last executing test programs: 2m22.80941542s ago: executing program 0 (id=8005): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'geneve0\x00', {0xfffffffa}, 0x2}) ioctl$FS_IOC_RESVSP(r0, 0x800442d4, 0x0) 2m21.716882259s ago: executing program 0 (id=8010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2m21.109483469s ago: executing program 0 (id=8014): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x141000, &(0x7f0000000040)={@_ha_fsid={[0x13d, 0xffffffff]}, {0x10, 0xfffc, 0x800}}, 0xd9d3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x6}) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x8c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x3, 0x9, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20001c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000500)={0x0, r8, r0, 0x6, 0xfffffffffffffffb, '\x00', {0x2, 0xfc, 0x7, 0x100, 0x8, 0x6, 0x4, 0x9, {0x8, 0x3}, {0x5, 0xca}, {0x7f, 0x81}, 0x7, 0x6, 0x7, 0x401, 0x401, 0x7, 0x40, 0xff, 0x6b, 0x1, '\x00', 0x8000, 0x6, 0x0, 0x6}}) 2m20.774222032s ago: executing program 0 (id=8017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 2m17.849568383s ago: executing program 0 (id=8023): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee1768812003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dbffffffffffffffff1f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000070000000051c9844dc9031379b67a885813c8c9", 0xb8) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="df4800000000000000000c0000002c"], 0x58}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={0x0, 0x0, 0x0, &(0x7f00000007c0)=""/231, 0xe7}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000000000ac14149a0b82e000000000000000000000000000000000000000ffff6401010200000000000000000a00800029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000010000000000000010000000000000000000000000000100300000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff07000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x100010, 0xffffffffffffffff, 0x6a5d7000) 2m17.32846689s ago: executing program 0 (id=8027): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) 2m6.435195293s ago: executing program 1 (id=8094): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) r3 = socket(0x2a, 0x5, 0x1) sendmsg$nl_route(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) 2m2.011274989s ago: executing program 32 (id=8027): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) 2m1.919774727s ago: executing program 1 (id=8102): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883", @ANYRES8=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='*\x00', 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r4, 0x0) ppoll(&(0x7f00000003c0)=[{r4}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x3e8, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x96, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14}}], 0x18}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x9, 0x4) 2m1.117802923s ago: executing program 2 (id=8109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r6, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) accept4(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tp, &(0x7f00000006c0)=0x80, 0x80000) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) accept4$phonet_pipe(r11, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x80800) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r9, @ANYRESOCT=r10, @ANYBLOB="745aa850e72cda5fdf509453f992d0d4b36568004d411a8cd2ff0384cd353e23b5a901c1ab2e0b5be1ef17da91f3e07304ac4b52820019575a1cb7ed58c6af8f41aad09f08316d9cc61550fe6446f2831c10de38dfa591dd91435aaa81ec7941420c1579cc9a39996da40dc9cb6c9e9b1b8ec733d5bd5b4a80ccdd51f4742deaa9691c38be147ead84ac427ee291e95e120455789f90f7627153a39cebfd5c7b6aacbd080e6600421372ed5c76df3be7d74419fd6a0c5932ff9b6d4a7f3818189bed40aaffe73db8118c35fb2bd46006754b5c6c0c9a89caef46f7540a5eb9502337cb7da9d9bc55d982b31ee7ef999259f6a444a088291a"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44090) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 2m0.494369777s ago: executing program 4 (id=8110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r2, 0x100000000) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'veth1_to_team\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 2m0.347727123s ago: executing program 2 (id=8111): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x250, 0xffffffff, 0x380, 0x250, 0x6a0, 0x6a0, 0xffffffff, 0x6a0, 0x6a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1], 0x9}}, @common=@unspec=@pkttype={{}, {0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@eui64, @common=@rt={{}, {0x7fff, [0xffffffff, 0x5], 0xf1a, 0x20, 0x0, [@empty, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cc) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000004001010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m0.133324771s ago: executing program 3 (id=8112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221b, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000003ec0)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000003d00)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="48bf7d5cdbc31f514ec01d04b5fb9ec1b2f062555880d6faa20e6ac12ddf03399e538e5b8a746d3cc76ba12dbee0609cfc17fe8925604538fb22de1ddd24816f27941a18c6d45f7fad410ca7139c04f9b2206f77d1344a394a6031151d2a8383a792dd349e750ac72ab0f055be824ce9c5c2d2b0c99ad1a21ffa75bc0361c4d93ea87970695807845b87ccc2576a0fb4e0781da0e0d01a3b54558ba77959107ec6762b006111d761965f56167761397807a54eca1b2d82fa1d491876c7a95dc917b3b66ca01dea621f95edefdbfed4e98087f5fa2f6f7b45522602cd5a4db9", 0xdf}, {&(0x7f0000002bc0)="e9ff76653bec753b615cc4075e42d3c330a58ca78aa3a17fed75e3199769ef73f853091406883181bcf2ca6f104054aef14561f7fa3199be47ed90e94da7bd94ff957024b70a5040907a43d1ebf775e51fabef1f3537195b9a1f0ad80a21503db2d7ec8a5bed76b4cc5ea7119eb4", 0x6e}, {&(0x7f0000002c40)="c30b76add9dc7237af09ace98b5148bbe91e53f970ea9007181082a5bbb28b63fde90de0ccde20b75ac16021818cbb3651c395e9778204990671cba61a73389b4a3c8319071de549606d867a8c37b158a5bfcc4657bb7905a4", 0x59}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)="aae5a32bb4fad16c6dc5a87b6f42e73f66d89db5c391ce4a08154d7b26292d064fd0fd08ba9d2ef67180dc24c3c0996495b95a5f3c273a4dc2f82981863b677dccb6933c075e346b90df9a9bd6c8370fe4cbb211f0d52b2e9df3d06332a8ff11431ae9239e654ddac6643c35bc6018012d4d43f15db601b14ee21105ca3cbbb22e3dba0788c3da561be811bb905043b41adde25968a234f3b98535565d16a2708965b3d3661c934c70a59950f1e6743e7e35862ac7fc9afa76ecaaa76e9c7cb49e136af54e9b7e545234f813bc440f41e6ee72564aa8387f4e763a22fc1d998b445cb108cde5996122772bf33bceaf8d51621f9c03c7482a8c5dfc72802caca72829d90a0690b8ed8f23ce8810cb865be3485aaef3dfabc2c22c48f5653404baf02f736e58e38b44070c76125465d1a776b929048c1624fbb8c8ebebd9a439b605758a759b907dc6f43b513aff4cb2927d2ec86a9e9ebd8b820740d313dd6e86d9fff9350c0e1f43a4659d2e2d495bb57de437d386bdfb3ac9a262101f3de70efc5dbcbe36b0dc047ea930cba98baaa4b2a5a2f6f4feff3cb2dfef70fe6313745aa6846dfc0a2222699d9eccc04d899ac4927aba5c989e503f3a15a99146956583df2c805b60bae1e807d6f84f2b307b490f3721009fdc0fce9506e40b31292eedd50da88e6303d29e584e45444d5b4b6331e60df6449a65bfc988c9a7fbf009505dd9cd75e0397fd9950ae5fdd2756791477dd27af120bf059fa57443c256ea58cd563b7ad100621c848c6976f1ef3b0bb3c55ce5dae7254b78d71d2dc89e6cf1b33d420caafc6e5b254f65771055915bc542d0cd570a836af9c8752e7dfc5c7720597d656f0a2b512a83b016fb1dd55e77b5bcc6db582759f2e1c3575b4fab867becf270b4b36cbba5c626d1b8a27dc757bcf8e671fd9ffca82ab6061108775b45e2aa5428698f1b4c7ac5393573f83f0cb875422739c0153a01d074bf5ecdb4adb61820aa7265b47b70d209aa47c2b2c6d18a365d1209c3f90ca0350ade5fb90417c0e5daf5f8f7e05097344fe5430cd02e764ac257bd57d4afac5be6bde4b116044d2a89900a0b59197ab01b396e3ed687a0c90fdab06c843d78827986147bfb3ccc6ef94673f4fdb362b853043cd8cb24a1e3b2514ed857a789860f7c3497bdbc92417f3b099c776b13ecdd55efcf114f400a54d588cb5898d09224b77ebb35cf4860854499a63981d840b4d8e0a5d2ce4d5c1131cd57991fe8e41ab50d05d2e60d9f521f5f34d00535282802c564af7f790995b06c35a6919fca0a6ea7f251cc58896337f1db4ee22902b9a385a624b0804812b4ec975b208ea3a7bb4cf73842c484626bdd25b2682f1ad075dcb2ec803cd51be53b07178b900ff1b943206f85073a136190b2f3c4b62bdfaf90045bfa0bbee416a8d8e6504ffb47c33fea913d2b816de4c15bf6a06ff9e58181772bd161e5c9d9d0442102abc04580bd4e6b57e30183f1c3b7437d8da4b2f5d024b21d3c6b4b081508fae1be93e281f212e673b205e785f0a7269cebd6e25bdf657ecbb2d7dbe5fbd22541130fdce6a64ca8dec52044d4af1ed53e95a2088b48c539074939814449394caec59b979e31aefc0d481e5d734e51e40396d9d456c1c1ca2fcbe887776bd80bed32fec695f478a2f28b2305030c92850c08b01f9cca6c352299af93e6a2eaa3c311a7ff151ba5ffa115f0523d05161a0c368ac17c1ac3acf5099fdd8ac5d00776bf8a697bfb579edef1f18988a0e1ce3d5d49b16e809adc686b7937b35e39ddaacbc734570bd5e6054e34287431f452ac89846e40024ca3078053ba2ef9fb5cc7152f58b3352f2d43f20b572e8e4bb5f30b56070833841ff58d41138cb5bcc4e3b2978212aed43b730316604300f55991150e79268ec2415cbe755ca4ddc457d3f8d194c60cf66acbf53c68e6f054ec9ff12e494a257cd449a8d5fbf441335c4ec00e291d0644010576437ff43947ecae66189fd377fcd29df1fb6fac4ca5f86d8aa65608ed7f7d5d704b249113e2441fd90f53b66405c8e2fce0f98ecf642a569e2d679d57ff3c7d821ef42c8cdc6c7b04c57fdfbbee734cfe272220959e3603f15140cf81eca9ba955bbf3dbe95d63c9fe78c2fe0abd718e786a2f5bd46726e0767b85961d26735f1cfb1288eac1c07ac846ab9fd2f85674d61e8140b8d15e1503140ba373b8f688ce2be9854ac638be1e5a5346522af6a190df09335a5d74602fc0f4b28a209262fa1a3a43fa9817a0f924712170ace4631e72c091ce746a88c5dd1b91120ff6cde2b591effd364c6ccde52163e38c8ccb0be15382a1156985f37af069890d4b84a2cc6beac84b1eaf27303f941b9623d70c14b94fd3329ab41499a91e55e6f85a2d8815f537342e3446c02366e6b4a30344c3020643923572fb5f6f9030ce48d0340b5a8ada4a3bff9a7b8af63900786b704633d66d98a31169c64b18eb7fbbc6b5b9a707179a1cddcc5a801904c1b75a31dd22b15ca82083a657c81a8829d633bed8aae8743537b1e260482c696f500e584b5531331702daeac9a865ffcd19b57a09fed2b26994c6b11ae5a7ee4309808696c83685b2223164a61a08c0400a15ba395917403e3348fb46b90e6050a75a0675401de1c534d4143e952e8fe0f1d7b5a5b5efd6f93d02dfa9dd405b52780bf985a53195c9b7af6249188456b7cbad708eda483e00462ee6740e38ab88562fa5eb87b7b706863817485b2cd7c2d6554d1054b8a56c43eb9ba6f295427ba2efaff7c5e23aa463ab5d8330f2dd9373f6c9c32217451d8158678001b76d8558d63ff34f6dc0af263cd22c4bff465957dc937f89c855387f04ab66fdcae6054edb8da07e7156ae72b7433ce95810ea98cc0c7aee60e59e95c188e1ce08770659944357b5913b299f2a885c45b820214771fd9b1422f80ad75f32e8c5574d249d0c279c0348b62298a9eabe02f47289ec6f3c8a62a183f98c10aa27a424b641ce827fd9953d8e672ea9c470ecc624d3bfc445190e2aefa2300d2acfde6816e655d7f636e67eb1350e4026eb5d50f951db3627e30ae007de87c5f9b58f7aaf5d596c8c89b234a5a26075ffdb2698694deb5039e02f824fdea78f6c8879dbc9cc35e4c81da2132d1ff519c8b74814953939959541d7c328871131807ef7147f5a5e7fe82d45d32cbe9374d367f99ab4b91a0b929bde07b8df4e5d7d11c067956a2063f14ccf6d0aefec93ae447553a1ee6f6c53a3a5b5b574e2b97766a3d01cb3eddd9f1e7121f32b118120f881fed6bfe69d9f9dd28feb6719299613528ec8988cc7c8217181bb9b1c41157df1a0d708fb52c5de932ae2d30065046ad717c639e41e3c6f3bcf49b47d327872322c4e9c758d6b1ac21972b629011a0cad462574d2081faa4a3141e28d2ac6d325ce35309bdfe1e509a8e845fbcf6b0c934b9402d261dcf02990923a0fec7c13ce5fcab9631395d5a0f262d8eb5bbca8d986f90097e1c589fe114774b2cbcdf1b709bccba3eb9a8dfd890c6a12d4c3a5f7a3671d35231b4a837d8cd026737aa9034dcc4b07defec27573e372ed79e8e190a5131ad8bfe72a53951e3f1765a5c83ea82a6bbf7d74460574c95edb884a90d9b7cf54ce0f642985e06a2920304ca869716390bab790c125c63f7483791132afff843f962680eefb932f11a3fb55e202a8d81075103751f9c6ba3aafc7a81338d7a615d488f3445ff9d9558a43a1edc2e7f25ef5f0992ac0215def760614468aa932a820b8d510bbfd3301d0a16d6fb4cd777cf6df9323cd423c2931b0038c3a72f2d23cb36bf53dcfcb70ffd67d6e0105c580720eec3f91bd8a1e4aba1410388491894be2ed2b132f698172bfdc996f0e5ab8d4ed0ac3b4edb38781dd8b9c59cde002939a12810caebe1aba39b010f6f0f532536d16162a8b5c04a620390a23a2ab25a78468b0f71b2653f8dd551f89f9e30e7b129016aca363c5ce73ee2fa3f8646050878b26693284ce68943f82a56ef108ea53514becbe778b5ab0bf33bcd8dbb200a2d4e6a45284d2f956d11acd64a89e4b28c26ee6a4727d6f111d2649a8030874666d06bef4a696ce4e0c2d66eac61582382ca8fa057ebc0f01ba45bdefabe02c950f1a4cc34c6f70a6fea64551692945b046a7a0a7644c3b76b4cfee8d660434cef104a588dd586a473e052d017bfe24f2920f201092cbe5f4315485c73fb9aeae7e27feeb620740c32c564c87111716a6fdbf3485e582929cbc79ef94833cb0e487450506c030a248b0b16a9f0e7be2857f2c29e4f4a9da1546435c8af3c794205d3fb6bcb55bf11233f759ee6c0e393d6a09b359e411afa5763e96830a8af0409c9e27f42816818c75952950b4184beb0578af759ca7a32c3a37261c8c363bf59dd4b9799e9e0ec569c2818923d3910f655a5a87d5625ce24871bfe08f815e2243160404e389d314e95bce7403b275f8bc627b8853722f08eee5e5363f8414e661b289642eaefc5bba13c7117056a7cd6634d08c47cfe881d9ae95c990ff5fd69f424adfb918479158c768b69ddb247c10facb6fb38d10125a76ecd31750771836e20909662d1f87e2043c881635aa37c93e495ccae81d6509a70f8f2f31cfebc7b9bc6797c633fffc713757018a0c44084497412001f0b5d4eb245d613b3f5e8aacfbf555f48057834759221b65d6806ffeed30db000605227c7bfb67a7e126688d391ceb66c18c4ee53cf13bdf77fb14417beb8ba9f40d28df63196357a26e6c02275d8046e1534d21281b4edf93421bc850058e34ce37cf8d652cbecb67f9c05c6570dbce4fa1f1d26ba2fefa93fe48ffc967cab20db1348d4432d4544a011f25a50046bc166e9b9454e63f19e766225e70f0ef895fbb9f76fc92d380f98ca40a87655f3126b99c97034e67dc28124585f6bd4d282954b7926f7bbf12418172cfff71f671db2c3fc151a2e8a998a3c130f787c5753ec9dd9fe3e87842dab942160185cc4b8f0c0b5f0868b874f21693685110b3d33cf8cfdafead6b36490d58bddd64a99a492ecaf1eca04b863dd16daacd9ec14bf8c1ac090e98dbba1444a86eda5f482bd3325b7ef38d027e4eeee5ad131eaf8df38df63e79c03decb3ff4019484c2c3df2a4ce936e718545ed119a95e72c076a5c27a6a9bc2bd2e30ff071c28505617f47022f296bd13ae808c1f373b659828b73b5d09855763def3b208c70e3f18e4c4e73565dde084b204f4f79be9b31a7f9e85095b1a0d11c6b1f854aebc80f9eee4eb98e10f0107664806ed6fe925cc7ac236f2b5c8782cfb60e6b38499aea47103d02a07616733e350b0df3fe4842f4258aba02250781270d8ffa564a952626b1c0e8ed94b1543f100030ee22924945a4cd68aaa1189968084b8168ee481a290b7485b028919c788fb25a08241d80f1c9aca395a7d50400c2ae74b366b423bbd0c3dac5e88124ce85f1dd82e1cba5475590dcd96b0e22bed26a06a89214aad4d38df00f3d958b4a4a30cc43d76a684e1ce3c79fe2e0cfacc49467ce869b4d2087b1ef7effcbd781b9636fef6f0350157784797e9b14d3792c1e715f2c80a1b05407b2ab1d998155a5ea4f62085c6f9b82596752c977316fed9eab51a11c2b88995d3571cdccffb0bfbd3b4d9af146446d161e46f34daeebee6e40bb3c7f7e1b175e153196ff767d63a4475af1a1559c44d1719ff4b8eac778362a23a90e9f0f1a94164e570b46ab0e73b248c74b84af867d605fda3794d538aca43b6587f18a6c6e6a0fbdff707", 0x1000}], 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/452], 0x120}, 0x20004005) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m59.612396022s ago: executing program 4 (id=8113): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r0) 1m59.444280076s ago: executing program 2 (id=8114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8}, @NHA_GROUP_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) r1 = socket$inet6(0xa, 0x6, 0xe5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, r2, 0x7, '\x00', 0x0, r3, 0x0, 0x3, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000400)=0x8, 0x4) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000440)) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000540)={0x91, 0xba5c, 0x82f6, 0xdba}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x8, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x40, 0x8, 0x0, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@bridge_newneigh={0x34, 0x1c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8, 0x20, 0x4, 0x6}, [@NDA_FLAGS_EXT={0x8}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0xa9a3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f00000007c0)="88ac52b0d272adb307da5d56d4385e24", &(0x7f0000000800)=@tcp=r9}, 0x20) sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x1, {0xa, 0x4e24, 0x80000001, @mcast2, 0x6}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="8d7eed44574bf9cc48d9d9265376aabae887ae0abc59787b71fe617f4cbaebe7dad9a966f52ca954c141e8a53efc26be1e7b156d85247a7d02cc44082781ac21b66542a8700e8ad2c3dbd15c7101f4a1995967fcc7522f724c73f36429", 0x5d}, {&(0x7f0000000980)="768a6c8ae92f6d46f5f96978205c813b0544115d86e63cac003c769d84629a4e6667d9b8df1a8964044c24de7b", 0x2d}, {&(0x7f00000009c0)="eb54bbb9160bbb27b0acb3d10d697018d7d991829982245a91643400f65f060c0b0474b2baf9656c90a0df8f8f829e438c9920732b5b0a77e340d5fa47f04493bbefcd5b6d3f6c57f0a235d7417014182b622c8b3c9ac42cc4804ee42be2ba349ff42f164c4815534b2fd6c6c5021128a41fbf85f12b0b87d58da3a8c97e61678971d6d3319b42cee5950c1e96b0a251a68304262091bfa7a8c60381a79ca9400848414a83a26f3ee2b8ca384dab1cf4285b5ed5094773f6aa846f9be9876665c5dcf6b7d9f83d4add75367179a8d89e7da9091da98be53bb570e6271f6d35473cd22d1faa8518de9a328bf031f72796cd453b3a20c5", 0xf6}], 0x3, &(0x7f0000000b00)=[{0xc8, 0xff, 0x401, "622a58e084416ac205bd9355d19d03de7d412619977a6eb0d66748f26024168e1ccc718f620e045898dc06d946a40a26bbba53483d63761296d12bc2a653996bbf83a7d05db6225e3833a55ac933a5b2611f1e023dc6df5752f9c06bdc349e39efa29f8a1b55864350d8c3a816fece3f0aea5a6e684a349eeb8e1144fd0669c4d9a4bab9a5e448a4bcce5bfa070a7f6f8f0a2fb55ab2aa8d94534c9f520282d0d4f8d8ed650a679d5af4b275a99fb02a3f75"}, {0x48, 0x0, 0x0, "27c50721f616059ee23b11e4f3e3b3214d02d2c58623b79c89e72462c1252cb3c5762207563a17ef33e10b541020e63923"}], 0x110}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000c80)=0x1, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000cc0)={0x2}, 0x4) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r11, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe07}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x3, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd8ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004090}, 0xc0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044080) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000f80)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, 0x1405, 0x100, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x50}}, 0x1) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x9e499cbb0575fafa}, 0x4080) sendmsg$nl_xfrm(r12, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)=@flushpolicy={0x194, 0x1d, 0x300, 0x70bd2b, 0x25dfdbff, "", [@replay_esn_val={0x44, 0x17, {0xa, 0x70bd28, 0x70bd2c, 0x70bd2d, 0x70bd25, 0x7, [0xf, 0x9, 0xb4, 0x2, 0xc, 0x0, 0x0, 0xfffffff8, 0x8, 0x8]}}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@broadcast, 0x0, 0x2}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd2c, 0x70bd2a, 0x70bd28, 0x0, [0xb8, 0x7d, 0x4, 0x1, 0x4, 0x0]}}, @algo_comp={0xdf, 0x3, {{'lzjh\x00'}, 0x4b8, "4f56f222e40f7ef591d1f53e7a052541a85ad6df2eedd94943100b022c021c35ecaab95b7eade480fca00ced3fe638b15fb6c24aa231bd7d65acc058ce214795892dece9627dcc8d9e3deb9198a2a133c7911f1adfa177201c9ba7177b1fda378e111703160bc20416c2610d18bb28a89c7945548a490b68de6c271a32517d64d3bc9d2e18f3132df82fdf03a73ad6805fa72770663888"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004800}, 0x20040804) 1m59.38358304s ago: executing program 1 (id=8115): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x3) accept4$tipc(r0, 0x0, 0x0, 0x0) 1m59.233601336s ago: executing program 3 (id=8116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000035000701fffffffffeffffff057c000008000480040049808b668f421948ef44860cc256de55b19b356792dc6ef7591221e4a276bd1a883598b82f3979c9f1894c2aa456ed5ca6"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8081) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 1m59.092582371s ago: executing program 4 (id=8117): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vlan0\x00', 0x1000}) 1m58.919324647s ago: executing program 1 (id=8118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x26}, 0x28) accept4(r1, &(0x7f0000000140)=@l2, &(0x7f00000001c0)=0x80, 0x80000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90) 1m58.294761844s ago: executing program 3 (id=8119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/73, 0x49}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}], 0x4, 0x2042, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x24, 0x7fff}]}, 0x100}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) (async) listen(r0, 0x0) (async) accept$inet6(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/73, 0x49}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}], 0x4, 0x2042, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x24, 0x7fff}]}, 0x100}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0) (async) 1m58.210026175s ago: executing program 1 (id=8120): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r1, @ANYBLOB="01980000050002002000128008000100677265001400028008000700ac1414bb08000100", @ANYRES32=r1], 0x40}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010003904000000000300000000000000", @ANYRES32=r1, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414aa9c2b5e0800040001010000155563f603f64b5d13933e5ee6caaba07e14f494386903ae443ff91a21fa29359b7015f0f62e95b7ffff0e31d08e45ba8f670f57bfb3ca44280b295cfd3b21d2243307c8a014131bc0d388a1a9cb770e48ab5510b512d59cc4463484188e5a4cbb92308c1d6211e09d0d70f91bd8c788e12bdc407fd9f96040447707393b761bcaf6475bba3bbe03da75871de8580021d007a389a1b96b434853e77448529a5eb42c649521c128655d0fa5308673fe5fc6bd186c913760e03ee3076793f3a4f9a74648b7ad11939e97da181fc08fc4e59ba8cd138c9b9c1f36b4b4edc76f8fcdf25ebafc81617bef9b1690e37f70c74fdd738fd600b8f814394d675cd989c4ab7d0cc0a58fdc5490dbd0b7e5fa602e549f075bb649395fc213ed"], 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m58.190713987s ago: executing program 2 (id=8121): gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x154}, 0x1, 0x0, 0x0, 0xc55}, 0x49080) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000040)=0x20006, 0x4) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x24, &(0x7f0000000100), 0x4) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1m57.77970138s ago: executing program 4 (id=8122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@getchain={0x64, 0x66, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x3, 0xa}, {0x2, 0xa}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x4, 0xb, 0x2b9}, {0x8, 0xb, 0x5e1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x78c7, 0x7, 0x722, 0xe12c, {{0x15, 0x4, 0x1, 0x19, 0x54, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x9, [{@remote, 0x10}, {@local}, {@remote, 0x7}, {@multicast1, 0x9c34}, {@private=0xa010100, 0xe0c}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0x3, "a1"}, {0x5, 0xa, "b2dfbae0f3fd33d2"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x78c7, 0x7, 0x722, 0xe12c, {{0x15, 0x4, 0x1, 0x19, 0x54, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x9, [{@remote, 0x10}, {@local}, {@remote, 0x7}, {@multicast1, 0x9c34}, {@private=0xa010100, 0xe0c}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0x3, "a1"}, {0x5, 0xa, "b2dfbae0f3fd33d2"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x75, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x75, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000040)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000004c0)={r13, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000100)={r13, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x10, 0x50, 0x5, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x64, 0x0, 0x5, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x8, [{@empty, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}]}, @generic={0x83, 0x8, "70e777cf4367"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@RTM_DELMDB={0xd8, 0x55, 0x220, 0x70bd29, 0x25dfdbff, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x2, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x1, 0x0, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x3, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x0, 0x4, {@in6_addr=@mcast2, 0x800}}}]}, 0xd8}}, 0x0) 1m57.737665253s ago: executing program 3 (id=8123): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000670400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="6100000000000000140035006d6163736563300000000000000000000a000100aaaaaaaaaa240000"], 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom$phonet(r1, &(0x7f0000000300)=""/202, 0xca, 0x10121, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f00000002c0)="fc0000001a000708ab09250009a3330081ab0700a90100001d6051930800018000000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300050000006c884000d09165d52495115ef5a46bd1ad140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f702e2f4aa656d0448c22b7c59159ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f05731d05b0310b0041f2", 0xfc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) 1m57.285060831s ago: executing program 4 (id=8124): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0xf, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) (async) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r5, 0x0, 0x30, 0x0, 0x2000000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000100)={0x6, 'ip6gre0\x00', {0x20000000}, 0x1}) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e20, 0x9, @mcast2, 0xfffffff7}, {0xa, 0x4e24, 0xfffffff9, @local, 0x92}, 0x0, {[0x30, 0x2000000, 0x2582, 0x3, 0xc1, 0x100, 0x4, 0x1]}}, 0x5c) 1m56.936323865s ago: executing program 1 (id=8125): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfff, 0xfffffe2c, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x99}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x601}], 0x1}, 0x9fc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, &(0x7f0000000700)=0x10, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000740), {[{{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x1, 0xa, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8000, 0x4, 0x2, 0x1000, 0x3, 0x6, 'lo\x00', 'ip6tnl0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0x1, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xff000000, 0x1, 0x7, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xb4f03ef7d057353f]}}, {@mac=@random="71b96bbf2f1f", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x401, 0x2, 0x8, 0x6, 0xbe, 0x401, 'virt_wifi0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, 0xff, 0xffffff00, 0xb, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x1000, 0x2, 0x7, 0xa, 0xf5, 0x63, 'veth1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x105}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf8, {0x6c6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r8, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000cc0), 0x4) 1m56.896943457s ago: executing program 2 (id=8126): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, r2, 0x1, {0x1}, 0xff}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1m54.509471857s ago: executing program 3 (id=8127): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x15, 0x4) socketpair(0x2, 0x80000, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=0x0) (async) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = gettid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0, 0x0}, &(0x7f0000001700)=0xc) (async) r7 = socket$unix(0x1, 0x2, 0x0) (async) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001740), 0x2, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/user\x00') (async) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r11 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001800)={0x0}, &(0x7f0000001840)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@ipv4, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000001980)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) (async) r15 = gettid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001b40)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) (async) r18 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001c00), 0x200100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c40)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001d40)=0xe8) r20 = getgid() sendmsg$netlink(r0, &(0x7f0000001f00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000200)={0x4c4, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="604892412eef066e2e12634217fb12d2d785a26e00bba5016762d85e0bd87ee97263d420ae18d69e2b5c8bc4ad0450aba8cc395fc30cf440614121dc8b1762e2b15775455edc09d9a18093bef5e8ae276c888b5e7312f22470db8c6fc74cb7739fe5640e41b4f17d03db8bc72a8bc596a59dca7ee075b781e7eba83fdd7221ee42fbcd18403010247ca17dc875c2da4e78e2b2ea0272e35daafe97", @generic="7bc7a6347a2ad231cd805bb9593ce3a8f049f7d17cacc54963f253b9bc1ca1a39ef2aed2682dc9eae1fc3746634cb90d6fda9d026c55af518160017ed4f65102dbb33e717703d077bbe921fb9072c309e0828f6be433ab6d7beb628e1c643afba16a897b29dea70329eec8cc94b7e6c4d2de4b691359b7483c7a0d", @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x5c, 0xe7, 0x0, 0x0, @binary="44036407625a3f6471e7c67191679bc5bfced47806e30ffbac06d91edb3faa9c100591d5f5262ccbd9ce0ad87cd65fd36d0357d87783ba93205dfbac85dcec17db4415e9962f697d3233e82217a1588ef8387fc214442530"}, @nested={0x100, 0x150, 0x0, 0x1, [@generic="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"]}, @nested={0x227, 0x48, 0x0, 0x1, [@generic="cde5f3983ead891aa2da9fd59825236f81e3133203a51407a595dfc48b3fb8bc40e618ccf240037f984cf6ea23bd573992f0e88f17ec6316b5f390af9b534140b25ae04a65097f046cc32b3b433276725fdc084f36023887423ea65869c44181ddd845eef73caf9f63dceeade7c82ec81a7cfb541d23e69de68c5550fc2c3abc298724734acdc94238d9c274fb15e6c479306d47810d04a01749c8f8677d71c85edb08e6ae82dfc3b6976182c9aa637effb9335f", @generic="d71f1245fc7931f6b1b846fff9821661a8a3026ce2a4e7210e04ecd06b51f15f63ac2bdca6570998e6bb4b16b28495f84852ad785b89c9bdb5416a7c1e3b0293657f50671fbf117ed7b69d3edce992ac9df661178019edc8a18ac20c2064187c93f21eb1ffa905297a47f967cdc524030fb42b72ccdc6683cda6d715824a2473eba1b0ed4e781bf5d6fca6340dc0307c523e0963cb33f2ad14412628b24610e50deccebb6b", @generic="a69413dcd3d7757e42a170234746a624b2e328e29a4936f789745fbeb036091aee9f8516463a6b63175347afc6df52dc21b91542305b458d11f2ac77c07043a29100470ab626cd6c9a5626bbbbbe3c9500aa5a7f8bd93144181371d0564963fbf598579f10e238b824bd95716fcae0ac2c54", @generic="edcdfc388f64bf10526590dac0624de2df80459f4b2203ef32ecbc0574b6960a76e31194076aeda795292172bfb2893b2f5b3ce1d89e7e300217127c9b351150fe4782c972260e2db0586ccfef06b9", @generic="4f57754a84fac35293"]}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x114, 0x0, 0x0, @uid=r2}]}, 0x4c4}, {&(0x7f0000000740)={0x6f8, 0x12, 0x2, 0x70bd26, 0x25dfdbff, "", [@nested={0x22b, 0x151, 0x0, 0x1, [@nested={0x4, 0xc6}, @generic="81180ae3f64b1a20928e7b9960a83ada49fad41de8baf2e7b5016e099741b95f55afd8fc7e2480ffbe73d8f04976c889d0a7f5011eb81f782c157194acbd34c9d59fb112e66e9c049dd5b4783fda1db710341152d9ba26382a0a0b2ea9cff0e3215de9131b6b6ca4b41ae07c9d448c56a6c72b69edb652f8a8202cf21270c6d5335bf31e9af761f9c9cac29a2e93665ff026ccde09b315d26670bcbf710b", @nested={0x4, 0x65}, @generic, @nested={0x4, 0x149}, @generic="6ba3e9a9c14fb28353456a527d54102971a57ead6022ff6440959f2d57e5313d0656237fdd621da6998b4d59ba985bedf1760c037dfb31504a4d11150bcc083bae7e3ff94f385741c2b9c2fd63653f531396d55eaff1c0226eae2a3dc734d4b5a44ca6b91fe835c99089e35f648d4a154adc6eb637a2f61ffc44c5cba4b1a19bbb8b92acbf124506b3b255c13966cc9b88dbe72897e029e661d9c6c0782657ebf6a99a20abc802e0881249fdc9ca2a5216e5d09c5d7e7783a4cfd9a702a45f7560087776d16eb939fcbf361a4dee4178cc03f5a87ffaf1f1648d65d80e261d9652ea1c6163977f8a8bef5b19a6ad27d209a2508bd2af", @generic="4123c8bf61ac05be0b2076bd7135c6aa2ea211e1b5a1957fa6d245e5a328500283488264f9ef453bc2a3c52f299425736e46f79926d437f7a0062ccf35d8682a934f9fec968353fb075af10d8c0ae2ad41d33eb697bb8de954ac282c82247deb02b83f57ef9708e82d495967b21bd5a8ae3d6de4422e0a740bad76e4a6d0c16de41a01735817f3"]}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="4454b0b60e86aab0eb0ddcacf3e75307a1f14c9fe37569a59c20c8430431b3cb3933e9579e2ff10c577402c94fd866757d4fbed6d000467864bb58b4deae47635fd5258937be7e1eab04d8d2296a76e4da96d62c07d37197a8d16345169443b1b8557bd89234ac2f98cc39f2aec77cda4129a20398761c859c9eb361809ab902e294a8f06da878419646ebfae5424b2fbb8973cf2802b555f6722f2784185e09e294a9022d1599cbb82a580697aad83bbe83fd8fb2371e694991ef94021520988d2730d3fe6e78de0677c256543593671909ad66daa97b66175b6b47db945315803460978b", @nested={0xd3, 0x10c, 0x0, 0x1, [@generic="450969672ed25665acc5c565c0d6903644f81cd08ab516b990aa6a13938349443957ea8514bd786ad359bc06eabb1c27bc463df258025d9f6e2da9aca368bffde0840f580ed6d1e82c53b9c794f38a071139da508390138c7f186dae76181413fee7b10db1ce9fa7050cdd9e93a290cdd0d13f714cb29c747831e3ad42df5f6d03ce3a4b74f0b224b33d9b129ab06cdc4fa232197969e5d5be985ee97cce88fb7bae979d98eda36a33fbd350d3f36869c50d7490308b9935df81628b402bc586dbeb36f98effc552e93f6c7cce570b"]}, @nested={0x10c, 0x19, 0x0, 0x1, [@nested={0x4, 0x74}, @generic="b92f82ac54cb502b09d3108c8bcab13f74ba284d78d566c45abfb16a77fe9c5b2a6b1d224110c4583b5f6048590798a4776e4cc32e4dc8f9b6373a367cac2352ea73e14c218534df7c70933f7b07f974cffe4a313052eb683ca92e60dc11c3ad17c1d7f03bae65b342324c6080fe858bc1fcd4a4a2ca412fe6e0fa3dd0ad8d917afd5967ae9dbf945b7f8ab4e1b9d185e6a932bf1c7023e6b65839954175e8dff5aa98a1ec25d97b66fc0998b507eaeb0026ea2b0e78021ac0e14a91164d3d98c331e8d1a137ce5c170c4e6e0bcefdba49d743ff9b3a7b64", @nested={0x4, 0x15d}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x8, 0xef, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x4a}]}, @nested={0x1c, 0x55, 0x0, 0x1, [@typed={0x4, 0x88}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@empty}]}, @generic="b2f9d30159e6518ceaf9875fde5ae288efaac3e38dc8e47f7f91c8dd76413ef698ae984e9848e606e05aa3dc3809a7de1225e6bf5c1cf840ccc07254f646", @generic="a8e34111dbbf36b05234b27c0cc652e370e8a48ca10e6578fc0ec9254455c7663fed19519ef38a1cb14533af4d4e295d527d9bde76073823065efc932e4d6162fec4c355acd630cf82aee99dfbbe115b4baa619f4b17a7153f0c872d00179b74ebf109577ef1df4c17a239b9e05fe29bb935cdcbb02781efe0fdfa8f7af7b3dd52ccd00fb45b625bee7396294efb59a4ba6bd6d4b68dadf880b05480ec173e4be547f27a8f", @nested={0xd5, 0x85, 0x0, 0x1, [@nested={0x4, 0x82}, @typed={0x8, 0xf9, 0x0, 0x0, @pid=r3}, @generic="46ae04acba8868fee0b54ab269b26a6f13b95c035748f032f755f88c3835f2a86d964af37903650948f11efc189769f0381abe8a37ca68bb6e19896c0b2e80d7ed51cb362b84bc0b573586132eed9f05cdeb695d738bec3f96cae87706cf73b6a377039b301275e4c6cb16f876e29aafa95bd7095dda4aacdbed478ee273298a31108c563e53063edf6d4142451c8573f3151c2f48497dd6c38662f33d863aacddead3d0ff021792cc72f01e9fb6eaf898a2a421cdf19b528f68e318bb71c488ca2b906494"]}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0xe}]}, 0x6f8}, {&(0x7f0000000e40)={0x818, 0x22, 0x300, 0x70bd29, 0x25dfdbfd, "", [@nested={0x253, 0x11f, 0x0, 0x1, [@generic="15077ea2ab55f1f7df4a8e52d0a272751f04aa9d94c87cee2bc50926a1d5e5ac28725874eb5eaece6beb2c9127df2d072919b41a73bd405b2727246c5047c6dcaf7065c0dda06c33d0c153241c7d11a605df95646d11758eb091cef725580a6cd15ea85eb845c50b643cc69be31719553e6aa74f011dc1acd5901b3326551b176d4e423ed482e4ce3214519d31fd8ab7901320be4f0b6e69e3dbbaa9d156aff5d3d24f8838934da1ebca03246ef38d334311a6a06beedf474a163e8297d52abe59ee64764608d227878feee5116a726caeb27c5aca6c47f9b50ed4577237", @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x12e}, @nested={0x4, 0x123}, @generic="ae96b24b2063085d506bf6d0592a89ab06c7d372b883b6c72f6e9f187b5ab59b6e6616aa3619e3e187d53768efe8bf4092dc0defbb12e7d786cf1ea58a950aee65b3e1d56d0eac857cf15c5092fe16d88188480c94263f158b01c1c9ebe094abee33a2af30409f492061475d66c0e66b0df9c7931b52fd8e108a31f6ba4d6c5559d220fd4b7d22ee09e2ed17264fabef113c544d382e34be9645bfbb495657ab4af119ee6534", @nested={0x4, 0xc5}, @generic="221f9b5de28205aca07c47ea6f93033714e52d3917a951daf0f5c17650df3a0fd23e1da0ef0e17952e4af8b050ba1c8ddd441bb8fcf902cd0971262ce99cacdd2c89851fcf102ff82ba2de581178a6f2a2e75544467c3b1789584bde8f1013096972400f02ea9a9ef2e550ceb8c989d931d92ed9c4c8dfbb5b37c08c556aa050782ecd37844813fd8e3be610a80049cc01e3b0e80eb69bd69c4835ebfce645fd70273d"]}, @generic="ed26c693c6ac", @generic="36fb25c2b3731a3dd63f427a591ecf405820cd504a7afc78d97d27c63520eb006b9ac46bc0fa96b797edd9882a93732268fa33", @nested={0x165, 0x10f, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0xfb}, @generic="0b3a44b2721abf5545f179f9ef53eedf51c9ce3dc51889b2172ac4ce3964faae44cce5b9c316ca7c0f734fe4e1e9e5b6828bfdf1a6e69101b20e45303d1473aadc140c31e7c21caf215b498e6a1e5ca2e9e72a390035e088f9c0b6b32bed93e323b72589c621dec1e4786211b6f1581cfb5e0d5cd3fdf5e7be960f1ee13342d13664a090f20908a6628bd713909d207489d6ec6f12cc8e048dff1f92822474453adc999298911ed330", @nested={0x4, 0x101}, @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="2cc185538c6aff0081cfed7625f15e5381926de2aac6ce624985731240ec318f48adae8a505a5e5d1f29916cb1807424679076483d7905351153d402032ae50d3b4ba623a05ec36306d40534a7bc508a495a33dd220e114ff8b0ce0994a49d333b0e2ed5ee0a954cc53896e6992f971e902de2b196d409e2b70d03dd4e3a0b9ba38c597a", @generic="1b0ec2116a088d1be2555a739760989860fb61d3"]}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r0}, @generic="eba568fe20004c6e1f928dc5329b070cbc3ffecd9a4f9361b5b4e449d37c5ba90c7cbf23c9edad9b02035ee332859c29e4529fff309b5634ccf836aeadc60b50bd03af0148dc4ef809332220a981bb9f15ee50f5e01a59cfd5088ce6f6f9bc6a26aeba17be6c998adb273e32efe9131bf84c7a4825348ff918019945aa35c6b4066e6587f028e46e299fb53ff7e1b72c7cecfee5b73c7d5e6506a1ac173fc2fdc19da529242f4d34d1e6cc01089a42693ecc1eab7bb19ff03256ad7feff871380cb736d72be5841cea1f951188d0fc57d64029ca719423b0935e28a986fccca228eaec6d5b973f47fac73239", @generic="6c88ca26223f2d5a776215706fb1b868648c9bbedcca3cc0107ab2f41fe5ebcd265f95827c0a51e70e8acfb3e90ec00526685e28e5f8d34fc8423daea50086a7483def9f764953b3ce79c3e8d746443b8d82014dfe0c8c6f5329b4b6ccbecca73e928e3913a1d9cf5701af95adf7bc1258c08a7727e24f2c265eda958c06897ce0de6be896b050042aa8ae57d9347adb7f6b29c34c1680ceae00edeb97703e9792a37b62", @typed={0x8, 0x114, 0x0, 0x0, @fd=r0}, @nested={0x26d, 0x2e, 0x0, 0x1, [@typed={0x2f, 0x151, 0x0, 0x0, @binary="7cb1994c3553b5ba782d8ba1bdc05f8b8d25776e537cdb219230e4a2c85465e4627b40e3790a49267e3a51"}, @typed={0x8, 0x65, 0x0, 0x0, @u32=0x8}, @generic="90fbf503ab009c386d2d9bf4f7d2245a00613c6bc65bc53e78465d0597c8a9ecb2b947555d40ea8b057f1b6445efc2642ea026f1f142ddb7c65dfa10c20ceb8160264464e351ffbf0f0813c22a9249130daaeb4c2f7524bc5ec0eb20c9d3ce981836751f953a54715cd0b892e4fa8c5913ee48eee98f75c749ffc9ce97bf57127675b1e1da422369086233885c9e8fb2845dec", @generic="918a5ed1a4bfd1", @generic="e86cb49ba6369c995d7b8e5495527dabb48391c31ce6316d70a2397e5ae75604324e8ae6abc64ae4de8815f0d63c041d97163c74747386a5a38b4983ed370885bf1c1e906fecc2865758e4eb112edc550d46e969822f4a40083667ce5d792288dc900d72308651c93c6d87e850558d5ac2dd2fc6e97702a4d3b096dac1167da00b9f526ec273dbb536ea7e69bdcea0d5d237d53275f252735b02d6f1a46eba34f85250ba4f19eb63b393ff23fbae7a46199f6d3f2b168a869fb3759c8c51b5894168214e619fe4d574c62478bb87b099d5d847f0d289593a5d29f71828667797abfbfdd3be9d7883884f26322dc0a54fe6c63d", @generic="e724efafaa7078fc15d805382c65c916dfd7cf995e27c01f09358058c0dd4f5d035a6505ba21e2cf661f8583da9273b193292a83faf908d10f38535f74e8c14153516d5a68f45bbfd3b56e9b40e423cc4cba207e0ab5acb1841e058ecb1f7d5b8333c5eeea8766730611edc72fad7b461e32da72a1fd2f81911842ee3247d61e6b1e7406950ad5af", @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}]}]}, 0x818}], 0x3, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r7]}}, @rights={{0x34, 0x1, 0x1, [r8, r9, r0, r0, r10, r0, r0, r11, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r18, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0x178, 0x400c010}, 0x20048805) ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f0000001f40)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r21, &(0x7f0000002040)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8010}, 0x85) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002080)={r21, r21, 0x2e, 0x0, @val=@perf_event={0x193}}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$XFS_IOC_ERROR_INJECTION(r10, 0x40085874, &(0x7f00000020c0)={0xffffffffffffffff, 0x1000}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r21, 0x6, 0x16, &(0x7f0000002100)=[@sack_perm], 0x1) (async) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) 1m53.020433768s ago: executing program 4 (id=8128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0xa, [@const={0x1, 0x0, 0x0, 0xa, 0x3}, @datasec={0xd, 0x7, 0x0, 0xf, 0x1, [{0x4, 0x9}, {0x2, 0x3ad0, 0x1}, {0x5, 0x9, 0x6}, {0x5, 0x7f, 0x2}, {0x1, 0x800, 0x5}, {0x4, 0x6610, 0x6}, {0x4, 0xead1, 0x80000000}], ':'}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x3}, @fwd={0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0xc, 0x9}]}, {0x0, [0x0, 0x61, 0x30, 0x31a23df0df2df416, 0x31, 0x30, 0x2e, 0x61]}}, &(0x7f0000001740)=""/179, 0xfa, 0xb3, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x1b, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}, [@alu={0x9, 0x1, 0x2, 0x8, 0x7, 0x101, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x7f, 0x0, 0xd, 0x6, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x3, 0x9, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001880)=[r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000000)={0x1, 0x7}) 1m51.99628442s ago: executing program 2 (id=8129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40844) socketpair(0x8, 0x800, 0x100000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x20, 0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x800) pread64(r0, &(0x7f00000003c0)=""/15, 0xf, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8050}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x600c044) bind$netlink(r5, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbfb, 0x8004440}, 0xc) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000010}, 0x14008852) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x200440d0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r12) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdf2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400800c}, 0x40004) socket$l2tp6(0xa, 0x2, 0x73) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r13, 0x800442d2, &(0x7f0000000c40)={0x1, &(0x7f0000000c00)=[{}]}) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r4, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x40b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xdd50}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x6, 0x1}, {0x24, 0x1}, {0x2d}, {0x18}, {0x60, 0x1}, {0x16}, {0x3, 0x1}, {0x1, 0x1}, {0x60}, {0x6c, 0x1}, {0x3, 0x1}, {0x1b, 0x1}, {0x2}, {0xf63df1228e60910d, 0x1}, {0xc, 0x1}, {0x24}, {0x3}, {0x60}, {0x1b, 0x1}, {0x9, 0x1}, {0x16}, {0x5}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9921}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x4408e}, 0x4000100) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000f00)={'nat\x00', 0x0, 0x4, 0x5b, [0x1, 0x1, 0x5, 0x3, 0x5, 0x4000000000000000], 0xa, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e80)=""/91}, &(0x7f0000000f80)=0x78) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x20, 0x200, @udp='udp:syz2\x00'}}}, [""]}, 0x34}}, 0x24000000) 1m51.841126625s ago: executing program 3 (id=8130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x61, 0x10, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 0s ago: executing program 33 (id=8125): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfff, 0xfffffe2c, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x99}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x601}], 0x1}, 0x9fc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, &(0x7f0000000700)=0x10, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000740), {[{{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x1, 0xa, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8000, 0x4, 0x2, 0x1000, 0x3, 0x6, 'lo\x00', 'ip6tnl0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0x1, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xff000000, 0x1, 0x7, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xb4f03ef7d057353f]}}, {@mac=@random="71b96bbf2f1f", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x401, 0x2, 0x8, 0x6, 0xbe, 0x401, 'virt_wifi0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, 0xff, 0xffffff00, 0xb, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x1000, 0x2, 0x7, 0xa, 0xf5, 0x63, 'veth1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x105}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf8, {0x6c6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r8, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000cc0), 0x4) kernel console output (not intermixed with test programs): x_____sys_sendmsg+0x10/0x10 [ 671.097389][T29600] ? import_iovec+0x73/0xa0 [ 671.097418][T29600] ___sys_sendmsg+0x2a5/0x360 [ 671.097437][T29600] ? __lock_acquire+0x6b5/0x2cf0 [ 671.097465][T29600] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.097525][T29600] ? __fget_files+0x2a/0x420 [ 671.097550][T29600] ? __fget_files+0x3a0/0x420 [ 671.097586][T29600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 671.097611][T29600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.097644][T29600] ? __pfx_ksys_write+0x10/0x10 [ 671.097683][T29600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.097706][T29600] do_syscall_64+0x174/0x580 [ 671.097729][T29600] ? trace_irq_disable+0x3b/0x140 [ 671.097759][T29600] ? clear_bhb_loop+0x40/0x90 [ 671.097784][T29600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.097804][T29600] RIP: 0033:0x7f3b8e99ce59 [ 671.097837][T29600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.097854][T29600] RSP: 002b:00007f3b8f8df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.097876][T29600] RAX: ffffffffffffffda RBX: 00007f3b8ec15fa0 RCX: 00007f3b8e99ce59 [ 671.097891][T29600] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 671.097904][T29600] RBP: 00007f3b8f8df090 R08: 0000000000000000 R09: 0000000000000000 [ 671.097916][T29600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.097928][T29600] R13: 00007f3b8ec16038 R14: 00007f3b8ec15fa0 R15: 00007ffc85f3b458 [ 671.097963][T29600] [ 672.077258][T29644] netlink: 'syz.2.6341': attribute type 19 has an invalid length. [ 672.105888][T29644] netlink: 'syz.2.6341': attribute type 19 has an invalid length. [ 672.125087][T29644] tipc: Failed to remove unknown binding: 66,1,1/4:898781039/898781041 [ 672.735267][T29687] openvswitch: netlink: Flow key attr not present in new flow. [ 672.854687][T29685] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 672.870875][T29685] bond1 (unregistering): Released all slaves [ 672.883837][T29642] tipc: Failed to remove unknown binding: 66,1,1/4:898781039/898781041 [ 672.898219][T29642] tipc: Failed to remove unknown binding: 66,1,1/4:898781039/898781041 [ 673.874675][T29746] bond10 (unregistering): Released all slaves [ 674.445429][T29466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.467320][T29466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.477029][T29466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.491168][T29466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.500447][T29466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.632878][T29777] xt_hashlimit: size too large, truncated to 1048576 [ 674.690185][T29779] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 675.333320][T29811] sctp: [Deprecated]: syz.0.6385 (pid 29811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.333320][T29811] Use struct sctp_sack_info instead [ 675.416465][T29799] netlink: 'syz.1.6384': attribute type 29 has an invalid length. [ 675.436539][T29799] __nla_validate_parse: 19 callbacks suppressed [ 675.436556][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6384'. [ 675.713204][T29829] syzkaller0: entered promiscuous mode [ 675.721276][T29833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6390'. [ 675.730704][T29829] syzkaller0: entered allmulticast mode [ 675.826551][T29773] lo speed is unknown, defaulting to 1000 [ 676.256608][T29852] netlink: 'syz.3.6397': attribute type 1 has an invalid length. [ 676.341937][T29852] bond1: entered promiscuous mode [ 676.351471][T29852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.422686][T29860] netlink: 'syz.4.6398': attribute type 10 has an invalid length. [ 676.459932][T29860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6398'. [ 676.541220][T21656] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.586650][T29466] Bluetooth: hci2: command tx timeout [ 676.603282][T29860] team0: Port device geneve1 added [ 676.634866][T29876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6400'. [ 676.669456][T21662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.727100][T21656] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.751920][T21662] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.899540][ T7552] bond12 (unregistering): (slave ip6gre1): Releasing backup interface [ 677.073675][ T7552] bond3 (unregistering): (slave geneve2): Releasing active interface [ 677.134761][ T7552] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 677.143508][ T7552] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 1e:c8:66:1c:f9:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 677.232738][ T7552] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 677.572086][ T7552] bond0 (unregistering): Released all slaves [ 677.640529][ T7552] bond1 (unregistering): Released all slaves [ 677.655332][ T7552] bond2 (unregistering): Released all slaves [ 677.682068][ T7552] bond3 (unregistering): Released all slaves [ 677.697998][ T7552] bond4 (unregistering): Released all slaves [ 677.718131][ T7552] bond5 (unregistering): Released all slaves [ 677.743582][ T7552] bond6 (unregistering): Released all slaves [ 677.759029][ T7552] bond7 (unregistering): Released all slaves [ 677.774568][ T7552] bond8 (unregistering): Released all slaves [ 677.792546][ T7552] bond9 (unregistering): Released all slaves [ 677.814018][ T7552] bond10 (unregistering): Released all slaves [ 677.837762][ T7552] bond11 (unregistering): Released all slaves [ 677.852427][ T7552] bond12 (unregistering): Released all slaves [ 677.874237][ T7552] bond13 (unregistering): Released all slaves [ 678.028001][T29773] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.038786][T29773] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.046925][T29773] bridge_slave_0: entered allmulticast mode [ 678.055062][T29773] bridge_slave_0: entered promiscuous mode [ 678.069187][T29773] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.076954][T29773] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.084311][T29773] bridge_slave_1: entered allmulticast mode [ 678.093644][T29773] bridge_slave_1: entered promiscuous mode [ 678.098035][T29895] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6403'. [ 678.176617][T29773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.190796][ T7552] tipc: Disabling bearer [ 678.196267][ T7552] tipc: Left network mode [ 678.200235][T29773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.264110][T29773] team0: Port device team_slave_0 added [ 678.302580][T29773] team0: Port device team_slave_1 added [ 678.390011][T29773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.407154][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.452131][T29773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.504005][T29773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.512065][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.540689][T29773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.668538][T29466] Bluetooth: hci2: command tx timeout [ 678.681812][T29773] hsr_slave_0: entered promiscuous mode [ 678.693913][T29773] hsr_slave_1: entered promiscuous mode [ 679.251021][T29773] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.340281][T29868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.420796][T29773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.613287][T29904] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20002 [ 679.698489][T29773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.825171][T29912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6405'. [ 679.910955][T29918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6405'. [ 680.689761][T29938] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6410'. [ 680.748633][T29466] Bluetooth: hci2: command tx timeout [ 680.959883][T29942] netlink: 'syz.4.6411': attribute type 10 has an invalid length. [ 681.895470][T29773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.985883][T29942] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.030019][T29942] bond0: (slave team0): Enslaving as an active interface with an up link [ 682.288428][T29961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6416'. [ 682.341774][T29965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6417'. [ 682.359693][T29969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6417'. [ 682.472178][T29967] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 682.696673][T29982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 682.743482][ T7552] IPVS: stop unused estimator thread 0... [ 682.786272][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6421'. [ 682.837007][T29466] Bluetooth: hci2: command tx timeout [ 683.025357][T29773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.077073][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.154239][T29773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.208492][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.245404][T29773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 683.291929][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.330707][T29773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 683.333405][T30010] xt_hashlimit: size too large, truncated to 1048576 [ 683.350923][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.672477][T30031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6430'. [ 683.701745][T30031] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6430'. [ 683.845867][T29773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.913820][T29773] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.968527][T21656] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.975783][T21656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.076103][T21656] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.083360][T21656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.323762][T30051] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 684.407500][T30057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6436'. [ 684.469020][T30057] macsec1: entered promiscuous mode [ 684.487688][T30057] bridge0: entered promiscuous mode [ 684.509432][T30057] macsec1: entered allmulticast mode [ 684.527635][T30057] bridge0: entered allmulticast mode [ 684.541296][T30057] bridge0: port 3(macsec1) entered blocking state [ 684.562526][T30057] bridge0: port 3(macsec1) entered disabled state [ 684.627753][T30059] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 684.773678][T30057] bridge0: left allmulticast mode [ 684.829927][T10379] bridge0: left promiscuous mode [ 685.442652][T30086] xt_hashlimit: size too large, truncated to 1048576 [ 686.132439][T29773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.218372][T30116] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 686.259321][T30124] tipc: Started in network mode [ 686.264432][T30124] tipc: Node identity ac14140f, cluster identity 4711 [ 686.323789][T30116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6447'. [ 686.341774][T30124] tipc: Enabled bearer , priority 10 [ 686.424987][T29773] veth0_vlan: entered promiscuous mode [ 686.445178][T30137] veth0_to_bridge: entered promiscuous mode [ 686.475971][T30132] veth0_to_bridge: left promiscuous mode [ 686.537737][T29773] veth1_vlan: entered promiscuous mode [ 686.699604][T29773] veth0_macvtap: entered promiscuous mode [ 686.774186][T29773] veth1_macvtap: entered promiscuous mode [ 686.852562][T29773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.923129][T29773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.970266][ T7552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.976454][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6456'. [ 687.019814][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6456'. [ 687.035788][ T7552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.074566][ T7552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.138500][ T7552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.187028][ T7552] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.284658][ T7552] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.332274][ T82] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.372637][ T5825] tipc: Node number set to 2886997007 [ 687.395517][ T82] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.460774][T30172] syzkaller0: entered promiscuous mode [ 687.469731][T30172] syzkaller0: entered allmulticast mode [ 687.488470][T30173] tipc: Enabled bearer , priority 0 [ 687.671963][T30173] syzkaller0: entered promiscuous mode [ 687.678393][T30173] syzkaller0: entered allmulticast mode [ 687.685119][T30173] tipc: Resetting bearer [ 687.698575][T21659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.721439][T21659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.773363][T30169] tipc: Resetting bearer [ 688.346667][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.741483][T30213] netlink: 'syz.0.6464': attribute type 10 has an invalid length. [ 691.308474][T30169] tipc: Disabling bearer [ 691.372972][T30213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.397501][T30213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.501099][T21657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.518151][T30220] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6466'. [ 691.528601][T21657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.543921][T30220] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6466'. [ 691.745651][T30230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6375'. [ 691.780516][T30237] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 691.873209][ T30] audit: type=1107 audit(1781255410.716:19): pid=30241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 691.877142][T30242] netlink: 137508 bytes leftover after parsing attributes in process `syz.1.6472'. [ 692.095075][T30253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 692.372416][T30266] bond1: entered promiscuous mode [ 692.377973][T30266] bond1: entered allmulticast mode [ 692.383752][T30266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.399467][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6483'. [ 692.429209][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6483'. [ 692.806517][T30286] nbd0: detected capacity change from 0 to 127 [ 692.817403][T29466] block nbd0: Receive control failed (result -104) [ 692.925209][T30303] xt_hashlimit: size too large, truncated to 1048576 [ 692.969132][T30304] xt_hashlimit: size too large, truncated to 1048576 [ 692.980741][T30305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6494'. [ 693.005359][T30305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6494'. [ 693.214553][T30319] xt_hashlimit: size too large, truncated to 1048576 [ 694.535480][T30387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6511'. [ 694.582203][T30392] : entered promiscuous mode [ 694.616886][T30399] Bluetooth: MGMT ver 1.23 [ 694.978433][T30417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6522'. [ 695.110792][T30426] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 695.219325][T30417] macvlan2: entered promiscuous mode [ 695.240863][T30417] macvlan2: entered allmulticast mode [ 695.264949][T30417] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 695.334483][T30449] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 695.578362][T30465] gtp1: entered promiscuous mode [ 695.592540][T30465] gtp1: entered allmulticast mode [ 695.606062][T10379] IPVS: starting estimator thread 0... [ 695.706966][T30472] IPVS: using max 26 ests per chain, 62400 per kthread [ 696.297770][T30511] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 696.523409][T30524] netlink: 'syz.2.6554': attribute type 3 has an invalid length. [ 696.557005][T30523] __nla_validate_parse: 8 callbacks suppressed [ 696.557026][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6554'. [ 696.587049][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6554'. [ 696.673482][ T7552] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.682679][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6554'. [ 696.714619][ T7552] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.730915][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6554'. [ 696.747494][ T7552] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.781732][ T7552] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.151490][T30564] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.6563'. [ 697.172578][T30563] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6564'. [ 697.173822][T30564] openvswitch: netlink: Message has 6 unknown bytes. [ 697.533229][T30584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6569'. [ 697.872961][T30607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 697.892695][T30607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 697.916970][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 698.585966][T30649] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 698.627506][T30649] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 698.771116][T30658] netlink: 'syz.0.6588': attribute type 11 has an invalid length. [ 698.781737][T30658] netlink: 'syz.0.6588': attribute type 11 has an invalid length. [ 699.361251][T30685] netlink: 'syz.1.6594': attribute type 9 has an invalid length. [ 699.759873][T30706] netlink: 'syz.3.6600': attribute type 63 has an invalid length. [ 699.772586][T30706] netlink: 'syz.3.6600': attribute type 63 has an invalid length. [ 699.862029][T30715] netlink: 'syz.2.6604': attribute type 183 has an invalid length. [ 700.561380][ T30] audit: type=1804 audit(1781255419.406:20): pid=30757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6619" name="/newroot/36/cgroup.controllers" dev="tmpfs" ino=198 res=1 errno=0 [ 700.651391][ T30] audit: type=1800 audit(1781255419.406:21): pid=30757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6619" name="cgroup.controllers" dev="tmpfs" ino=198 res=0 errno=0 [ 700.898932][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.917188][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.930501][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.947009][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.971435][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.099613][T30769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.187609][T30784] netlink: 'syz.3.6626': attribute type 8 has an invalid length. [ 701.266895][T30787] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 701.654564][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.877536][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.953141][T30817] netlink: 'syz.3.6637': attribute type 3 has an invalid length. [ 701.998496][T30815] veth0: entered promiscuous mode [ 702.209131][T30770] lo speed is unknown, defaulting to 1000 [ 702.263514][T30820] veth0: left promiscuous mode [ 702.391855][T30836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.895410][T30864] syzkaller0: entered promiscuous mode [ 702.903622][T30864] syzkaller0: entered allmulticast mode [ 702.912343][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.069609][ T5640] Bluetooth: hci0: command tx timeout [ 703.161775][T30883] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 703.321503][T30890] sctp: [Deprecated]: syz.0.6653 (pid 30890) Use of int in max_burst socket option deprecated. [ 703.321503][T30890] Use struct sctp_assoc_value instead [ 703.963827][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.673767][T10373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.991603][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.156646][ T5640] Bluetooth: hci0: command tx timeout [ 706.036649][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.814823][T30770] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.822488][T30770] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.830279][T30770] bridge_slave_0: entered allmulticast mode [ 706.839430][T30770] bridge_slave_0: entered promiscuous mode [ 706.849523][T30770] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.857108][T30770] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.864613][T30770] bridge_slave_1: entered allmulticast mode [ 706.872810][T30770] bridge_slave_1: entered promiscuous mode [ 706.931869][T30905] tipc: Started in network mode [ 706.956605][T30905] tipc: Node identity a660847d829, cluster identity 4711 [ 706.978210][T30905] tipc: Enabled bearer , priority 0 [ 707.066596][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.145799][T30913] syzkaller0: entered promiscuous mode [ 707.172740][T30913] syzkaller0: entered allmulticast mode [ 707.222604][T30770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.236699][ T5640] Bluetooth: hci0: command tx timeout [ 707.273907][T30913] tipc: Resetting bearer [ 707.315609][T30770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.348619][T30903] tipc: Resetting bearer [ 707.381877][T30903] tipc: Disabling bearer [ 707.407447][T30770] team0: Port device team_slave_0 added [ 707.415349][T30770] team0: Port device team_slave_1 added [ 707.461575][T30770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.468998][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.495182][T30770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.517860][T30770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.525382][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.547214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.566213][T30770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.699563][T30770] hsr_slave_0: entered promiscuous mode [ 707.709535][T10373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.713351][T30770] hsr_slave_1: entered promiscuous mode [ 707.727740][T30770] debugfs: 'hsr0' already exists in 'hsr' [ 707.733608][T30770] Cannot create hsr debugfs directory [ 707.949533][T30951] No such timeout policy "syz0" [ 708.044678][T30955] __nla_validate_parse: 15 callbacks suppressed [ 708.044698][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.091490][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.112651][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.189941][T10373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.281866][T30770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.294194][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.306893][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.321980][T30770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.552080][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.600378][T30955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6670'. [ 708.618735][T30770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.641450][T30770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.762798][T30987] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6681'. [ 708.774531][T30770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.784584][T30985] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6678'. [ 708.785207][T30770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.918447][T31001] netlink: 'syz.4.6683': attribute type 1 has an invalid length. [ 709.093702][T30770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.105142][T30770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.141388][T31014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.168620][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.316018][T31019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6689'. [ 709.324158][ T5640] Bluetooth: hci0: command tx timeout [ 709.352578][T31024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6691'. [ 709.678942][T30770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 709.701182][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 709.735640][T30770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 709.779371][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 709.797008][T30770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 709.817318][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 709.941155][T30770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 709.967353][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.187520][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.198593][T30770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.219916][T31073] netlink: 'syz.2.6707': attribute type 8 has an invalid length. [ 710.275436][T30770] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.313934][T31073] veth1_to_team: entered promiscuous mode [ 710.334123][T31073] gretap0: entered promiscuous mode [ 710.339523][T31079] openvswitch: netlink: Unknown key attributes 2 [ 710.356933][T31080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.383253][T31079] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 710.392690][T31073] veth1_to_team: left promiscuous mode [ 710.394213][T31077] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 710.420289][T31073] gretap0: left promiscuous mode [ 710.475149][T21656] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.482417][T21656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.542999][T21656] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.550285][T21656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.226816][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.235014][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.663742][T31148] syzkaller1: entered promiscuous mode [ 711.698028][T31148] syzkaller1: entered allmulticast mode [ 711.716135][T31148] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 711.899954][T30770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.925482][T31161] x_tables: duplicate underflow at hook 1 [ 712.062627][T30770] veth0_vlan: entered promiscuous mode [ 712.081374][T30770] veth1_vlan: entered promiscuous mode [ 712.164513][T30770] veth0_macvtap: entered promiscuous mode [ 712.217236][T30770] veth1_macvtap: entered promiscuous mode [ 712.281306][T30770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.325666][T30770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.369049][T21659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.388816][T21659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.419978][T21659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.447969][T21659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.683822][T21651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.692603][T21651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.831207][T21659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.866513][T21659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.065165][T31224] netlink: 'syz.4.6746': attribute type 11 has an invalid length. [ 713.113027][T31224] __nla_validate_parse: 9 callbacks suppressed [ 713.113046][T31224] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6746'. [ 713.113850][T31226] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6618'. [ 713.238051][T31238] netlink: 'syz.1.6618': attribute type 1 has an invalid length. [ 713.265680][T31238] team_slave_1: entered promiscuous mode [ 713.300313][T31238] team0: Port device team_slave_1 removed [ 713.309927][ T5825] net_ratelimit: 2 callbacks suppressed [ 713.309948][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.828869][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6759'. [ 713.900677][T31272] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6760'. [ 713.925470][T31275] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6760'. [ 714.122995][T31283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6763'. [ 714.195134][T31291] netlink: 'syz.2.6765': attribute type 12 has an invalid length. [ 714.252576][T31291] bond2: option primary_reselect: invalid value (255) [ 714.264336][T31291] bond2 (unregistering): Released all slaves [ 714.271328][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.361599][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.684981][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6773'. [ 714.939249][T31326] syzkaller0: entered promiscuous mode [ 714.945449][T31326] syzkaller0: entered allmulticast mode [ 715.071334][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'. [ 715.389236][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.457137][T31344] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6784'. [ 715.505949][T31344] syzkaller0: entered promiscuous mode [ 715.515025][T31344] syzkaller0: entered allmulticast mode [ 715.535507][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6786'. [ 716.085508][T31375] vlan2: entered promiscuous mode [ 716.098663][T31375] geneve1: entered promiscuous mode [ 716.131154][T31375] vlan2: entered allmulticast mode [ 716.145687][T31375] geneve1: entered allmulticast mode [ 716.384078][T31379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.427119][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.485756][T31411] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 716.515972][T29466] Bluetooth: hci0: command 0x0405 tx timeout [ 716.727567][T31423] netlink: 'syz.1.6801': attribute type 1 has an invalid length. [ 717.308090][T10373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.468692][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.657526][T31460] Cannot find set identified by id 0 to match [ 717.955047][T31474] ip6gre1: entered allmulticast mode [ 718.506694][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.544471][T31509] __nla_validate_parse: 6 callbacks suppressed [ 718.544493][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6826'. [ 718.680939][T31515] netlink: 'syz.2.6828': attribute type 1 has an invalid length. [ 718.705807][T31515] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6828'. [ 718.732743][T31515] netlink: 'syz.2.6828': attribute type 1 has an invalid length. [ 718.741060][T31517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6830'. [ 718.751457][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6830'. [ 718.755296][T10373] IPVS: starting estimator thread 0... [ 718.761796][T31515] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6828'. [ 718.815867][T31524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'. [ 718.825917][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6832'. [ 718.886591][T31520] IPVS: using max 28 ests per chain, 67200 per kthread [ 719.164842][T31531] syzkaller0: entered promiscuous mode [ 719.178154][T31531] syzkaller0: entered allmulticast mode [ 719.198969][T31531] netlink: 'syz.2.6834': attribute type 1 has an invalid length. [ 719.208726][T31531] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.6834'. [ 719.276096][T31545] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6837'. [ 719.555430][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.651320][T31567] netlink: 'syz.3.6845': attribute type 1 has an invalid length. [ 719.736247][T31567] bond2 (unregistering): Released all slaves [ 719.781806][T31575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6845'. [ 719.981691][T31589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.993805][T31589] batadv_slave_1: entered promiscuous mode [ 720.124982][T31598] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 720.163719][T31602] xt_nat: multiple ranges no longer supported [ 720.264408][T31609] netlink: 'syz.4.6858': attribute type 14 has an invalid length. [ 720.285128][T31609] netlink: 'syz.4.6858': attribute type 14 has an invalid length. [ 720.348495][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.480315][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.499193][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.524378][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.554611][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.571973][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.585911][T31618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.594704][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.953011][T31647] batman_adv: batadv0: Adding interface: dummy0 [ 720.961593][T31647] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.031010][T31647] batman_adv: batadv0: Interface activated: dummy0 [ 721.099645][T31661] netlink: 'syz.2.6876': attribute type 1 has an invalid length. [ 721.113269][T31659] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 721.122842][T31661] netlink: 'syz.2.6876': attribute type 7 has an invalid length. [ 721.144264][T31661] netlink: 'syz.2.6876': attribute type 8 has an invalid length. [ 721.157277][T31661] NCSI netlink: No device for ifindex 65584 [ 721.166242][T31654] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.178068][T31661] xt_hashlimit: size too large, truncated to 1048576 [ 721.640097][ T5640] Bluetooth: hci0: command 0x0405 tx timeout [ 721.896137][T31703] netlink: 'syz.1.6887': attribute type 1 has an invalid length. [ 721.992381][T31707] H: renamed from dummy0 (while UP) [ 722.231118][T31715] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 722.256516][T31715] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 722.806093][T31735] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.814029][T31735] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.917645][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 30 seconds [ 722.931910][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 30 seconds [ 722.943069][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 30 seconds [ 722.954398][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 30 seconds [ 723.349837][T31769] syzkaller1: entered promiscuous mode [ 723.366021][T31769] syzkaller1: entered allmulticast mode [ 723.381287][T31773] xt_hashlimit: size too large, truncated to 1048576 [ 723.561904][T21659] net_ratelimit: 41 callbacks suppressed [ 723.561926][T21659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.701686][T31792] netlink: 'syz.3.6914': attribute type 1 has an invalid length. [ 723.721545][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.454354][T31821] __nla_validate_parse: 21 callbacks suppressed [ 724.454375][T31821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6923'. [ 724.757994][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.858411][T31845] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6932'. [ 724.878250][T31845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6932'. [ 724.897450][T31845] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6932'. [ 724.918597][T31845] netlink: 'syz.2.6932': attribute type 3 has an invalid length. [ 724.927706][T31845] netlink: 'syz.2.6932': attribute type 2 has an invalid length. [ 724.939177][T31845] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6932'. [ 724.995449][T31852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.573932][T31890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6946'. [ 725.606085][T31891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6945'. [ 725.625565][T31892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6946'. [ 725.787970][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.022421][T31914] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6953'. [ 726.152859][T31924] Bluetooth: MGMT ver 1.23 [ 726.273452][T31932] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 726.281825][T31929] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 726.281901][T31932] IPVS: set_ctl: invalid protocol: 100 172.20.20.170:0 [ 726.586847][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.622098][T31956] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6962'. [ 726.836741][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.708722][T31972] lo speed is unknown, defaulting to 1000 [ 727.868542][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.837280][ T5640] Bluetooth: hci1: command 0x0405 tx timeout [ 728.906926][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.308335][T21666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.338285][T31935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.530472][T31989] __nla_validate_parse: 3 callbacks suppressed [ 729.530495][T31989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6974'. [ 729.583162][T31990] netlink: 'syz.3.6973': attribute type 5 has an invalid length. [ 729.621335][T31996] sctp: [Deprecated]: syz.0.6975 (pid 31996) Use of int in max_burst socket option deprecated. [ 729.621335][T31996] Use struct sctp_assoc_value instead [ 729.747182][T31996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6975'. [ 729.757040][T31996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6975'. [ 729.959642][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.993670][T32019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6981'. [ 730.041963][T32021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6982'. [ 730.270118][T32029] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 730.309446][T32035] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6985'. [ 730.325667][T32029] syz_tun: entered promiscuous mode [ 730.342965][T32029] syz_tun: entered allmulticast mode [ 730.381357][T32035] netlink: 'syz.4.6985': attribute type 2 has an invalid length. [ 730.441195][T32041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6987'. [ 730.625204][T32048] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6989'. [ 730.725791][T32050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6991'. [ 730.852282][T32057] netlink: 'syz.3.6992': attribute type 1 has an invalid length. [ 730.873153][T32060] netlink: 'syz.2.6993': attribute type 1 has an invalid length. [ 730.891574][T32060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6993'. [ 730.905430][T32057] ip6gretap1: entered promiscuous mode [ 730.913222][T32061] netlink: 'syz.2.6993': attribute type 1 has an invalid length. [ 730.927566][T32057] ip6gretap1: entered allmulticast mode [ 730.959743][T32059] syzkaller1: entered promiscuous mode [ 730.971446][T32059] syzkaller1: entered allmulticast mode [ 730.986720][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.093435][T32070] sctp: [Deprecated]: syz.3.6995 (pid 32070) Use of int in maxseg socket option. [ 731.093435][T32070] Use struct sctp_assoc_value instead [ 731.159016][T32070] netlink: 'syz.3.6995': attribute type 1 has an invalid length. [ 731.169449][T32070] netlink: 'syz.3.6995': attribute type 1 has an invalid length. [ 731.532787][T32091] netlink: 'syz.2.7002': attribute type 13 has an invalid length. [ 731.559279][T32091] netlink: 'syz.2.7002': attribute type 58 has an invalid length. [ 731.580969][T32095] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 731.587746][T32095] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 731.609963][T32095] hsr_slave_0: left promiscuous mode [ 731.632576][T32095] hsr_slave_1: left promiscuous mode [ 731.700080][T32100] syzkaller0: entered promiscuous mode [ 731.705917][T32100] syzkaller0: entered allmulticast mode [ 731.819592][T32112] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 732.038270][ T9513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.120696][T32131] macvlan0: entered promiscuous mode [ 732.209011][T32133] tipc: Enabled bearer , priority 0 [ 732.284777][T32144] sctp: [Deprecated]: syz.1.7015 (pid 32144) Use of int in max_burst socket option. [ 732.284777][T32144] Use struct sctp_assoc_value instead [ 732.318170][T32144] sctp: [Deprecated]: syz.1.7015 (pid 32144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.318170][T32144] Use struct sctp_sack_info instead [ 732.354157][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.403023][T32133] syzkaller0: entered promiscuous mode [ 732.410804][T32133] syzkaller0: entered allmulticast mode [ 732.418368][T32133] tipc: Resetting bearer [ 732.463348][T32132] tipc: Resetting bearer [ 733.068286][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.118616][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.429581][T21659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.152137][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.197103][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.635306][T32132] tipc: Disabling bearer [ 736.659903][T32176] netlink: 'syz.2.7024': attribute type 12 has an invalid length. [ 736.677677][T32176] netlink: 'syz.2.7024': attribute type 29 has an invalid length. [ 736.701470][T32176] __nla_validate_parse: 14 callbacks suppressed [ 736.701491][T32176] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7024'. [ 736.736357][T32176] netlink: 'syz.2.7024': attribute type 3 has an invalid length. [ 736.746668][T32176] netlink: 'syz.2.7024': attribute type 2 has an invalid length. [ 736.754444][T32176] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7024'. [ 736.802865][ T9513] tipc: Node number set to 619742333 [ 736.826180][T32191] netlink: 'syz.0.7027': attribute type 1 has an invalid length. [ 736.840099][T32191] netlink: 704 bytes leftover after parsing attributes in process `syz.0.7027'. [ 736.856591][T32191] netlink: 'syz.0.7027': attribute type 1 has an invalid length. [ 736.874291][T32191] netlink: zone id is out of range [ 736.888945][T32191] netlink: zone id is out of range [ 736.900615][T32191] netlink: zone id is out of range [ 736.921090][T32191] netlink: zone id is out of range [ 736.940851][T32191] netlink: zone id is out of range [ 736.993681][T32191] netlink: zone id is out of range [ 737.153664][T32200] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7030'. [ 737.156945][T32197] netlink: 'syz.3.7029': attribute type 3 has an invalid length. [ 737.188067][T32203] netlink: 'syz.4.7031': attribute type 1 has an invalid length. [ 737.569001][T32216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7036'. [ 737.588183][T32216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7036'. [ 737.614909][T32216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7036'. [ 737.641071][T32216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7036'. [ 737.656920][T32220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7037'. [ 737.705483][T32220] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7037'. [ 737.733590][T32224] netlink: 'syz.1.7039': attribute type 1 has an invalid length. [ 737.790341][T32224] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.797784][T32224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.969915][T32224] syz_tun: entered promiscuous mode [ 738.042268][ T7552] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 738.076513][T32236] ip6gre1: entered allmulticast mode [ 738.425617][T32252] macsec1: entered promiscuous mode [ 738.431527][T32252] batadv0: entered promiscuous mode [ 738.441705][T32252] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 738.628674][T32252] batadv0: left promiscuous mode [ 738.981402][T32273] bond0: (slave gre0): refused to change device type [ 739.094787][T32282] syzkaller0: entered promiscuous mode [ 739.112199][T32282] syzkaller0: entered allmulticast mode [ 739.306948][ T9511] net_ratelimit: 9 callbacks suppressed [ 739.306970][ T9511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.381038][T32294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.405383][T32294] batadv0: mtu less than device minimum [ 739.428352][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.442403][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.454336][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.467968][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.479847][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.491695][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.503677][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.515645][T32294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 739.643687][T32294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.675854][T32294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.727669][T32294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.737532][T32294] batman_adv: batadv0: Interface deactivated: dummy0 [ 739.747079][T32294] batman_adv: batadv0: Removing interface: dummy0 [ 739.954244][T32303] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.962182][T32303] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.997044][T32307] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.004347][T32307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.012009][T32307] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.019253][T32307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.036248][T32307] bridge0: entered promiscuous mode [ 740.042785][T32307] bridge0: entered allmulticast mode [ 740.089802][T32306] xfrm1: entered promiscuous mode [ 740.094976][T32306] xfrm1: entered allmulticast mode [ 740.117285][T32315] gretap0: entered promiscuous mode [ 740.122888][T32315] vlan1: entered promiscuous mode [ 740.185747][T32332] netlink: 'syz.4.7066': attribute type 12 has an invalid length. [ 740.404428][T32338] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.606164][T32353] sctp: [Deprecated]: syz.4.7072 (pid 32353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.606164][T32353] Use struct sctp_sack_info instead [ 740.653823][T32359] ipt_REJECT: ECHOREPLY no longer supported. [ 741.067629][T32382] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 741.121590][T32391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 741.677689][T32427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 741.717483][T32427] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 741.748822][T32427] gretap1: entered promiscuous mode [ 741.779002][T32427] gretap1: entered allmulticast mode [ 742.026532][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 742.214719][T32455] bond2: option fail_over_mac: invalid value (16) [ 742.232940][T32455] bond2 (unregistering): Released all slaves [ 742.358347][T32458] __nla_validate_parse: 14 callbacks suppressed [ 742.358368][T32458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7100'. [ 742.392370][T32467] siw: device registration error -23 [ 742.448566][T32462] geneve2: entered promiscuous mode [ 742.530311][T32472] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7105'. [ 742.613150][T32481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7104'. [ 742.622977][T32481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7104'. [ 742.633711][ T1059] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x14 [ 742.863232][T32486] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.871318][T32486] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.414260][ T1059] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.436564][ T1059] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.465629][ T1059] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.475222][ T1059] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.580994][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'. [ 743.597520][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'. [ 743.758823][T32530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7117'. [ 743.809448][T32530] bond5: entered promiscuous mode [ 743.814682][T32530] bond5: entered allmulticast mode [ 744.098689][T32547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7122'. [ 744.109758][T32547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7122'. [ 744.128308][T32545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7121'. [ 744.323638][T32559] validate_nla: 3 callbacks suppressed [ 744.323654][T32559] netlink: 'syz.4.7126': attribute type 16 has an invalid length. [ 745.460537][T32471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.687275][T32575] net_ratelimit: 33 callbacks suppressed [ 745.687297][T32575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.867150][ T6126] wlan1: Trigger new scan to find an IBSS to join [ 746.274572][T32612] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 747.029485][T32650] pim6reg: entered allmulticast mode [ 747.055561][T32650] pim6reg: left allmulticast mode [ 747.237601][T32666] Bluetooth: MGMT ver 1.23 [ 747.281198][T32675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.575277][T32692] team0: No ports can be present during mode change [ 747.622827][T32700] netlink: 'syz.3.7168': attribute type 2 has an invalid length. [ 747.641308][T32703] __nla_validate_parse: 8 callbacks suppressed [ 747.641332][T32703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7170'. [ 747.985092][T32731] ipt_rpfilter: unknown options [ 748.335783][T32743] syzkaller0: entered promiscuous mode [ 748.351380][T32743] syzkaller0: entered allmulticast mode [ 748.827353][T21664] wlan1: Trigger new scan to find an IBSS to join [ 749.817722][T21651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.679468][T21664] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 752.989737][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 60 seconds [ 753.001047][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 60 seconds [ 753.012882][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 60 seconds [ 753.024113][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 60 seconds [ 755.538921][ T324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.551649][ T329] tipc: Enabling of bearer rejected, failed to enable media [ 756.148131][ T400] netlink: 'syz.4.7206': attribute type 2 has an invalid length. [ 756.231717][ T404] macsec0: entered promiscuous mode [ 756.252888][ T404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7207'. [ 756.280882][ T405] netlink: 'syz.1.7208': attribute type 26 has an invalid length. [ 756.294825][ T404] veth1_macvtap: left promiscuous mode [ 756.297970][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7208'. [ 756.342005][ T404] macsec0 (unregistering): left promiscuous mode [ 756.431526][ T416] netlink: 'syz.0.7210': attribute type 21 has an invalid length. [ 756.441095][ T417] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7213'. [ 756.449209][ T416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7210'. [ 756.499865][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7213'. [ 756.971496][ T447] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7221'. [ 756.982327][ T444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7222'. [ 757.185629][ T458] x_tables: unsorted entry at hook 3 [ 757.232792][ T456] xt_hashlimit: size too large, truncated to 1048576 [ 757.292841][ T453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7226'. [ 757.410604][ T453] vlan2: entered allmulticast mode [ 757.426179][ T453] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 757.466806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 757.634713][ T471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7231'. [ 757.676510][ T472] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7232'. [ 758.422751][ T504] netlink: 'syz.0.7245': attribute type 1 has an invalid length. [ 758.568805][ T504] 8021q: adding VLAN 0 to HW filter on device bond6 [ 758.658784][ T505] bond6: (slave geneve3): making interface the new active one [ 758.705773][ T505] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 758.741532][ T1059] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.772842][ T1059] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.786168][ T1059] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.803057][ T1059] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.871654][ T536] xt_hashlimit: size too large, truncated to 1048576 [ 759.140110][ T542] sctp: [Deprecated]: syz.0.7253 (pid 542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.140110][ T542] Use struct sctp_sack_info instead [ 759.148547][ T548] ip6gre1: entered allmulticast mode [ 759.287332][ T554] bridge0: port 3(ipvlan2) entered blocking state [ 759.294192][ T554] bridge0: port 3(ipvlan2) entered disabled state [ 759.313508][ T554] ipvlan2: entered allmulticast mode [ 759.323928][ T554] bridge0: entered allmulticast mode [ 759.328257][ T559] Unsupported ieee802154 address type: 0 [ 759.339885][ T554] ipvlan2: left allmulticast mode [ 759.345091][ T554] bridge0: left allmulticast mode [ 759.523001][ T569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.562283][ T572] vlan2: entered allmulticast mode [ 759.570719][ T572] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 759.732286][ T581] netlink: 'syz.2.7266': attribute type 21 has an invalid length. [ 760.070317][ T601] Cannot find del_set index 4 as target [ 760.083932][ T600] syzkaller1: entered promiscuous mode [ 760.096798][ T600] syzkaller1: entered allmulticast mode [ 760.136949][ T596] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 760.409384][ T615] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 760.582435][ T619] ip_vti0: entered promiscuous mode [ 760.855954][ T633] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 761.453577][ T654] __nla_validate_parse: 13 callbacks suppressed [ 761.453599][ T654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7291'. [ 761.483913][ T657] netlink: 'syz.3.7292': attribute type 11 has an invalid length. [ 761.493754][ T9511] IPVS: starting estimator thread 0... [ 761.500811][ T657] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.7292'. [ 761.523006][ T643] syzkaller0: entered promiscuous mode [ 761.534192][ T643] syzkaller0: entered allmulticast mode [ 761.605602][ T659] IPVS: using max 37 ests per chain, 88800 per kthread [ 761.648879][ T4999] udevd[4999]: worker [30296] /devices/virtual/block/nbd0 is taking a long time [ 762.160114][ T708] netlink: 'syz.0.7307': attribute type 1 has an invalid length. [ 762.244931][ T713] netlink: 'syz.3.7309': attribute type 11 has an invalid length. [ 762.274991][ T30] audit: type=1107 audit(1781255481.116:22): pid=714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 762.322523][ T708] 8021q: adding VLAN 0 to HW filter on device bond7 [ 762.515526][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7313'. [ 762.518606][ T715] vlan1: entered promiscuous mode [ 762.536539][ T715] bond7: entered promiscuous mode [ 762.541944][ T715] vlan1: entered allmulticast mode [ 762.555261][ T715] bond7: entered allmulticast mode [ 762.589544][ T718] bond7: (slave bridge4): making interface the new active one [ 762.633839][ T718] bridge4: entered promiscuous mode [ 762.647657][ T718] bridge4: entered allmulticast mode [ 762.668805][ T718] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 762.822406][ T737] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 762.839664][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7312'. [ 762.999997][ T744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7314'. [ 763.385463][ T771] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7317'. [ 763.416404][ T771] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7317'. [ 763.503019][ T760] syzkaller0: entered promiscuous mode [ 763.530751][ T760] syzkaller0: entered allmulticast mode [ 763.813715][ T791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7324'. [ 763.879623][ T793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7324'. [ 767.571821][ T767] syzkaller0: entered promiscuous mode [ 767.578340][ T767] syzkaller0: entered allmulticast mode [ 767.627867][ T802] geneve2: entered promiscuous mode [ 767.728948][ T805] netlink: 'syz.2.7326': attribute type 1 has an invalid length. [ 767.871751][ T814] netlink: 'syz.3.7328': attribute type 4 has an invalid length. [ 767.929020][ T815] netlink: 'syz.3.7328': attribute type 4 has an invalid length. [ 768.043551][ T817] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7328'. [ 771.254907][ T805] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 771.398359][ T823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7330'. [ 771.575719][ T832] syzkaller0: entered promiscuous mode [ 771.584178][ T835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7335'. [ 771.586373][ T832] syzkaller0: entered allmulticast mode [ 771.618377][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.621677][ T835] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7335'. [ 771.626730][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.642569][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.645519][ T838] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7337'. [ 771.648979][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.648995][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649008][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649020][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649033][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649045][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649056][ T832] tc action pedit 'at' offset 2047 out of bounds [ 771.649099][ T832] TC_ACT_REPEAT abuse ? [ 771.672864][ T838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7337'. [ 771.712858][ T837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7336'. [ 771.902176][ T845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.017770][ T853] nbd: must specify a size in bytes for the device [ 772.033509][ T855] tipc: Enabling of bearer rejected, failed to enable media [ 772.065529][ T855] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 772.115192][ T859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7346'. [ 772.203746][ T855] bond3: entered promiscuous mode [ 772.216009][ T855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.270525][ T867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.279706][ T859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7346'. [ 772.280459][ T867] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 772.299928][ T867] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 772.314535][ T867] bond3: (slave vti0): making interface the new active one [ 772.322437][ T867] vti0: entered promiscuous mode [ 772.329988][ T867] bond3: (slave vti0): Enslaving as an active interface with an up link [ 772.339311][ T865] erspan0: entered allmulticast mode [ 772.358559][ T859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7346'. [ 772.770933][ T896] netlink: 'syz.3.7355': attribute type 4 has an invalid length. [ 773.173744][ T910] __nla_validate_parse: 30 callbacks suppressed [ 773.173767][ T910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 773.523440][ T919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7360'. [ 773.982338][ T931] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 773.999309][ T931] bond3 (unregistering): Released all slaves [ 774.204965][ T942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7365'. [ 774.481806][ T963] IPv6: Can't replace route, no match found [ 774.540656][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7367'. [ 774.542795][ T970] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7370'. [ 774.573633][ T970] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7370'. [ 774.597569][ T973] ip6gretap0: entered promiscuous mode [ 774.616979][ T970] SET target dimension over the limit! [ 774.620818][ T973] ip6gretap0: entered allmulticast mode [ 774.883068][ T902] Bluetooth: hci0: link tx timeout [ 774.889362][ T902] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 774.904396][ T992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7374'. [ 774.919532][T19324] Bluetooth: hci5: command 0x0406 tx timeout [ 774.920105][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 775.095326][ T996] batadv1: entered allmulticast mode [ 775.336971][ T999] syzkaller0: entered promiscuous mode [ 775.346833][ T999] syzkaller0: entered allmulticast mode [ 775.447196][ T1010] netlink: 'syz.0.7379': attribute type 24 has an invalid length. [ 775.465754][ T1017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7381'. [ 775.507562][ T1021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.916582][ T5644] Bluetooth: hci0: command 0x0405 tx timeout [ 780.446028][ T1007] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 780.462527][ T1007] bond4: (slave lo): Enslaving as an active interface with an up link [ 780.471333][ T1007] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 780.500215][ T1052] veth0_macvtap: entered allmulticast mode [ 780.506221][ T1052] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 781.280329][ T1112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7398'. [ 781.304804][ T1112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7398'. [ 781.530493][ T1108] bond2 (unregistering): Released all slaves [ 782.344838][ T1141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7408'. [ 782.440763][T21659] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 782.455324][ T1143] netlink: 'syz.1.7406': attribute type 1 has an invalid length. [ 782.503370][ T1143] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7406'. [ 782.654785][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7410'. [ 782.933341][ T1164] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 782.964187][ T1164] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 782.992760][ T1168] netlink: 'syz.0.7415': attribute type 2 has an invalid length. [ 783.071644][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 90 seconds [ 783.082435][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 90 seconds [ 783.093540][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 90 seconds [ 783.104694][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 90 seconds [ 783.195773][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.203108][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.212113][ T1176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7416'. [ 783.273811][ T1174] bridge0: left allmulticast mode [ 783.333376][ T1182] SET target dimension over the limit! [ 783.375715][ T1176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7416'. [ 783.486077][ T1180] syzkaller0: entered promiscuous mode [ 783.510048][ T1180] syzkaller0: entered allmulticast mode [ 783.663910][ T1180] tipc: Started in network mode [ 783.687563][ T1180] tipc: Node identity d667789f8cfd, cluster identity 4711 [ 783.711762][ T1180] tipc: Enabled bearer , priority 0 [ 783.736972][ T1194] netlink: 'syz.2.7422': attribute type 21 has an invalid length. [ 783.745649][ T1194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7422'. [ 783.782142][ T1178] tipc: Resetting bearer [ 783.785979][ T1193] netlink: 'syz.4.7421': attribute type 1 has an invalid length. [ 783.798178][ T1197] netlink: 'syz.2.7422': attribute type 21 has an invalid length. [ 783.831818][ T1197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7422'. [ 783.850516][ T1193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7421'. [ 783.907405][ T1193] NCSI netlink: No device for ifindex 0 [ 783.930929][ T1178] tipc: Disabling bearer [ 783.952258][ T1194] netlink: 'syz.2.7422': attribute type 4 has an invalid length. [ 783.963413][ T1194] netlink: 'syz.2.7422': attribute type 5 has an invalid length. [ 783.992530][ T1197] netlink: 'syz.2.7422': attribute type 4 has an invalid length. [ 784.421395][ T1211] xt_socket: unknown flags 0xe4 [ 784.838745][ T1228] IPv6: addrconf: prefix option has invalid lifetime [ 784.845539][ T1228] IPv6: addrconf: prefix option has invalid lifetime [ 784.885513][ T1220] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.241651][ T1252] tipc: Enabling of bearer rejected, failed to enable media [ 785.444589][ T1257] bond8: entered promiscuous mode [ 785.484362][ T1257] macvlan0: entered promiscuous mode [ 785.501667][ T1257] macvlan0: entered allmulticast mode [ 785.529502][ T1257] bond8: (slave macvlan0): Opening slave failed [ 786.252664][ T1281] gretap2: entered promiscuous mode [ 786.280591][ T1281] batman_adv: batadv0: Adding interface: gretap2 [ 786.306897][ T1281] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 786.331604][ T1281] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 786.866775][ T1311] __nla_validate_parse: 8 callbacks suppressed [ 786.866795][ T1311] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7453'. [ 786.890316][ T1300] syzkaller0: entered promiscuous mode [ 786.912643][ T1300] syzkaller0: entered allmulticast mode [ 787.411566][ T1324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7457'. [ 787.506579][ T1335] validate_nla: 5 callbacks suppressed [ 787.506600][ T1335] netlink: 'syz.0.7462': attribute type 7 has an invalid length. [ 787.850974][ T1346] 8021q: VLANs not supported on vxcan1 [ 787.869826][ T1344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7464'. [ 788.205266][ T1352] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7466'. [ 788.520472][ T1355] syzkaller0: entered promiscuous mode [ 788.553772][ T1355] syzkaller0: entered allmulticast mode [ 788.802924][ T1368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7471'. [ 789.249568][ T1386] netlink: 'syz.1.7476': attribute type 15 has an invalid length. [ 789.403281][ T1384] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 789.493023][ T1384] bond9: (slave lo): Enslaving as an active interface with an up link [ 789.556080][ T1384] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 789.667837][ T1402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7479'. [ 789.882256][ T1405] tipc: Started in network mode [ 789.909563][ T1405] tipc: Node identity b66b14b72214, cluster identity 4711 [ 789.942478][ T1405] tipc: Enabled bearer , priority 0 [ 789.996049][ T1405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7480'. [ 790.112779][ T1405] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 790.314922][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7482'. [ 790.388413][ T1407] syzkaller0: entered promiscuous mode [ 790.394140][ T1407] syzkaller0: entered allmulticast mode [ 790.401268][ T1407] tipc: Resetting bearer [ 790.507000][ T1404] tipc: Resetting bearer [ 790.827382][ T82] wlan1: Trigger new scan to find an IBSS to join [ 790.856449][ T1427] netlink: 'syz.3.7484': attribute type 1 has an invalid length. [ 792.249353][ T1457] sctp: [Deprecated]: syz.1.7493 (pid 1457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.249353][ T1457] Use struct sctp_sack_info instead [ 792.641101][ T1459] netlink: 'syz.0.7494': attribute type 2 has an invalid length. [ 792.804651][ T1461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7495'. [ 793.867189][ T6124] wlan1: Trigger new scan to find an IBSS to join [ 796.208475][ T1404] tipc: Disabling bearer [ 796.229727][ T1427] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 796.230526][ T5646] tipc: Node number set to 2491356343 [ 796.564052][ T1470] gtp0: entered promiscuous mode [ 796.585429][ T1470] gtp0: entered allmulticast mode [ 796.669638][ T1474] netlink: zone id is out of range [ 796.678957][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7501'. [ 796.688362][ T1474] netlink: zone id is out of range [ 796.694400][ T1474] netlink: zone id is out of range [ 796.700875][ T1477] netlink: 'syz.3.7501': attribute type 1 has an invalid length. [ 796.710226][ T1474] netlink: zone id is out of range [ 796.715503][ T1474] netlink: zone id is out of range [ 796.723725][ T1477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7501'. [ 796.742629][ T1474] netlink: zone id is out of range [ 796.783625][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7500'. [ 796.796771][ T1474] netlink: zone id is out of range [ 796.828529][T21659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.857496][ T1474] netlink: zone id is out of range [ 796.916876][ T1474] netlink: zone id is out of range [ 796.948076][ T1474] netlink: zone id is out of range [ 797.324968][ T1490] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 797.413063][ T1490] bond1 (unregistering): Released all slaves [ 797.439053][ T1500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7507'. [ 797.531546][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7511'. [ 797.734570][ T1498] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 797.774152][ T1498] bond1 (unregistering): Released all slaves [ 797.989532][ T1519] atomic_op ffff888054626998 conn xmit_atomic 0000000000000000 [ 798.203579][ T1529] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 798.203828][ T1527] tipc: Failed to remove unknown binding: 66,0,0/0:486307531/486307532 [ 798.290615][ T1528] tipc: Failed to remove unknown binding: 66,0,0/0:486307531/486307532 [ 798.385590][ T1535] netlink: 'syz.1.7519': attribute type 1 has an invalid length. [ 798.429867][ T1535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7519'. [ 798.787461][ T1550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 798.835759][ T1552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7524'. [ 799.676113][ T1575] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 799.721701][ T1575] bond2 (unregistering): Released all slaves [ 799.911182][ T1586] netlink: 15 bytes leftover after parsing attributes in process `syz.1.7535'. [ 800.162705][ T1588] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 800.507311][ T1608] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.7538'. [ 803.233387][ T1592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.246995][ T1609] netlink: 'syz.3.7543': attribute type 1 has an invalid length. [ 803.533825][ T1621] netlink: 'syz.1.7546': attribute type 83 has an invalid length. [ 803.715457][ T1623] netlink: 'syz.4.7545': attribute type 1 has an invalid length. [ 803.833638][ T1623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.026013][ T1633] bond3: (slave geneve3): making interface the new active one [ 804.073074][ T1633] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 804.122479][T21663] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 804.156071][T21663] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 804.192799][T21663] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 804.241223][T21663] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 804.390602][ T1651] netlink: 'syz.4.7556': attribute type 13 has an invalid length. [ 804.430832][ T1651] netlink: 'syz.4.7556': attribute type 58 has an invalid length. [ 804.460898][ T1651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7556'. [ 804.871951][ T1663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7557'. [ 805.404913][ T1686] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7563'. [ 805.739389][ T1688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7565'. [ 806.462918][ T1715] netlink: 'syz.2.7572': attribute type 1 has an invalid length. [ 806.545521][ T1715] 8021q: adding VLAN 0 to HW filter on device bond6 [ 806.590447][ T1715] syzkaller0: entered promiscuous mode [ 806.598340][ T1715] syzkaller0: entered allmulticast mode [ 806.892142][ T1732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7576'. [ 807.116709][ T1736] netlink: 'syz.4.7578': attribute type 1 has an invalid length. [ 807.179844][ T1736] bond0: entered promiscuous mode [ 807.205898][ T1736] bond_slave_0: entered promiscuous mode [ 807.244198][ T1736] bond_slave_1: entered promiscuous mode [ 807.272966][ T1736] team0: entered promiscuous mode [ 807.301074][ T1746] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7579'. [ 807.312402][ T1736] team_slave_0: entered promiscuous mode [ 807.340932][ T1736] team_slave_1: entered promiscuous mode [ 807.362941][ T1736] geneve1: entered promiscuous mode [ 807.387810][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7581'. [ 807.573516][ T1743] netlink: 'syz.4.7578': attribute type 3 has an invalid length. [ 807.990122][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.997395][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.011015][ T1742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.021321][ T1742] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.051048][ T1742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.156022][ T1742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.191118][ T1742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 808.214174][ T1742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 808.304613][ T1753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7581'. [ 808.358934][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.366155][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.171766][ T1784] lo speed is unknown, defaulting to 1000 [ 809.179815][ T1791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7590'. [ 809.494027][ T1803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7594'. [ 809.568583][ T1811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7595'. [ 809.774286][ T1821] netlink: 'syz.0.7596': attribute type 1 has an invalid length. [ 809.955318][ T1799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7593'. [ 810.143973][ T1799] macvlan0: entered promiscuous mode [ 810.244350][ T1825] ppp0: entered allmulticast mode [ 810.488898][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7598'. [ 810.514935][ T1828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7598'. [ 810.524645][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7598'. [ 810.534336][ T1828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7598'. [ 811.021143][ T1833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7599'. [ 813.156766][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 120 seconds [ 813.168224][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 120 seconds [ 813.179989][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 120 seconds [ 813.192809][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 120 seconds [ 814.427466][T21662] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 815.361980][ T1844] netlink: 'syz.1.7601': attribute type 1 has an invalid length. [ 815.654205][ T1858] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7605'. [ 815.850487][ T1864] netlink: 'syz.0.7606': attribute type 10 has an invalid length. [ 815.870414][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7607'. [ 815.880537][ T1866] IPv6: NLM_F_CREATE should be specified when creating new route [ 815.904930][ T1859] syzkaller0: entered promiscuous mode [ 815.911629][ T1859] syzkaller0: entered allmulticast mode [ 816.367985][ T1878] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7609'. [ 817.280347][ T1896] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7611'. [ 821.591754][ T1883] ve: renamed from macvlan0 [ 821.622606][ T1895] netlink: 'syz.0.7611': attribute type 5 has an invalid length. [ 821.710475][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7612'. [ 822.825562][ T974] ip6tnl0 (unregistering): left allmulticast mode [ 822.945190][ T974] team0: Port device xfrm0 removed [ 823.293864][ T974] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 823.302969][ T974] bridge3 (unregistering): left promiscuous mode [ 823.417115][ T974] bond7 (unregistering): (slave bridge5): Releasing active interface [ 823.613245][ T974] bond0 (unregistering): Released all slaves [ 823.649972][ T974] bond1 (unregistering): Released all slaves [ 823.679236][ T974] bond2 (unregistering): Released all slaves [ 823.702559][ T974] bond3 (unregistering): Released all slaves [ 823.736705][ T974] bond4 (unregistering): Released all slaves [ 823.761296][ T974] bond5 (unregistering): Released all slaves [ 823.797834][ T974] bond6 (unregistering): Released all slaves [ 823.825894][ T974] bond7 (unregistering): Released all slaves [ 823.853138][ T974] bond8 (unregistering): Released all slaves [ 823.876595][ T974] bond9 (unregistering): Released all slaves [ 824.060290][ T7542] tipc: Resetting bearer [ 824.222149][ T974] tipc: Disabling bearer [ 824.261555][ T1940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7618'. [ 824.294516][ T974] tipc: Left network mode [ 824.723089][ T1945] bond0: (slave bond_slave_1): Releasing backup interface [ 824.841555][ T1945] bond_slave_1: left promiscuous mode [ 825.540827][ T1974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7629'. [ 825.586510][ T1974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7629'. [ 825.705903][ T1987] net_ratelimit: 818 callbacks suppressed [ 825.705925][ T1987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.120725][ T902] Bluetooth: hci2: command 0x0406 tx timeout [ 826.287773][ T1996] veth0_macvtap: entered allmulticast mode [ 826.314130][ T1996] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 826.812544][ T2016] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 827.797630][ T2047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7643'. [ 828.084134][ T2047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.151907][ T2047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.204729][ T2047] bond0 (unregistering): Released all slaves [ 828.230344][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7645'. [ 828.278685][ T2055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 828.338642][ T2055] netlink: 'syz.0.7645': attribute type 12 has an invalid length. [ 828.357563][ T2055] netlink: 'syz.0.7645': attribute type 11 has an invalid length. [ 829.021417][ T974] hsr_slave_0: left promiscuous mode [ 829.120963][ T974] veth0_macvtap: left promiscuous mode [ 829.149672][T21657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 830.026182][ T2086] ip6tnl2: entered allmulticast mode [ 830.384691][ T2105] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 830.557986][ T974] IPVS: stop unused estimator thread 0... [ 831.299919][ T2123] syzkaller1: entered promiscuous mode [ 831.305687][ T2123] syzkaller1: entered allmulticast mode [ 831.564518][ T2127] syzkaller0: entered promiscuous mode [ 831.570887][ T2127] syzkaller0: entered allmulticast mode [ 831.668536][ T2073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.769997][ T2130] netlink: 'syz.4.7662': attribute type 14 has an invalid length. [ 837.213251][ T2158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7667'. [ 837.548741][ T2167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7669'. [ 838.016586][ T2184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.091019][ T2184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.614646][ T2204] openvswitch: netlink: IP tunnel dst address not specified [ 839.002073][ T2221] sctp: [Deprecated]: syz.0.7682 (pid 2221) Use of int in maxseg socket option. [ 839.002073][ T2221] Use struct sctp_assoc_value instead [ 839.329413][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7684'. [ 839.530414][ T2228] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 839.563466][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7685'. [ 839.655504][ T2229] netlink: 'syz.3.7685': attribute type 8 has an invalid length. [ 840.149467][ T2251] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.7691'. [ 840.240195][ T2251] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 840.303644][ T2251] 0ªX¹¦Dö»: entered allmulticast mode [ 840.819124][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7699'. [ 840.871055][ T2281] netlink: 'syz.4.7698': attribute type 39 has an invalid length. [ 840.999738][ T2287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7699'. [ 841.365922][ T2296] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7704'. [ 841.425655][ T2294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7702'. [ 841.518686][ T2299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7703'. [ 841.572968][ T2299] netlink: 'syz.3.7703': attribute type 1 has an invalid length. [ 841.719653][ T2299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 841.882979][ T2309] bond2: (slave geneve3): making interface the new active one [ 841.908343][ T2309] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 842.066726][ T2317] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 842.087705][ T2317] syzkaller1: linktype set to 823 [ 842.123047][ T2317] syzkaller1: tun_chr_ioctl cmd 35092 [ 842.811347][ T2349] __nla_validate_parse: 1 callbacks suppressed [ 842.811401][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 842.844637][ T2349] team0: No ports can be present during mode change [ 843.229689][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 150 seconds [ 843.240639][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 150 seconds [ 843.254410][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 150 seconds [ 843.265808][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 150 seconds [ 844.169585][ T2396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7733'. [ 844.244176][ T2396] 8021q: adding VLAN 0 to HW filter on device bond10 [ 844.309099][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7734'. [ 844.342593][ T2401] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7735'. [ 844.456751][ T2404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7738'. [ 844.698898][ T2412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 845.005839][ T2427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7744'. [ 845.025081][ T2427] block nbd2: Unsupported socket: should be TCP or UNIX. [ 845.164907][ T2437] veth0: entered promiscuous mode [ 845.728835][ T2458] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7751'. [ 846.020043][ T2426] veth0: left promiscuous mode [ 846.432878][ T974] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 846.547793][ T2497] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7756'. [ 846.565396][ T2475] openvswitch: netlink: Tunnel attr 2831 out of range max 16 [ 846.653632][ T2497] vlan2: entered allmulticast mode [ 846.969429][ T2477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.177836][ T2505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7758'. [ 847.928550][ T2527] sctp: [Deprecated]: syz.1.7764 (pid 2527) Use of int in max_burst socket option deprecated. [ 847.928550][ T2527] Use struct sctp_assoc_value instead [ 848.123106][ T2542] netlink: 'syz.4.7768': attribute type 1 has an invalid length. [ 848.309906][ T2542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 848.313944][ T2551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7769'. [ 848.360594][ T2549] bond4: (slave bridge3): making interface the new active one [ 848.371226][ T2549] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 848.765985][ T2566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7769'. [ 848.907143][ T902] Bluetooth: hci0: command 0x0405 tx timeout [ 849.077884][ T2570] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7774'. [ 849.118329][ T2573] netem: change failed [ 849.302555][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.338075][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.843989][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.900060][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.261614][ T2616] netlink: 'syz.1.7782': attribute type 4 has an invalid length. [ 850.311899][ T2614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7781'. [ 850.631357][ T2624] netlink: 5784 bytes leftover after parsing attributes in process `syz.1.7784'. [ 851.098189][ T2640] syzkaller0: entered promiscuous mode [ 851.124078][ T2640] syzkaller0: entered allmulticast mode [ 851.389056][ T2654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7788'. [ 852.227391][ T2705] ip6tnl1: entered allmulticast mode [ 852.282351][ T2705] C: renamed from lo (while UP) [ 852.367838][ T2705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 852.863894][ T2734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7799'. [ 853.793873][ T2769] syzkaller0: entered promiscuous mode [ 853.822081][ T2769] syzkaller0: entered allmulticast mode [ 854.067435][ T2785] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7811'. [ 854.102674][ T2785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7811'. [ 854.132800][ T2785] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7811'. [ 854.150150][ T2785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7811'. [ 854.205882][ T2789] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 854.461697][ T2802] netlink: 'syz.4.7815': attribute type 28 has an invalid length. [ 854.469900][ T2802] netlink: 'syz.4.7815': attribute type 3 has an invalid length. [ 854.489870][ T2802] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7815'. [ 854.962961][ T2821] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7819'. [ 855.014145][ T2821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7819'. [ 855.053669][ T2827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7820'. [ 855.100725][ T2829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7820'. [ 855.221592][ T2842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7822'. [ 855.254022][ T30] audit: type=1804 audit(1781255574.096:23): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7823" name="/newroot/261/cgroup.controllers" dev="tmpfs" ino=1349 res=1 errno=0 [ 855.299725][ T2829] netlink: 'syz.3.7820': attribute type 3 has an invalid length. [ 855.361644][ T30] audit: type=1800 audit(1781255574.096:24): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7823" name="cgroup.controllers" dev="tmpfs" ino=1349 res=0 errno=0 [ 856.607092][ T2911] netlink: 'syz.1.7835': attribute type 30 has an invalid length. [ 856.840459][ T2911] bond0: option arp_missed_max: invalid value (0) [ 856.857402][ T2911] bond0: option arp_missed_max: allowed values 1 - 255 [ 856.878080][ T2911] bond0 (unregistering): Released all slaves [ 857.302896][ T2923] syzkaller0: entered promiscuous mode [ 857.343273][ T2923] syzkaller0: entered allmulticast mode [ 857.400725][ T2932] netlink: 'syz.1.7841': attribute type 21 has an invalid length. [ 858.423379][ T2953] ip6t_rpfilter: unknown options [ 858.602788][ T2959] netlink: 'syz.1.7851': attribute type 32 has an invalid length. [ 858.700299][ T2959] bond0: option coupled_control: invalid value (192) [ 858.737265][ T2959] bond0 (unregistering): Released all slaves [ 858.888286][ T2979] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 858.974720][ T2982] netlink: 'syz.1.7851': attribute type 1 has an invalid length. [ 860.005192][ T2990] netlink: 'syz.4.7859': attribute type 12 has an invalid length. [ 860.080466][ T2990] __nla_validate_parse: 9 callbacks suppressed [ 860.082112][ T2990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7859'. [ 860.210889][ T2999] tipc: MTU too low for tipc bearer [ 860.467768][ T3006] netlink: 'syz.1.7862': attribute type 58 has an invalid length. [ 860.489617][ T3006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7862'. [ 860.514661][ T3010] netlink: 'syz.3.7864': attribute type 1 has an invalid length. [ 860.540406][ T3013] netlink: 'syz.1.7862': attribute type 58 has an invalid length. [ 860.555654][ T3010] netlink: 'syz.3.7864': attribute type 2 has an invalid length. [ 860.583996][ T3013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7862'. [ 860.654659][ T3016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7865'. [ 860.714249][ T3018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.148811][T21663] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 861.481680][ T3040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7874'. [ 861.863032][ T3058] syzkaller1: entered promiscuous mode [ 861.895176][ T3058] syzkaller1: entered allmulticast mode [ 861.934326][ T3058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7881'. [ 861.979917][ T3058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7881'. [ 862.496593][ T3079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.537458][ T3077] bridge4: entered promiscuous mode [ 862.544173][ T3077] bridge4: entered allmulticast mode [ 862.544668][ T3082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.654570][ T3079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.701685][ T3079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.767446][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7885'. [ 862.815787][ T3088] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7889'. [ 862.882541][ T3079] bond3: option xmit_hash_policy: invalid value (64) [ 862.911799][ T3079] bond3 (unregistering): Released all slaves [ 863.518387][ T3109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7895'. [ 864.176197][ T3127] netlink: 'syz.3.7902': attribute type 16 has an invalid length. [ 864.224959][ T3127] veth0_macvtap: entered allmulticast mode [ 864.642053][ T672] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 864.717343][ T9511] IPVS: starting estimator thread 0... [ 864.725046][ T3154] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 864.829316][ T3155] IPVS: using max 27 ests per chain, 64800 per kthread [ 864.949797][ T3167] veth0: entered promiscuous mode [ 865.200963][ T3138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.218080][ T3166] veth0: left promiscuous mode [ 865.664378][ T3191] xt_ecn: cannot match TCP bits for non-tcp packets [ 866.078046][ T3202] __nla_validate_parse: 9 callbacks suppressed [ 866.078105][ T3202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7919'. [ 866.247129][ T3203] nbd2: detected capacity change from 0 to 127 [ 866.375399][ T902] block nbd2: Receive control failed (result -104) [ 867.159713][ T3252] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7930'. [ 867.326075][ T3243] netlink: 'syz.3.7927': attribute type 61 has an invalid length. [ 867.334742][ T3248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7929'. [ 867.345299][ T3258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7931'. [ 867.369906][ T3243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7927'. [ 867.455883][ T3256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.510281][ T3256] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 867.540560][ T3256] team0: Failed to send options change via netlink (err -105) [ 867.579556][ T3256] team0: Port device batadv0 added [ 867.601945][ T3242] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 867.724262][ T3242] bond3: (slave lo): Enslaving as an active interface with an up link [ 867.775035][ T3242] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 868.179191][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7936'. [ 868.198131][ T3286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7938'. [ 868.264586][ T3289] ipt_ECN: cannot use operation on non-tcp rule [ 868.280763][ T3286] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 868.296118][ T3289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7939'. [ 868.329767][ T3286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7938'. [ 868.342500][ T3289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7939'. [ 868.359940][ T3286] netlink: 'syz.3.7938': attribute type 1 has an invalid length. [ 868.435303][ T3291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.654975][ T3302] rdma_op ffff8880697cd9f0 conn xmit_rdma 0000000000000000 [ 869.302913][ T3323] xt_hashlimit: size too large, truncated to 1048576 [ 870.034535][ T902] Bluetooth: hci0: link tx timeout [ 870.040108][ T902] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.057016][ T5644] Bluetooth: hci0: link tx timeout [ 870.062991][ T5644] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.328733][ T3342] netlink: 'syz.0.7950': attribute type 2 has an invalid length. [ 870.354188][ T3344] netlink: 'syz.1.7954': attribute type 5 has an invalid length. [ 870.485999][ T3345] syzkaller0: entered promiscuous mode [ 870.527584][ T3345] syzkaller0: entered allmulticast mode [ 870.683459][ T5644] Bluetooth: hci0: link tx timeout [ 870.692736][ T5644] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.720921][ T5644] Bluetooth: hci0: link tx timeout [ 870.728490][ T5644] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.768864][ T5644] Bluetooth: hci0: link tx timeout [ 870.774823][ T5644] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 870.884272][ T3370] netlink: 'syz.0.7957': attribute type 11 has an invalid length. [ 871.104398][ T3371] __nla_validate_parse: 11 callbacks suppressed [ 871.104419][ T3371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7957'. [ 871.578986][ T3388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7960'. [ 871.590261][ T3389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7958'. [ 871.645467][ T3388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7960'. [ 871.673692][ T3389] bond0: (slave team0): Releasing backup interface [ 871.717783][ T5644] Bluetooth: hci0: link tx timeout [ 871.723848][ T5644] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 871.756075][ T3389] team0 (unregistering): left promiscuous mode [ 871.775407][ T3388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7960'. [ 871.811606][ T3389] team_slave_0: left promiscuous mode [ 871.854967][ T3389] team_slave_1: left promiscuous mode [ 871.909623][ T3389] geneve1: left promiscuous mode [ 871.971227][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 872.050386][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 872.116512][ T5644] Bluetooth: hci0: command 0x0405 tx timeout [ 872.225980][ T3389] team0 (unregistering): Port device geneve1 removed [ 872.403277][ T3407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7964'. [ 872.605512][ T3373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.784222][ T3413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7965'. [ 872.817281][ T3413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7965'. [ 872.886101][ T3416] pim6reg: entered allmulticast mode [ 873.307529][ T4964] block nbd0: Possible stuck request ffff888027a4e380: control (read@0,1024B). Runtime 180 seconds [ 873.318631][ T4964] block nbd0: Possible stuck request ffff888027a4e540: control (read@1024,1024B). Runtime 180 seconds [ 873.329880][ T4964] block nbd0: Possible stuck request ffff888027a4e700: control (read@2048,1024B). Runtime 180 seconds [ 873.341910][ T4964] block nbd0: Possible stuck request ffff888027a4e8c0: control (read@3072,1024B). Runtime 180 seconds [ 873.868498][ T3436] xt_hashlimit: size too large, truncated to 1048576 [ 874.275357][ T3452] nbd: nbd0 already in use [ 874.323304][ T3456] block nbd0: NBD_DISCONNECT [ 874.363343][ T3456] block nbd0: Send disconnect failed -32 [ 874.416066][ T3456] block nbd0: shutting down sockets [ 874.456825][ C1] blk_print_req_error: 138 callbacks suppressed [ 874.456849][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.472336][ C1] buffer_io_error: 138 callbacks suppressed [ 874.472354][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 874.578209][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.587366][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 874.595444][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.604572][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 874.612425][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.621538][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 874.658146][T30296] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.706015][T30296] Buffer I/O error on dev nbd0, logical block 0, async page read [ 874.720470][ T3460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7975'. [ 874.763042][T30296] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.820975][T30296] Buffer I/O error on dev nbd0, logical block 1, async page read [ 874.863309][T30296] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.895295][T30296] Buffer I/O error on dev nbd0, logical block 2, async page read [ 874.934881][T30296] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.962336][T30296] Buffer I/O error on dev nbd0, logical block 3, async page read [ 875.014542][T30296] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 875.050064][T30296] Buffer I/O error on dev nbd0, logical block 0, async page read [ 875.085547][T30296] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 875.127040][T30296] Buffer I/O error on dev nbd0, logical block 1, async page read [ 875.164883][T30296] ldm_validate_partition_table(): Disk read failed. [ 875.184513][ T3472] Cannot find add_set index 4 as target [ 875.241532][T30296] Dev nbd0: unable to read RDB block 0 [ 875.312508][T30296] nbd0: unable to read partition table [ 875.451044][T30296] ldm_validate_partition_table(): Disk read failed. [ 875.507075][T30296] Dev nbd0: unable to read RDB block 0 [ 875.548099][T30296] nbd0: unable to read partition table [ 875.822489][ T3484] sctp: [Deprecated]: syz.1.7979 (pid 3484) Use of int in maxseg socket option. [ 875.822489][ T3484] Use struct sctp_assoc_value instead [ 876.480099][ T3498] netlink: 'syz.1.7983': attribute type 1 has an invalid length. [ 877.522933][ T3523] gtp0: entered promiscuous mode [ 877.538796][ T3523] gtp0: entered allmulticast mode [ 877.914199][ T3538] SET target dimension over the limit! [ 877.948313][ T3540] SET target dimension over the limit! [ 878.270697][ T3544] Cannot find del_set index 4 as target [ 878.293282][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7994'. [ 878.873364][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7998'. [ 879.433768][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7999'. [ 879.536001][ T3570] Bluetooth: MGMT ver 1.23 [ 879.718519][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8000'. [ 879.804774][ T3580] netlink: 'syz.1.8000': attribute type 1 has an invalid length. [ 879.880868][ T3576] syzkaller0: entered promiscuous mode [ 879.901053][ T3576] syzkaller0: entered allmulticast mode [ 880.802463][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8007'. [ 881.090699][ T3610] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8009'. [ 881.450587][ T3617] geneve4: entered promiscuous mode [ 881.477555][ T3617] geneve4: entered allmulticast mode [ 881.628182][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 881.628476][ T902] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 881.963279][ T3629] Bluetooth: MGMT ver 1.23 [ 882.210649][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8016'. [ 882.274889][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8016'. [ 882.968916][ T3652] netlink: 'syz.4.8021': attribute type 1 has an invalid length. [ 883.108790][ T3652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 883.260324][ T3654] bond5: (slave veth3): Enslaving as an active interface with a down link [ 883.298891][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 883.306026][ T3655] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 884.036198][ T3658] IPVS: set_ctl: invalid protocol: 44 172.30.1.4:20002 [ 884.904352][ T3629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.294686][ T3662] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8023'. [ 885.363353][ T3662] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8023'. [ 885.467858][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.670351][ T3680] lo speed is unknown, defaulting to 1000 [ 885.780694][ T3680] lo speed is unknown, defaulting to 1000 [ 885.831124][ T3688] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode [ 885.862774][ T3688] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode [ 885.887002][ T3680] lo speed is unknown, defaulting to 1000 [ 886.715443][ T3680] infiniband sz1: set active [ 886.742024][ T3680] infiniband sz1: added lo [ 886.753866][T10379] lo speed is unknown, defaulting to 1000 [ 886.785896][ T3680] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 886.815882][ T3680] infiniband sz1: Couldn't open port 1 [ 886.860448][ T3680] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 886.895861][ T3680] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 886.938874][ T3680] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 887.107601][ T3680] RDS/IB: sz1: added [ 887.113458][ T3680] smc: adding ib device sz1 with port count 1 [ 887.121325][ T3680] smc: ib device sz1 port 1 has no pnetid [ 887.128518][T10379] lo speed is unknown, defaulting to 1000 [ 887.165962][ T3680] lo speed is unknown, defaulting to 1000 [ 887.305351][ T3708] IPv6: NLM_F_CREATE should be specified when creating new route [ 887.336056][ T3708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.343404][ T3708] IPv6: NLM_F_CREATE should be set when creating new route [ 887.411954][ T3708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.419327][ T3708] IPv6: NLM_F_CREATE should be set when creating new route [ 887.915145][ T3680] lo speed is unknown, defaulting to 1000 [ 888.321826][ T3678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.684983][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8038'. [ 888.781868][ T3720] tipc: Trying to set illegal importance in message [ 888.789771][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 888.810708][ T3720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8038'. [ 888.823923][ T3725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8040'. [ 888.872172][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 888.992157][ T3725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8040'. [ 889.017343][ T3680] lo speed is unknown, defaulting to 1000 [ 889.129218][ T3726] dvmrp0: entered allmulticast mode [ 889.151095][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.192104][ T3727] bridge_slave_0 (unregistering): left allmulticast mode [ 889.216894][ T3727] bridge_slave_0 (unregistering): left promiscuous mode [ 889.243675][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.907031][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.284514][ T3680] lo speed is unknown, defaulting to 1000 [ 890.390143][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8051'. [ 890.424836][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8051'. [ 890.478419][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8049'. [ 890.605573][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8052'. [ 890.661889][ T3764] openvswitch: netlink: Missing key (keys=40, expected=80) [ 890.725908][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8053'. [ 891.486103][ T3778] netlink: 'syz.2.8057': attribute type 1 has an invalid length. [ 891.662694][ T3778] bond7: entered promiscuous mode [ 891.669863][ T3778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 891.720069][ T3680] lo speed is unknown, defaulting to 1000 [ 891.861457][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8062'. [ 891.980960][ T3791] macsec1: entered promiscuous mode [ 892.025894][ T3791] macsec1: entered allmulticast mode [ 892.066891][ T3791] bridge0: entered allmulticast mode [ 892.085490][ T3791] bridge0: port 3(macsec1) entered blocking state [ 892.118016][ T3795] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.8064'. [ 892.118307][ T3791] bridge0: port 3(macsec1) entered disabled state [ 892.180285][ T3791] bridge0: left allmulticast mode [ 892.199310][ T3800] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8065'. [ 892.647287][ T3809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8067'. [ 892.670232][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8070'. [ 893.032306][ T3680] lo speed is unknown, defaulting to 1000 [ 893.150470][T21657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 893.445883][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.481656][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.515238][ T3838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.553065][ T3835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.332621][ T3857] netlink: 'syz.2.8084': attribute type 1 has an invalid length. [ 895.756481][ T3680] lo speed is unknown, defaulting to 1000 [ 895.869459][ T879] veth1_to_bridge: left allmulticast mode [ 895.922436][ T879] veth1_to_bridge: left promiscuous mode [ 895.944293][ T879] bridge0: port 3(veth1_to_bridge) entered disabled state [ 896.021019][ T879] bridge_slave_1: left allmulticast mode [ 896.054031][ T879] bridge_slave_1: left promiscuous mode [ 896.104597][ T879] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.175942][ T879] bridge_slave_0: left allmulticast mode [ 896.233283][ T879] bridge_slave_0: left promiscuous mode [ 896.240972][ T3900] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 896.273536][ T879] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.295625][ T3900] xt_hl: Unknown Hop Limit match mode: 206 [ 896.356718][ T11] block nbd2: Possible stuck request ffff888027aee000: control (read@0,1024B). Runtime 30 seconds [ 896.369469][ T11] block nbd2: Possible stuck request ffff888027aee1c0: control (read@1024,1024B). Runtime 30 seconds [ 896.381908][ T11] block nbd2: Possible stuck request ffff888027aee380: control (read@2048,1024B). Runtime 30 seconds [ 896.394446][ T11] block nbd2: Possible stuck request ffff888027aee540: control (read@3072,1024B). Runtime 30 seconds [ 897.194132][ T3915] __nla_validate_parse: 2 callbacks suppressed [ 897.194183][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8096'. [ 897.783930][ T879] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 898.203042][ T3925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8097'. [ 898.231530][ T3927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8097'. [ 898.891589][ T3942] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.8100'. [ 898.941542][ T879] bond13 (unregistering): (slave vti0): Releasing backup interface [ 898.972171][ T879] vti0 (unregistering): left promiscuous mode [ 899.311281][ T879] bond7 (unregistering): (slave geneve3): Releasing active interface [ 899.370217][ T879] bond6 (unregistering): (slave geneve2): Releasing active interface [ 899.915835][ T879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.935730][ T879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.950406][ T879] bond0 (unregistering): Released all slaves [ 899.965752][ T879] bond1 (unregistering): Released all slaves [ 900.004089][ T879] bond2 (unregistering): Released all slaves [ 900.072615][ T879] bond3 (unregistering): Released all slaves [ 900.103196][ T879] bond4 (unregistering): Released all slaves [ 900.133177][ T879] bond5 (unregistering): (slave lo): Releasing backup interface [ 900.145395][ T879] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 900.161185][ T879] bond5 (unregistering): Released all slaves [ 900.229551][ T879] bond6 (unregistering): Released all slaves [ 900.264371][ T879] bond7 (unregistering): Released all slaves [ 900.323777][ T879] bond8 (unregistering): Released all slaves [ 900.351907][ T879] bond9 (unregistering): Released all slaves [ 900.380088][ T879] bond10 (unregistering): Released all slaves [ 900.405537][ T879] bond11 (unregistering): Released all slaves [ 900.463636][ T879] bond12 (unregistering): (slave team_slave_0): Removing an active aggregator [ 900.480227][ T879] bond12 (unregistering): (slave team_slave_0): Releasing backup interface [ 900.492101][ T879] bond12 (unregistering): Released all slaves [ 900.545094][ T879] bond13 (unregistering): Released all slaves [ 900.603640][ T879] bond14 (unregistering): Released all slaves [ 900.645373][ T3941] syz_tun: refused to change device tx_queue_len [ 900.686321][ T3680] lo speed is unknown, defaulting to 1000 [ 901.223694][ T879] : left promiscuous mode [ 901.512370][ T879] tipc: Disabling bearer [ 901.562045][ T879] tipc: Left network mode [ 901.925060][ T3969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8108'. [ 901.993117][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 902.019590][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 902.031424][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 902.049833][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 902.063420][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.310066][ T3978] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 902.327786][ T3971] bridge5: entered promiscuous mode [ 902.422814][ T3971] bridge5: entered allmulticast mode [ 903.386009][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8112'. [ 904.106390][ T5644] Bluetooth: hci4: command tx timeout [ 904.273037][ T4021] bridge0: port 3(veth1_to_bridge) entered blocking state [ 904.330006][ T4021] bridge0: port 3(veth1_to_bridge) entered disabled state [ 904.360412][ T4021] veth1_to_bridge: entered allmulticast mode [ 904.443550][ T4021] veth1_to_bridge: entered promiscuous mode [ 905.009305][ T4038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 905.357118][ T4045] netlink: 'syz.2.8121': attribute type 1 has an invalid length. [ 906.194887][ T5644] Bluetooth: hci4: command tx timeout [ 907.805574][ T4065] pimreg15: entered allmulticast mode [ 908.267135][ T5644] Bluetooth: hci4: command tx timeout [ 910.346913][ T5644] Bluetooth: hci4: command tx timeout [ 919.754852][ C1] sched: DL replenish lagged too much [ 995.449729][T21656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.155159][ T4999] udevd[4999]: worker [30654] /devices/virtual/block/nbd2 is taking a long time [ 1035.322487][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 1145.976114][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1145.983115][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21660/1:b..l P4091/1:b..l P4999/1:b..l [ 1145.993976][ C1] rcu: (detected by 1, t=10502 jiffies, g=191313, q=1619 ncpus=2) [ 1146.001902][ C1] task:udevd state:R running task stack:23288 pid:4999 tgid:4999 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1146.016908][ C1] Call Trace: [ 1146.020312][ C1] [ 1146.023361][ C1] __schedule+0x1821/0x5740 [ 1146.028024][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.033249][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 1146.038567][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.043964][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.050103][ C1] ? __pfx___schedule+0x10/0x10 [ 1146.054975][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.059973][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1146.065478][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1146.070528][ C1] irqentry_exit+0x14f/0x8b0 [ 1146.075140][ C1] ? trace_irq_disable+0x3b/0x140 [ 1146.080239][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1146.086244][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1146.092358][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 74 78 60 0c 48 89 de 5b e9 43 05 60 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 58 58 72 11 65 8b 15 79 58 72 [ 1146.112076][ C1] RSP: 0018:ffffc900032bf640 EFLAGS: 00000202 [ 1146.118200][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000001 [ 1146.126193][ C1] RDX: ffff88807c52dd00 RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 [ 1146.134187][ C1] RBP: dffffc0000000000 R08: ffff88801dd3096f R09: 1ffff11003ba612d [ 1146.142268][ C1] R10: dffffc0000000000 R11: ffffed1003ba612e R12: ffffffff823c8eea [ 1146.150263][ C1] R13: 0000000000063ceb R14: dffffc0000000000 R15: ffff88801dd30970 [ 1146.158257][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 1146.163912][ C1] __page_table_check_zero+0x330/0x3e0 [ 1146.169405][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 1146.174984][ C1] __free_frozen_pages+0xc2c/0xd30 [ 1146.180164][ C1] __slab_free+0x274/0x2c0 [ 1146.184616][ C1] ? qlist_free_all+0x8e/0x100 [ 1146.189434][ C1] qlist_free_all+0x99/0x100 [ 1146.194055][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1146.199545][ C1] __kasan_kmalloc+0x22/0xb0 [ 1146.204167][ C1] __kmalloc_noprof+0x35c/0x760 [ 1146.209044][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1146.214875][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1146.219935][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1146.225508][ C1] ? tomoyo_domain+0xd7/0x130 [ 1146.230218][ C1] tomoyo_path_perm+0x283/0x560 [ 1146.235136][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1146.240190][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1146.245645][ C1] security_inode_getattr+0x12b/0x310 [ 1146.251113][ C1] vfs_getattr+0x23/0x70 [ 1146.255823][ C1] vfs_statx_path+0x2b/0x230 [ 1146.260433][ C1] ? vfs_statx+0x107/0x200 [ 1146.264876][ C1] vfs_statx+0x12e/0x200 [ 1146.269155][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1146.273938][ C1] ? strncpy_from_user+0x150/0x2b0 [ 1146.279179][ C1] ? do_getname+0x151/0x250 [ 1146.283714][ C1] vfs_fstatat+0x11b/0x170 [ 1146.288161][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1146.293384][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1146.299159][ C1] ? rcu_is_watching+0x15/0xb0 [ 1146.303956][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.310047][ C1] do_syscall_64+0x174/0x580 [ 1146.314663][ C1] ? clear_bhb_loop+0x40/0x90 [ 1146.319372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.325287][ C1] RIP: 0033:0x7f0c58b11b0a [ 1146.329719][ C1] RSP: 002b:00007fff7f024338 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1146.338158][ C1] RAX: ffffffffffffffda RBX: 00005581e5dec400 RCX: 00007f0c58b11b0a [ 1146.346149][ C1] RDX: 00007fff7f024340 RSI: 00005581e5dda296 RDI: 00000000ffffff9c [ 1146.354143][ C1] RBP: 000055820a6e5148 R08: 000000003de28089 R09: 3fffffffffffffff [ 1146.362136][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.370127][ C1] R13: 00007fff7f024340 R14: 0000000000000000 R15: 0000000000000000 [ 1146.378141][ C1] [ 1146.381186][ C1] task:syz.4.8128 state:R running task stack:28056 pid:4091 tgid:4090 ppid:28972 task_flags:0x400140 flags:0x00080002 [ 1146.394705][ C1] Call Trace: [ 1146.398013][ C1] [ 1146.400978][ C1] __schedule+0x1821/0x5740 [ 1146.405516][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.410500][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.415464][ C1] ? __pfx___schedule+0x10/0x10 [ 1146.420339][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.425310][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1146.430358][ C1] irqentry_exit+0x14f/0x8b0 [ 1146.434976][ C1] ? trace_irq_disable+0x3b/0x140 [ 1146.440066][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1146.446152][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1146.451462][ C1] Code: ff ff ff e8 01 de 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 68 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 d3 08 0a cc 48 8d 3d e8 ee 91 [ 1146.471266][ C1] RSP: 0018:ffffc9000479f518 EFLAGS: 00000286 [ 1146.477358][ C1] RAX: 9c0904f50a8f6400 RBX: 0000000000000000 RCX: 0000000000000046 [ 1146.485347][ C1] RDX: 000000000973479e RSI: ffffffff8e217416 RDI: ffffffff8c28b9e0 [ 1146.493339][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd20 [ 1146.501415][ C1] R10: ffffc9000479f678 R11: ffffffff81b0e210 R12: 0000000000000002 [ 1146.509405][ C1] R13: ffffffff8e95cd20 R14: 0000000000000000 R15: 0000000000000246 [ 1146.517397][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.522532][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1146.528802][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.533947][ C1] ? alloc_file_pseudo+0x155/0x240 [ 1146.539086][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.544233][ C1] unwind_next_frame+0xc3/0x2550 [ 1146.549204][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.554607][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1146.559831][ C1] ? alloc_empty_file+0x74/0x1d0 [ 1146.564801][ C1] ? alloc_file_pseudo+0x155/0x240 [ 1146.570025][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1146.576209][ C1] arch_stack_walk+0x11b/0x150 [ 1146.581072][ C1] ? alloc_file_pseudo+0x155/0x240 [ 1146.586296][ C1] stack_trace_save+0xa9/0x100 [ 1146.591184][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1146.596595][ C1] save_stack+0x122/0x230 [ 1146.600955][ C1] ? __pfx_save_stack+0x10/0x10 [ 1146.605835][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 1146.611158][ C1] ? __slab_free+0x274/0x2c0 [ 1146.615787][ C1] ? qlist_free_all+0x99/0x100 [ 1146.620574][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1146.626239][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1146.631288][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1146.636943][ C1] ? security_file_alloc+0x34/0x310 [ 1146.642248][ C1] ? init_file+0x90/0x2b0 [ 1146.646594][ C1] ? alloc_empty_file+0x74/0x1d0 [ 1146.651552][ C1] ? alloc_file_pseudo+0x155/0x240 [ 1146.656709][ C1] __reset_page_owner+0x71/0x1f0 [ 1146.661679][ C1] __free_frozen_pages+0xc1c/0xd30 [ 1146.666825][ C1] __slab_free+0x274/0x2c0 [ 1146.671361][ C1] ? qlist_free_all+0x8e/0x100 [ 1146.676157][ C1] qlist_free_all+0x99/0x100 [ 1146.680778][ C1] ? security_file_alloc+0x34/0x310 [ 1146.686003][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1146.691489][ C1] __kasan_slab_alloc+0x22/0x80 [ 1146.696368][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1146.701852][ C1] ? security_file_alloc+0x34/0x310 [ 1146.707071][ C1] ? rcu_is_watching+0x15/0xb0 [ 1146.711876][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1146.717563][ C1] security_file_alloc+0x34/0x310 [ 1146.722837][ C1] init_file+0x90/0x2b0 [ 1146.727035][ C1] alloc_empty_file+0x74/0x1d0 [ 1146.731842][ C1] alloc_file_pseudo+0x155/0x240 [ 1146.736812][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1146.742320][ C1] anon_inode_getfd+0xc8/0x1f0 [ 1146.747173][ C1] map_create+0x1247/0x16a0 [ 1146.751748][ C1] ? security_bpf+0x7e/0x2d0 [ 1146.756370][ C1] __sys_bpf+0x6e1/0x950 [ 1146.760649][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1146.765459][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1146.771300][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1146.776196][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.782296][ C1] __x64_sys_bpf+0x7c/0x90 [ 1146.786745][ C1] do_syscall_64+0x174/0x580 [ 1146.791368][ C1] ? trace_irq_disable+0x3b/0x140 [ 1146.796510][ C1] ? clear_bhb_loop+0x40/0x90 [ 1146.801300][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.807218][ C1] RIP: 0033:0x7f037a39ce59 [ 1146.811657][ C1] RSP: 002b:00007f037b28e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1146.820102][ C1] RAX: ffffffffffffffda RBX: 00007f037a615fa0 RCX: 00007f037a39ce59 [ 1146.828094][ C1] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 1146.836218][ C1] RBP: 00007f037a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1146.844298][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.852291][ C1] R13: 00007f037a616038 R14: 00007f037a615fa0 R15: 00007ffe07c059c8 [ 1146.860306][ C1] [ 1146.863346][ C1] task:kworker/u8:31 state:R running task stack:26336 pid:21660 tgid:21660 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1146.876953][ C1] Workqueue: krds_cp_wq#24/4 rds_connect_worker [ 1146.883323][ C1] Call Trace: [ 1146.886623][ C1] [ 1146.889614][ C1] __schedule+0x1821/0x5740 [ 1146.894141][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.899216][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1146.904186][ C1] ? __pfx___schedule+0x10/0x10 [ 1146.909085][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1146.914171][ C1] irqentry_exit+0x14f/0x8b0 [ 1146.918796][ C1] ? trace_irq_disable+0x3b/0x140 [ 1146.923961][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1146.929980][ C1] RIP: 0010:deref_stack_reg+0x0/0x230 [ 1146.935384][ C1] Code: ff ff 48 89 4c 24 18 e8 2e 05 ba 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 [ 1146.955015][ C1] RSP: 0018:ffffc9000dc170f0 EFLAGS: 00000287 [ 1146.961196][ C1] RAX: fffffffffffffff0 RBX: ffffffff90d185f8 RCX: 0000000000000000 [ 1146.969193][ C1] RDX: ffffc9000dc17208 RSI: ffffc9000dc17690 RDI: ffffc9000dc171c8 [ 1146.977195][ C1] RBP: dffffc0000000000 R08: ffffc9000dc17227 R09: 0000000000000000 [ 1146.985193][ C1] R10: ffffc9000dc17218 R11: fffff52001b82e45 R12: ffffc9000dc17690 [ 1146.993195][ C1] R13: 1ffff92001b82e3b R14: ffffc9000dc171c8 R15: 1ffffffff21a30bf [ 1147.001407][ C1] unwind_next_frame+0x19d5/0x2550 [ 1147.006562][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1147.011706][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1147.017287][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1147.023468][ C1] arch_stack_walk+0x11b/0x150 [ 1147.028261][ C1] ? ref_tracker_alloc+0x15a/0x4c0 [ 1147.033488][ C1] stack_trace_save+0xa9/0x100 [ 1147.038285][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1147.043740][ C1] save_stack+0x122/0x230 [ 1147.048152][ C1] ? __pfx_save_stack+0x10/0x10 [ 1147.053037][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 1147.058365][ C1] ? __slab_free+0x274/0x2c0 [ 1147.062991][ C1] ? qlist_free_all+0x99/0x100 [ 1147.067787][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1147.073444][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 1147.078497][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1147.084088][ C1] ? page_ext_put+0x97/0xc0 [ 1147.088629][ C1] __reset_page_owner+0x71/0x1f0 [ 1147.093603][ C1] __free_frozen_pages+0xc1c/0xd30 [ 1147.098763][ C1] __slab_free+0x274/0x2c0 [ 1147.103235][ C1] ? qlist_free_all+0x8e/0x100 [ 1147.108034][ C1] qlist_free_all+0x99/0x100 [ 1147.112645][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1147.118114][ C1] __kasan_kmalloc+0x22/0xb0 [ 1147.122701][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 1147.128250][ C1] ? ref_tracker_alloc+0x15a/0x4c0 [ 1147.133353][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1147.138899][ C1] ref_tracker_alloc+0x15a/0x4c0 [ 1147.144069][ C1] ? trace_kmalloc+0x2a/0xf0 [ 1147.148652][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1147.154122][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 1147.159409][ C1] ? sock_lock_init+0x42e/0x880 [ 1147.164364][ C1] sk_alloc+0x2c3/0x390 [ 1147.168513][ C1] inet6_create+0x7f0/0x1260 [ 1147.173177][ C1] ? inet6_create+0x83/0x1260 [ 1147.177845][ C1] __sock_create+0x4b2/0x9d0 [ 1147.182433][ C1] rds_tcp_conn_path_connect+0x2d7/0x930 [ 1147.188107][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1147.194254][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1147.199373][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1147.205192][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1147.210921][ C1] rds_connect_worker+0x1d8/0x290 [ 1147.215953][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1147.221679][ C1] process_scheduled_works+0xb5d/0x1860 [ 1147.227315][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1147.233304][ C1] ? assign_work+0x3d5/0x5e0 [ 1147.237903][ C1] worker_thread+0xa53/0xfc0 [ 1147.242598][ C1] kthread+0x389/0x470 [ 1147.246662][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1147.251776][ C1] ? __pfx_kthread+0x10/0x10 [ 1147.256374][ C1] ret_from_fork+0x514/0xb70 [ 1147.260998][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.266126][ C1] ? __switch_to+0xc79/0x1410 [ 1147.270900][ C1] ? __pfx_kthread+0x10/0x10 [ 1147.275509][ C1] ret_from_fork_asm+0x1a/0x30 [ 1147.280325][ C1] [ 1147.283354][ C1] rcu: rcu_preempt kthread starved for 8719 jiffies! g191313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1147.294571][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1147.304568][ C1] rcu: RCU grace-period kthread stack dump: [ 1147.310477][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1147.324007][ C1] Call Trace: [ 1147.327317][ C1] [ 1147.330277][ C1] __schedule+0x1821/0x5740 [ 1147.334814][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1147.339827][ C1] ? __pfx___schedule+0x10/0x10 [ 1147.344721][ C1] ? schedule+0x90/0x360 [ 1147.349014][ C1] schedule+0x164/0x360 [ 1147.353202][ C1] schedule_timeout+0x158/0x2c0 [ 1147.358174][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1147.363583][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1147.368947][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1147.374786][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1147.380369][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1147.386032][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1147.391268][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1147.396062][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1147.402244][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1147.407674][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1147.412917][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1147.417541][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1147.422764][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1147.428609][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1147.433576][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1147.438721][ C1] kthread+0x389/0x470 [ 1147.442873][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1147.448105][ C1] ? __pfx_kthread+0x10/0x10 [ 1147.452735][ C1] ret_from_fork+0x514/0xb70 [ 1147.457354][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.462491][ C1] ? __switch_to+0xc79/0x1410 [ 1147.467209][ C1] ? __pfx_kthread+0x10/0x10 [ 1147.471882][ C1] ret_from_fork_asm+0x1a/0x30 [ 1147.476695][ C1] [ 1147.479731][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1147.486160][ C1] CPU: 1 UID: 0 PID: 3233 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1147.495897][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1147.505975][ C1] Workqueue: bat_events batadv_tt_purge [ 1147.511652][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1147.516965][ C1] Code: ff ff ff e8 01 de 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 68 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 d3 08 0a cc 48 8d 3d e8 ee 91 [ 1147.536683][ C1] RSP: 0018:ffffc90000a07d78 EFLAGS: 00000286 [ 1147.542786][ C1] RAX: f6d61b0a58615b00 RBX: 0000000000000000 RCX: 0000000080000101 [ 1147.550781][ C1] RDX: 000000008eba6367 RSI: ffffffff8e217416 RDI: ffffffff8c28b9e0 [ 1147.558788][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd20 [ 1147.566787][ C1] R10: ffffc90000a07ed8 R11: ffffffff81b0e210 R12: 0000000000000002 [ 1147.574782][ C1] R13: ffffffff8e95cd20 R14: 0000000000000000 R15: 0000000000000246 [ 1147.582873][ C1] FS: 0000000000000000(0000) GS:ffff88812539f000(0000) knlGS:0000000000000000 [ 1147.591830][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1147.598462][ C1] CR2: 00007ffc85f39ff8 CR3: 000000007d7fe000 CR4: 00000000003526f0 [ 1147.606459][ C1] Call Trace: [ 1147.609761][ C1] [ 1147.612629][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1147.618129][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1147.623270][ C1] unwind_next_frame+0xc3/0x2550 [ 1147.628236][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1147.633379][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1147.638517][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 1147.643927][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1147.649434][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1147.655664][ C1] arch_stack_walk+0x11b/0x150 [ 1147.660482][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1147.666171][ C1] ? skb_clone+0x212/0x3a0 [ 1147.670717][ C1] stack_trace_save+0xa9/0x100 [ 1147.675609][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1147.681024][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1147.686366][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1147.691335][ C1] kasan_save_track+0x3e/0x80 [ 1147.696046][ C1] ? kasan_save_track+0x3e/0x80 [ 1147.700921][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1147.705970][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1147.711633][ C1] ? skb_clone+0x212/0x3a0 [ 1147.716071][ C1] ? br_flood+0x6cb/0xb80 [ 1147.720524][ C1] ? br_handle_frame_finish+0x1521/0x1c80 [ 1147.726270][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1147.731464][ C1] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1147.737647][ C1] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1147.743321][ C1] ? br_handle_frame+0x1277/0x1510 [ 1147.748560][ C1] ? __netif_receive_skb_core+0x98f/0x3170 [ 1147.754454][ C1] ? process_backlog+0x76d/0x1950 [ 1147.759557][ C1] ? __napi_poll+0xae/0x340 [ 1147.764172][ C1] ? net_rx_action+0x627/0xf70 [ 1147.769051][ C1] ? handle_softirqs+0x22a/0x840 [ 1147.774018][ C1] ? do_softirq+0x76/0xd0 [ 1147.778377][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 1147.783682][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1147.789207][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1147.794089][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1147.799579][ C1] ? skb_clone+0x212/0x3a0 [ 1147.804106][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1147.809775][ C1] skb_clone+0x212/0x3a0 [ 1147.814046][ C1] br_flood+0x6cb/0xb80 [ 1147.818247][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 1147.823837][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1147.829777][ C1] ? nf_hook_slow+0x176/0x220 [ 1147.834640][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1147.840575][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1147.845634][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1147.851116][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1147.857037][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1147.861999][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1147.867245][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1147.873257][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1147.879196][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1147.884600][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1147.890182][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1147.896134][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1147.902663][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1147.907901][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1147.913388][ C1] br_handle_frame+0x1277/0x1510 [ 1147.918363][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1147.923683][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1147.929617][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1147.934939][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 1147.940641][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1147.945625][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1147.951727][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1147.956622][ C1] ? NF_HOOK+0x336/0x3c0 [ 1147.960901][ C1] ? process_backlog+0x3eb/0x1950 [ 1147.965963][ C1] ? process_backlog+0x3eb/0x1950 [ 1147.971015][ C1] ? process_backlog+0x3eb/0x1950 [ 1147.976073][ C1] ? process_backlog+0x3eb/0x1950 [ 1147.981212][ C1] process_backlog+0x76d/0x1950 [ 1147.986115][ C1] __napi_poll+0xae/0x340 [ 1147.990652][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1147.996076][ C1] net_rx_action+0x627/0xf70 [ 1148.000710][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1148.005966][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1148.011134][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 1148.016151][ C1] handle_softirqs+0x22a/0x840 [ 1148.020949][ C1] ? do_softirq+0x76/0xd0 [ 1148.025311][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1148.030807][ C1] do_softirq+0x76/0xd0 [ 1148.034989][ C1] [ 1148.037942][ C1] [ 1148.040892][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1148.046079][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 1148.051583][ C1] batadv_tt_purge+0x35/0x9e0 [ 1148.056300][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1148.062142][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1148.067894][ C1] process_scheduled_works+0xb5d/0x1860 [ 1148.073501][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1148.079504][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.084675][ C1] rescuer_thread+0x827/0x1130 [ 1148.089680][ C1] ? rescuer_thread+0xbb/0x1130 [ 1148.094576][ C1] kthread+0x389/0x470 [ 1148.098668][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1148.103887][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.108504][ C1] ret_from_fork+0x514/0xb70 [ 1148.113211][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1148.118355][ C1] ? __switch_to+0xc79/0x1410 [ 1148.123324][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.127990][ C1] ret_from_fork_asm+0x1a/0x30 [ 1148.132823][ C1] [ 1152.819034][ T31] INFO: task kworker/0:0H:11 blocked for more than 152 seconds.