last executing test programs: 14m31.307492392s ago: executing program 32 (id=3115): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x3ac) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340410017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e21, @remote}}) 13m55.39304726s ago: executing program 33 (id=3276): unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x8) 12m59.685575464s ago: executing program 34 (id=3438): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x3ac) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5200012400002000905000500020200000500010006"], 0x58}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e21, @remote}}) 12m56.767739163s ago: executing program 35 (id=3487): mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000200)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) read$FUSE(r4, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) memfd_secret(0x80000) syz_usb_connect(0x5, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x340, 0x19, 0xe9, 0xf4, 0x20, 0x781, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xff, 0x50, 0x3, "", [{{0x9, 0x4, 0xfd, 0x8, 0x0, 0x84, 0x5e, 0x7c, 0x7}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 12m40.809868258s ago: executing program 36 (id=3493): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x3ac) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508000a400002000905000500020200000500010006"], 0x58}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e21, @remote}}) 11m27.806739478s ago: executing program 37 (id=3700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x6, 0x0, 0x9, 0x3, 0x1, 0x0, 0xaa, 0xfa11, 0xc2}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x10000002, 0x12000, 0x299c0, 0x1000000020000007, 0xcf, 0xd0, 0x3, 0x101}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd70007ddbdf2500000000", @ANYRES32=r0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a00000000000c0023003709"], 0x48}, 0x1, 0x0, 0x0, 0x10000010}, 0x20040844) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x504}}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 11m23.199811693s ago: executing program 38 (id=3719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012404102000905000500020200000500010006"], 0x58}}, 0x4080) 11m21.525335057s ago: executing program 39 (id=3723): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x3ac) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240ef02000905000500020200000500010006"], 0x58}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e21, @remote}}) 11m13.033076806s ago: executing program 40 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x4, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0xc88c4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x401, 0x80000000, 0x0, 0xb, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0x10000, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x4, 0x2, 0x1, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x9, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x4, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x400, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000006, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x7, 0x44, 0x40000409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001bc0)={0x1, 0x0, [{0x40000101, 0x0, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x0, 0x24017787b67160c7, 0x1, 0x7, 0x4, 0x7, 0x5, 0x100, 0x3}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a480000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001c000380180000800400018006000440000000000000000904000640140000001100010000000000000000000200000a"], 0x70}}, 0x0) 10m35.363835964s ago: executing program 41 (id=3837): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000cbb7000000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 10m15.840221468s ago: executing program 42 (id=3895): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x3ac) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) msgrcv(r3, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002ef0905000500020200000500010006"], 0x58}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e21, @remote}}) 10m7.091424346s ago: executing program 43 (id=3914): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800001066ffffff00000000ff0100000009000000181100"/36, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183d000005000000000000000000000018620000040000000000000001000000180000000000000000000000000400007db42000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x45, &(0x7f0000000580)=""/69, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x3, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)=[{0x5, 0x4, 0x4, 0x5}, {0x4, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x2, 0x6}, {0x2, 0x1, 0xa, 0x2}, {0x5, 0x2, 0x0, 0x4}], 0x10, 0x8001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f0000000480), &(0x7f0000000900)=r0}, 0x1c) r1 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r2) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r6 = socket$inet(0x10, 0x800, 0x53) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001006873720004000280"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="940000000206010100000000000000000000fffd07801800018014000240fc020000000000000840000000011800018014000240fc000000000020000000000000000001080017400000000108000b40000000000800094000000100050005000a00000005000f652e642da8952d9ff20eb30335cf04000000fcfddc1769f494885428f32300001300030068"], 0x94}}, 0x80e0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000906010200000000000000000200ffff300007801800018014000240fe8000000000000000000000000020aa140017000000000000000000000000000000e149502d245d34617a31000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$hid(0x5, 0x3f, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 9m54.282018735s ago: executing program 44 (id=3964): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004040) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f00000000c0)=0x13) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x10, 0x110}}], 0x10, 0x4c00}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffffff, 0x0, 0x20002, 0x2a) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) utimensat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x100) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) 7m12.149544392s ago: executing program 45 (id=4507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xfdbf, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x34, 0xd, 0xa, 0x6, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000882}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x89f0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x79}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 7m4.299368818s ago: executing program 46 (id=4522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="680000000206010100000000000000000400ffff1c00078008001240000000050800084000000011080006400000000d0500010006000000050005000a000000050004000000000013000300686173683a6e65742c69666163650000090002"], 0x68}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 7m1.319770329s ago: executing program 47 (id=4540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000906010800000000000000210200ffff0900020073797a310000000008000940000000390700010007000000100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6m52.728898139s ago: executing program 48 (id=4602): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004811}, 0x4000004) 6m45.49334755s ago: executing program 49 (id=4630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0xfffffffb, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b1d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xfdbf, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x5c, 0x3d, 0x200, 0x70bd26, 0x25dfdbff, {0x14}, [@nested={0x2f, 0x92, 0x0, 0x1, [@generic="08141d80a73eb1cc6f0faceb134633d10bce9fc25d94f4fd3d868626ce2db8fb47b044", @nested={0x4, 0xa5}, @nested={0x4, 0x22}]}, @nested={0x10, 0x1fba, 0x0, 0x1, [@typed={0x4, 0xe3}, @typed={0x8, 0x13e, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x112, 0x0, 0x0, @uid=0xee00}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x34, 0xd, 0xa, 0x6, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000882}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x89f0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4111, 0x100f}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000000080)=""/172, 0xac}, {&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000003ac0)=""/4093, 0xffd}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x79}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 6m40.913770693s ago: executing program 50 (id=4639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3c, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) preadv(r6, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pread64(r7, &(0x7f0000000240)=""/95, 0x5f, 0x5) r9 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r9, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r10 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendfile(r10, r10, 0x0, 0x10001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m24.083272309s ago: executing program 51 (id=4640): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3c, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001600)=[{0x0}], 0x1, 0xa2e3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pread64(r6, &(0x7f0000000240)=""/95, 0x5f, 0x5) r8 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r9 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendfile(r9, r9, 0x0, 0x10001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m22.630129727s ago: executing program 52 (id=4689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m16.199575915s ago: executing program 53 (id=4710): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x1, 0x8, 0xd, 0x9, @vifc_lcl_addr=@multicast1, @local}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r2 = socket$can_j1939(0x1d, 0x2, 0x7) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x81, @remote, 0x46f7}, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0xc000000, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010102}}}}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x3ff, 0x7ff, 0x3, 0x101}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}}, 0x4840) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r6, 0x1, {0x2, 0x0, 0x1}, 0x2}, 0x18) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x2, 0x9) syz_emit_ethernet(0x1ea, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x2d, 0x4, 0x3, 0x34, 0x1dc, 0x66, 0x0, 0x8c, 0x6, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x7, [{@multicast2, 0x9}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x0, [{@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x1b, 0xde, [@multicast1, @multicast2, @empty, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}]}, @generic={0x89, 0x8, "c0bbef0fb6dd"}, @noop, @noop, @generic={0x89, 0x8, "fd125583675a"}, @rr={0x7, 0x13, 0xb3, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x14, 0x3, [{0x1, 0xc, "94d68868cb66ecba47e8"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0xc3, 0x1, 0x0, [{@loopback, 0xdf}, {@loopback, 0x10}, {@local, 0x6}, {@private=0xa010102}, {@broadcast}]}]}}, {{0x4e21, 0x4e21, r7, r8, 0x0, 0x0, 0x19, 0x0, 0x7ff, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x200, 0x7}, @mptcp=@mp_join={0x1e, 0x3, 0x9}, @sack={0x5, 0x2a, [0x7fffffff, 0x9, 0x0, 0x0, 0x5, 0x5, 0x7, 0xa, 0x7, 0x9]}, @exp_fastopen={0xfe, 0x5, 0xf989, "d0"}, @eol, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x7, @local, 0x4, "0596783b27105d"}]}}, {"4ac7b29c6a745645280f41749393a45685e42f332f6c96fcfe6af97949ad905e91e2600d9ed2da54db92774bd54aff27299088a044076b070626959ecd8d5cab73d264c2a370e1057408700e48de10a77ef8fc662d8100c80b702c45674f0cfbae1e2e2ceedfbebdb6fa858d933625ce69aacd8fa4f02c615a53a5496db082ccf643c0a9efa209dee1cda8ba170e22d573a4e06a0a80da92c57f1f158ee8bb9d9b2e20fbd183242dc9e3ee1b9bb1dcad3d6aea6d84f5c57e7592e7a3d3fb27e0d2be54f6"}}}}}}, 0x0) 6m16.087398905s ago: executing program 54 (id=4662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\xff\xff\xff\xff\xff\xff'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008805}, 0x800) 6m7.146867794s ago: executing program 55 (id=4709): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000000000140400000000000e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a377"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060108000000006000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700097c9190ccc29a20b3858f6a9c543ced4bb3983b726dcdc5c035210582e002c1a7a54d14e22a0c3eec918d4323b"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m58.621389682s ago: executing program 56 (id=4703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x6}, 0x40400c0) 5m42.226827668s ago: executing program 57 (id=4733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000300000205000400012000000500010007000000140007800800060000000002080013400000000605000500020000001100"], 0x60}, 0x1, 0x0, 0x0, 0x40896}, 0x4048000) 5m8.421497497s ago: executing program 7 (id=4907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5m8.082260506s ago: executing program 7 (id=4912): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 5m2.601687498s ago: executing program 7 (id=4921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "e5a6856e919739b0d5ec195b8b138145fa3130b8b92b148bf5d9af433e8a932d85"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m2.378702137s ago: executing program 7 (id=4925): connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x1, 0x1}}}], 0x18}}], 0x2, 0x4400c800) 5m2.080948918s ago: executing program 7 (id=4930): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5m1.816799104s ago: executing program 7 (id=4934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 5m1.723192925s ago: executing program 9 (id=4936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "e5a6856e919739b0d5ec195b8b138145fa3130b8b92b148bf5d9af433e8a932d858096616ae754ff3181153af16fdc91b9"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m1.607690408s ago: executing program 9 (id=4937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5m1.43101286s ago: executing program 9 (id=4939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 5m1.26928875s ago: executing program 9 (id=4941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 5m1.107246158s ago: executing program 9 (id=4942): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x200000b, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 5m0.902014493s ago: executing program 9 (id=4944): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200521, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x41003, 0x1ff, 0x8000, 0x3, 0x0, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1fe, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x1fe, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x7fff, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x8, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x400, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb8, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x9, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe5, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xa, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 4m46.153804685s ago: executing program 58 (id=4933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4m46.034743636s ago: executing program 59 (id=4934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 4m44.916729338s ago: executing program 60 (id=4944): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200521, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x41003, 0x1ff, 0x8000, 0x3, 0x0, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1fe, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x1fe, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x7fff, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x8, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x400, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb8, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x9, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe5, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xa, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2m28.168984139s ago: executing program 3 (id=5752): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1a000, 0x4000800) 2m27.800298709s ago: executing program 3 (id=5759): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0xf}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 2m26.590052741s ago: executing program 3 (id=5774): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000008d80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x47e4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80000000000000000000e6000000bb", @ANYRES32=0x0, @ANYBLOB="0000000018000000000000002900000036"], 0x40}}], 0x1, 0x0) 2m26.4101202s ago: executing program 3 (id=5777): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r7, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2m25.410683375s ago: executing program 2 (id=5789): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1a000, 0x4000800) 2m25.288683913s ago: executing program 2 (id=5791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 2m25.1972727s ago: executing program 3 (id=5794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x80, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x2b, 0x8, "ad8dc16d8f3d6e22063a2e69a8ba095c"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) 2m25.087270219s ago: executing program 2 (id=5795): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e27, 0x1, @remote, 0xffffffff}, 0x1c, 0x0, 0x0, 0x0, 0x34, 0x4008000}, 0x28008841) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) 2m24.772691101s ago: executing program 2 (id=5799): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 2m24.509616156s ago: executing program 2 (id=5802): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000000000000840000000100000053cc9ee07127"], 0x30}, 0x8050) 2m24.420992972s ago: executing program 3 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206010300000000000000000500000a0900020073797a31000000000c000300686173683a697000050005000a00000005000400000000001400078008000800000000d805001400040000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 2m24.235960744s ago: executing program 2 (id=5804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000000005000100070000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2m9.29642922s ago: executing program 61 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206010300000000000000000500000a0900020073797a31000000000c000300686173683a697000050005000a00000005000400000000001400078008000800000000d805001400040000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 2m9.126128386s ago: executing program 62 (id=5804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000000005000100070000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m58.324805854s ago: executing program 5 (id=6041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc142efd", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) 1m57.549267428s ago: executing program 5 (id=6045): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {0x0}, {&(0x7f0000000940)="c5", 0x1}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m56.910156377s ago: executing program 5 (id=6050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 1m56.393899757s ago: executing program 5 (id=6055): socket$inet6(0xa, 0x802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x6c}]}}, {'/'}}}}}}, 0x0) 1m55.914016674s ago: executing program 5 (id=6059): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)}, {&(0x7f0000000940)="c5", 0x1}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m55.34485805s ago: executing program 5 (id=6063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000906010800000000000000210200ffff0900020073797a310000000008000940000000390700010007000000100008800c000780"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m40.235672355s ago: executing program 63 (id=6063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000906010800000000000000210200ffff0900020073797a310000000008000940000000390700010007000000100008800c000780"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.45101577s ago: executing program 4 (id=6712): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x208002, 0x4) 7.600715684s ago: executing program 6 (id=6716): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xe99, 0x0, 0x2, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(r5, &(0x7f0000000040), 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x24000004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 7.420240479s ago: executing program 4 (id=6718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.159987701s ago: executing program 4 (id=6720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x33) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7fffdffff000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000000b110018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x6, 0x4000015b, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100a44, 0x82, 0xbd, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 5.873489174s ago: executing program 8 (id=6726): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0xfd, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x717565, {}, {}, @raw32}], 0xffc8) 5.255687526s ago: executing program 8 (id=6728): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x208002, 0x4) 4.481155523s ago: executing program 6 (id=6733): r0 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000800)={0x7fff, 0x34325241, 0x3, @stepwise={0x7, 0xfffffffd, 0x611a, 0x3, 0xea5d, 0x6}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0xfffffff7, 0x1000, 0xfffffff7, 0x7ff, 0x2, 0x3}, 0x1c) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x206031, 0xffffffffffffffff, 0x18a41000) fsetxattr$security_capability(r4, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x7, 0xc}, {0x81, 0x8}]}, 0x14, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.557753186s ago: executing program 8 (id=6738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c910}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000000000/0x4000)=nil) pipe2$9p(&(0x7f0000000000), 0x800) syz_open_dev$usbfs(0x0, 0xf, 0x8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r5, &(0x7f0000001480)=0x2, 0x12) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 3.240765987s ago: executing program 4 (id=6739): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002000000730132000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0xa8d5, 0x10000, 0x0, 0x1d2}, &(0x7f0000002900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x39e, 0x0, r6}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x0, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22de, 0x0, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68e7, 0x400, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x1, 0x1bc, 0x0, r0}}], 0x4, &(0x7f0000000280)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1084, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x41, 0x107, 0x70bd2c, 0x255fdbfa, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) inotify_init() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 3.030748859s ago: executing program 8 (id=6741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xf}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.648431242s ago: executing program 0 (id=6742): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) (fail_nth: 27) 2.415285386s ago: executing program 6 (id=6743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x50703}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.390269915s ago: executing program 1 (id=6744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1.986472485s ago: executing program 8 (id=6745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.913437124s ago: executing program 0 (id=6746): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x810, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000000000000000000000000000000000002ab82cb0f1149cd11f3aac539321fec51d93c56f2d451b053859ea02d09459"], 0x50) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 64) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a3000000000090002007379"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000005280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000041c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f00000052c0)=0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x42, 0xd, 0x1ff, 0x40, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0xa51, 0x8}}) (async, rerun: 32) unshare(0x20000400) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x80, 0x7fffffff, 0x1, 0x4000, r0, 0x40, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0xc}, 0x50) (async, rerun: 32) set_robust_list(&(0x7f0000000400)={0x0, 0x401}, 0xc) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%pI4 \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r9, 0xff, 0x7f, &(0x7f0000000000)="7c3e0c56d754", 0x6) (async) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x1, 0x3dd}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 1.912459892s ago: executing program 1 (id=6747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1.861562036s ago: executing program 8 (id=6748): clock_getres(0xfffffffffffffff2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="144000002708010028bd7000ffdbdf2507005fc8b0036e7b4cc955abb3120040"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x201, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x2000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="ffff9f67010203010902ab0000000000000000e9ffffffffffffff000000000000000000"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES8=r3, @ANYRES64=r4, @ANYRES8=r2, @ANYRES16=r1, @ANYRES32=r3], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r7, &(0x7f0000000280)="1c0000001a009b8a3c90f4ae0009042400000000ff02000000000000", 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r10, 0x541b, 0x0) write$char_usb(r9, &(0x7f0000000040)='N', 0x1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r9, 0x80083314, &(0x7f00000002c0)) 1.524918017s ago: executing program 6 (id=6749): syz_io_uring_setup(0x650c, &(0x7f00000001c0)={0x0, 0x8552, 0x2, 0x1, 0xe}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x12, 0x20, 0x70bd2b, 0x25dfdbfc, {0x22, 0x3, 0x2, 0xef, {0x4e21, 0x4e22, [0x80000001, 0xffffffff, 0xfffffeff, 0x8], [0x6, 0x9, 0x5, 0x8], 0x0, [0xfffffc78, 0x6bbb5f79]}, 0x1, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84f55b8"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "10ece88ef035908cce5817dde13d72d814846ce8c737500d222e13719c7c6d61f2deec40306e7d80419f932fe2c93647a3781538f5b107d8ca2185a7f79172"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000480)) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) prlimit64(0x0, 0x4350ef72700bc7e4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') sync() sync() r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.400363301s ago: executing program 4 (id=6750): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000a00)=[{&(0x7f0000000140)="3b010400000000420000000000000000b617", 0x12}, {&(0x7f0000000240)="b5619fa4215cd4484f06237ec157e2c8ee538cec3c94c8fafc", 0x19}], 0x2, 0x9) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.333966691s ago: executing program 1 (id=6751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c910}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000000000/0x4000)=nil) pipe2$9p(&(0x7f0000000000), 0x800) syz_open_dev$usbfs(0x0, 0xf, 0x8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r5, &(0x7f0000001480)=0x2, 0x12) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1.280019396s ago: executing program 0 (id=6752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @empty}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="580100001000130428bd70004000000005000102000000000000000000000000e0000001000040000000000000000000462000074e2300040a0000202b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8, 0x6f14, 0x6, 0x2, 0x11c3adec}) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000080)={0x58ef, "84860850d28b7480564802d782e6b5a6f10539d6713a648972e757570a44873d", 0x1}) ioctl$BLKTRACESTART(r2, 0x1276, 0x0) 1.222660204s ago: executing program 4 (id=6753): r0 = syz_io_uring_setup(0x68c8, &(0x7f0000000400)={0x0, 0x2fc9, 0x2, 0x3, 0x51}, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x365, &(0x7f0000000000)={0x0, 0xfffff7fe, 0x80000, 0x3, 0x333, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb37c2995df900"/27, 0x1b}, {&(0x7f0000000900)="527302587e0a4e47ad60", 0xa}], 0x3, 0x0, 0x0) mknodat$loop(r2, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0) 778.278294ms ago: executing program 6 (id=6754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 777.097161ms ago: executing program 1 (id=6764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 629.337727ms ago: executing program 0 (id=6755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xf}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 366.677975ms ago: executing program 6 (id=6756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000340), 0xca, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, r0}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@multicast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 263.604947ms ago: executing program 1 (id=6757): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000380)=0x38, 0x4) 142.006415ms ago: executing program 0 (id=6758): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1a000, 0x4000800) 93.595091ms ago: executing program 1 (id=6759): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000380)=0x38, 0x4) (fail_nth: 1) 0s ago: executing program 0 (id=6760): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002000000730132000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb054, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0xfffffffe, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x39e, 0x0, r0}}], 0x4, &(0x7f0000003900)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00008e8000/0x4000)=nil) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.549763][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4826'. [ 1187.619286][T23914] syzkaller0: entered promiscuous mode [ 1187.619313][T23914] syzkaller0: entered allmulticast mode [ 1187.674710][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.674840][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.873169][T23927] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4828'. [ 1188.067590][T23676] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.179293][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4830'. [ 1188.257535][T23929] netlink: 'syz.1.4829': attribute type 29 has an invalid length. [ 1188.257565][T23929] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1188.538924][T23676] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.838972][T23565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.839291][T23946] syzkaller0: entered promiscuous mode [ 1188.839313][T23946] syzkaller0: entered allmulticast mode [ 1188.958311][T23948] syzkaller0: entered promiscuous mode [ 1188.958335][T23948] syzkaller0: entered allmulticast mode [ 1189.517097][T23565] veth0_vlan: entered promiscuous mode [ 1189.545394][T23565] veth1_vlan: entered promiscuous mode [ 1189.889051][T23954] syzkaller0: entered promiscuous mode [ 1189.889079][T23954] syzkaller0: entered allmulticast mode [ 1195.922301][T23978] __nla_validate_parse: 3 callbacks suppressed [ 1195.922337][T23978] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4846'. [ 1196.027870][T23565] veth0_macvtap: entered promiscuous mode [ 1196.052739][T23676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.067586][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.092639][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4848'. [ 1196.110458][T23676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1196.128911][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.129671][T23565] veth1_macvtap: entered promiscuous mode [ 1196.169178][T23676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1196.197074][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.203154][T23676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1196.232372][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1196.252576][T23982] syzkaller0: entered promiscuous mode [ 1196.252603][T23982] syzkaller0: entered allmulticast mode [ 1196.373954][T23565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.406466][T23565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.475036][T11156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.475104][T11156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.475152][T11156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.475198][T11156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.154958][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.154985][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.335749][T23676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.537187][T11156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.537212][T11156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.572888][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1197.599297][T23676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.682652][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.682728][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.737419][T11738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.737495][T11738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.389780][T23676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.668422][T23676] veth0_vlan: entered promiscuous mode [ 1198.745639][T23676] veth1_vlan: entered promiscuous mode [ 1199.007288][T23676] veth0_macvtap: entered promiscuous mode [ 1199.080065][T23676] veth1_macvtap: entered promiscuous mode [ 1199.247942][T23676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.312796][T23676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.531187][ T8017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.531387][ T8017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.863766][ T7341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.892644][T11156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.045606][ T1220] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1200.205576][ T1220] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1200.207214][ T1220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.207245][ T1220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1200.207305][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.252052][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.252075][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.272774][ T1220] usb 3-1: config 0 descriptor?? [ 1200.315953][ T1220] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1200.316025][ T1220] dvb-usb: bulk message failed: -22 (3/0) [ 1200.341712][ T1220] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1200.355902][ T1220] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1200.355950][ T1220] usb 3-1: media controller created [ 1200.361630][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.397888][ T1220] dvb-usb: bulk message failed: -22 (6/0) [ 1200.397976][ T1220] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1200.401312][ T1220] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input116 [ 1200.439053][ T1220] dvb-usb: schedule remote query interval to 150 msecs. [ 1200.439081][ T1220] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1200.593392][ T1220] dvb-usb: bulk message failed: -22 (1/0) [ 1200.593448][ T1220] dvb-usb: error while querying for an remote control event. [ 1200.753458][ T1220] dvb-usb: bulk message failed: -22 (1/0) [ 1200.753506][ T1220] dvb-usb: error while querying for an remote control event. [ 1200.914864][ T1220] dvb-usb: bulk message failed: -22 (1/0) [ 1200.914904][ T1220] dvb-usb: error while querying for an remote control event. [ 1200.920680][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.920704][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.073397][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1201.073441][ T30] dvb-usb: error while querying for an remote control event. [ 1201.190674][T24032] syzkaller0: entered promiscuous mode [ 1201.190692][T24032] syzkaller0: entered allmulticast mode [ 1201.215465][T11738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.231982][T24032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.241842][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 1201.241875][ T30] dvb-usb: error while querying for an remote control event. [ 1201.393437][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1201.393473][ T25] dvb-usb: error while querying for an remote control event. [ 1201.511074][T22638] usb 3-1: USB disconnect, device number 93 [ 1201.641779][T22638] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1202.649499][T24062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4866'. [ 1202.783095][T24064] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1202.783124][T24064] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1202.822949][T24069] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4870'. [ 1202.926314][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1203.270815][T24074] syzkaller0: entered promiscuous mode [ 1203.270843][T24074] syzkaller0: entered allmulticast mode [ 1204.080390][T24098] syzkaller0: entered promiscuous mode [ 1204.080417][T24098] syzkaller0: entered allmulticast mode [ 1204.224749][T24105] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4884'. [ 1205.010535][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 1205.148877][T24138] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4900'. [ 1206.044425][T24151] syzkaller0: entered promiscuous mode [ 1206.044452][T24151] syzkaller0: entered allmulticast mode [ 1206.250691][T24171] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4912'. [ 1212.199014][T24208] syzkaller0: entered promiscuous mode [ 1212.199044][T24208] syzkaller0: entered allmulticast mode [ 1213.305315][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880457ad400: rx timeout, send abort [ 1213.807631][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880457ad400: abort rx timeout. Force session deactivation [ 1213.807776][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805820a400: rx timeout, send abort [ 1213.891510][T22235] netlink: 'syz.8.4540': attribute type 1 has an invalid length. [ 1214.309504][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805820a400: abort rx timeout. Force session deactivation [ 1215.259863][T24241] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.259914][T24241] Bluetooth: hci5: command 0x0406 tx timeout [ 1222.847938][T24217] syzkaller0: entered promiscuous mode [ 1222.847966][T24217] syzkaller0: entered allmulticast mode [ 1223.238217][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab92800: rx timeout, send abort [ 1223.735395][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab92400: rx timeout, send abort [ 1223.738274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab92800: abort rx timeout. Force session deactivation [ 1224.237869][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab92400: abort rx timeout. Force session deactivation [ 1228.165601][T23670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1228.189868][T23670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1228.192609][T23670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1228.202529][T23670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1228.218385][T23670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1228.291484][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1228.306599][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1228.309410][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1228.342782][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1228.351061][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.465179][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1229.468773][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1229.487810][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1229.500930][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1229.501563][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1230.298851][ T5621] Bluetooth: hci0: command tx timeout [ 1230.447122][ T5621] Bluetooth: hci1: command tx timeout [ 1230.732590][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1230.760105][ T59] bridge_slave_1: left allmulticast mode [ 1230.760135][ T59] bridge_slave_1: left promiscuous mode [ 1230.760369][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.806292][ T59] bridge_slave_0: left allmulticast mode [ 1230.806322][ T59] bridge_slave_0: left promiscuous mode [ 1230.806557][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.160752][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.189484][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.215471][ T59] bond0 (unregistering): Released all slaves [ 1231.497655][ T59] tipc: Left network mode [ 1231.571029][ T5621] Bluetooth: hci3: command tx timeout [ 1232.149458][T24318] netlink: 18 bytes leftover after parsing attributes in process `syz.5.4970'. [ 1232.167365][T24319] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1232.305596][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4972'. [ 1232.365026][ T5621] Bluetooth: hci0: command tx timeout [ 1232.414092][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1232.523597][ T5621] Bluetooth: hci1: command tx timeout [ 1232.865521][ T59] hsr_slave_0: left promiscuous mode [ 1232.866323][ T59] hsr_slave_1: left promiscuous mode [ 1232.867257][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.867279][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.868658][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.868680][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.949948][ T59] veth1_macvtap: left promiscuous mode [ 1232.950013][ T59] veth0_macvtap: left promiscuous mode [ 1233.421942][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1233.445142][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1233.497719][T24342] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4980'. [ 1233.659808][ T5621] Bluetooth: hci3: command tx timeout [ 1234.000550][T24347] netlink: 18 bytes leftover after parsing attributes in process `syz.5.4982'. [ 1234.121369][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1234.268282][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4983'. [ 1234.443470][T23670] Bluetooth: hci0: command tx timeout [ 1234.613350][T23670] Bluetooth: hci1: command tx timeout [ 1234.700435][ T59] IPVS: stop unused estimator thread 0... [ 1235.072509][T24372] netlink: 18 bytes leftover after parsing attributes in process `syz.2.4990'. [ 1235.458598][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.723629][T23670] Bluetooth: hci3: command tx timeout [ 1235.748130][T24389] __nla_validate_parse: 2 callbacks suppressed [ 1235.748169][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4993'. [ 1235.854241][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.854365][T24298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.854570][T24298] bridge_slave_0: entered allmulticast mode [ 1235.856594][T24298] bridge_slave_0: entered promiscuous mode [ 1235.895358][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.896793][T24298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.896975][T24298] bridge_slave_1: entered allmulticast mode [ 1235.899092][T24298] bridge_slave_1: entered promiscuous mode [ 1235.939253][T24299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.939371][T24299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.939566][T24299] bridge_slave_0: entered allmulticast mode [ 1235.941598][T24299] bridge_slave_0: entered promiscuous mode [ 1236.039350][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.089838][T24389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4993'. [ 1236.091536][T24303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.091648][T24303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.091814][T24303] bridge_slave_0: entered allmulticast mode [ 1236.136660][T24303] bridge_slave_0: entered promiscuous mode [ 1236.276127][T24299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.276250][T24299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.276381][T24299] bridge_slave_1: entered allmulticast mode [ 1236.280846][T24299] bridge_slave_1: entered promiscuous mode [ 1236.297936][T24303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.298158][T24303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.298296][T24303] bridge_slave_1: entered allmulticast mode [ 1236.326091][T24303] bridge_slave_1: entered promiscuous mode [ 1236.370596][T24298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.527828][T23670] Bluetooth: hci0: command tx timeout [ 1236.661896][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.683671][T23670] Bluetooth: hci1: command tx timeout [ 1236.698110][T24298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.739295][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1236.756821][T24303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.776256][T24303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.964547][T24299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.027676][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5002'. [ 1237.063749][T24298] team0: Port device team_slave_0 added [ 1237.067431][T24299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.102210][T24408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5002'. [ 1237.161748][T24303] team0: Port device team_slave_0 added [ 1237.335044][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.429184][T24298] team0: Port device team_slave_1 added [ 1237.528736][T24303] team0: Port device team_slave_1 added [ 1237.585281][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5008'. [ 1237.586875][T24298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.586892][T24298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.586920][T24298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.590903][T24299] team0: Port device team_slave_0 added [ 1237.631007][T24298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.631074][T24298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.631166][T24298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.705331][T24299] team0: Port device team_slave_1 added [ 1237.803679][T23670] Bluetooth: hci3: command tx timeout [ 1237.927507][T24303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.927527][T24303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.927567][T24303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.029904][T24299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.029922][T24299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.029951][T24299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.030995][T24303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.031011][T24303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.031051][T24303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.229433][T24298] hsr_slave_0: entered promiscuous mode [ 1238.232394][T24298] hsr_slave_1: entered promiscuous mode [ 1238.234574][T24298] debugfs: 'hsr0' already exists in 'hsr' [ 1238.234598][T24298] Cannot create hsr debugfs directory [ 1238.292094][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5010'. [ 1238.428060][T24299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.428078][T24299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.428104][T24299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.518766][T24426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5010'. [ 1238.785953][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.786026][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.819908][T24303] hsr_slave_0: entered promiscuous mode [ 1238.828498][T24303] hsr_slave_1: entered promiscuous mode [ 1238.833036][T24303] debugfs: 'hsr0' already exists in 'hsr' [ 1238.833106][T24303] Cannot create hsr debugfs directory [ 1239.210284][T24299] hsr_slave_0: entered promiscuous mode [ 1239.211132][T24299] hsr_slave_1: entered promiscuous mode [ 1239.211690][T24299] debugfs: 'hsr0' already exists in 'hsr' [ 1239.211712][T24299] Cannot create hsr debugfs directory [ 1239.261815][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5016'. [ 1239.957468][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1240.011968][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.509982][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.803952][T24298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.846443][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1240.936284][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5025'. [ 1241.043171][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.260633][T24298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.490584][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5029'. [ 1241.582489][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.836115][T24298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.034312][T24503] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1242.036369][T24298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.485014][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1242.491069][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5034'. [ 1243.217956][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1243.304841][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.423137][T24298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1243.451091][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.461337][T24298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1243.481777][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.482689][T24298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1243.524066][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.542779][T24298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1243.561789][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1243.720186][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.781334][T24536] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5041'. [ 1244.229418][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.412326][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1244.561652][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.835539][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5048'. [ 1245.016328][T24298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.375123][T24298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.469394][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.469526][ T7341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.646522][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.646648][ T7341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.132618][T24303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.489224][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1246.580945][T24582] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1246.707634][T24303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.962342][T24303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.198978][T24303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.398672][T24298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.682850][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1247.761794][T24298] veth0_vlan: entered promiscuous mode [ 1248.064956][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880740b6800: rx timeout, send abort [ 1248.135851][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.164956][T24298] veth1_vlan: entered promiscuous mode [ 1248.432125][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.516790][T24299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1248.521289][T24299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.522236][T24299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.556704][T24299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.570523][ C1] vcan0: j1939_tp_rxtimer: 0xffff888087bffc00: rx timeout, send abort [ 1248.570568][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880740b6800: abort rx timeout. Force session deactivation [ 1248.629223][T24611] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5060'. [ 1248.656208][T24299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.731312][T24299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.732349][T24299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1248.751709][T24299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.994603][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.070597][ C1] vcan0: j1939_tp_rxtimer: 0xffff888087bffc00: abort rx timeout. Force session deactivation [ 1249.302587][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1249.321645][T24298] veth0_macvtap: entered promiscuous mode [ 1249.392007][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5064'. [ 1249.509649][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.560654][T24298] veth1_macvtap: entered promiscuous mode [ 1249.922048][T24303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1249.951592][T24303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1249.958125][T24303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1249.986896][T24303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1250.009913][T24298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.028386][T24303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1250.101551][T24303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1250.141440][T24298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.171470][T24303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1250.197461][T24303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.409931][T24642] syzkaller0: entered promiscuous mode [ 1250.409958][T24642] syzkaller0: entered allmulticast mode [ 1250.413589][ T7341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.417517][ T174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.417566][ T174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.417607][ T174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.442256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a6ce800: rx timeout, send abort [ 1250.942303][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a6ce400: rx timeout, send abort [ 1250.942371][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a6ce800: abort rx timeout. Force session deactivation [ 1250.998961][T24299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.020354][T24299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.114534][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.114641][T11156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.130635][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.130747][T11156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.227571][T24659] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5070'. [ 1251.442365][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a6ce400: abort rx timeout. Force session deactivation [ 1251.667352][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'. [ 1251.974968][ T59] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.125695][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'. [ 1252.159259][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1252.312736][ T7341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.312777][ T7341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.590097][ T59] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.751529][ T7341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.751554][ T7341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.036813][ T59] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.201231][T24693] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1253.398803][T24303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.519741][T24303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.577825][T24299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.750129][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079698800: rx timeout, send abort [ 1254.250189][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079698800: abort rx timeout. Force session deactivation [ 1254.250413][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807969bc00: rx timeout, send abort [ 1254.753467][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807969bc00: abort rx timeout. Force session deactivation [ 1255.433072][ T59] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.579755][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.579894][ T7341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.665468][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.665596][ T7341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.240469][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1256.309403][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5085'. [ 1256.549751][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5085'. [ 1256.705843][T24303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1256.771398][T24299] veth0_vlan: entered promiscuous mode [ 1256.943291][T24734] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1257.030589][T24299] veth1_vlan: entered promiscuous mode [ 1257.394998][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2cf2400: rx timeout, send abort [ 1257.894953][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.895056][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2cf2400: abort rx timeout. Force session deactivation [ 1257.895246][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2cf0000: rx timeout, send abort [ 1258.395291][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2cf0000: abort rx timeout. Force session deactivation [ 1258.458609][T24753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5094'. [ 1258.938803][T24303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.134852][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.609620][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.680479][T24299] veth0_macvtap: entered promiscuous mode [ 1259.759505][T24299] veth1_macvtap: entered promiscuous mode [ 1260.002112][T24780] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1260.002873][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.149472][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1260.305104][T24299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.458005][T24299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.554340][T24789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1260.565256][T24303] veth0_vlan: entered promiscuous mode [ 1260.623340][ T174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.623403][ T174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.623445][ T174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.623492][ T174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.853669][T24303] veth1_vlan: entered promiscuous mode [ 1261.012446][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880539f5400: rx timeout, send abort [ 1261.143343][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5109'. [ 1261.515092][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880539f5400: abort rx timeout. Force session deactivation [ 1261.515224][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e25e800: rx timeout, send abort [ 1261.891957][T24821] syzkaller0: entered promiscuous mode [ 1261.891983][T24821] syzkaller0: entered allmulticast mode [ 1261.947943][ T59] bridge_slave_1: left allmulticast mode [ 1261.947971][ T59] bridge_slave_1: left promiscuous mode [ 1261.948193][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.981470][ T59] bridge_slave_0: left allmulticast mode [ 1261.981499][ T59] bridge_slave_0: left promiscuous mode [ 1261.981725][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.015282][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e25e800: abort rx timeout. Force session deactivation [ 1262.082908][ T59] bridge_slave_1: left allmulticast mode [ 1262.082938][ T59] bridge_slave_1: left promiscuous mode [ 1262.083158][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.110733][ T59] bridge_slave_0: left allmulticast mode [ 1262.110762][ T59] bridge_slave_0: left promiscuous mode [ 1262.110976][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.144387][T24829] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5113'. [ 1262.195602][ T59] bridge_slave_1: left allmulticast mode [ 1262.195634][ T59] bridge_slave_1: left promiscuous mode [ 1262.195914][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.202305][ T59] bridge_slave_0: left allmulticast mode [ 1262.202333][ T59] bridge_slave_0: left promiscuous mode [ 1262.202537][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.313986][ T59] bridge_slave_1: left allmulticast mode [ 1262.314018][ T59] bridge_slave_1: left promiscuous mode [ 1262.314233][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.355324][ T59] bridge_slave_0: left allmulticast mode [ 1262.355353][ T59] bridge_slave_0: left promiscuous mode [ 1262.355558][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.410711][ T59] bridge_slave_1: left allmulticast mode [ 1262.410741][ T59] bridge_slave_1: left promiscuous mode [ 1262.410950][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.461212][ T59] bridge_slave_0: left allmulticast mode [ 1262.461243][ T59] bridge_slave_0: left promiscuous mode [ 1262.461452][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.508599][ T59] bridge_slave_1: left allmulticast mode [ 1262.508626][ T59] bridge_slave_1: left promiscuous mode [ 1262.508843][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.526298][ T59] bridge_slave_0: left allmulticast mode [ 1262.526843][ T59] bridge_slave_0: left promiscuous mode [ 1262.527571][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.624946][ T59] bridge_slave_1: left allmulticast mode [ 1262.624976][ T59] bridge_slave_1: left promiscuous mode [ 1262.625180][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.630663][ T59] bridge_slave_0: left allmulticast mode [ 1262.630690][ T59] bridge_slave_0: left promiscuous mode [ 1262.630879][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.707448][ T59] bridge_slave_1: left allmulticast mode [ 1262.707479][ T59] bridge_slave_1: left promiscuous mode [ 1262.707699][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.716345][ T59] bridge_slave_0: left allmulticast mode [ 1262.716482][ T59] bridge_slave_0: left promiscuous mode [ 1262.716993][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.810020][ T59] bridge_slave_1: left allmulticast mode [ 1262.810050][ T59] bridge_slave_1: left promiscuous mode [ 1262.810267][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.838568][ T59] bridge_slave_0: left allmulticast mode [ 1262.838596][ T59] bridge_slave_0: left promiscuous mode [ 1262.838799][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.906347][ T59] bridge_slave_1: left allmulticast mode [ 1262.906379][ T59] bridge_slave_1: left promiscuous mode [ 1262.906601][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.912921][ T59] bridge_slave_0: left allmulticast mode [ 1262.912948][ T59] bridge_slave_0: left promiscuous mode [ 1262.913242][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.998199][ T59] bridge_slave_1: left allmulticast mode [ 1262.998228][ T59] bridge_slave_1: left promiscuous mode [ 1262.998495][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.032267][ T59] bridge_slave_0: left allmulticast mode [ 1263.032295][ T59] bridge_slave_0: left promiscuous mode [ 1263.032505][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.105532][ T59] bridge_slave_1: left allmulticast mode [ 1263.105570][ T59] bridge_slave_1: left promiscuous mode [ 1263.105791][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.131703][ T59] bridge_slave_0: left allmulticast mode [ 1263.131778][ T59] bridge_slave_0: left promiscuous mode [ 1263.132319][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.202143][ T59] bridge_slave_1: left allmulticast mode [ 1263.202174][ T59] bridge_slave_1: left promiscuous mode [ 1263.202382][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.235976][ T59] bridge_slave_0: left allmulticast mode [ 1263.236006][ T59] bridge_slave_0: left promiscuous mode [ 1263.236225][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.280587][ T59] dvmrp6: left allmulticast mode [ 1263.309513][ T59] bridge_slave_1: left allmulticast mode [ 1263.309543][ T59] bridge_slave_1: left promiscuous mode [ 1263.309752][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.387543][ T59] bridge_slave_0: left allmulticast mode [ 1263.387573][ T59] bridge_slave_0: left promiscuous mode [ 1263.387844][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.473040][ T59] batman_adv: batadv0: Interface deactivated: gretap1 [ 1265.516730][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.534530][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.538147][ T59] bond0 (unregistering): Released all slaves [ 1265.930321][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.945541][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.947750][ T59] bond0 (unregistering): Released all slaves [ 1266.242506][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.252940][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.271271][ T59] bond0 (unregistering): Released all slaves [ 1266.555012][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.557006][ T59] bond0 (unregistering): Released all slaves [ 1266.822625][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.858386][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.860361][ T59] bond0 (unregistering): Released all slaves [ 1267.111256][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.127307][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.131486][ T59] bond0 (unregistering): Released all slaves [ 1267.411869][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.441601][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.460549][ T59] bond0 (unregistering): Released all slaves [ 1267.718574][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.721503][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.749754][ T59] bond0 (unregistering): Released all slaves [ 1267.979745][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.998637][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.000478][ T59] bond0 (unregistering): Released all slaves [ 1268.254503][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.259924][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.261805][ T59] bond0 (unregistering): Released all slaves [ 1268.532450][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.547156][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.550749][ T59] bond0 (unregistering): Released all slaves [ 1268.817232][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.829926][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.839343][ T59] bond0 (unregistering): Released all slaves [ 1269.132738][ T59] batman_adv: batadv0: Removing interface: gretap1 [ 1269.279128][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.310668][ T59] bond0 (unregistering): Released all slaves [ 1269.621630][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.640683][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.642922][ T59] bond0 (unregistering): Released all slaves [ 1270.143643][T10692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.143668][T10692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.145719][T24303] veth0_macvtap: entered promiscuous mode [ 1270.356110][T24303] veth1_macvtap: entered promiscuous mode [ 1270.452810][T24303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.468807][T24303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.603026][T11156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.603052][T11156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.609485][ T7985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.751484][ T7985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.767815][T11737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.769772][T11156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.510217][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5122'. [ 1271.711382][T24901] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5124'. [ 1272.000295][ T59] tipc: Left network mode [ 1272.032918][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.032939][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.337946][ T7341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.337973][ T7341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.051730][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1273.311071][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1273.311099][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1273.371586][T24947] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1273.827948][T24938] syzkaller0: entered promiscuous mode [ 1273.827975][T24938] syzkaller0: entered allmulticast mode [ 1274.133059][T24965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1274.797944][T24982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1274.797971][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1275.147167][T24993] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5153'. [ 1275.800356][T25001] syzkaller0: entered promiscuous mode [ 1275.800385][T25001] syzkaller0: entered allmulticast mode [ 1277.225119][T25046] __nla_validate_parse: 1 callbacks suppressed [ 1277.225145][T25046] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5174'. [ 1277.345816][T25050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5177'. [ 1277.446630][T25057] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5178'. [ 1277.446659][T25057] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1277.831660][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1277.831688][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1278.666286][T25095] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5193'. [ 1279.259988][T25111] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5199'. [ 1279.540725][T25117] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1279.540752][T25117] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1279.630130][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 1280.032880][T25136] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1280.979580][T25161] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1281.808559][ T5621] Bluetooth: hci17: command 0x0406 tx timeout [ 1282.429389][T25217] __nla_validate_parse: 3 callbacks suppressed [ 1282.429412][T25217] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1282.429431][T25217] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1282.600537][T25226] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5240'. [ 1282.746131][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5239'. [ 1282.959613][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1283.743932][T25265] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5256'. [ 1283.743961][T25265] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1284.011947][T25273] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5257'. [ 1284.282075][ T59] hsr_slave_0: left promiscuous mode [ 1284.317661][ T59] hsr_slave_1: left promiscuous mode [ 1284.318685][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.318708][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.351026][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.351052][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.473660][ T59] hsr_slave_0: left promiscuous mode [ 1284.489982][ T59] hsr_slave_1: left promiscuous mode [ 1284.491151][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.491175][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.511606][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.511633][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.571514][ T59] hsr_slave_0: left promiscuous mode [ 1284.576862][ T59] hsr_slave_1: left promiscuous mode [ 1284.577992][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.578014][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.612900][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.612927][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.678125][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.678151][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.692458][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.692484][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.780158][ T59] hsr_slave_0: left promiscuous mode [ 1284.806563][ T59] hsr_slave_1: left promiscuous mode [ 1284.807593][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.807617][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.827748][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.829841][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.912627][ T59] hsr_slave_0: left promiscuous mode [ 1284.918556][ T59] hsr_slave_1: left promiscuous mode [ 1284.934209][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.934237][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.966398][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.966594][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.034267][ T59] hsr_slave_0: left promiscuous mode [ 1285.077141][ T59] hsr_slave_1: left promiscuous mode [ 1285.078122][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.078146][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.111084][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.111121][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.182053][ T59] hsr_slave_0: left promiscuous mode [ 1285.200295][ T59] hsr_slave_1: left promiscuous mode [ 1285.201392][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.201417][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.220481][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.220727][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.329011][ T59] hsr_slave_0: left promiscuous mode [ 1285.386042][ T59] hsr_slave_1: left promiscuous mode [ 1285.387060][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.387083][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.419542][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.419568][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.535891][ T59] hsr_slave_0: left promiscuous mode [ 1285.550916][ T59] hsr_slave_1: left promiscuous mode [ 1285.551914][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.551937][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.586692][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.586717][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.742112][ T59] hsr_slave_0: left promiscuous mode [ 1285.766203][ T59] hsr_slave_1: left promiscuous mode [ 1285.773636][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.773663][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.839746][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.839772][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.913028][ T59] hsr_slave_0: left promiscuous mode [ 1285.936733][ T59] hsr_slave_1: left promiscuous mode [ 1285.937735][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.937758][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.940451][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.940473][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.031592][ T59] hsr_slave_0: left promiscuous mode [ 1286.042480][ T59] hsr_slave_1: left promiscuous mode [ 1286.054533][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.054559][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.084730][T25318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5274'. [ 1286.087850][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.087874][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.185328][ T59] hsr_slave_0: left promiscuous mode [ 1286.186153][ T59] hsr_slave_1: left promiscuous mode [ 1286.187122][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.187144][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.197463][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.197535][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.724629][ T59] veth1_macvtap: left promiscuous mode [ 1286.724671][ T59] veth0_macvtap: left promiscuous mode [ 1286.724779][ T59] veth1_vlan: left promiscuous mode [ 1286.724853][ T59] veth0_vlan: left promiscuous mode [ 1286.730351][ T59] veth1_macvtap: left promiscuous mode [ 1286.735679][ T59] veth0_macvtap: left promiscuous mode [ 1286.736002][ T59] veth1_vlan: left promiscuous mode [ 1286.736203][ T59] veth0_vlan: left promiscuous mode [ 1286.785722][ T59] veth1_macvtap: left promiscuous mode [ 1286.785760][ T59] veth0_macvtap: left promiscuous mode [ 1286.785888][ T59] veth1_vlan: left promiscuous mode [ 1286.786026][ T59] veth0_vlan: left promiscuous mode [ 1286.830746][ T59] veth1_macvtap: left promiscuous mode [ 1286.830788][ T59] veth0_macvtap: left promiscuous mode [ 1286.830897][ T59] veth1_vlan: left promiscuous mode [ 1286.830977][ T59] veth0_vlan: left promiscuous mode [ 1286.865712][ T59] veth1_macvtap: left promiscuous mode [ 1286.865751][ T59] veth0_macvtap: left promiscuous mode [ 1286.865861][ T59] veth1_vlan: left promiscuous mode [ 1286.865932][ T59] veth0_vlan: left promiscuous mode [ 1286.901835][ T59] veth1_macvtap: left promiscuous mode [ 1286.901895][ T59] veth0_macvtap: left promiscuous mode [ 1286.902095][ T59] veth1_vlan: left promiscuous mode [ 1286.902166][ T59] veth0_vlan: left promiscuous mode [ 1286.943515][ T59] veth1_macvtap: left promiscuous mode [ 1286.943556][ T59] veth0_macvtap: left promiscuous mode [ 1286.943662][ T59] veth1_vlan: left promiscuous mode [ 1286.943948][ T59] veth0_vlan: left promiscuous mode [ 1286.958617][ T59] veth1_macvtap: left promiscuous mode [ 1286.958660][ T59] veth0_macvtap: left promiscuous mode [ 1286.958845][ T59] veth1_vlan: left promiscuous mode [ 1286.958923][ T59] veth0_vlan: left promiscuous mode [ 1287.017511][ T59] veth1_macvtap: left promiscuous mode [ 1287.017549][ T59] veth0_macvtap: left promiscuous mode [ 1287.017657][ T59] veth1_vlan: left promiscuous mode [ 1287.017728][ T59] veth0_vlan: left promiscuous mode [ 1287.051978][ T59] veth1_macvtap: left promiscuous mode [ 1287.052094][ T59] veth0_macvtap: left promiscuous mode [ 1287.052203][ T59] veth1_vlan: left promiscuous mode [ 1287.052275][ T59] veth0_vlan: left promiscuous mode [ 1287.076826][ T59] veth1_macvtap: left promiscuous mode [ 1287.076863][ T59] veth0_macvtap: left promiscuous mode [ 1287.077006][ T59] veth1_vlan: left promiscuous mode [ 1287.077157][ T59] veth0_vlan: left promiscuous mode [ 1287.081108][ T59] veth1_macvtap: left promiscuous mode [ 1287.081144][ T59] veth0_macvtap: left promiscuous mode [ 1287.081252][ T59] veth1_vlan: left promiscuous mode [ 1287.081325][ T59] veth0_vlan: left promiscuous mode [ 1287.152677][ T59] veth1_macvtap: left promiscuous mode [ 1287.152720][ T59] veth0_macvtap: left promiscuous mode [ 1287.152826][ T59] veth1_vlan: left promiscuous mode [ 1287.152899][ T59] veth0_vlan: left promiscuous mode [ 1287.180571][ T59] veth1_macvtap: left promiscuous mode [ 1287.180733][ T59] veth0_macvtap: left promiscuous mode [ 1287.181025][ T59] veth1_vlan: left promiscuous mode [ 1287.181218][ T59] veth0_vlan: left promiscuous mode [ 1289.639517][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1289.661018][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1290.204088][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1290.227413][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1290.822138][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1290.855114][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1291.357831][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1291.401111][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1291.910492][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1291.940823][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1292.470470][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1292.506857][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1293.008189][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1293.031899][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1293.580368][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1293.601181][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1294.057397][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1294.100573][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1294.577520][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1294.608048][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1295.138633][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1295.168295][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1295.686665][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1295.718060][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1296.181192][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1296.214517][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1296.758030][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1296.798174][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1297.045737][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1297.171365][T23670] Bluetooth: hci18: command 0x0406 tx timeout [ 1298.033026][T25400] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1298.461044][T25406] syzkaller0: entered promiscuous mode [ 1298.461075][T25406] syzkaller0: entered allmulticast mode [ 1299.241318][T25445] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5324'. [ 1300.210798][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.210863][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.661513][T25428] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1304.196199][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1304.807613][T25481] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1305.150573][T25499] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5340'. [ 1305.212921][T25484] syzkaller0: entered promiscuous mode [ 1305.212949][T25484] syzkaller0: entered allmulticast mode [ 1305.474924][T25505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5343'. [ 1311.152980][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'. [ 1311.430062][T25527] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5353'. [ 1311.481542][T25528] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5354'. [ 1312.497292][T25564] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5367'. [ 1312.580291][T25551] syzkaller0: entered promiscuous mode [ 1312.580317][T25551] syzkaller0: entered allmulticast mode [ 1312.615163][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5365'. [ 1313.032940][T25576] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5368'. [ 1313.067169][T25578] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1319.201788][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1319.616660][T25612] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5381'. [ 1319.748286][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1320.113873][T25629] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1320.465370][T25640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5390'. [ 1320.531729][T25647] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1320.856137][T25659] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 1320.856160][T25659] netlink: 'syz.0.5398': attribute type 8 has an invalid length. [ 1321.022049][T25665] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5402'. [ 1321.498816][T25683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5407'. [ 1321.950551][T25696] netlink: 'syz.5.5414': attribute type 1 has an invalid length. [ 1321.950575][T25696] netlink: 'syz.5.5414': attribute type 8 has an invalid length. [ 1321.987720][T25700] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5416'. [ 1322.410211][T25717] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1322.963002][T25733] netlink: 'syz.5.5429': attribute type 1 has an invalid length. [ 1322.963026][T25733] netlink: 'syz.5.5429': attribute type 8 has an invalid length. [ 1323.233765][T25744] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5433'. [ 1324.389997][T25776] syzkaller0: entered promiscuous mode [ 1324.390024][T25776] syzkaller0: entered allmulticast mode [ 1325.006460][T25806] __nla_validate_parse: 5 callbacks suppressed [ 1325.006492][T25806] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5455'. [ 1325.006511][T25806] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1325.266298][ T59] IPVS: stop unused estimator thread 0... [ 1325.754719][T25805] syzkaller0: entered promiscuous mode [ 1325.754747][T25805] syzkaller0: entered allmulticast mode [ 1325.951882][T25822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5457'. [ 1326.352343][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880417aac00: rx timeout, send abort [ 1326.852411][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880417aac00: abort rx timeout. Force session deactivation [ 1326.852585][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880417ab400: rx timeout, send abort [ 1327.353045][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880417ab400: abort rx timeout. Force session deactivation [ 1332.145914][T25810] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1332.205416][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1332.591102][ T59] bridge_slave_1: left allmulticast mode [ 1332.591133][ T59] bridge_slave_1: left promiscuous mode [ 1332.591485][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.644755][ T59] bridge_slave_0: left allmulticast mode [ 1332.644785][ T59] bridge_slave_0: left promiscuous mode [ 1332.645015][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.766249][ T59] batman_adv: batadv0: Interface deactivated: gretap1 [ 1333.687479][ T59] batman_adv: batadv0: Removing interface: gretap1 [ 1334.163075][ T59] tipc: Left network mode [ 1334.581483][T25921] macsec1: entered promiscuous mode [ 1335.375682][ T59] hsr_slave_0: left promiscuous mode [ 1335.391517][ T59] hsr_slave_1: left promiscuous mode [ 1335.392465][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.392487][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.419443][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.419466][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.451887][ T59] veth1_macvtap: left promiscuous mode [ 1335.451937][ T59] veth0_macvtap: left promiscuous mode [ 1335.452090][ T59] veth1_vlan: left promiscuous mode [ 1335.452163][ T59] veth0_vlan: left promiscuous mode [ 1335.866922][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880438fd800: rx timeout, send abort [ 1336.367290][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880438fd800: abort rx timeout. Force session deactivation [ 1336.367408][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880438fd000: rx timeout, send abort [ 1336.422709][T25984] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1336.576262][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1336.610288][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1336.852156][T25972] macsec1: entered promiscuous mode [ 1336.867481][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880438fd000: abort rx timeout. Force session deactivation [ 1337.538767][ T59] IPVS: stop unused estimator thread 0... [ 1338.058662][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 1338.096450][T26015] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5522'. [ 1338.469358][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580ffc00: rx timeout, send abort [ 1338.789842][T26041] syzkaller1: entered promiscuous mode [ 1338.789869][T26041] syzkaller1: entered allmulticast mode [ 1338.969421][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580ffc00: abort rx timeout. Force session deactivation [ 1338.969596][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580fc400: rx timeout, send abort [ 1339.179758][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1339.439900][T26056] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5537'. [ 1339.469645][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580fc400: abort rx timeout. Force session deactivation [ 1339.997712][T11738] IPVS: starting estimator thread 0... [ 1340.083319][T26079] IPVS: using max 27 ests per chain, 64800 per kthread [ 1340.566623][T26100] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5553'. [ 1340.800295][T26109] xt_hashlimit: max too large, truncated to 1048576 [ 1341.131243][T26117] syzkaller0: entered promiscuous mode [ 1341.131273][T26117] syzkaller0: entered allmulticast mode [ 1341.572211][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1341.572239][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1341.583579][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1341.583654][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1341.931385][T26145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1347.584240][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1347.849828][T26205] batman_adv: batadv0: Adding interface: veth0 [ 1347.849850][T26205] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.849890][T26205] batman_adv: batadv0: Interface activated: veth0 [ 1347.933853][T26205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.933883][T26205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.982850][T26205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.982877][T26205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.026605][T26205] batman_adv: batadv0: Interface deactivated: veth0 [ 1348.026632][T26205] batman_adv: batadv0: Removing interface: veth0 [ 1349.638864][T26272] netlink: 'syz.0.5612': attribute type 1 has an invalid length. [ 1350.505936][T26303] ipip0: entered allmulticast mode [ 1350.525779][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1351.781434][T26352] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1351.918822][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'. [ 1352.148415][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1352.461831][T26380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5650'. [ 1352.752166][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1352.875888][T26398] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1353.299436][T26416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1353.492608][T26342] Bluetooth: hci3: command 0x0406 tx timeout [ 1353.492686][T26342] Bluetooth: hci1: command 0x0406 tx timeout [ 1353.492715][T26342] Bluetooth: hci0: command 0x0406 tx timeout [ 1354.417316][T26456] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1354.670021][T26462] netlink: 'syz.5.5676': attribute type 1 has an invalid length. [ 1354.670051][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1354.670071][T26462] netlink: 13 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1354.790507][T26464] netlink: 'syz.0.5675': attribute type 29 has an invalid length. [ 1354.790541][T26464] netlink: 'syz.0.5675': attribute type 1 has an invalid length. [ 1354.863452][T26466] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5678'. [ 1355.120103][T26477] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5682'. [ 1355.195795][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1356.974755][T26521] syzkaller0: entered promiscuous mode [ 1356.974783][T26521] syzkaller0: entered allmulticast mode [ 1361.647841][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.647902][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.129832][T26542] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1362.157840][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1362.669646][T26570] syzkaller0: entered promiscuous mode [ 1362.669673][T26570] syzkaller0: entered allmulticast mode [ 1363.057686][T26587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.061899][T26587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1363.062686][T26585] syzkaller0: entered promiscuous mode [ 1363.062711][T26585] syzkaller0: entered allmulticast mode [ 1363.418663][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1363.439595][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1363.489874][T26597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1363.700256][T26604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'. [ 1363.713779][T26604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'. [ 1364.553880][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1364.582340][T26632] syzkaller0: entered promiscuous mode [ 1364.582364][T26632] syzkaller0: entered allmulticast mode [ 1366.390516][T26694] tipc: Started in network mode [ 1366.390549][T26694] tipc: Node identity 4a2f7e26a429, cluster identity 4711 [ 1366.390726][T26694] tipc: Enabled bearer , priority 1 [ 1366.422950][T26692] tipc: Resetting bearer [ 1366.619986][T26692] tipc: Disabling bearer [ 1366.686468][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1368.031340][T26759] netlink: 'syz.5.5782': attribute type 1 has an invalid length. [ 1368.031366][T26759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5782'. [ 1368.116183][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5782'. [ 1368.141036][T26759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5782'. [ 1368.156181][T26759] hsr_slave_0: left promiscuous mode [ 1368.167617][T26759] hsr_slave_1: left promiscuous mode [ 1368.258465][T26768] syzkaller0: entered promiscuous mode [ 1368.258493][T26768] syzkaller0: entered allmulticast mode [ 1368.307209][T26766] netlink: 'syz.2.5784': attribute type 29 has an invalid length. [ 1368.307235][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5784'. [ 1368.504508][T26766] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1368.900831][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1368.930653][T26789] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5793'. [ 1368.930683][T26789] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1369.507709][T26810] syzkaller0: entered promiscuous mode [ 1369.507734][T26810] syzkaller0: entered allmulticast mode [ 1369.880909][T26821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5805'. [ 1370.379503][T26835] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5808'. [ 1370.379534][T26835] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1371.011025][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5814'. [ 1371.011117][T26852] bridge_slave_1: left allmulticast mode [ 1371.011140][T26852] bridge_slave_1: left promiscuous mode [ 1371.011403][T26852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.049694][T26852] bridge_slave_0: left allmulticast mode [ 1371.049730][T26852] bridge_slave_0: left promiscuous mode [ 1371.050043][T26852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.726244][T26870] netlink: 'syz.0.5820': attribute type 11 has an invalid length. [ 1371.951136][T26874] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1371.951165][T26874] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1372.655251][ T5279] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1372.739555][T26897] syzkaller0: entered promiscuous mode [ 1372.739581][T26897] syzkaller0: entered allmulticast mode [ 1373.400995][T26906] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1373.401025][T26906] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1373.813016][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5837'. [ 1373.849456][T26919] syz_tun: entered promiscuous mode [ 1373.850169][T26919] macvtap1: entered promiscuous mode [ 1373.851025][T26919] macvtap1: entered allmulticast mode [ 1373.851045][T26919] syz_tun: entered allmulticast mode [ 1373.897177][T26922] syz_tun: left allmulticast mode [ 1373.897378][T26922] syz_tun: left promiscuous mode [ 1373.897573][T26922] macvtap1: left promiscuous mode [ 1373.897591][T26922] macvtap1: left allmulticast mode [ 1373.960034][T26921] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5838'. [ 1374.613878][T26944] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5843'. [ 1374.882200][T26955] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1374.882228][T26955] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1375.247220][T26966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5850'. [ 1376.261500][T26986] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5856'. [ 1376.382621][T26992] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1376.382651][T26992] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1377.758076][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1378.063964][T27028] syzkaller0: entered promiscuous mode [ 1378.063990][T27028] syzkaller0: entered allmulticast mode [ 1379.018716][ C0] vcan0: j1939_tp_rxtimer: 0xffff888091f68800: rx timeout, send abort [ 1379.547077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888091f68800: abort rx timeout. Force session deactivation [ 1379.547303][ C0] vcan0: j1939_tp_rxtimer: 0xffff888091f68400: rx timeout, send abort [ 1379.805085][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5892'. [ 1379.987335][T27079] syzkaller0: entered promiscuous mode [ 1379.987364][T27079] syzkaller0: entered allmulticast mode [ 1380.049284][ C0] vcan0: j1939_tp_rxtimer: 0xffff888091f68400: abort rx timeout. Force session deactivation [ 1380.232415][T27086] netlink: 'syz.5.5898': attribute type 29 has an invalid length. [ 1380.232444][T27086] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5898'. [ 1380.552522][T27096] syzkaller0: entered promiscuous mode [ 1380.552548][T27096] syzkaller0: entered allmulticast mode [ 1381.476838][T27125] syzkaller0: entered promiscuous mode [ 1381.476864][T27125] syzkaller0: entered allmulticast mode [ 1382.060389][T27144] syzkaller0: entered promiscuous mode [ 1382.060414][T27144] syzkaller0: entered allmulticast mode [ 1382.490974][T27146] netlink: 'syz.5.5921': attribute type 29 has an invalid length. [ 1382.490998][T27146] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5921'. [ 1382.595933][T27151] syzkaller0: entered promiscuous mode [ 1382.597348][T27151] syzkaller0: entered allmulticast mode [ 1382.600054][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.981017][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081f46400: rx timeout, send abort [ 1383.481077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081f46400: abort rx timeout. Force session deactivation [ 1383.481279][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081f44c00: rx timeout, send abort [ 1383.591741][T27180] netlink: 'syz.5.5935': attribute type 29 has an invalid length. [ 1383.591769][T27180] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5935'. [ 1383.981327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081f44c00: abort rx timeout. Force session deactivation [ 1384.031615][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5939'. [ 1384.058519][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5939'. [ 1384.526498][T27213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1385.052324][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091f43c00: rx timeout, send abort [ 1385.130772][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1385.151004][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1385.161887][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1385.186526][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1385.192080][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1385.410379][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1385.430475][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1385.433557][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1385.536006][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1385.569950][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091f43c00: abort rx timeout. Force session deactivation [ 1385.570167][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091f41000: rx timeout, send abort [ 1385.570738][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1385.977482][T27254] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5958'. [ 1386.026585][T27259] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1386.070216][ C1] vcan0: j1939_tp_rxtimer: 0xffff888091f41000: abort rx timeout. Force session deactivation [ 1386.360571][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1386.894535][T27284] syzkaller0: entered promiscuous mode [ 1386.894560][T27284] syzkaller0: entered allmulticast mode [ 1387.252620][ T4934] Bluetooth: hci4: command tx timeout [ 1387.420490][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5971'. [ 1387.743370][ T5621] Bluetooth: hci5: command tx timeout [ 1387.837547][T27318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5973'. [ 1388.192538][T27250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.196504][T27250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.196767][T27250] bridge_slave_0: entered allmulticast mode [ 1388.236971][T27250] bridge_slave_0: entered promiscuous mode [ 1388.262693][T27250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.262816][T27250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.262972][T27250] bridge_slave_1: entered allmulticast mode [ 1388.267679][T27250] bridge_slave_1: entered promiscuous mode [ 1388.346724][T27237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.346870][T27237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.347006][T27237] bridge_slave_0: entered allmulticast mode [ 1388.348943][T27237] bridge_slave_0: entered promiscuous mode [ 1388.359739][T27333] syzkaller0: entered promiscuous mode [ 1388.359803][T27333] syzkaller0: entered allmulticast mode [ 1388.467430][T27237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.467629][T27237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.467762][T27237] bridge_slave_1: entered allmulticast mode [ 1388.477111][T27237] bridge_slave_1: entered promiscuous mode [ 1388.702656][T27250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.706987][T27250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.927429][T27237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.952690][T27237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.972066][T27250] team0: Port device team_slave_0 added [ 1389.009517][T27250] team0: Port device team_slave_1 added [ 1389.113750][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5982'. [ 1389.323438][ T5621] Bluetooth: hci4: command tx timeout [ 1389.401333][T27250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.401355][T27250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.401397][T27250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.418999][T27237] team0: Port device team_slave_0 added [ 1389.420922][T27250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.420938][T27250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.420969][T27250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.566256][T27237] team0: Port device team_slave_1 added [ 1389.804360][ T5621] Bluetooth: hci5: command tx timeout [ 1389.805985][T27237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.806003][T27237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.806032][T27237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.809253][T27237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.809270][T27237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.809300][T27237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.075023][T27374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1390.096501][T27250] hsr_slave_0: entered promiscuous mode [ 1390.099166][T27250] hsr_slave_1: entered promiscuous mode [ 1390.148199][T27370] syzkaller0: entered promiscuous mode [ 1390.148225][T27370] syzkaller0: entered allmulticast mode [ 1390.252885][T11739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.542404][T27237] hsr_slave_0: entered promiscuous mode [ 1390.543983][T27237] hsr_slave_1: entered promiscuous mode [ 1390.544761][T27237] debugfs: 'hsr0' already exists in 'hsr' [ 1390.544782][T27237] Cannot create hsr debugfs directory [ 1390.931200][T27388] syzkaller0: entered promiscuous mode [ 1390.931232][T27388] syzkaller0: entered allmulticast mode [ 1391.425525][ T5621] Bluetooth: hci4: command tx timeout [ 1391.792936][T27418] netlink: 592 bytes leftover after parsing attributes in process `syz.5.6001'. [ 1391.885148][ T5621] Bluetooth: hci5: command tx timeout [ 1392.438395][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6010'. [ 1392.687334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805946ac00: rx timeout, send abort [ 1393.250635][T27459] syzkaller0: entered promiscuous mode [ 1393.250662][T27459] syzkaller0: entered allmulticast mode [ 1393.341242][T11738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.483326][ T5621] Bluetooth: hci4: command tx timeout [ 1393.966420][ T5621] Bluetooth: hci5: command tx timeout [ 1394.337822][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6024'. [ 1396.009391][T27539] syzkaller0: entered promiscuous mode [ 1396.009420][T27539] syzkaller0: entered allmulticast mode [ 1396.011461][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.387587][T27250] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1396.406500][T27250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.440632][T27250] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1396.490341][T27250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.505185][T27250] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1396.566818][T27250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1396.583914][T27250] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1396.646934][T27250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.473582][T27237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1397.511584][T27237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.524677][T27237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1397.536319][T27237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1397.551093][T27250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.634055][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 1397.638438][T27237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1397.686863][T27237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.688048][T27237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1397.746980][T27237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.776614][T27250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.898846][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.898961][T11739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.962942][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.963055][T10692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.432799][T27237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.476326][T27250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.611437][T27237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.701821][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.701933][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.871665][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.871787][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.899055][T27622] netlink: 'syz.5.6063': attribute type 1 has an invalid length. [ 1398.946174][T27616] syzkaller0: entered promiscuous mode [ 1398.946201][T27616] syzkaller0: entered allmulticast mode [ 1398.968527][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.200276][T27250] veth0_vlan: entered promiscuous mode [ 1399.419471][T27250] veth1_vlan: entered promiscuous mode [ 1399.435561][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1399.506139][T27237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.674624][T27250] veth0_macvtap: entered promiscuous mode [ 1399.702425][T27237] veth0_vlan: entered promiscuous mode [ 1399.742396][T27237] veth1_vlan: entered promiscuous mode [ 1399.792089][T27250] veth1_macvtap: entered promiscuous mode [ 1399.871119][T27237] veth0_macvtap: entered promiscuous mode [ 1399.908071][T27250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.967675][T27250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.968952][T27237] veth1_macvtap: entered promiscuous mode [ 1400.230579][T27237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.274104][T11738] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.317049][T27237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.415113][ T8017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.720225][T10692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.720249][T10692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.774551][T11739] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.782104][T11739] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.836909][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.837085][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.845029][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.845124][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.132650][T10692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.132673][T10692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.150601][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6072'. [ 1401.404463][T10692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.404488][T10692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.435473][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6074'. [ 1401.692163][ T7341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.692188][ T7341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.552078][T27695] syzkaller0: entered promiscuous mode [ 1402.552104][T27695] syzkaller0: entered allmulticast mode [ 1402.565924][ T7341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.586267][T27699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1403.220945][T27722] netlink: 'syz.0.6092': attribute type 10 has an invalid length. [ 1403.567634][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6098'. [ 1403.688489][T27738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6097'. [ 1404.197755][T27744] syzkaller0: entered promiscuous mode [ 1404.197793][T27744] syzkaller0: entered allmulticast mode [ 1405.028075][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6107'. [ 1405.388058][T27779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6110'. [ 1405.480676][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6112'. [ 1413.728313][T27826] syzkaller0: entered promiscuous mode [ 1413.728343][T27826] syzkaller0: entered allmulticast mode [ 1414.243023][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1414.296154][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1414.312818][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1414.324852][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1414.328172][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1415.181396][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1415.202605][T27871] bond_slave_0: entered promiscuous mode [ 1415.202634][T27871] bond_slave_0: entered allmulticast mode [ 1415.238694][T27871] bond_slave_0: left promiscuous mode [ 1415.238722][T27871] bond_slave_0: left allmulticast mode [ 1415.682325][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1415.839296][T27887] syzkaller0: entered promiscuous mode [ 1415.839322][T27887] syzkaller0: entered allmulticast mode [ 1416.370322][ T5621] Bluetooth: hci6: command tx timeout [ 1416.769395][T27857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.769584][T27857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.769743][T27857] bridge_slave_0: entered allmulticast mode [ 1416.795964][T27857] bridge_slave_0: entered promiscuous mode [ 1416.813696][T27857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.813809][T27857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.813985][T27857] bridge_slave_1: entered allmulticast mode [ 1416.816258][T27857] bridge_slave_1: entered promiscuous mode [ 1416.892086][T27857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.907081][T27857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.950259][T27857] team0: Port device team_slave_0 added [ 1416.962090][T27857] team0: Port device team_slave_1 added [ 1417.010747][T27857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.010789][T27857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.010827][T27857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.071011][T27857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.071033][T27857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.071065][T27857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.207675][T27857] hsr_slave_0: entered promiscuous mode [ 1417.208740][T27857] hsr_slave_1: entered promiscuous mode [ 1417.209492][T27857] debugfs: 'hsr0' already exists in 'hsr' [ 1417.209513][T27857] Cannot create hsr debugfs directory [ 1417.552786][T27937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1418.086011][T27952] syzkaller0: entered promiscuous mode [ 1418.086038][T27952] syzkaller0: entered allmulticast mode [ 1418.453371][ T5621] Bluetooth: hci6: command tx timeout [ 1418.925591][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1419.286060][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6174'. [ 1419.985531][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6182'. [ 1420.174593][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1420.523357][ T5621] Bluetooth: hci6: command tx timeout [ 1421.116698][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6194'. [ 1421.227419][T28051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1421.512496][T27857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1421.528533][T27857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.529489][T27857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1421.548188][T27857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.583002][T27857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1421.668333][T27857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.669465][T27857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1421.702231][T27857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1422.604623][ T5621] Bluetooth: hci6: command tx timeout [ 1422.641058][T27857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.778012][T27857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.830268][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.830383][T11739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.894775][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.894888][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.122633][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.122712][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.546830][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6209'. [ 1423.586119][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1423.795945][T27857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.011844][T27857] veth0_vlan: entered promiscuous mode [ 1424.067759][T27857] veth1_vlan: entered promiscuous mode [ 1424.478642][T27857] veth0_macvtap: entered promiscuous mode [ 1424.490572][T27857] veth1_macvtap: entered promiscuous mode [ 1424.555306][T27857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.565969][T27857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.616190][T10692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.616377][T10692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.616547][T10692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.877491][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6224'. [ 1425.170822][T10692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.170845][T10692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.303291][T11739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.522186][ T8017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.522213][ T8017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.453765][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'. [ 1427.590676][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6251'. [ 1427.959491][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6256'. [ 1428.324830][T28245] netlink: 'syz.4.6260': attribute type 10 has an invalid length. [ 1428.325107][T28245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.325838][T28245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.336280][T28245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.336513][T28245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.336847][T28245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.336994][T28245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.349015][T28245] team0: Port device bridge0 added [ 1429.556606][T28284] netlink: 'syz.0.6275': attribute type 4 has an invalid length. [ 1429.556633][T28284] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6275'. [ 1429.559925][T28284] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1429.952289][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6279'. [ 1431.150867][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1431.472238][T28348] syzkaller0: entered promiscuous mode [ 1431.472263][T28348] syzkaller0: entered allmulticast mode [ 1432.464143][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6310'. [ 1433.456199][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6324'. [ 1433.548895][T28417] syz_tun: entered promiscuous mode [ 1433.549264][T28417] macvtap1: entered promiscuous mode [ 1433.552308][T28417] macvtap1: entered allmulticast mode [ 1433.552329][T28417] syz_tun: entered allmulticast mode [ 1434.098309][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 1435.475263][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1435.580555][T28466] macvtap2: entered promiscuous mode [ 1435.580757][T28466] macvtap2: entered allmulticast mode [ 1435.918810][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6345'. [ 1436.909850][T28503] syzkaller0: entered promiscuous mode [ 1436.909875][T28503] syzkaller0: entered allmulticast mode [ 1437.299537][T28513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1437.539297][T28517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6360'. [ 1438.700705][T28559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6376'. [ 1439.198187][T28572] syzkaller0: entered promiscuous mode [ 1439.198214][T28572] syzkaller0: entered allmulticast mode [ 1440.549565][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1440.866590][T28617] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1440.866674][T28617] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1441.067600][T28621] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 1441.067631][T28621] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 1441.424354][T28634] syzkaller0: entered promiscuous mode [ 1441.424381][T28634] syzkaller0: entered allmulticast mode [ 1441.848573][T28651] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1442.153010][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1443.285614][T28693] syzkaller0: entered promiscuous mode [ 1443.285640][T28693] syzkaller0: entered allmulticast mode [ 1443.933312][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1444.115329][T28707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1445.160871][T28743] syzkaller0: entered promiscuous mode [ 1445.160898][T28743] syzkaller0: entered allmulticast mode [ 1445.584003][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6436'. [ 1445.741895][T28759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6438'. [ 1445.945703][T28765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6439'. [ 1446.878050][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6449'. [ 1446.927251][T28797] syzkaller0: entered promiscuous mode [ 1446.927278][T28797] syzkaller0: entered allmulticast mode [ 1447.856428][T28823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6457'. [ 1448.307719][ T31] audit: type=1800 audit(1789184095.635:1175): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6456" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1449.852336][T28867] syzkaller0: entered promiscuous mode [ 1449.852372][T28867] syzkaller0: entered allmulticast mode [ 1449.972476][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6469'. [ 1450.021601][T28874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6470'. [ 1451.749431][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6484'. [ 1453.479627][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6497'. [ 1455.016788][T29011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1456.636967][T29055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6524'. [ 1456.680899][T29055] syz_tun: entered promiscuous mode [ 1456.681201][T29055] macvtap1: entered promiscuous mode [ 1456.699243][T29055] macvtap1: entered allmulticast mode [ 1456.699267][T29055] syz_tun: entered allmulticast mode [ 1456.780495][T29060] syz_tun: left allmulticast mode [ 1456.780716][T29060] syz_tun: left promiscuous mode [ 1456.812463][T29060] macvtap1: left promiscuous mode [ 1456.812490][T29060] macvtap1: left allmulticast mode [ 1458.573262][T14035] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1458.724957][T14035] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1458.726442][T14035] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.726469][T14035] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1458.726528][T14035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.729643][T14035] usb 5-1: config 0 descriptor?? [ 1458.780265][T14035] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1458.780314][T14035] dvb-usb: bulk message failed: -22 (3/0) [ 1458.796308][T14035] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1458.797712][T14035] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1458.797767][T14035] usb 5-1: media controller created [ 1458.799442][T14035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1458.836549][T14035] dvb-usb: bulk message failed: -22 (6/0) [ 1458.836636][T14035] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1458.885431][T14035] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input117 [ 1458.900284][T14035] dvb-usb: schedule remote query interval to 150 msecs. [ 1458.900368][T14035] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1459.053655][T14035] dvb-usb: bulk message failed: -22 (1/0) [ 1459.053690][T14035] dvb-usb: error while querying for an remote control event. [ 1459.214054][T14035] dvb-usb: bulk message failed: -22 (1/0) [ 1459.214091][T14035] dvb-usb: error while querying for an remote control event. [ 1459.351722][T29120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1459.374479][ T5350] dvb-usb: bulk message failed: -22 (1/0) [ 1459.374514][ T5350] dvb-usb: error while querying for an remote control event. [ 1459.533194][ T5350] dvb-usb: bulk message failed: -22 (1/0) [ 1459.533230][ T5350] dvb-usb: error while querying for an remote control event. [ 1459.713324][T14035] dvb-usb: bulk message failed: -22 (1/0) [ 1459.713372][T14035] dvb-usb: error while querying for an remote control event. [ 1459.873263][ T5350] dvb-usb: bulk message failed: -22 (1/0) [ 1459.873316][ T5350] dvb-usb: error while querying for an remote control event. [ 1459.920908][T18468] usb 5-1: USB disconnect, device number 109 [ 1460.049375][T18468] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1461.272640][T29169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6553'. [ 1461.834318][ T31] audit: type=1800 audit(1789184109.155:1176): pid=29184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6557" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1462.863228][T18468] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1463.023295][T18468] usb 5-1: Using ep0 maxpacket: 16 [ 1463.025363][T18468] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1463.029428][T18468] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 1463.029456][T18468] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 1463.029479][T18468] usb 5-1: config 166 has no interface number 0 [ 1463.029498][T18468] usb 5-1: config 166 has no interface number 1 [ 1463.029563][T18468] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1463.029588][T18468] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1463.029631][T18468] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1463.029660][T18468] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1463.029696][T18468] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1463.029726][T18468] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1463.029754][T18468] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1463.029783][T18468] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1463.029808][T18468] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1463.029920][T18468] usb 5-1: config 166 interface 177 has no altsetting 0 [ 1463.029943][T18468] usb 5-1: config 166 interface 34 has no altsetting 0 [ 1463.246652][T18468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.246690][T18468] usb 5-1: Product: syz [ 1463.246706][T18468] usb 5-1: Manufacturer: syz [ 1463.246723][T18468] usb 5-1: SerialNumber: syz [ 1463.777974][T29221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6567'. [ 1465.821017][T18468] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 1466.016070][T18468] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 1466.130602][T18468] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 1466.171425][T18468] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1466.171481][T18468] uvcvideo 5-1:166.34: No valid video chain found. [ 1466.212139][T18468] usb 5-1: USB disconnect, device number 110 [ 1466.320498][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6584'. [ 1467.094862][T29306] syzkaller0: entered promiscuous mode [ 1467.094888][T29306] syzkaller0: entered allmulticast mode [ 1468.935764][T29367] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1469.262160][T29379] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1469.475771][T29378] syzkaller0: entered promiscuous mode [ 1469.475798][T29378] syzkaller0: entered allmulticast mode [ 1470.354926][ T1220] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1470.625196][ T1220] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1470.644122][ T1220] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.644152][ T1220] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1470.644217][ T1220] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.647479][ T1220] usb 9-1: config 0 descriptor?? [ 1470.652079][ T1220] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1470.652127][ T1220] dvb-usb: bulk message failed: -22 (3/0) [ 1470.659301][ T1220] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1470.660636][ T1220] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1470.660695][ T1220] usb 9-1: media controller created [ 1470.700148][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.799665][ T1220] dvb-usb: bulk message failed: -22 (6/0) [ 1470.799749][ T1220] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1470.850284][ T1220] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input118 [ 1470.852181][ T1220] dvb-usb: schedule remote query interval to 150 msecs. [ 1470.852203][ T1220] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1471.003405][ T1220] dvb-usb: bulk message failed: -22 (1/0) [ 1471.003442][ T1220] dvb-usb: error while querying for an remote control event. [ 1471.163443][T14035] dvb-usb: bulk message failed: -22 (1/0) [ 1471.163481][T14035] dvb-usb: error while querying for an remote control event. [ 1471.332862][ T1220] dvb-usb: bulk message failed: -22 (1/0) [ 1471.332898][ T1220] dvb-usb: error while querying for an remote control event. [ 1471.484741][T14035] dvb-usb: bulk message failed: -22 (1/0) [ 1471.484778][T14035] dvb-usb: error while querying for an remote control event. [ 1471.583362][T14035] usb 9-1: USB disconnect, device number 18 [ 1471.725385][T14035] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1478.455150][T29385] syzkaller0: entered promiscuous mode [ 1478.455180][T29385] syzkaller0: entered allmulticast mode [ 1480.387113][T29482] syzkaller0: entered promiscuous mode [ 1480.387141][T29482] syzkaller0: entered allmulticast mode [ 1481.303514][T29506] syzkaller0: entered promiscuous mode [ 1481.303542][T29506] syzkaller0: entered allmulticast mode [ 1481.313847][T29163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.502260][T29517] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6646'. [ 1481.935430][T29526] syzkaller0: entered promiscuous mode [ 1481.935456][T29526] syzkaller0: entered allmulticast mode [ 1484.565009][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.565088][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.018530][T29571] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1490.360973][T29566] syzkaller0: entered promiscuous mode [ 1490.361001][T29566] syzkaller0: entered allmulticast mode [ 1491.196966][T29594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6673'. [ 1491.632042][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6675'. [ 1498.833044][T29608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6677'. [ 1505.833712][T29713] netlink: 'syz.1.6713': attribute type 2 has an invalid length. [ 1506.006219][T29716] FAULT_INJECTION: forcing a failure. [ 1506.006219][T29716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.006260][T29716] CPU: 0 UID: 0 PID: 29716 Comm: syz.6.6714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.006292][T29716] Tainted: [L]=SOFTLOCKUP [ 1506.006305][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1506.006320][T29716] Call Trace: [ 1506.006330][T29716] [ 1506.006341][T29716] dump_stack_lvl+0xe8/0x150 [ 1506.006381][T29716] should_fail_ex+0x410/0x560 [ 1506.006415][T29716] _copy_from_user+0x2d/0xb0 [ 1506.006446][T29716] snd_seq_write+0x309/0x820 [ 1506.006496][T29716] ? __pfx_snd_seq_write+0x10/0x10 [ 1506.006534][T29716] ? bpf_lsm_file_permission+0x9/0x20 [ 1506.006567][T29716] ? security_file_permission+0x75/0x260 [ 1506.006607][T29716] ? rw_verify_area+0x203/0x4c0 [ 1506.006645][T29716] ? __pfx_snd_seq_write+0x10/0x10 [ 1506.006676][T29716] vfs_write+0x296/0xba0 [ 1506.006721][T29716] ? __pfx_vfs_write+0x10/0x10 [ 1506.006758][T29716] ? __fget_files+0x2a/0x420 [ 1506.006793][T29716] ? __fget_files+0x2a/0x420 [ 1506.006823][T29716] ? __fget_files+0x3a2/0x420 [ 1506.006853][T29716] ? __fget_files+0x2a/0x420 [ 1506.006894][T29716] ksys_write+0x150/0x270 [ 1506.006932][T29716] ? __pfx_ksys_write+0x10/0x10 [ 1506.006977][T29716] __do_fast_syscall_32+0x27a/0x6a0 [ 1506.007028][T29716] ? do_fast_syscall_32+0x33/0x70 [ 1506.007054][T29716] ? asm_int80_emulation+0x1a/0x20 [ 1506.007078][T29716] ? do_int80_emulation+0x299/0x500 [ 1506.007103][T29716] ? trace_irq_disable+0x3b/0x140 [ 1506.007132][T29716] do_fast_syscall_32+0x33/0x70 [ 1506.007159][T29716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1506.007187][T29716] RIP: 0023:0xf709f0ec [ 1506.007208][T29716] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1506.007229][T29716] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1506.007255][T29716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1506.007272][T29716] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1506.007287][T29716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1506.007301][T29716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1506.007315][T29716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1506.007349][T29716] [ 1506.353733][T29717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1508.800724][T29762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6727'. [ 1509.933957][T29779] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1511.626948][T29813] FAULT_INJECTION: forcing a failure. [ 1511.626948][T29813] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.626989][T29813] CPU: 1 UID: 0 PID: 29813 Comm: syz.0.6742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.627020][T29813] Tainted: [L]=SOFTLOCKUP [ 1511.627030][T29813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1511.627044][T29813] Call Trace: [ 1511.627053][T29813] [ 1511.627064][T29813] dump_stack_lvl+0xe8/0x150 [ 1511.627102][T29813] should_fail_ex+0x410/0x560 [ 1511.627134][T29813] should_failslab+0xa8/0x100 [ 1511.627165][T29813] __kvmalloc_node_noprof+0x176/0x820 [ 1511.627194][T29813] ? __kvmalloc_node_noprof+0x345/0x820 [ 1511.627219][T29813] ? bpf_compute_postorder+0xda/0x970 [ 1511.627241][T29813] ? bpf_compute_postorder+0xda/0x970 [ 1511.627272][T29813] bpf_compute_postorder+0xda/0x970 [ 1511.627296][T29813] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1511.627327][T29813] ? add_kfuncs+0x251/0x2e0 [ 1511.627357][T29813] bpf_check+0x24d6/0x2e10 [ 1511.627395][T29813] ? ktime_get_with_offset+0x93/0x2d0 [ 1511.627426][T29813] ? __pfx_bpf_check+0x10/0x10 [ 1511.627454][T29813] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1511.627491][T29813] bpf_prog_load+0x14d6/0x1c20 [ 1511.627528][T29813] ? __pfx_bpf_prog_load+0x10/0x10 [ 1511.627592][T29813] __sys_bpf+0xd0d/0xd90 [ 1511.627626][T29813] ? __pfx___sys_bpf+0x10/0x10 [ 1511.627655][T29813] ? ksys_write+0x1e6/0x270 [ 1511.627693][T29813] ? __mutex_unlock_slowpath+0x731/0x900 [ 1511.627741][T29813] ? fput+0xa0/0xd0 [ 1511.627772][T29813] ? ksys_write+0x242/0x270 [ 1511.627811][T29813] __ia32_sys_bpf+0xba/0xd0 [ 1511.627838][T29813] __do_fast_syscall_32+0x27a/0x6a0 [ 1511.627865][T29813] ? do_fast_syscall_32+0x33/0x70 [ 1511.627890][T29813] ? asm_int80_emulation+0x1a/0x20 [ 1511.627913][T29813] ? do_int80_emulation+0x299/0x500 [ 1511.627937][T29813] ? trace_irq_disable+0x3b/0x140 [ 1511.627965][T29813] do_fast_syscall_32+0x33/0x70 [ 1511.627992][T29813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1511.628020][T29813] RIP: 0023:0xf704f0ec [ 1511.628041][T29813] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1511.628060][T29813] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1511.628086][T29813] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 1511.628101][T29813] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1511.628115][T29813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1511.628129][T29813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1511.628143][T29813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1511.628176][T29813] [ 1511.951657][T29816] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6743'. [ 1512.193663][T29816] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1512.193701][T29816] bond1: entered allmulticast mode [ 1512.195926][T29818] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1512.212986][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 1512.213026][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 1512.641122][T14035] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1512.815577][T14035] usb 9-1: device descriptor read/64, error -71 [ 1512.831852][T29847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6752'. [ 1513.064243][T14035] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1513.203262][T14035] usb 9-1: device descriptor read/64, error -71 [ 1513.321392][T14035] usb usb9-port1: attempt power cycle [ 1513.660573][T14035] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1513.725668][T14035] usb 9-1: device descriptor read/8, error -71 [ 1513.973198][T14035] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1513.974594][T29880] FAULT_INJECTION: forcing a failure. [ 1513.974594][T29880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.974630][T29880] CPU: 1 UID: 0 PID: 29880 Comm: syz.1.6759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.974660][T29880] Tainted: [L]=SOFTLOCKUP [ 1513.974669][T29880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1513.974683][T29880] Call Trace: [ 1513.974692][T29880] [ 1513.974702][T29880] dump_stack_lvl+0xe8/0x150 [ 1513.974741][T29880] should_fail_ex+0x410/0x560 [ 1513.974776][T29880] _copy_from_user+0x2d/0xb0 [ 1513.974806][T29880] do_tcp_setsockopt+0x504/0x1f80 [ 1513.974947][T29880] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1513.974996][T29880] ? __pfx___mutex_lock+0x10/0x10 [ 1513.975034][T29880] ? sock_common_setsockopt+0x36/0xc0 [ 1513.975064][T29880] ? tcp_setsockopt+0x3d/0xe0 [ 1513.975098][T29880] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1513.975123][T29880] smc_setsockopt+0x232/0xb00 [ 1513.975218][T29880] ? __pfx_smc_setsockopt+0x10/0x10 [ 1513.975248][T29880] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1513.975277][T29880] ? __pfx_smc_setsockopt+0x10/0x10 [ 1513.975301][T29880] do_sock_setsockopt+0x17c/0x1b0 [ 1513.975341][T29880] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1513.975376][T29880] __do_fast_syscall_32+0x27a/0x6a0 [ 1513.975404][T29880] ? do_fast_syscall_32+0x33/0x70 [ 1513.975430][T29880] ? asm_int80_emulation+0x1a/0x20 [ 1513.975452][T29880] ? do_int80_emulation+0x299/0x500 [ 1513.975477][T29880] ? trace_irq_disable+0x3b/0x140 [ 1513.975505][T29880] do_fast_syscall_32+0x33/0x70 [ 1513.975532][T29880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.975561][T29880] RIP: 0023:0xf7f880ec [ 1513.975582][T29880] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1513.975602][T29880] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1513.975628][T29880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1513.975644][T29880] RDX: 0000000000000002 RSI: 0000000080000380 RDI: 0000000000000004 [ 1513.975658][T29880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1513.975673][T29880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1513.975687][T29880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1513.975721][T29880] [ 1513.979818][ T32] INFO: task syz.3.5803:26816 blocked for more than 143 seconds. [ 1513.979841][ T32] Tainted: G L syzkaller #0 [ 1513.979852][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1513.979861][ T32] task:syz.3.5803 state:D stack:26480 pid:26816 tgid:26815 ppid:24303 task_flags:0x400140 flags:0x08080002 [ 1513.979920][ T32] Call Trace: [ 1513.979928][ T32] [ 1513.979940][ T32] __schedule+0x17db/0x58f0 [ 1513.979992][ T32] ? __skb_flow_dissect+0x652a/0x6d50 [ 1513.980024][ T32] ? __pfx___schedule+0x10/0x10 [ 1513.980061][ T32] ? schedule+0x90/0x2b0 [ 1513.980092][ T32] schedule+0x164/0x2b0 [ 1513.980123][ T32] schedule_preempt_disabled+0x13/0x30 [ 1513.980141][ T32] __mutex_lock+0x7c1/0x1550 [ 1513.980168][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1513.980192][ T32] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 1513.980220][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1513.980251][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1513.980279][ T32] nfnetlink_rcv_msg+0xa69/0x12b0 [ 1513.980303][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1513.980340][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1513.980381][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1513.980445][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1513.980474][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1513.980502][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1513.980540][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1513.980559][ T32] ? security_capable+0x7e/0x2c0 [ 1513.980591][ T32] nfnetlink_rcv+0x2b9/0x28c0 [ 1513.980638][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1513.980680][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1513.980705][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1513.980725][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1513.980749][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1513.980772][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1513.980797][ T32] ? __dev_queue_xmit+0x1edc/0x3820 [ 1513.980823][ T32] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1513.980847][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1513.980881][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1513.980907][ T32] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1513.980942][ T32] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1513.980982][ T32] ? ref_tracker_free+0x689/0x830 [ 1513.981014][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1513.981042][ T32] ? __asan_memcpy+0x40/0x70 [ 1513.981077][ T32] ? __skb_clone+0x5c/0x6c0 [ 1513.981114][ T32] ? __skb_clone+0x449/0x6c0 ** replaying previous printk message ** [ 1513.981114][ T32] ? __skb_clone+0x449/0x6c0 [ 1513.992894][ T32] ? skb_clone+0x246/0x3a0 [ 1513.992940][ T32] ? __netlink_deliver_tap+0x811/0x860 [ 1513.992976][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1513.993016][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1513.993050][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1513.993170][ T32] netlink_unicast+0x7bd/0x940 [ 1513.993215][ T32] netlink_sendmsg+0x813/0xb40 [ 1513.993259][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.993301][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1513.993345][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.993379][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1513.993419][ T32] ____sys_sendmsg+0x54e/0x850 [ 1513.993456][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1513.993495][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1513.993545][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1513.993575][ T32] ? __lock_acquire+0x747/0x2de0 [ 1513.993605][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1513.993640][ T32] ? futex_wait+0x2a2/0x390 [ 1513.993748][ T32] ? __fget_files+0x2a/0x420 [ 1513.993781][ T32] ? __fget_files+0x3a2/0x420 [ 1513.993824][ T32] __sys_sendmsg+0x177/0x240 [ 1513.993858][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1513.993910][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1513.993940][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1513.993968][ T32] ? irqentry_exit+0x10f/0x910 [ 1513.993991][ T32] ? trace_irq_disable+0x3b/0x140 [ 1513.994020][ T32] do_fast_syscall_32+0x33/0x70 [ 1513.994048][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.994078][ T32] RIP: 0023:0xf704f0ec [ 1513.994098][ T32] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1513.994124][ T32] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1513.994141][ T32] RDX: 0000000000040800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1513.994156][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1513.994171][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1513.994186][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1513.994220][ T32] [ 1513.994233][ T32] INFO: task syz.2.5804:26820 blocked for more than 143 seconds. [ 1513.994254][ T32] Tainted: G L syzkaller #0 [ 1513.994268][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1513.994280][ T32] task:syz.2.5804 state:D stack:26696 pid:26820 tgid:26817 ppid:23565 task_flags:0x400140 flags:0x08080002 [ 1514.007722][T14035] usb 9-1: device descriptor read/8, error -71 [ 1514.029771][ T32] Call Trace: [ 1514.029784][ T32] [ 1514.029800][ T32] __schedule+0x17db/0x58f0 [ 1514.029865][ T32] ? __skb_flow_dissect+0x652a/0x6d50 [ 1514.029903][ T32] ? __pfx___schedule+0x10/0x10 [ 1514.029948][ T32] ? schedule+0x90/0x2b0 [ 1514.029987][ T32] schedule+0x164/0x2b0 [ 1514.030025][ T32] schedule_preempt_disabled+0x13/0x30 [ 1514.030048][ T32] __mutex_lock+0x7c1/0x1550 [ 1514.030079][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1514.030108][ T32] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.030141][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1514.030181][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1514.030216][ T32] nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.030246][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1514.030276][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1514.030325][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1514.030408][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1514.030443][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1514.030476][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1514.030537][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1514.030558][ T32] ? security_capable+0x7e/0x2c0 [ 1514.030593][ T32] nfnetlink_rcv+0x2b9/0x28c0 [ 1514.030627][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.030670][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1514.030702][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1514.030726][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.030756][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1514.030785][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.030816][ T32] ? __dev_queue_xmit+0x1edc/0x3820 [ 1514.030847][ T32] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1514.030873][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1514.030912][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.030945][ T32] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1514.030982][ T32] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1514.031022][ T32] ? ref_tracker_free+0x689/0x830 [ 1514.031054][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1514.031081][ T32] ? __asan_memcpy+0x40/0x70 [ 1514.031116][ T32] ? __skb_clone+0x5c/0x6c0 [ 1514.031151][ T32] ? __skb_clone+0x449/0x6c0 [ 1514.031188][ T32] ? skb_clone+0x246/0x3a0 [ 1514.124610][T14035] usb usb9-port1: unable to enumerate USB device [ 1514.239278][ T32] ? __netlink_deliver_tap+0x811/0x860 [ 1514.239401][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.239505][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.239588][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.239699][ T32] netlink_unicast+0x7bd/0x940 [ 1514.239812][ T32] netlink_sendmsg+0x813/0xb40 [ 1514.239926][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.240045][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1514.240134][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.240221][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1514.255783][ T32] ____sys_sendmsg+0x54e/0x850 [ 1514.255920][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.256026][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1514.256135][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1514.256204][ T32] ? __lock_acquire+0x747/0x2de0 [ 1514.256288][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.256374][ T32] ? futex_wait+0x2a2/0x390 [ 1514.258789][ T32] ? __fget_files+0x2a/0x420 [ 1514.258895][ T32] ? __fget_files+0x3a2/0x420 [ 1514.259031][ T32] __sys_sendmsg+0x177/0x240 [ 1514.259119][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1514.259252][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1514.259336][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1514.353425][ T32] ? irqentry_exit+0x10f/0x910 [ 1514.353519][ T32] ? trace_irq_disable+0x3b/0x140 [ 1514.353597][ T32] do_fast_syscall_32+0x33/0x70 [ 1514.353694][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.353782][ T32] RIP: 0023:0xf707f0ec [ 1514.353834][ T32] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1514.353898][ T32] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1514.353942][ T32] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.353983][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.354016][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1514.354056][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.354141][ T32] [ 1514.354219][ T32] INFO: task syz.2.5804:26825 blocked for more than 143 seconds. [ 1514.354277][ T32] Tainted: G L syzkaller #0 [ 1514.354310][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1514.354339][ T32] task:syz.2.5804 state:D stack:26712 pid:26825 tgid:26817 ppid:23565 task_flags:0x400140 flags:0x08080002 [ 1514.354569][ T32] Call Trace: [ 1514.354591][ T32] [ 1514.354627][ T32] __schedule+0x17db/0x58f0 [ 1514.354782][ T32] ? __skb_flow_dissect+0x652a/0x6d50 [ 1514.354877][ T32] ? __pfx___schedule+0x10/0x10 [ 1514.354998][ T32] ? schedule+0x90/0x2b0 [ 1514.382799][ T32] schedule+0x164/0x2b0 [ 1514.382951][ T32] schedule_preempt_disabled+0x13/0x30 [ 1514.383025][ T32] __mutex_lock+0x7c1/0x1550 [ 1514.383188][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1514.383264][ T32] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.383358][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1514.383456][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1514.383550][ T32] nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.383625][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1514.383695][ T32] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1514.383881][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1514.384090][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1514.384170][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1514.390436][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1514.390583][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1514.390638][ T32] ? security_capable+0x7e/0x2c0 [ 1514.390750][ T32] nfnetlink_rcv+0x2b9/0x28c0 [ 1514.390847][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.390929][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1514.391013][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1514.391093][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.391170][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1514.391239][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.391318][ T32] ? __dev_queue_xmit+0x1edc/0x3820 [ 1514.391397][ T32] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1514.391524][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1514.391621][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 1514.391715][ T32] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1514.391814][ T32] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1514.391922][ T32] ? ref_tracker_free+0x689/0x830 [ 1514.405015][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1514.405113][ T32] ? __asan_memcpy+0x40/0x70 [ 1514.405259][ T32] ? __skb_clone+0x5c/0x6c0 [ 1514.405326][ T32] ? __skb_clone+0x449/0x6c0 [ 1514.405362][ T32] ? skb_clone+0x246/0x3a0 [ 1514.405421][ T32] ? __netlink_deliver_tap+0x811/0x860 [ 1514.405455][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.405494][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.405552][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.405592][ T32] netlink_unicast+0x7bd/0x940 [ 1514.405636][ T32] netlink_sendmsg+0x813/0xb40 [ 1514.405724][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.405767][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1514.405796][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.405828][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1514.405868][ T32] ____sys_sendmsg+0x54e/0x850 [ 1514.405905][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.405942][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1514.405985][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1514.406015][ T32] ? __lock_acquire+0x747/0x2de0 [ 1514.406044][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.406077][ T32] ? futex_wait+0x2a2/0x390 [ 1514.406141][ T32] ? __fget_files+0x2a/0x420 [ 1514.406259][ T32] ? __fget_files+0x3a2/0x420 [ 1514.406382][ T32] __sys_sendmsg+0x177/0x240 [ 1514.406461][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1514.416089][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1514.416180][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1514.416284][ T32] ? irqentry_exit+0x10f/0x910 [ 1514.416348][ T32] ? trace_irq_disable+0x3b/0x140 [ 1514.416422][ T32] do_fast_syscall_32+0x33/0x70 [ 1514.416487][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.416576][ T32] RIP: 0023:0xf707f0ec [ 1514.416596][ T32] RSP: 002b:00000000f544c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1514.416621][ T32] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1514.416637][ T32] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.416652][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.416671][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1514.416686][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.416927][ T32] [ 1514.417274][ T32] [ 1514.417274][ T32] Showing all locks held in the system: [ 1514.417308][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1514.417357][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1514.417517][ T32] #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1514.417871][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1514.417912][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1514.418141][ T32] locks held by getty/5376: 2, on CPU#1: [ 1514.418186][ T32] #0: ffff888035fa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1514.418396][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1514.418563][ T32] locks held by syz.3.3115/15125: 1, last CPU#1: [ 1514.418598][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 1514.418815][ T32] locks held by syz.3.5803/26816: 1, on CPU#0: [ 1514.418857][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.419017][ T32] locks held by syz.2.5804/26820: 1, on CPU#1: [ 1514.419058][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.419211][ T32] locks held by syz.2.5804/26825: 1, on CPU#1: [ 1514.419252][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.419418][ T32] locks held by syz.5.6063/27622: 1, on CPU#1: [ 1514.419460][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.419650][ T32] locks held by kworker/u8:25/29836: 3, last CPU#1: [ 1514.419708][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1514.419866][ T32] #1: ffffc90003b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1514.420037][ T32] #2: ffff888078670258 (&devlink->lock_key#38){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1514.420318][ T32] locks held by kworker/u8:26/29837: 3, last CPU#1: [ 1514.420360][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1514.420525][ T32] #1: ffffc90003b27c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1514.420712][ T32] #2: ffff888056c32258 (&devlink->lock_key#36){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1514.420894][ T32] locks held by syz.4.6753/29850: 1, on CPU#0: [ 1514.420937][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 1514.421115][ T32] locks held by syz.6.6756/29873: 1, last CPU#1: [ 1514.421157][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 1514.421307][ T32] locks held by syz.6.6756/29875: 4, last CPU#1: [ 1514.421342][ T32] #0: ffff88802b981d38 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1514.421489][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1514.421657][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1514.421823][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1514.421979][ T32] locks held by syz.1.6759/29880: 2, last CPU#1: [ 1514.422032][ T32] #0: ffff88807f449d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1514.422200][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1514.422356][ T32] locks held by syz-executor/29881: 4, last CPU#0: [ 1514.422398][ T32] #0: ffff88804528ba88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1514.422560][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1514.422729][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1514.483499][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1514.483719][ T32] [ 1514.483740][ T32] ============================================= [ 1514.483740][ T32] [ 1514.483764][ T32] NMI backtrace for cpu 1 [ 1514.483815][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.483889][ T32] Tainted: [L]=SOFTLOCKUP [ 1514.483911][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1514.483952][ T32] Call Trace: [ 1514.483982][ T32] [ 1514.484012][ T32] dump_stack_lvl+0xe8/0x150 [ 1514.484119][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1514.484201][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1514.484318][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1514.484414][ T32] sys_info+0x135/0x170 [ 1514.484488][ T32] watchdog+0xfd7/0x1030 [ 1514.484575][ T32] ? watchdog+0x1c7/0x1030 [ 1514.484651][ T32] kthread+0x38b/0x480 [ 1514.484723][ T32] ? __pfx_watchdog+0x10/0x10 [ 1514.484776][ T32] ? __pfx_kthread+0x10/0x10 [ 1514.484833][ T32] ret_from_fork+0x514/0xb70 [ 1514.484905][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1514.484992][ T32] ? __switch_to+0xc89/0x1420 [ 1514.485077][ T32] ? __pfx_kthread+0x10/0x10 [ 1514.485141][ T32] ret_from_fork_asm+0x1a/0x30 [ 1514.485261][ T32] [ 1514.485394][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1514.485468][ C0] NMI backtrace for cpu 0 [ 1514.485485][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.485511][ C0] Tainted: [L]=SOFTLOCKUP [ 1514.485518][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1514.485530][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1514.485618][ C0] Code: 34 55 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3c 34 c5 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 1514.485635][ C0] RSP: 0000:ffffc90000157900 EFLAGS: 00000002 [ 1514.485651][ C0] RAX: 0000000000000030 RBX: 0000000000000030 RCX: 0000000000000000 [ 1514.485665][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 1514.485677][ C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 1514.485689][ C0] R10: dffffc0000000000 R11: ffffffff857295f0 R12: dffffc0000000000 [ 1514.485704][ C0] R13: 0000000000000030 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 1514.485717][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1514.485734][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1514.485747][ C0] CR2: 00000000f7088f9e CR3: 00000000a4256000 CR4: 00000000003526f0 [ 1514.485764][ C0] Call Trace: [ 1514.485772][ C0] [ 1514.485782][ C0] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 1514.485814][ C0] serial8250_console_write+0xaa1/0x1200 [ 1514.485840][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1514.485860][ C0] ? __schedule+0x17f1/0x58f0 [ 1514.485898][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1514.485929][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1514.485953][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1514.485982][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1514.486014][ C0] nbcon_kthread_func+0x679/0x880 [ 1514.486037][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1514.486056][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1514.486080][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1514.486108][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1514.486138][ C0] kthread+0x38b/0x480 [ 1514.486163][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1514.486182][ C0] ? __pfx_kthread+0x10/0x10 [ 1514.486201][ C0] ret_from_fork+0x514/0xb70 [ 1514.486223][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1514.486255][ C0] ? __switch_to+0xc89/0x1420 [ 1514.486282][ C0] ? __pfx_kthread+0x10/0x10 [ 1514.486303][ C0] ret_from_fork_asm+0x1a/0x30 [ 1514.486343][ C0] [ 1514.496115][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1516.338439][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.349147][ T32] Tainted: [L]=SOFTLOCKUP [ 1516.353498][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.363588][ T32] Call Trace: [ 1516.366898][ T32] [ 1516.369859][ T32] vpanic+0x56d/0xa60 [ 1516.373888][ T32] ? __pfx___schedule+0x10/0x10 [ 1516.378792][ T32] ? __pfx_vpanic+0x10/0x10 [ 1516.383346][ T32] panic+0xc5/0xd0 [ 1516.387116][ T32] ? __pfx_panic+0x10/0x10 [ 1516.391576][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1516.397072][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1516.402484][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1516.408688][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1516.414890][ T32] watchdog+0x1030/0x1030 [ 1516.419271][ T32] ? watchdog+0x1c7/0x1030 [ 1516.423723][ T32] kthread+0x38b/0x480 [ 1516.427828][ T32] ? __pfx_watchdog+0x10/0x10 [ 1516.432530][ T32] ? __pfx_kthread+0x10/0x10 [ 1516.437149][ T32] ret_from_fork+0x514/0xb70 [ 1516.441776][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.446933][ T32] ? __switch_to+0xc89/0x1420 [ 1516.451646][ T32] ? __pfx_kthread+0x10/0x10 [ 1516.456266][ T32] ret_from_fork_asm+0x1a/0x30 [ 1516.461092][ T32] [ 1516.464300][ T32] Kernel Offset: disabled [ 1516.468635][ T32] Rebooting in 86400 seconds..