU#1: [ 1757.643027][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643076][ T32] locks held by syz-executor/14602: 1, on CPU#0: [ 1757.643089][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643139][ T32] locks held by syz-executor/14610: 1, on CPU#0: [ 1757.643152][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643202][ T32] locks held by syz-executor/14616: 1, on CPU#1: [ 1757.643215][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643281][ T32] locks held by syz-executor/14623: 1, on CPU#0: [ 1757.643293][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1757.643344][ T32] [ 1757.643349][ T32] ============================================= [ 1757.643349][ T32] [ 1757.643358][ T32] NMI backtrace for cpu 1 [ 1757.643372][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1757.643391][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1757.643403][ T32] Call Trace: [ 1757.643411][ T32] [ 1757.643420][ T32] dump_stack_lvl+0xe8/0x150 [ 1757.643448][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1757.643509][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1757.643539][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1757.643561][ T32] sys_info+0x135/0x170 [ 1757.643586][ T32] watchdog+0xfd7/0x1030 [ 1757.643612][ T32] ? watchdog+0x1c7/0x1030 [ 1757.643637][ T32] kthread+0x38b/0x480 [ 1757.643656][ T32] ? __pfx_watchdog+0x10/0x10 [ 1757.643673][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.643692][ T32] ret_from_fork+0x514/0xb70 [ 1757.643713][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.643732][ T32] ? __switch_to+0xc89/0x1420 [ 1757.643759][ T32] ? __pfx_kthread+0x10/0x10 [ 1757.643778][ T32] ret_from_fork_asm+0x1a/0x30 [ 1757.643819][ T32] [ 1757.643828][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1757.643855][ C0] NMI backtrace for cpu 0 [ 1757.643871][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1757.643892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1757.643903][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1757.643929][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1757.643944][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1757.643961][ C0] RAX: 1ffffffff35a8c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1757.643975][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1757.643987][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1757.644000][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 1757.644014][ C0] R13: 0000000000000000 R14: ffffffff9ad46300 R15: 0000000000000000 [ 1757.644031][ C0] FS: 0000000000000000(0000) GS:ffff888124cc5000(0000) knlGS:0000000000000000 [ 1757.644047][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1757.644061][ C0] CR2: 00005629941c9c98 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1757.644080][ C0] Call Trace: [ 1757.644087][ C0] [ 1757.644098][ C0] wait_for_lsr+0x184/0x2f0 [ 1757.644124][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1757.644157][ C0] serial8250_console_write+0xaa1/0x1200 [ 1757.644187][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1757.644207][ C0] ? __schedule+0x17f1/0x58f0 [ 1757.644239][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1757.644269][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1757.644293][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1757.644325][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1757.644388][ C0] nbcon_kthread_func+0x679/0x880 [ 1757.644411][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1757.644431][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1757.644455][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1757.644482][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1757.644509][ C0] kthread+0x38b/0x480 [ 1757.644527][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1757.644543][ C0] ? __pfx_kthread+0x10/0x10 [ 1757.644562][ C0] ret_from_fork+0x514/0xb70 [ 1757.644582][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1757.644599][ C0] ? __switch_to+0xc89/0x1420 [ 1757.644624][ C0] ? __pfx_kthread+0x10/0x10 [ 1757.644642][ C0] ret_from_fork_asm+0x1a/0x30 [ 1757.644676][ C0] [ 1757.650726][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1762.726024][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1762.735325][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1762.745394][ T32] Call Trace: [ 1762.748700][ T32] [ 1762.751756][ T32] vpanic+0x56d/0xa60 [ 1762.755778][ T32] ? __pfx___schedule+0x10/0x10 [ 1762.760661][ T32] ? __pfx_vpanic+0x10/0x10 [ 1762.765194][ T32] panic+0xc5/0xd0 [ 1762.768958][ T32] ? __pfx_panic+0x10/0x10 [ 1762.773398][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1762.778881][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1762.784274][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1762.790432][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1762.796603][ T32] watchdog+0x1030/0x1030 [ 1762.800961][ T32] ? watchdog+0x1c7/0x1030 [ 1762.805400][ T32] kthread+0x38b/0x480 [ 1762.809476][ T32] ? __pfx_watchdog+0x10/0x10 [ 1762.814171][ T32] ? __pfx_kthread+0x10/0x10 [ 1762.818785][ T32] ret_from_fork+0x514/0xb70 [ 1762.823397][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1762.828523][ T32] ? __switch_to+0xc89/0x1420 [ 1762.833391][ T32] ? __pfx_kthread+0x10/0x10 [ 1762.837993][ T32] ret_from_fork_asm+0x1a/0x30 [ 1762.842906][ T32] [ 1762.846303][ T32] Kernel Offset: disabled [ 1762.850639][ T32] Rebooting in 86400 seconds..