last executing test programs: 6m37.001553976s ago: executing program 1 (id=3579): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="30f809ef1800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f67fce8f67b46690b770fdfdfd0aff2486ce6ef1424d378bb6e143110f1d7cf082f232b2ae81f868cfbe5a9679f8a017f9390e034871cbf9ad804f2af035d1af820081229c02d781cb24808213118bc2e162e2402983c1fd1e9cb07c5621d8550"], 0x0, 0x34}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000240)=@raw=[@ringbuf_query], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_skb=0x1, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x2ee7}, 0x94) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket(0x2, 0x3, 0xff) (rerun: 64) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x38}}], 0x1, 0x40048c0) (async, rerun: 32) mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf00) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x18) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4404c880) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 6m35.509389106s ago: executing program 1 (id=3583): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001000028"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) unshare(0x20000400) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1000004, 0x0, 0x2, 0x0, {0xa, 0x4e01, 0xc54, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}}}, 0x3a) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x2f, 0x7f, 0x3, 0x8, 0x4d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x8000, 0x7, 0x475}}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 6m34.191191662s ago: executing program 1 (id=3589): r0 = socket(0x2b, 0x3, 0x1) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}}, 0x20}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES16=0x0], 0x32600) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r7, 0x0, 0x8000) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ERROR_CLEARALL(r10, 0x40085875) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) pipe(0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 6m26.145379208s ago: executing program 1 (id=3616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x8}]}}, 0x0, 0x26, 0x0, 0x1, 0x9b2987a4, 0x10000, @value=r0}, 0x28) 6m24.18884513s ago: executing program 1 (id=3624): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000003700000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x7, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtfilter={0x1100, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x10d0, 0x2, [@TCA_ROUTE4_POLICE={0x860, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x4, 0xffffffff, 0x7, {0x9, 0x2, 0x3, 0x5bd, 0x4, 0xb5}, {0x4, 0x0, 0x8001, 0x7, 0x8bd1, 0x5}, 0x9, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x71, 0xf0e8, 0x36b9, 0x3ce8, 0x8, 0x9, 0x8000, 0x7, 0xb, 0x8, 0xb, 0x2, 0x8, 0x7, 0x4, 0x10000, 0x3, 0x0, 0x9, 0x2, 0x0, 0x7, 0x4e, 0x6, 0x0, 0x93ef, 0x9, 0x400, 0x1016, 0x2, 0x101, 0xc, 0x4, 0xa8b, 0x9, 0xf, 0x7, 0x96, 0x72da, 0x7f3e919a, 0x4, 0xaac, 0x7fffffff, 0xef3, 0x4, 0x280000, 0x40000000, 0x6, 0x7, 0x1, 0xc, 0x3d, 0x6, 0x4000, 0x2, 0x7, 0xa8, 0x7, 0x5, 0x7ff, 0x40, 0x1, 0x8, 0x1, 0x3efe, 0x5, 0xfff, 0xfffffffa, 0x2, 0x1, 0xd7, 0x0, 0x1, 0xb16, 0xbb24, 0x6, 0x1, 0x9, 0xffffff7f, 0xed39, 0x4, 0xea0, 0x0, 0x9, 0x3, 0x1000, 0x2, 0xe1b3501a, 0xed8, 0xb2, 0x9852, 0x5, 0x1000, 0x40, 0x7fffffff, 0x7, 0xebe, 0x1, 0x8, 0x3, 0x0, 0x6, 0x2, 0x7, 0x4, 0x2, 0x5, 0x6, 0x3, 0x800, 0x3, 0x7, 0x6beb, 0x437, 0xffff, 0x4, 0x4, 0x5, 0xbc03, 0x1, 0x1, 0x0, 0xfffffffc, 0xb, 0x3, 0x7, 0x9, 0x9c3, 0x4, 0x7, 0x1000, 0x8000, 0x4, 0x5, 0x0, 0x3ff, 0xbc2, 0x3, 0x3, 0x8, 0xa3cd, 0x0, 0x1ff, 0x0, 0x80000001, 0xc027, 0x2, 0x1000, 0x3, 0xb, 0x1, 0x10, 0x1, 0x2000000, 0x7fe3, 0x401, 0x4, 0x2, 0xffffff1f, 0x5, 0x6, 0x1ff, 0x3, 0x5, 0xb, 0x35cd, 0xffffd817, 0x800, 0x4, 0x40, 0x2, 0x3, 0x5, 0x1, 0x7, 0xf, 0xa3ba, 0x7, 0xa, 0xfffffff2, 0x9, 0x4, 0x1, 0x8, 0x8000, 0x65, 0x5, 0x5, 0x6, 0x8000, 0x2b5, 0x726533ea, 0x7, 0x80, 0x0, 0xfffffff9, 0x5, 0x2, 0xcf, 0x2, 0x89b6, 0x1, 0xe971, 0x84, 0x2, 0x1, 0x4, 0x4, 0x7, 0x7, 0x2, 0x9, 0x8001, 0x9, 0xbd8, 0x6, 0x7, 0xf, 0x5, 0xfff, 0x1bc82bdc, 0x2, 0x3, 0x9, 0xc, 0x7, 0x7, 0x20, 0x5, 0x6, 0x200, 0x1ff, 0xffff, 0x20, 0xde, 0xd352, 0xc, 0x6, 0x6, 0xfffffffa, 0xd, 0x8001, 0x401, 0xd2a, 0x100, 0x8, 0x6, 0x7ff, 0x4, 0x1, 0x5, 0x998, 0x7, 0x5, 0xa000000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x5a21, 0x80000000, 0xffff, 0x401, 0xff, 0x7, 0x7, 0x5, 0x6, 0x4, 0x7, 0x0, 0xea, 0x4d9, 0x2, 0xb, 0x0, 0x7f, 0x5, 0xfffffffb, 0x7, 0x7, 0x9, 0x9, 0xc566, 0x6, 0x5, 0x9, 0x0, 0x2, 0x3, 0x3, 0x1, 0x6, 0x10000, 0x8000, 0xc, 0x1, 0x9, 0x0, 0x3b4, 0xfffffffd, 0x6, 0xfffffff8, 0x9, 0x7, 0x0, 0x5, 0x4, 0x3, 0x2, 0x4, 0x95, 0xa0, 0x8001, 0xff69, 0x1, 0x4, 0x0, 0x3, 0x3, 0xa0000, 0x5, 0x1, 0x9, 0x2, 0x6, 0x7576, 0x80, 0x6, 0x6, 0x1, 0x1ff, 0x1, 0x0, 0x8, 0x1, 0x6, 0x4d2a, 0x6, 0x7def77d3, 0x8, 0xfff, 0x7, 0x1, 0x6, 0x0, 0x5, 0x5, 0x607, 0x2, 0x80000001, 0x6, 0x29, 0x1, 0x4, 0x4, 0x0, 0x106e, 0x7, 0x7, 0x6, 0x3, 0x2, 0x5, 0x81, 0x7, 0x5, 0x40, 0x3, 0x0, 0x4, 0x587, 0x3149, 0x37dce71b, 0x2, 0x0, 0x18c632b7, 0x1, 0x9, 0x10001, 0xfff, 0x35, 0x9, 0x5, 0xa, 0x200, 0x8, 0xfffffff7, 0x9, 0x1, 0x8d6, 0x80, 0x9, 0x3401, 0x80000000, 0x7, 0x6, 0x5de, 0x6, 0x2, 0x1, 0x40, 0x4, 0xb52, 0x0, 0x7fff, 0x100, 0x4, 0x7, 0x2, 0x3, 0x3, 0x1ff, 0xe798, 0x10, 0xfb4a, 0x6, 0x8000, 0x9, 0xf, 0x4, 0x401, 0xffff, 0x9, 0x4, 0x7d2a, 0x723e, 0x7, 0xd0f, 0x7f, 0x9, 0x0, 0x3, 0x7fff, 0x6, 0x2, 0x7, 0x3c, 0x80000001, 0x6, 0x7, 0x18a, 0x5, 0x1000000, 0x3, 0x0, 0x3, 0xfffffffb, 0x8, 0x4, 0x6, 0x5, 0x7, 0x8, 0x5, 0x2, 0x7, 0x19, 0x4, 0x6, 0x69a1cd17, 0x1000, 0x6e, 0x1, 0x5, 0x0, 0x7, 0x4, 0x86f, 0x2, 0x10, 0x2, 0x1000, 0x80000000, 0x0, 0x81, 0xbd61ae00, 0x4, 0x8f8, 0x6, 0x9, 0x9, 0x4, 0x9, 0x6, 0xfffffffb, 0x4, 0x4, 0x5b1, 0x6, 0x4b, 0x9, 0x7, 0x7, 0x4, 0x6, 0x101, 0x2, 0x5, 0x1, 0x7f, 0x674, 0x3, 0x8, 0x7f, 0x80, 0x10001, 0x3, 0x6, 0x5, 0x8bc5, 0x3, 0x6]}]}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0xe, 0x9, 0x5, 0x9, 0x78f, 0x4000, 0x5, 0x30b, 0x7, 0x9, 0x2, 0xffff, 0x5, 0x9, 0xfffffff6, 0x2, 0xfff, 0x8, 0xffff8001, 0xfffffff9, 0x40, 0x7, 0x6, 0x6c579623, 0x6, 0xfff, 0xf45, 0x4, 0x7, 0x8, 0x2, 0xfff, 0x5, 0x6, 0x3, 0xc, 0x8, 0x0, 0x2, 0x2, 0x10000, 0x5, 0x4, 0x35, 0x2, 0x8, 0x5, 0x0, 0x40, 0x8, 0x8, 0x8, 0x7, 0x7, 0x2, 0x938c, 0x0, 0x81, 0x7f93, 0x10000, 0x4, 0x1, 0x7, 0x3, 0x3, 0x2, 0x1, 0x40, 0x5, 0x1, 0x7f, 0xfffffff5, 0x5, 0x6, 0x7fff, 0x8000, 0x8001, 0xf, 0x5, 0x7, 0x8, 0x80000000, 0x7fff, 0xd, 0x8, 0xf8f, 0x5, 0xffffffff, 0x7, 0x2, 0xfb4049b, 0x3, 0xa, 0x4, 0x62, 0x3, 0x40, 0x2, 0x6, 0x81, 0xfffff3c4, 0x8, 0x3, 0x51, 0x5, 0x1, 0x7, 0x40, 0xb, 0x7, 0x7, 0x2, 0x9, 0x8, 0x5, 0x577d, 0x200, 0x5, 0x83, 0x7ff, 0x32, 0x10, 0x1, 0x6, 0x3932, 0x0, 0x14, 0x1ff, 0x6, 0x8, 0x3, 0x3, 0x2, 0x0, 0x9, 0x1, 0xb24, 0x80, 0x8000, 0xffff19c4, 0x9, 0x200, 0xff, 0x5ca0540d, 0x7, 0x6, 0xc, 0x9, 0x4, 0xfffc, 0x8, 0x467b, 0x10, 0x8, 0xc, 0x80000000, 0x7, 0x6, 0x3, 0x6, 0x20, 0xe034dabe, 0x9, 0x2, 0x3, 0x80, 0x9, 0x8, 0x7f, 0x10001, 0x1328, 0x7, 0x8, 0xc6, 0xfffffff8, 0x2, 0x7, 0x6, 0x7, 0x58f2, 0x9, 0x9, 0x675, 0x4, 0x2, 0x5, 0x3, 0xa4, 0x4, 0x9, 0x1, 0x81, 0xffffffff, 0x9, 0x7, 0x3, 0x8, 0xd, 0x3, 0x7b, 0x0, 0x2, 0x0, 0x800, 0x7f, 0x0, 0xf01, 0xbfba, 0xffffffff, 0x7fffffff, 0x5174, 0xfff, 0x1, 0x3, 0x7, 0x8, 0x5, 0x8, 0x6, 0x3, 0xdb99, 0xe26, 0x8, 0x4, 0x1, 0xfffeffff, 0xd, 0x1, 0x4dff, 0xec, 0x7, 0xe8d1, 0x9, 0x2, 0x7, 0x2, 0x5, 0x4, 0x0, 0x9, 0xbcdf, 0x8, 0x9, 0x8001, 0x58530dc3, 0x14000, 0x3, 0x0, 0x3ff, 0x8, 0x3, 0x7, 0xf69, 0x9]}]}, @TCA_ROUTE4_POLICE={0x464, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xdbd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xa30, 0x8, 0xf, 0xc26, 0x3, 0x4, 0x2, 0x0, 0x8, 0x7, 0xffff, 0xbe, 0xfffffffe, 0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x4, 0x9, 0x6, 0x4, 0x2, 0x2, 0x0, 0xdf, 0xc, 0x1, 0x1, 0x8, 0xfa, 0x3, 0x3, 0x1, 0x3, 0x5, 0x9, 0xef, 0x1, 0x9, 0x60, 0x742, 0xff, 0x51, 0xed, 0x6, 0x8, 0xfffffffb, 0xd31, 0x9, 0x1ff, 0x10, 0x9, 0x8, 0x2, 0x80000000, 0x4, 0x3, 0x7ead, 0x1, 0x3, 0x2, 0x7fffffff, 0x2, 0x16aeaf39, 0x3, 0x10001, 0x7, 0x80000000, 0xb, 0x3, 0x6, 0x10000, 0x3, 0x0, 0xfffff801, 0xcd6, 0xd, 0x2, 0x7ff, 0x5a, 0x6, 0x2, 0x91, 0x1e, 0x8, 0x5e, 0x34, 0x7, 0x7, 0x3, 0x1, 0xf, 0x400, 0x7, 0xe3, 0x4, 0x3, 0x3, 0x6, 0x71, 0x6, 0x4, 0xfffffffe, 0xd2, 0x1, 0x4000, 0x2, 0xb1, 0x5, 0x100, 0x6, 0x6, 0x7, 0xfb68, 0x8, 0x7, 0x1, 0x5, 0x8, 0x6, 0xfc3, 0x7, 0x8, 0x4, 0x5, 0x401, 0x6, 0x80000001, 0x2ee3f610, 0x0, 0xa6bb, 0x4, 0x7, 0x8, 0x8000, 0x7fff, 0x8, 0x2, 0xc, 0x2, 0x4, 0x5cd3, 0x8, 0x7f, 0x1, 0x1, 0x10000, 0x1, 0xfffffffc, 0x5, 0x101, 0x4619, 0x6, 0x7fffffff, 0x6, 0x80000000, 0x81, 0x6, 0x7269, 0x1, 0x5941, 0xc, 0x1, 0x5, 0x8, 0x1, 0x8, 0x80, 0x0, 0x7, 0x3, 0x1ff, 0xc37, 0xf35b, 0x90, 0x100, 0xb6d, 0x3, 0xffff4517, 0x848, 0xfffffff9, 0x5, 0x7, 0x8000800, 0x1, 0x9, 0x8, 0x10, 0x1, 0x4, 0xfffffff7, 0x1, 0x400, 0x4, 0x4, 0xfff, 0x9, 0x1, 0x7, 0x68bb, 0x4, 0x0, 0x8, 0x43d, 0x0, 0x10, 0x5, 0x17b, 0x7, 0x2, 0x2, 0x80000000, 0x0, 0xe, 0x80000000, 0x1, 0x1, 0x8, 0x0, 0x8, 0x81, 0xffff0000, 0x200, 0x8, 0x5e, 0x7, 0x40000000, 0x2, 0xffffff1b, 0x6, 0x0, 0x10200000, 0x5, 0x8, 0xd12e, 0xffffff80, 0x3, 0xfffffff9, 0x1, 0x9, 0x80000001, 0x10001, 0x401, 0x8, 0x6, 0x6000000, 0x2, 0x3, 0x5, 0x9, 0x3, 0x7, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x4, 0x8, 0x2, 0x5f0, {0x7f, 0x2, 0xfff7, 0x0, 0x1, 0xd}, {0x0, 0x2, 0x6, 0x8, 0x0, 0x9}, 0x80000001, 0x9, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x68f}]}]}}]}, 0x1100}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f00000010c0)=0x2000, 0x4) r13 = openat$cgroup_ro(r11, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r13, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 6m21.786244335s ago: executing program 1 (id=3630): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 6m6.276314017s ago: executing program 32 (id=3630): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 5.844974322s ago: executing program 2 (id=6030): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x67598305, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0xfff, 0x5, 0x1, 0x2000, 0x0, 0x9, 0xa8, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) r1 = socket(0x15, 0x5, 0x0) socket$unix(0x1, 0x5de7da47fcc4864b, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 5.731297722s ago: executing program 2 (id=6032): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x2, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x2}, 0x6e) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x543bb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00', 0x80}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x4, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xcf12, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xfff, 0x7fff, 0x81, '\x00', 'syz0\x00', {0x525}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) (async) mmap(&(0x7f00008ba000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xfffff000) (async) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000800)={r2, 0x0, 0x9, 0x4, 0xffffffffffff0001, 0x8, [0x6, 0x10001, 0xc51, 0x8, 0x8, 0x4]}) (async) unshare(0x22020600) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_netfilter(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x11, 0x6, 0x5, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0xa}, [@generic="e7224099aacc5fe8816e3a79d4d372f656b4ea07d42b98a4e6c551cedd705e82e0ce1075811599e3316c46fc8c29a87208a6d65c1a9ee81fada4ecaf5c0ab0e49b402c25719e554caa589ae04713921ebe37812d193cc8f51e79391bbc4cf6e79a8c51ce7ca8bf7bfb996e5ad6afd85169a3a6ac736810aaec1ff21a33d18a7835c3563b285691e2c8e3eb020b7ac39afdcab18c6b6f0c7c88b7098226a384a75f6d0646b0459db19c1f60db9a67877cfeca6f5a8851f84a3fb941a4b4f075f8b244bb0230f4cc9b373b2271c2bea3811e2d8de8dae973152044c94cd490b7bce7b9674fe2a3a2146380f2f0138a4a43ae9384", @typed={0x8, 0x121, 0x0, 0x0, @str=']^,\x00'}, @generic="1ae42fe8e6944084b986db28ef7cfd6aeaadb295acc762063951b54323dfd2fe31c3b4275f6a1da05a2485e5d4515a80a7f44bb54cac0edfa3d94983a881716d900339e6170a861453f7ba4f5fcd7d7645a2e81c2cf30efb0afd106d9bc2bbf41efa4bdc565c8e262e238a4c4290adc4dbe09e30f75c221c41cfb5125f4dbbedc9243b9d58b5db0315a7f495616c5b33aed8cfbb42c9071324d0b9b489cdef1bbdea0495552212ae1f79849f8e1cd26efd40fded136e034c8324bb192d880ad368dd023a661e19f8e1e3df66adbfb23ec12fa4b133e046015961f6a3321d0e50bb2208aeda2a37f627f5566bec2127418df3b4", @generic="5b7c3d51546ee5ee348210407392847578cd6a611e9e5bf8f0ea6059b14f2e9e4049b95de1fa8cd990ef4e7f9d7ce63b9080f5e23a13fb143fc6a04999facbc709ba011fc2aaebfe64c690b2a9059cc561b5e4e683b0", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@remote}, @generic="1da28a05937b6076398efa6c2ab0b3f4b599549a37fb3d181609c609f12bc0c343e9fb1aee96daf3a55f349ef6ee0827802a92b4dcf20c8338e8814c3f8c06ab71677c6d8b66ac54d11dac1d79503378df857515aab366fdbd5b233e9e578ca4a5bdce29a40559cc48e6fce4e3ee5a2948bd7cf04e9a13beb069fe0bdb889928d97c7b5701d24d4b8cc657560390bef36820f2b1e87b058f139614bee10645e3dda1793e1370685f20acb3f0db24dc41dd161e7748339ac343be8412053171b249c14a579d62411ffb9f1173", @nested={0xee, 0xb4, 0x0, 0x1, [@nested={0x4, 0x87}, @generic="f992ac26cf1930dc286c9c2343e481b38f8278dd13949a8584467c2af5bb0abec00edf13e223db17d71325021cfe5f9e1cd34ebabbdbcb93dae81ff21084054f354048e6ed48e927f6ada05375d34134b179ff54d4aee479b9b32c58454ed5a5f670359df81f009133f27e5cad27c867658576b868bc09e3f74cd0a7c593c425a46056b3daaac21fda9df2f4b0b7da5f9386f365415e0fa84cfca3d9794fc6847c6c54bf09ddddc6c48ecec490116617f439665b96286f5e3ae6d1dba21edac5d71d32afd68f74925f193979fb34cdeeb00a56414dd78678198e96d041d19cf31cd84d1cfa67"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0xffffffe4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 4.893128051s ago: executing program 2 (id=6039): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.561739818s ago: executing program 3 (id=6041): unshare(0x22020400) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) (async) listen(r1, 0x5) (async) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) (async) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000300)=@generic={0x5, "4a95fd94e13f82512065b09cfb5f09746f76a5f30fc2022907863f4dfa5f0e94def92840a164b634168b6361c6daa6609c370dfb44faf55277c8b11c156b4964df052e9c45aab39636193bcc177590c04168051e7ae318245b5efee5553c2c94386e9f98c5d1cfe05c46c1e76b6d645030c98885fd5da65f8512f3b7cac3"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="356fe2b387759b411cd8fe9cc38c32e1d3cb2c99cd299f478c5ffc92bad30f12b6d7ca537c6d70a504957e704ee817e9fbe2df2a2e3652e5ab5e07b0b13886c4a8ad668fc975125f05263797b21457ada4fb1ba56c88760c04a5a458f62604204c18b9618033cf37319948894605b013f7a7fa204fd054809499201e6cdb72", 0x7f}, {&(0x7f0000000780)="da66816d4e35c826a1d1ff8e9acad587e3af3f219b9171ef72d8f4253e0653f7bbff1354e83d67c1931708e62d52725a3465e644f8e3675ced82ad50aa7498c65fbbfb3f463e872dece4bca8eeadf4fa96d6d226fedf3a5f8ec68ac6eeb0d1b8f25894074ddacf28ed316bf9317a1375ed12e3030000000000008cd49724e9c4804012d06faa527bc1b4e67c46ef8cdfc3673434f582de1bf8699d082116059ca90da9c38427b01b7b00bcfdd5f2c6ac201f3763121ac36cd42e3afadb962bd45fad106950294cd3f0fa7b22d41d0a4b2f73", 0xd1}, {&(0x7f00000005c0)}], 0x3}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1b, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4, @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x20004802}, 0x4) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x58) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_buf(r2, 0x0, 0x26, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xc, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000", @ANYRES8=r7, @ANYBLOB="3c02d56a4c1823715fc2ee966e1b18f0b2760d4caf8e108ea7ab845d1650f32b375f333c88875eaecd7e62ade9e85b4e1e422b4307adfcd6bf36c3cc86f453a49345e014092facd042479814a36ebb3f426cfbfc83489cfe8f0458795bf560310f8c1f0ad3589f61a4eb5bb875b5a8d1875eff868b3fcd4e", @ANYRES8=0x0, @ANYRES64=r3], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000f102010100000002000000000200000008000100010000020900020000000000020000054000"/56], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000009be0cd916bbf5c773a077a843fac9f9026b28a55b3d5149349bed646a208cd5d46466f1fde9733eea485f22791841aacd2302e0fdf6b25b7ace97fbc673ac73f5b442593a5f1ee0ce67a237831de3a2b167ff20656816880874f6786847a02222f46fdb78406ce3730575052d68d17918854f9959d7a2e8b430ff76578cb885b", @ANYRESHEX=r9, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 4.419439785s ago: executing program 4 (id=6042): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create(0x7d95) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002028}) socket$inet_smc(0x2b, 0x1, 0x0) 4.416783908s ago: executing program 2 (id=6043): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9", 0x1d}], 0x2}}], 0x1, 0x20008000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}]}, 0x24}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) unshare(0x6000000) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'lo\x00', &(0x7f0000000300)=@ethtool_cmd={0x19, 0x1000, 0x6, 0xe0, 0x9, 0x2, 0x3, 0x6, 0x9a, 0xcb, 0xfa8, 0x0, 0x6, 0x2, 0x7, 0x8, [0x8, 0x8]}}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa000008000300010000000800010008"], 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x6c, 0x4, 0x10, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffb0, 0x7, 0x5, 0x7ff}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x32c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x1, 0x48, 0xc, 0x3, 0x48, 0x36, 0x1, 0x67, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x8}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x4}, {0x3, 0x9}, {0x3}, {0x5, 0x9}, {0x3, 0x3}, {0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x6, 0x4, 0x3, 0x3, 0x7c05, 0xfeff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x12, 0x9, 0x16]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0xc, 0x18, 0x1, 0x48, 0x60, 0x60, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x4, 0x10, 0x9, 0x9, 0x800, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x7, 0xc, 0x3, 0x4, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1000, 0x1, 0x24, 0xc23, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff7, 0xffff, 0xac54, 0x3, 0x8, 0x2, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x8, 0x7fff, 0x8, 0x3ce, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xebcd, 0x45, 0x1000, 0x2, 0x7fff, 0xcc00, 0x401]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x12, 0x2, 0x60, 0x9, 0x1]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x9}, {0x5}, {0x0, 0xa}, {0x5}, {0x3, 0x4}, {0x4}, {0x5, 0x5}, {0x4, 0x4}, {0x1, 0x2}, {0x1}, {0x6, 0xa}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x16, 0x6, 0x6, 0x1b, 0xc, 0x2, 0x36, 0x2, 0x16, 0x18, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ae5, 0x8, 0x0, 0x0, 0x1, 0x87a, 0x8]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x8, 0x1e, 0x5, 0x1ff, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x6}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {}, {0x5, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x200, 0x4, 0x8, 0xf6de, 0xc, 0xaa1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6, 0x6dd, 0xff, 0x6a9, 0xd, 0x7]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x5, 0xf, 0x1, 0x9, 0xc29, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x4, 0x48, 0x16, 0x9, 0x6c, 0x30, 0xb, 0xc, 0x3, 0x30, 0x5a, 0x0, 0x5, 0x24, 0x60, 0x15, 0x48, 0x1b, 0x6c, 0x1, 0x6, 0x9, 0x2, 0x2, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfcd7, 0x101, 0x4, 0x5, 0x0, 0x7ff, 0xc, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb, 0x3, 0xfff8, 0xf7, 0x7, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0xb, 0x6, 0x24, 0x18, 0x60, 0x0, 0x30, 0x3, 0xb, 0x6c, 0xb, 0x1, 0x2, 0x9, 0xb, 0x6c, 0x30, 0x16, 0x0, 0x18, 0x9, 0x5, 0x18, 0x60, 0xb, 0x2a, 0x16, 0x4, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8e6, 0x686b, 0x7, 0xa8a5, 0x9, 0x4, 0xf801]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0xc67d, 0x7, 0x5, 0x6843, 0x6, 0x1]}}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x2, 0x8, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x4, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x114, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x114}}, 0x8000) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x8}, 0x8) sendmmsg$inet6(r2, &(0x7f0000006180)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0}}], 0x1, 0x20000000) r12 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r12, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xff, 0x2, 0x67, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x1ff, 0x2}}) bind$packet(r12, &(0x7f0000000140)={0x11, 0x3, r13, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000280)={@mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x2, 0x400, 0x100, 0x8, 0x40, r13}) 4.346931858s ago: executing program 5 (id=6045): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 4.185385503s ago: executing program 4 (id=6046): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x21, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="02"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5, @ANYRES64=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000001c00128009000100766c616e000000000c0002800600010e0100000008000500", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @dev}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x8, 0x4, 0x0, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x66, 0x0, 0xf4, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, {[@ssrr={0x89, 0xf, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x44, 0x5, "b0b687"}, @timestamp={0x44, 0xc, 0x2b, 0x0, 0x6, [0x200, 0x9]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x23, 0x2b, [@loopback, @dev={0xac, 0x14, 0x14, 0xd}, @local, @broadcast, @loopback, @loopback, @multicast1, @local]}, @lsrr={0x83, 0x13, 0x46, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1b}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x0, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x9, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x700, 0x8, 0x3, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x64, 0x0, 0xf3, 0x29, 0x0, @multicast2, @broadcast, {[@end, @timestamp={0x44, 0x10, 0x5b, 0x0, 0x1, [0x9, 0x17bd, 0x1ff]}, @noop, @timestamp={0x44, 0x8, 0x5, 0x0, 0x3, [0x7689]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x100, 0x4, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0x9, 0x4, 0x0, @local, @local, {[@cipso={0x86, 0x25, 0x2, [{0x2, 0x6, "0e13adf6"}, {0x0, 0xd, "b270d7af70ce267e6aa50d"}, {0x0, 0x6, "f72cc0eb"}, {0x6, 0x6, "e103dac6"}]}, @timestamp={0x44, 0x1c, 0x31, 0x0, 0x9, [0x5, 0x2, 0xff, 0xaa, 0x80000001, 0x3ff]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x124, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x280b4) 4.147714712s ago: executing program 2 (id=6047): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="000080c02f7d46000000d900e9ff7376d1e500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000100), &(0x7f0000000340)}, 0x6f) (async) unshare(0x6a020400) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000040000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500001249000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x36, 0x0, &(0x7f00000002c0)="52540012345652540012345786dd600000000000bb4000000000000000002000000000000001fc000000000000000020000000000001", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0), 0x0, 0x1) (async) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendto$unix(r5, &(0x7f0000000100)="3682", 0x2, 0x48c71, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32, @ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB, @ANYBLOB="3b61e65409791a3a0cc9f84107ff2af1930b98ca99f764b20a5aaa1410593d0706fee3c15dd5dcaf3c8a843411013da12c06be1c51abd497693d1c58c69c9780cf5db5dd387e8bd22601b277de46dbcb1fe34972113cbd4fe1e9c06f05f7e86997e72c3b38c074d88e740f02dc9674000b5b2ac1cdd2ddadc5ba2637913446c9328c0ff3f64064fffe177085f74e7b18e8a06535599f4c5e68efcdc39faa45b931ab21f4889311bd7a049976de335c1c3006ac5dbec97c60ad57090c43dd960d7a80fc0f8155e2b80cfd53b13f25b2053fe8ea02b3dcf2387ed19ce416", @ANYRESDEC=r1, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x2, 0x8000, 0x52b7, 0x4c193, r5, 0x4, '\x00', 0x0, r5, 0x2, 0x1, 0x3, 0x9, @value=r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r9, 0x4}, 0x38) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r7, &(0x7f00000006c0)={0x11, 0x0, r11, 0x1, 0xb, 0x6, @remote}, 0x14) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000867078c30000880100000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 4.060713933s ago: executing program 3 (id=6048): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x4, 0x3) 4.036957111s ago: executing program 0 (id=6049): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004e0001"], 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="60010000100001000000020000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000fc010000080000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000400000000000000000000000000000000000002000100cd000000000000000500210002"], 0x160}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) 3.909255862s ago: executing program 3 (id=6050): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x1ffffffffffffed3, &(0x7f0000000580)=ANY=[@ANYBLOB="c322525a71", @ANYRESDEC, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x1ffffffffffffed3, &(0x7f0000000580)=ANY=[@ANYBLOB="c322525a71", @ANYRESDEC, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x40002001}) shutdown(r5, 0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002000010029bd700000000000020000000000000200000000da4b5e0faaa5028a5ee69525fad165835b8d12ba3399c17405c69ad3655a664e50b7b0e65cc360b1c259a391fa5c925353bbc41b513c052f67cdd93e289407d630898c7df614d38baa74f10cdffc3b6f092c010d1cc72c026957fcb678c17807fa2cafc11233da72"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) close(0x4) 3.776874085s ago: executing program 4 (id=6051): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket(0x11, 0x3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000018c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="80584e6800000000b702000014000000b7030000fffe00006a00006ecee8ab16a40d77ffffff95000000200000001800000000000000000000f106000000bf910000000000003364238c1cdf278520d755b702000003faffff840000002a000000b70000000000023e9500"], &(0x7f0000000140)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet(0x2, 0x3, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x13, &(0x7f0000001980)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000001a40)=""/158, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0xb, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x7, 0x6, 0x8}, {0x1, 0x4, 0x5, 0xb}, {0x3, 0x1, 0x5, 0xc}, {0x1, 0x5, 0xd, 0x2}, {0xffffffff, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0x102, 0xfffffffffffffce1, &(0x7f0000001c00)="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", 0x0, 0x5, 0x0, 0x8}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3103040000000000000009000000040003"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0xfe}, 0x800, 0x0, 0x103, 0xd}, 0x20) r10 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r10, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000007000ffdbdf250a1014030300000809000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004044) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'pim6reg1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000500)) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b00)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005d1070008990139cd9c0fbbe4eb9bc095a14dfd12b5dadcda2593380097b3d217c333b73e943b16d3c76b9c7a2a57714efb6d1de99c130ab7a363d8b7ba733a21e5291abe6add33c13e8e775c8faccae8db0701aeb875f3ebb61fe376d2f874f6a97e1d2237ded5caad2deecf996958f903a1ad968fd0fd4203b32cc0cbfca0a304b273871a3471"], 0x48}, 0x1, 0x0, 0x0, 0x404c890}, 0x801) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r13, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e26, @empty}], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a7ab04869600"], 0x20) socket$igmp6(0xa, 0x3, 0x2) 3.686665021s ago: executing program 5 (id=6052): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x5, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}]}}]}, 0x3c}}, 0x0) 3.45308213s ago: executing program 5 (id=6053): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x8002008}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="c77b72ad000000000000000000000000950000000000005da0006036fa6579d0622116ea"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x20ce, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="800000004800010026bd7000fddbdf250a003800", @ANYRES32=0x0, @ANYBLOB="0400000014000100fe800000030b1349963800000000000000000000003a14000100fc020000000000000000000000000001080002000c000000080002000c000000080002000300000014000100ff01000000000000000000000000000108000200070000001700020006000000162862993097e088a2e08d49af120ce20f11545a5cdcee"], 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYBLOB="70f933ae8cfe50b85d13a36a69f3b990fbed4844fcde5ad9b248dfa2318a4ab3a342ae92e0861d190b1fd2f233db0b9101011b3412f11646ed793b4d564caeafb9cceab5e50397631d74eafa168b3673b59e9d2a8fb7ea011b82b502ed55c63f38f121eacf3d1dbb1cc10ee2c30ade558fcd7fa33f6569847187b46d4f57ed1135cdb89a654397c8d7d7fae42a461e76bd969903cd29df986a6a3f4a1a81df76662ea3b7dee53ac3b3fee39b1643", @ANYRES8=r2, @ANYRESOCT=r3, @ANYRES8, @ANYRESOCT, @ANYRES64=0xffffffffffffffff, @ANYBLOB="692d0ee6061e036fc7419be2d6468042c99fb9d78e4a20f028dd83c680f8a23cf9cf6c2aaa75813950dcee3dd26623db1755f05bb164e86330773a1148cbe6c5e6fdcbce6323b6933d4e7fd9de046296eadb0bd1487155babaa8b388a5c8bf0728c9fd2df6decacbf93bf39b8ef6a6f3b9878ca05ae45a6c25a2d7f888f368badfd2f084084a275e2df7dcf9344e149adfb66c23fb6d09d9ea5837b777b09ff6ab67"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockname$packet(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000100000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="010000000000000000002a000000480058829db0000000001b0e00e8006e657464657673696d0000657673696d30000004a5e34865fc2e83ad84e821ac90f971f67c802ae5cb5985e5a242008b7d6ff1cf0d7c9536285fef2f6af286d6c06b9cd65e7f4eaf3bd894f924030f34968aa2ec", @ANYRESHEX=r4, @ANYRES8=0x0, @ANYRES64=r8, @ANYRESDEC=r2, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x45, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0xfe99}, {0xfffffffffffffffc}], 0x1}}], 0x1, 0x8800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0xffff5257, 0x22e2e, 0x100, 0x0, 0x3, 0x0, 0x0, 0xffff}}) socket$kcm(0x2, 0xa, 0x2) 3.364813675s ago: executing program 3 (id=6054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000003000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2"], 0xe30}}, 0x0) 3.357934747s ago: executing program 4 (id=6055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d300900"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 3.241447096s ago: executing program 3 (id=6056): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x13, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x89a0}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)=@ethtool_ts_info}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xffd8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0x14) r12 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r9, @ANYRES16=r12], 0x14) 3.038985492s ago: executing program 0 (id=6057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002f008002df2505be0000800c0017000200000000000000040019000000000000105355dadbe596bbdc160a4b959086eecf7ab6785ab0baa9727618960834682ce7172f753f6a9e5d83f5f4868246893efe25dd202ba2ce242f5ab2664d486fb1148f42ee802635bfcc90a2693d3a9713c73c1e3907849ada31be03455fa7637ecb55e23c1f4c78db9f1e8f9caba00070d20db84bf81494224d7481b2ecefff4ff529af80ca8991b96e8381ffbb1b4ecd054e98a5b267"], 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x20040050) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) close(0x3) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) (async) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_udp(0xa, 0x2, 0x11) (async) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x40) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002f008002df2505be0000800c0017000200000000000000040019000000000000105355dadbe596bbdc160a4b959086eecf7ab6785ab0baa9727618960834682ce7172f753f6a9e5d83f5f4868246893efe25dd202ba2ce242f5ab2664d486fb1148f42ee802635bfcc90a2693d3a9713c73c1e3907849ada31be03455fa7637ecb55e23c1f4c78db9f1e8f9caba00070d20db84bf81494224d7481b2ecefff4ff529af80ca8991b96e8381ffbb1b4ecd054e98a5b267"], 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x20040050) (async) 2.913152814s ago: executing program 5 (id=6058): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffff68) (async, rerun: 64) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x26) (rerun: 64) 2.902095554s ago: executing program 0 (id=6059): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x20) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x6, 0x8, 0x0, 0x6, 0x6, 0x6, 0xff06, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r3, &(0x7f0000000500)=ANY=[], 0xfdef) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9c010000100001002cbc700002000008fc000000000000000000000000000001fe880000000000000065a9b217000a00000000000000745bcd0e57e5a9ebdfcd35863bb38913a5789abf04378433243f73052cb19bda0ab4687e7943b231dc45fb47bddd2d341f46bd3d376f484f376f6f0ba43e0d43eee26b67ca490014a538a185c600267c377207fb4df74fe523adbfc750aa6b481483582da81052c2f33c25b1e70da2996bceff342c6de94a0a24ee7b19012ee9b1b3d7cdfa9ff11d420c3b96ce04891c7756df2786b2e5f1452132e5e00aa52720ffdbc06bcc0514c0384e1fe18f7b2969071f56c57c54084ace97c4b1140d7b56e258d633dcf54d34da966f7922c32c7aa34fd890144e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b0000000020000000000000010000000001000018184c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x19c}}, 0x44050) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.79971327s ago: executing program 5 (id=6060): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='NET_DM\x00', 0x80, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x4]}, {0x94f8, 0x4a, 0x9, 0x1}}, 0x7fffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, {[0x6, 0x9, 0x8, 0x96c00000]}, 0xd9, 0x27, &(0x7f0000000200)=""/39}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x78, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd490eba}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}, @typed={0x4, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) (async) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='='], 0x20) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000340)) 2.543672664s ago: executing program 0 (id=6061): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @private0, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x4, 0x4) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) 2.392622487s ago: executing program 0 (id=6062): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x5}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x6c, 0x6, [@IFE_META_SKBMARK={0x58}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x1f, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x421}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ef}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xad}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20044800) 2.392201847s ago: executing program 4 (id=6063): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000380), 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0d61c4ef", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf25640000000c009900010000005e000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xf0ffffff, {0x0, 0x0, 0x74, r2, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0xff) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009050300000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2871285f28"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) 2.00498518s ago: executing program 2 (id=6064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x891e, &(0x7f0000000cc0)="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") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x9, 0x12, @empty, @private0, 0x7, 0x1, 0x1ff, 0x9}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@broadcast, 0x4e21, 0x1, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, r1, 0xee00}, {0x10001, 0x800, 0x8000, 0x288e, 0xe, 0x5, 0x40000000000009, 0x100000000000000}, {0x6, 0x401, 0x10, 0x2}, 0x81, 0x6e6bb5, 0x1}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0xa, @in=@private=0xa010101, 0x3505, 0x3, 0x2, 0x1, 0x8, 0x3, 0xfffff48b}}, 0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000310000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000ceb2d96236d94bfe1a3a7d0ea86059403e038e851245635853fd4db108295dadb6a51ba89cc4cfa0f6acb0cc34b45eb60ce9b283", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000010500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x7, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xefcb, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48) socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet(0xa, 0x6, 0x200085) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="2f099c7af34d8ea80723648e0574b245289c39d8b9d36fc54de9dfbc31ffe44334f4f158abf38e6952d29d975a471ce46aaf734e25d17de19a724feb16fe896f211dd078745855f4b44862feedf3bc2aa3cd7e293de872a7282580694caf5b2e3efa6b0406ef2e206f", 0x69}, {&(0x7f0000000380)="cf0d1b50ae1b1ab03028ee5e35a39b9666ab98e0c7e0a2258b6387af549b5fc2ff6bf787e3f169d9cc9cd1301eeec04df00ca67f511aec94c3a7fd1f46d2df6c85253d1f1e57a3026eda06ed155f2f17fba08bc1eac51e434e5736c4a06450036dbec16af7f468a5f10ba907bbfcc9a7addc93203328b8c83dea0d007373d45a86f5", 0x82}], 0x2) 97.915748ms ago: executing program 0 (id=6065): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x16}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfc2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt(r1, 0x1, 0x210, &(0x7f0000000700)=""/96, &(0x7f0000000040)=0x60) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r3 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x26048040) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084"], 0x6a) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x218, 0x3a8, 0x3a8, 0x218, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x16}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfc2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt(r1, 0x1, 0x210, &(0x7f0000000700)=""/96, &(0x7f0000000040)=0x60) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) socket(0x2, 0xa, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x26048040) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084"], 0x6a) (async) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) 97.3647ms ago: executing program 5 (id=6066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000190000)={0x0, 0x0, &(0x7f0000190040)={&(0x7f0000180000)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000030000000000000000e80d08001c0001000000000000000000000000000000000000000000e2"], 0xe30}}, 0x0) 765.025µs ago: executing program 3 (id=6067): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016"], 0x54}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x110, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x100, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000fbffff97f0c636000000000018470000fb1e29e97e39f1951d0a40783912c4ffffff0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2e, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000200)=""/222, 0x100}, 0x94) 0s ago: executing program 4 (id=6068): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040811}, 0x20) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async, rerun: 32) r6 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x480d0}, 0x20000000) (async) socket(0x1a, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000001a0000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) socket$inet6(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x3000) read$nci(r7, &(0x7f0000000580)=""/224, 0xe0) kernel console output (not intermixed with test programs): d [ 840.144184][T26834] __nla_validate_parse: 46 callbacks suppressed [ 840.144209][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4760'. [ 840.166184][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 840.168561][T26831] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.385429][T26838] netlink: 'syz.5.4762': attribute type 11 has an invalid length. [ 841.096628][T26762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.858242][T26878] netlink: 3328 bytes leftover after parsing attributes in process `syz.2.4772'. [ 841.929132][T26882] netlink: 'syz.0.4774': attribute type 1 has an invalid length. [ 842.185496][T26890] gre2: entered allmulticast mode [ 842.298767][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 842.341094][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4777'. [ 842.344640][T26895] netlink: 'syz.3.4777': attribute type 8 has an invalid length. [ 842.344663][T26895] sch_fq: defrate 0 ignored. [ 842.351390][T26895] openvswitch: netlink: IPv4 tunnel dst address is zero [ 842.496455][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4782'. [ 842.724400][T26916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 842.724431][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4786'. [ 842.924623][T26924] netlink: 'syz.2.4788': attribute type 1 has an invalid length. [ 843.207244][T26924] 8021q: adding VLAN 0 to HW filter on device bond9 [ 843.375709][T26930] bond9: (slave geneve5): making interface the new active one [ 843.400249][T26930] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 843.400469][T16060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.401449][T16060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.401505][T16060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.401545][T16060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.602188][T26948] bridge0: port 3(wlan1) entered blocking state [ 843.602266][T26948] bridge0: port 3(wlan1) entered disabled state [ 843.602428][T26948] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 843.672200][T26956] syzkaller0: entered promiscuous mode [ 843.672225][T26956] syzkaller0: entered allmulticast mode [ 844.230995][T26977] netlink: 'syz.2.4797': attribute type 1 has an invalid length. [ 844.358447][T26970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 844.517532][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4801'. [ 844.659280][T16060] IPVS: starting estimator thread 0... [ 844.749817][T26993] IPVS: using max 25 ests per chain, 60000 per kthread [ 844.760552][T26986] mac80211_hwsim hwsim42 wlan1 (unregistering): left allmulticast mode [ 844.760670][T26986] bridge0: port 3(wlan1) entered disabled state [ 845.154468][T27013] __nla_validate_parse: 1 callbacks suppressed [ 845.154493][T27013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4808'. [ 845.174504][T27013] 8021q: VLANs not supported on ip_vti0 [ 845.303575][T27023] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:15 [ 845.367420][T27031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.386614][T27028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4812'. [ 845.438728][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 845.438780][T27028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4812'. [ 846.012277][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4816'. [ 846.012314][T27053] bond0: option lp_interval: invalid value (0) [ 846.012348][T27053] bond0: option lp_interval: allowed values 1 - 2147483647 [ 846.147833][T27059] veth1_to_bridge: entered allmulticast mode [ 846.767249][T27082] batman_adv: batadv0: Adding interface: macvtap0 [ 846.767271][T27082] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.767301][T27082] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 846.835414][T27089] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4828'. [ 847.116492][T27085] batman_adv: batadv0: Removing interface: macvtap0 [ 847.191262][T27086] tipc: Enabled bearer , priority 0 [ 847.197841][T27092] syzkaller0: mtu less than device minimum [ 847.214390][T27094] batman_adv: batadv0: Adding interface: syzkaller0 [ 847.214409][T27094] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.214444][T27094] batman_adv: batadv0: Interface activated: syzkaller0 [ 847.579287][T27078] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 847.642024][T27078] batman_adv: batadv0: Removing interface: syzkaller0 [ 848.422940][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 240 seconds [ 848.422986][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 240 seconds [ 848.423017][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 240 seconds [ 848.423047][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 240 seconds [ 848.614945][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 849.173700][T27175] tun0: tun_chr_ioctl cmd 1074025677 [ 849.173830][T27175] tun0: linktype set to 0 [ 849.191930][T27177] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4850'. [ 849.204273][T27180] tipc: Resetting bearer [ 849.287966][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 849.287994][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 849.500395][ T7032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.502203][T20710] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.502284][T20710] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.502324][T20710] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.390647][T27215] gretap2: entered promiscuous mode [ 850.395824][T27211] IPv6: NLM_F_REPLACE set, but no existing node found! [ 850.405907][T27215] __nla_validate_parse: 2 callbacks suppressed [ 850.405929][T27215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4858'. [ 850.431435][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4858'. [ 851.353275][T27242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4864'. [ 851.671540][T27257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4868'. [ 851.798209][T27263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'. [ 851.841252][T27257] veth9: entered allmulticast mode [ 851.843164][T27255] wg2 speed is unknown, defaulting to 1000 [ 851.927902][T27262] bond11: Removing last arp target with arp_interval on [ 852.043656][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4870'. [ 852.898136][T27296] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 853.030697][T27301] syzkaller0: left promiscuous mode [ 853.030722][T27301] syzkaller0: left allmulticast mode [ 853.160396][T27308] syzkaller0: entered promiscuous mode [ 853.160433][T27308] syzkaller0: entered allmulticast mode [ 853.659607][T27321] veth0: left allmulticast mode [ 853.660190][T27321] veth0: left promiscuous mode [ 853.660464][T27321] bridge0: port 3(veth0) entered disabled state [ 853.989604][T27339] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4883'. [ 854.059913][T27325] netlink: 'syz.0.4883': attribute type 11 has an invalid length. [ 854.394622][T27361] bond12 (unregistering): Released all slaves [ 854.427213][T27366] sctp: [Deprecated]: syz.2.4893 (pid 27366) Use of int in maxseg socket option. [ 854.427213][T27366] Use struct sctp_assoc_value instead [ 854.648101][T27369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4892'. [ 854.811754][T27372] SET target dimension over the limit! [ 855.018412][T27382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.079605][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4908'. [ 856.171170][T27407] xt_limit: Overflow, try lower: 6/2147483648 [ 856.496761][T27420] bond12: entered allmulticast mode [ 856.926190][T27449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4915'. [ 857.408067][T27419] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 858.178028][T27497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4923'. [ 858.264444][T27489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4922'. [ 858.264811][T27498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4922'. [ 858.685253][T27510] netlink: 'syz.2.4925': attribute type 1 has an invalid length. [ 858.829158][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4925'. [ 859.219098][T27526] FAULT_INJECTION: forcing a failure. [ 859.219098][T27526] name failslab, interval 1, probability 0, space 0, times 0 [ 859.219166][T27526] CPU: 0 UID: 0 PID: 27526 Comm: syz.5.4927 Not tainted syzkaller #0 PREEMPT(full) [ 859.219192][T27526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 859.219206][T27526] Call Trace: [ 859.219214][T27526] [ 859.219222][T27526] dump_stack_lvl+0xe8/0x150 [ 859.219259][T27526] should_fail_ex+0x410/0x560 [ 859.219289][T27526] should_failslab+0xa8/0x100 [ 859.219315][T27526] __kmalloc_noprof+0xfe/0x720 [ 859.219334][T27526] ? tomoyo_encode+0x2ad/0x570 [ 859.219456][T27526] ? tomoyo_encode+0x2ad/0x570 [ 859.219487][T27526] tomoyo_encode+0x2ad/0x570 [ 859.219517][T27526] tomoyo_realpath_from_path+0x5fa/0x640 [ 859.219550][T27526] ? tomoyo_path_number_perm+0x219/0x5f0 [ 859.219571][T27526] tomoyo_path_number_perm+0x246/0x5f0 [ 859.219594][T27526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 859.219614][T27526] ? __lock_acquire+0x747/0x2de0 [ 859.219657][T27526] ? hook_file_ioctl+0x1f2/0x600 [ 859.219735][T27526] ? __fget_files+0x2a/0x420 [ 859.219766][T27526] ? __fget_files+0x2a/0x420 [ 859.219789][T27526] ? __fget_files+0x3a2/0x420 [ 859.219813][T27526] ? __fget_files+0x2a/0x420 [ 859.219841][T27526] security_file_ioctl+0xc3/0x2a0 [ 859.219921][T27526] __se_sys_ioctl+0x47/0x170 [ 859.219943][T27526] do_syscall_64+0x166/0x520 [ 859.219971][T27526] ? trace_irq_disable+0x3b/0x140 [ 859.219997][T27526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.220017][T27526] ? clear_bhb_loop+0x70/0xc0 [ 859.220040][T27526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.220057][T27526] RIP: 0033:0x7f89dad9e159 [ 859.220075][T27526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.220091][T27526] RSP: 002b:00007f89dbc86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.220111][T27526] RAX: ffffffffffffffda RBX: 00007f89db026090 RCX: 00007f89dad9e159 [ 859.220125][T27526] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 859.220137][T27526] RBP: 00007f89dbc86090 R08: 0000000000000000 R09: 0000000000000000 [ 859.220149][T27526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.220160][T27526] R13: 00007f89db026128 R14: 00007f89db026090 R15: 00007fffc7a58688 [ 859.220189][T27526] [ 859.266075][T27526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.587749][T27534] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4929'. [ 859.658519][T27539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4929'. [ 859.658553][T27539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4929'. [ 859.828309][T27544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 860.765311][T27573] tc_dump_action: action bad kind [ 861.183841][T27599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4945'. [ 861.183870][T27599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4945'. [ 861.350059][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350202][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350326][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350442][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350555][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350672][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350786][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.350912][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4948'. [ 861.850619][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 360 seconds [ 861.850663][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 360 seconds [ 861.850694][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 360 seconds [ 861.850724][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 360 seconds [ 862.058097][T27623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 862.201731][T27641] tipc: Started in network mode [ 862.201765][T27641] tipc: Node identity 7f000001, cluster identity 4711 [ 862.202061][T27641] tipc: New replicast peer: 127.0.0.1 [ 862.202561][T27641] tipc: Enabled bearer , priority 26 [ 862.574352][T27654] x_tables: duplicate underflow at hook 1 [ 863.319826][T17999] tipc: Node number set to 2130706433 [ 863.496345][T27692] dummy0: entered allmulticast mode [ 863.727381][T27705] xt_policy: output policy not valid in PREROUTING and INPUT [ 863.760511][T27706] xt_policy: output policy not valid in PREROUTING and INPUT [ 864.121333][T27716] syzkaller0: entered promiscuous mode [ 864.121366][T27716] syzkaller0: entered allmulticast mode [ 864.175605][T27730] bond5 (unregistering): Released all slaves [ 864.653001][T27753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.240234][ T4982] udevd[4982]: worker [19554] /devices/virtual/block/nbd2 timeout; kill it [ 868.248130][ T4982] udevd[4982]: seq 27167 '/devices/virtual/block/nbd2' killed [ 868.248191][ T4982] udevd[4982]: worker [14646] /devices/virtual/block/nbd1 timeout; kill it [ 868.248312][ T4982] udevd[4982]: seq 23069 '/devices/virtual/block/nbd1' killed [ 868.700459][T27776] tipc: Enabling of bearer rejected, already enabled [ 868.701350][T27787] syzkaller0: entered promiscuous mode [ 868.701373][T27787] syzkaller0: entered allmulticast mode [ 868.795329][T27791] syzkaller0: mtu less than device minimum [ 868.797295][T27796] __nla_validate_parse: 46 callbacks suppressed [ 868.797315][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797340][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797362][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797383][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797402][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797422][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797442][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797462][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797482][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 868.797501][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4992'. [ 869.009076][T27799] netlink: 'syz.4.4993': attribute type 12 has an invalid length. [ 869.315245][T27810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.529863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.337762][T27861] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 870.543687][T27875] netlink: 'syz.4.5010': attribute type 10 has an invalid length. [ 870.675240][T27875] team0 (unregistering): Port device team_slave_0 removed [ 870.677425][T27875] team0 (unregistering): Port device team_slave_1 removed [ 870.810198][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 870.837094][T27884] netlink: 'syz.2.5014': attribute type 5 has an invalid length. [ 871.957265][T27940] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 871.974111][T27940] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 872.189065][T27949] bond13: option arp_validate: invalid value (1048579) [ 872.205411][T27949] bond13 (unregistering): Released all slaves [ 872.439117][T27934] bond13: option arp_validate: invalid value (1048579) [ 872.454918][T27934] bond13 (unregistering): Released all slaves [ 872.488596][T27960] netlink: 'syz.5.5032': attribute type 1 has an invalid length. [ 872.956585][T27989] pim6reg: entered allmulticast mode [ 872.968476][T27985] pim6reg: left allmulticast mode [ 873.696832][T28034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 876.381332][T28002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.563504][T28065] __nla_validate_parse: 24 callbacks suppressed [ 876.563531][T28065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5056'. [ 877.203644][T28087] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 877.385694][T28087] bond5 (unregistering): Released all slaves [ 877.556325][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5068'. [ 877.591769][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5068'. [ 877.761131][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5070'. [ 878.034978][T28125] ip6tnl3: entered allmulticast mode [ 878.041555][T20723] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 878.041823][T20723] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 878.063865][T22626] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 878.107760][T28126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5074'. [ 878.219068][T28129] 8021q: VLANs not supported on sit0 [ 878.300027][T22623] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 878.331663][T28131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 878.384799][T28134] netlink: 'syz.5.5076': attribute type 16 has an invalid length. [ 878.384823][T28134] netlink: 'syz.5.5076': attribute type 17 has an invalid length. [ 878.528172][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 270 seconds [ 878.528230][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 270 seconds [ 878.528262][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 270 seconds [ 878.528291][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 270 seconds [ 878.604581][T28136] ip_tables: iptables: counters copy to user failed while replacing table [ 878.649986][T22623] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 878.719599][T28134] lo: left allmulticast mode [ 878.864985][T28146] SET target dimension over the limit! [ 879.170532][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5079'. [ 880.997094][T28134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.062519][T28134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.320711][T28134] v: left promiscuous mode [ 881.608184][T28134] ip6gre1: left allmulticast mode [ 881.642961][T28134] bridge1: left allmulticast mode [ 881.846456][T28134] bridge3: left allmulticast mode [ 881.849870][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 881.863042][T28134] bridge4: left allmulticast mode [ 882.061234][T28164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5080'. [ 882.203403][T28179] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5081'. [ 882.233147][T16365] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.234127][T16365] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.234171][T16365] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.234210][T16365] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.271996][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5082'. [ 882.319115][T28194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.478534][T28204] netlink: 'syz.0.5083': attribute type 12 has an invalid length. [ 882.494807][T28205] netlink: 'syz.0.5083': attribute type 12 has an invalid length. [ 882.512065][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 882.514376][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 882.552036][T28192] bond13: entered promiscuous mode [ 882.552534][T28199] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5084'. [ 882.553523][T28192] bond13: entered allmulticast mode [ 882.555503][T28192] 8021q: adding VLAN 0 to HW filter on device bond13 [ 883.225102][T28235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5090'. [ 883.225131][T28235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5090'. [ 883.225149][T28235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5090'. [ 883.273257][T28244] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5094'. [ 883.431210][T28250] netlink: 'syz.4.5095': attribute type 2 has an invalid length. [ 883.502828][T28250] : entered promiscuous mode [ 884.154758][T28281] netlink: 'syz.0.5100': attribute type 9 has an invalid length. [ 884.268800][T28284] C: renamed from veth1_to_team [ 884.287283][T28284] netlink: 'syz.4.5102': attribute type 4 has an invalid length. [ 884.287314][T28284] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 884.423875][T28285] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 884.468214][T28291] lo: left allmulticast mode [ 884.491600][T28291] tipc: Resetting bearer [ 884.585507][T28293] netlink: zone id is out of range [ 884.585527][T28293] netlink: zone id is out of range [ 884.585539][T28293] netlink: zone id is out of range [ 884.585560][T28293] netlink: zone id is out of range [ 884.585571][T28293] netlink: zone id is out of range [ 884.585583][T28293] netlink: zone id is out of range [ 884.585598][T28293] netlink: zone id is out of range [ 884.585608][T28293] netlink: zone id is out of range [ 884.585619][T28293] netlink: zone id is out of range [ 884.943783][T28314] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 885.095907][T28291] gretap1: left allmulticast mode [ 885.098834][T28291] gre2: left allmulticast mode [ 885.113580][T28291] gretap2: left promiscuous mode [ 885.113887][T28291] bond12: left allmulticast mode [ 885.331066][T28303] 8021q: adding VLAN 0 to HW filter on device bond14 [ 885.463233][T28311] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 885.548733][T28314] bond14 (unregistering): (slave geneve5): Releasing backup interface [ 885.580973][T28340] tipc: Trying to set illegal importance in message [ 885.580999][T28340] tipc: Trying to set illegal importance in message [ 885.581015][T28340] tipc: Trying to set illegal importance in message [ 885.581031][T28340] tipc: Trying to set illegal importance in message [ 885.581047][T28340] tipc: Trying to set illegal importance in message [ 885.581064][T28340] tipc: Trying to set illegal importance in message [ 885.581079][T28340] tipc: Trying to set illegal importance in message [ 885.581096][T28340] tipc: Trying to set illegal importance in message [ 885.581112][T28340] tipc: Trying to set illegal importance in message [ 885.581129][T28340] tipc: Trying to set illegal importance in message [ 885.581145][T28340] tipc: Trying to set illegal importance in message [ 885.581162][T28340] tipc: Trying to set illegal importance in message [ 885.581178][T28340] tipc: Trying to set illegal importance in message [ 885.581194][T28340] tipc: Trying to set illegal importance in message [ 885.581210][T28340] tipc: Trying to set illegal importance in message [ 885.581227][T28340] tipc: Trying to set illegal importance in message [ 885.581243][T28340] tipc: Trying to set illegal importance in message [ 885.581259][T28340] tipc: Trying to set illegal importance in message [ 885.581275][T28340] tipc: Trying to set illegal importance in message [ 885.581290][T28340] tipc: Trying to set illegal importance in message [ 885.581305][T28340] tipc: Trying to set illegal importance in message [ 885.581321][T28340] tipc: Trying to set illegal importance in message [ 885.581337][T28340] tipc: Trying to set illegal importance in message [ 885.581353][T28340] tipc: Trying to set illegal importance in message [ 885.581369][T28340] tipc: Trying to set illegal importance in message [ 885.581385][T28340] tipc: Trying to set illegal importance in message [ 885.581401][T28340] tipc: Trying to set illegal importance in message [ 885.581417][T28340] tipc: Trying to set illegal importance in message [ 885.581433][T28340] tipc: Trying to set illegal importance in message [ 885.581449][T28340] tipc: Trying to set illegal importance in message [ 885.581465][T28340] tipc: Trying to set illegal importance in message [ 885.581481][T28340] tipc: Trying to set illegal importance in message [ 885.581497][T28340] tipc: Trying to set illegal importance in message [ 885.581513][T28340] tipc: Trying to set illegal importance in message [ 885.581529][T28340] tipc: Trying to set illegal importance in message [ 885.581545][T28340] tipc: Trying to set illegal importance in message [ 885.581561][T28340] tipc: Trying to set illegal importance in message [ 885.581576][T28340] tipc: Trying to set illegal importance in message [ 885.581592][T28340] tipc: Trying to set illegal importance in message [ 885.581608][T28340] tipc: Trying to set illegal importance in message [ 885.581624][T28340] tipc: Trying to set illegal importance in message [ 885.581640][T28340] tipc: Trying to set illegal importance in message [ 885.581656][T28340] tipc: Trying to set illegal importance in message [ 885.581671][T28340] tipc: Trying to set illegal importance in message [ 885.581687][T28340] tipc: Trying to set illegal importance in message [ 885.581703][T28340] tipc: Trying to set illegal importance in message [ 885.581719][T28340] tipc: Trying to set illegal importance in message [ 885.581734][T28340] tipc: Trying to set illegal importance in message [ 885.581750][T28340] tipc: Trying to set illegal importance in message [ 885.581766][T28340] tipc: Trying to set illegal importance in message [ 885.581782][T28340] tipc: Trying to set illegal importance in message [ 885.581798][T28340] tipc: Trying to set illegal importance in message [ 885.581813][T28340] tipc: Trying to set illegal importance in message [ 885.581830][T28340] tipc: Trying to set illegal importance in message [ 885.581846][T28340] tipc: Trying to set illegal importance in message [ 885.581862][T28340] tipc: Trying to set illegal importance in message [ 885.581877][T28340] tipc: Trying to set illegal importance in message [ 885.581894][T28340] tipc: Trying to set illegal importance in message [ 885.581909][T28340] tipc: Trying to set illegal importance in message [ 885.581924][T28340] tipc: Trying to set illegal importance in message [ 885.581939][T28340] tipc: Trying to set illegal importance in message [ 885.581963][T28340] tipc: Trying to set illegal importance in message [ 885.582056][T28340] tipc: Trying to set illegal importance in message [ 885.582073][T28340] tipc: Trying to set illegal importance in message [ 885.582090][T28340] tipc: Trying to set illegal importance in message [ 885.618850][T28314] bond14 (unregistering): Released all slaves [ 885.918647][T28336] sctp: [Deprecated]: syz.5.5109 (pid 28336) Use of int in maxseg socket option. [ 885.918647][T28336] Use struct sctp_assoc_value instead [ 886.648177][T28354] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 886.736804][T28351] syzkaller1: entered promiscuous mode [ 886.736829][T28351] syzkaller1: entered allmulticast mode [ 887.221677][T28387] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 887.263644][T28385] __nla_validate_parse: 9 callbacks suppressed [ 887.263666][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5123'. [ 887.284435][T28387] 8021q: adding VLAN 0 to HW filter on device bond13 [ 887.386191][T28394] syzkaller0: left promiscuous mode [ 887.386217][T28394] syzkaller0: left allmulticast mode [ 887.527965][T28403] dvmrp0: entered allmulticast mode [ 887.548388][T28403] dvmrp1: entered allmulticast mode [ 887.555863][T28403] dvmrp0: left allmulticast mode [ 887.555979][T28403] dvmrp1: left allmulticast mode [ 887.646493][T28407] bond0: Error: Cannot enslave bond to itself. [ 888.121777][T28427] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 888.211824][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 888.232837][T28431] netlink: 'syz.2.5134': attribute type 1 has an invalid length. [ 888.252067][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5133'. [ 888.252105][T28432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5133'. [ 888.370439][T20721] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 888.370535][T20721] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 888.370606][T20721] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 888.370646][T20721] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 890.009956][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 890.172906][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5140'. [ 890.177928][T28454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5140'. [ 891.139857][T28460] xt_l2tp: v2 sid > 0xffff: 33554432 [ 891.218123][T28462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5141'. [ 891.932411][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 390 seconds [ 891.932459][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 390 seconds [ 891.932489][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 390 seconds [ 891.932518][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 390 seconds [ 892.148900][T28492] can: request_module (can-proto-4) failed. [ 892.337154][T28498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5152'. [ 892.500954][T28504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5153'. [ 892.530874][T28502] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5154'. [ 892.718110][T28513] syzkaller0: entered promiscuous mode [ 892.718136][T28513] syzkaller0: entered allmulticast mode [ 893.090795][T28531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5162'. [ 894.336086][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5174'. [ 894.461902][T28587] net_ratelimit: 494 callbacks suppressed [ 894.461926][T28587] ip_tables: iptables: counters copy to user failed while replacing table [ 894.686522][T28599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5180'. [ 894.856296][T28618] openvswitch: netlink: Message has 8 unknown bytes. [ 895.564256][T28602] tipc: Enabling of bearer rejected, already enabled [ 895.717787][T28605] ip6gretap0: left promiscuous mode [ 895.745090][T28605] bridge0: port 4(bond0) entered blocking state [ 895.745219][T28605] bridge0: port 4(bond0) entered forwarding state [ 895.745608][T28605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.773347][T28605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.828855][T28605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.845797][T28605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.862679][T28605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 895.867971][T28605] veth1_vlan: left promiscuous mode [ 895.869172][T28605] v: left promiscuous mode [ 895.892822][T28605] v: entered promiscuous mode [ 895.895264][T28605] veth1_vlan: entered promiscuous mode [ 895.918165][T28605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.919412][T28605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.940144][T28605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.948019][T28605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.976006][T28605] syzkaller0: left promiscuous mode [ 895.990882][T28631] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5185'. [ 895.992980][T28605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 896.057719][T28605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 896.076884][T28605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 896.135257][T28605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.136189][T28605] ip6gretap0: entered promiscuous mode [ 896.179224][T28605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 896.194661][T28605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 896.227919][T28605] 8021q: adding VLAN 0 to HW filter on device bond7 [ 896.238537][T28605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 896.252111][T28605] mac80211_hwsim hwsim82 wlan1: entered promiscuous mode [ 896.252706][T28605] batman_adv: batadv0: Interface activated: macvtap1 [ 896.253613][T28605] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 896.331900][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.332027][T16373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.336115][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.336242][T16373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.481063][T16373] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.481101][T16373] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 896.481130][T16373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.481157][T16373] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52449 - 0 [ 896.481247][T16373] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.481275][T16373] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 896.481304][T16373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.481332][T16373] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52449 - 0 [ 896.481372][T16373] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.481399][T16373] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 896.481426][T16373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.481453][T16373] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52449 - 0 [ 896.481493][T16373] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.481522][T16373] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 896.481550][T16373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.481577][T16373] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52449 - 0 [ 896.679210][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5189'. [ 896.812554][T27524] Bluetooth: hci2: command 0x0401 tx timeout [ 897.023345][T28666] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5193'. [ 898.304863][T28724] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 898.493061][T28724] bond5 (unregistering): Released all slaves [ 899.090920][T28748] ip_tables: iptables: counters copy to user failed while replacing table [ 899.323344][T28754] lo: entered promiscuous mode [ 899.323374][T28754] lo: entered allmulticast mode [ 899.326731][T28754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5213'. [ 899.326759][T28754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.608173][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5214'. [ 899.608200][T28757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5214'. [ 899.859969][T27524] Bluetooth: hci2: command 0x0401 tx timeout [ 899.887349][T28781] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5219'. [ 899.892936][T28781] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5219'. [ 900.458274][ T30] audit: type=1800 audit(1790354212.113:18): pid=28784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5220" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2688 res=0 errno=0 [ 900.679854][T28692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.680268][T28726] netlink: 'syz.5.5206': attribute type 1 has an invalid length. [ 900.680317][T28726] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5206'. [ 900.680691][T28729] netlink: 'syz.5.5206': attribute type 1 has an invalid length. [ 900.680708][T28729] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5206'. [ 902.007957][T28839] netlink: 'syz.0.5234': attribute type 21 has an invalid length. [ 902.025356][T28839] netlink: 'syz.0.5234': attribute type 1 has an invalid length. [ 902.025383][T28839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5234'. [ 902.364808][T28851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5237'. [ 902.364901][T28851] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5237'. [ 902.810334][T28862] netlink: 'syz.5.5238': attribute type 1 has an invalid length. [ 903.040613][T17994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.093207][T17994] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 903.107570][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.107869][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.683386][T17994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.858715][T17994] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 905.370000][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 905.866296][T28978] __nla_validate_parse: 5 callbacks suppressed [ 905.866319][T28978] netlink: 3528 bytes leftover after parsing attributes in process `syz.5.5263'. [ 905.986257][T28976] netlink: 'syz.0.5260': attribute type 1 has an invalid length. [ 905.986282][T28976] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5260'. [ 906.009826][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 906.015890][T28982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 906.061125][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 906.188321][T28983] batman_adv: batadv0: Adding interface: gretap2 [ 906.188349][T28983] batman_adv: batadv0: Interface activated: gretap2 [ 906.828833][T28997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5267'. [ 906.828959][T28997] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5267'. [ 906.894996][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5269'. [ 906.895027][T29009] block nbd6: Unsupported socket: should be TCP or UNIX. [ 906.918246][T29009] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 906.944741][T29011] netlink: 632 bytes leftover after parsing attributes in process `syz.0.5271'. [ 907.089487][T29009] bond15: entered promiscuous mode [ 907.090152][T29009] 8021q: adding VLAN 0 to HW filter on device bond15 [ 907.226902][T29020] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5274'. [ 907.410207][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5273'. [ 907.584711][T29038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5275'. [ 908.576120][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 300 seconds [ 908.576157][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 300 seconds [ 908.576179][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 300 seconds [ 908.576200][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 300 seconds [ 910.545524][T29037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.759993][T29090] openvswitch: netlink: Missing key (keys=40, expected=100) [ 910.876088][T29087] syzkaller0: Caught tx_queue_len zero misconfig [ 910.877503][T29087] syzkaller0: entered promiscuous mode [ 910.877525][T29087] syzkaller0: entered allmulticast mode [ 910.958793][T29109] __nla_validate_parse: 2 callbacks suppressed [ 910.958816][T29109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'. [ 911.185663][T29122] syzkaller1: entered promiscuous mode [ 911.185689][T29122] syzkaller1: entered allmulticast mode [ 911.483204][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5295'. [ 911.529182][T29132] ip6gre1: entered promiscuous mode [ 911.529210][T29132] ip6gre1: entered allmulticast mode [ 911.569921][T29134] netlink: 'syz.4.5297': attribute type 3 has an invalid length. [ 911.691306][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 911.746706][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5297'. [ 911.917720][T29141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 912.216328][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5300'. [ 912.270865][T29161] ip_tables: iptables: counters copy to user failed while replacing table [ 912.334437][T29162] netlink: zone id is out of range [ 912.334460][T29162] netlink: zone id is out of range [ 912.334472][T29162] netlink: zone id is out of range [ 912.334663][T29162] netlink: zone id is out of range [ 912.334675][T29162] netlink: zone id is out of range [ 912.334686][T29162] netlink: zone id is out of range [ 912.334701][T29162] netlink: zone id is out of range [ 912.334711][T29162] netlink: zone id is out of range [ 914.556139][ T8096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.556366][ T8096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.584746][T17994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.808293][T17998] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.949538][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.950099][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.054720][T29161] veth1_to_bridge: left allmulticast mode [ 915.286829][T29161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.450147][T17992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 915.811733][T29161] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 917.527053][T29161] batman_adv: batadv0: Interface deactivated: gretap2 [ 917.620457][ T8096] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.620520][ T8096] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.620559][ T8096] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.793232][T29183] TCP: TCP_TX_DELAY enabled [ 917.966506][T29193] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5308'. [ 917.966538][T29193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5308'. [ 917.966558][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5308'. [ 917.967107][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5308'. [ 917.967131][T29193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5308'. [ 917.998133][T29191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5306'. [ 917.998213][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5306'. [ 917.998756][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5306'. [ 917.998813][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5306'. [ 918.098511][T29186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 918.099146][T29187] bond5: option mode: unable to set because the bond device is up [ 918.104327][T29190] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5305'. [ 918.168921][T29187] bond5 (unregistering): Released all slaves [ 918.186450][T29186] netlink: 'syz.5.5306': attribute type 2 has an invalid length. [ 918.410331][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 918.532969][T29206] syzkaller0: entered promiscuous mode [ 918.535789][T29208] veth0: entered promiscuous mode [ 918.627195][T29208] veth0: left promiscuous mode [ 919.899338][T29263] syzkaller0: entered promiscuous mode [ 919.899377][T29263] syzkaller0: entered allmulticast mode [ 920.085805][T29282] netlink: 'syz.0.5330': attribute type 8 has an invalid length. [ 920.085807][T29264] wg2 speed is unknown, defaulting to 1000 [ 920.325763][T29295] netlink: 'syz.3.5334': attribute type 2 has an invalid length. [ 922.014107][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 420 seconds [ 922.014155][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 420 seconds [ 922.014184][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 420 seconds [ 922.014212][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 420 seconds [ 925.269255][T29378] __nla_validate_parse: 20 callbacks suppressed [ 925.269280][T29378] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5350'. [ 925.479348][T29394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.519193][T29386] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 925.519218][T29386] sctp: [Deprecated]: syz.2.5356 (pid 29386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.519218][T29386] Use struct sctp_sack_info instead [ 925.554427][T29397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.585730][T29393] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.592928][T29393] batman_adv: batadv0: Interface activated: dummy0 [ 925.608306][T17996] s`z1: Port: 1 Link ACTIVE [ 925.616372][T29397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.650274][T29400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.684352][T29394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.704225][T29402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.331925][T29418] net_ratelimit: 499 callbacks suppressed [ 926.331959][T29418] ip_tables: iptables: counters copy to user failed while replacing table [ 926.344324][T29419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5364'. [ 926.490147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.165319][T29436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5368'. [ 927.234090][T29444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5374'. [ 927.234136][T29444] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5374'. [ 927.273929][T29446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5375'. [ 927.481611][T29453] siw: device registration error -23 [ 927.582678][T29456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5378'. [ 927.872556][T29464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5380'. [ 928.014244][T29471] x_tables: duplicate underflow at hook 2 [ 928.028319][T29471] x_tables: duplicate underflow at hook 2 [ 928.028430][T29471] x_tables: duplicate underflow at hook 2 [ 928.028523][T29471] x_tables: duplicate underflow at hook 2 [ 928.028613][T29471] x_tables: duplicate underflow at hook 2 [ 928.028702][T29471] x_tables: duplicate underflow at hook 2 [ 928.028791][T29471] x_tables: duplicate underflow at hook 2 [ 928.028879][T29471] x_tables: duplicate underflow at hook 2 [ 928.028969][T29471] x_tables: duplicate underflow at hook 2 [ 928.029055][T29471] x_tables: duplicate underflow at hook 2 [ 928.227386][T29472] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5383'. [ 928.248909][T29472] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5383'. [ 928.301747][T29485] lo: left promiscuous mode [ 928.540167][T29485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.795384][T29485] veth1_macvtap: left promiscuous mode [ 928.811200][T29485] veth0_macvtap: left promiscuous mode [ 928.822620][T29485] veth0_macvtap: entered promiscuous mode [ 928.835094][T29485] veth1_macvtap: entered promiscuous mode [ 928.886091][T29485] 8021q: adding VLAN 0 to HW filter on device €Â [ 928.910180][T29485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.918471][T29485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.923496][T29485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 929.104984][T29485] ip6gretap0: entered promiscuous mode [ 929.188450][T29485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 929.190686][T29485] bond3: left promiscuous mode [ 929.218921][T29485] bond5: left promiscuous mode [ 929.257773][T29485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.270089][T12178] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 929.302764][T29485] 8021q: adding VLAN 0 to HW filter on device bond6 [ 929.325001][T29485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 929.327088][T29485] macvlan0: left promiscuous mode [ 929.327948][T29485] gre2: left promiscuous mode [ 929.360064][T29485] 8021q: adding VLAN 0 to HW filter on device bond8 [ 929.390220][T29485] vlan0: left promiscuous mode [ 929.390244][T29485] bond9: left promiscuous mode [ 929.443820][T29485] geneve4: left promiscuous mode [ 929.443849][T29485] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 929.631126][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.631244][ T8096] bridge0: port 1(bridge_slave_0) entered listening state [ 929.639271][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.639387][ T8096] bridge0: port 2(bridge_slave_1) entered listening state [ 929.712619][T29496] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 929.712717][T29496] syzkaller1: linktype set to 773 [ 929.890464][T16374] netdevsim netdevsim0 €Â: set [1, 1] type 2 family 0 port 6081 - 0 [ 929.919050][T16374] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 929.919392][T16374] bond0: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 930.005984][T16374] bond0: (slave veth3): making interface the new active one [ 930.019229][T22616] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 930.089932][T16374] bond0: active interface up! [ 930.091684][T16365] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 930.175402][T16374] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 930.377752][T16374] openvswitch: cpu_id mismatch with handler threads [ 930.430598][ T204] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 930.430670][ T204] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 930.672349][T29567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.866776][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866821][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866855][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866886][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866918][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866949][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.866980][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.867013][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.867055][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.867086][T29573] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 930.997745][T29578] __nla_validate_parse: 34 callbacks suppressed [ 930.997767][T29578] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5408'. [ 931.297748][T29596] IPVS: length: 176 != 24 [ 931.308482][T29591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5411'. [ 931.355184][T29591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5411'. [ 931.453552][ T204] openvswitch: cpu_id mismatch with handler threads [ 931.453918][ T204] openvswitch: cpu_id mismatch with handler threads [ 931.668196][T29614] lo: left allmulticast mode [ 931.742680][T29617] netlink: zone id is out of range [ 931.742704][T29617] netlink: zone id is out of range [ 931.742714][T29617] netlink: zone id is out of range [ 931.742724][T29617] netlink: zone id is out of range [ 931.742734][T29617] netlink: zone id is out of range [ 931.742743][T29617] netlink: zone id is out of range [ 931.742757][T29617] netlink: zone id is out of range [ 931.742767][T29617] netlink: zone id is out of range [ 931.742777][T29617] netlink: zone id is out of range [ 931.742787][T29617] netlink: zone id is out of range [ 931.823580][T29619] SET target dimension over the limit! [ 931.837140][T17995] openvswitch: cpu_id mismatch with handler threads [ 932.195959][T29614] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.196136][T29614] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.233658][T29632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5420'. [ 932.252085][T29614] batman_adv: batadv0: Interface deactivated: dummy0 [ 933.028232][T29614] batman_adv: batadv0: Interface deactivated: gretap1 [ 933.148787][T29614] tipc: Resetting bearer [ 933.148833][T29614] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 933.456198][T29614] veth7: left allmulticast mode [ 933.488608][T29614] batman_adv: batadv0: Interface deactivated: macvlan0 [ 933.488677][T29614] geneve0: left allmulticast mode [ 933.488792][T29614] macvlan0: left allmulticast mode [ 933.502808][T29614] gre2: left allmulticast mode [ 933.519330][T29614] gretap2: left allmulticast mode [ 933.589114][T29614] bond10: left promiscuous mode [ 933.596037][T29614] bond11: left promiscuous mode [ 933.597784][T29614] veth9: left allmulticast mode [ 933.618938][T29614] ip6tnl3: left allmulticast mode [ 933.627125][T29614] bond13: left promiscuous mode [ 933.627154][T29614] bond13: left allmulticast mode [ 933.635200][T29614] ip6gre1: left promiscuous mode [ 933.635269][T29614] ip6gre1: left allmulticast mode [ 933.653329][T29624] tipc: Enabled bearer , priority 5 [ 933.659498][T29628] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5421'. [ 933.670714][T16374] netdevsim netdevsim0 €Â: unset [0, 0] type 1 family 0 port 4352 - 0 [ 933.670813][T16374] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 20004 - 0 [ 933.670898][T16374] netdevsim netdevsim0 €Â: unset [1, 1] type 2 family 0 port 6081 - 0 [ 933.671056][T16374] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 933.671131][T16374] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 933.671202][T16374] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 933.671299][T16374] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 933.671384][T16374] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 933.671444][T16374] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 933.671547][T16374] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 933.671630][T16374] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 933.671717][T16374] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 933.673796][T12178] s`z1: Port: 1 Link DOWN [ 934.376575][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5429'. [ 934.457406][T29663] team0: Device wg1 is of different type [ 934.726498][T29682] netlink: 3528 bytes leftover after parsing attributes in process `syz.2.5433'. [ 935.528952][T29722] netlink: 'syz.0.5443': attribute type 21 has an invalid length. [ 935.528985][T29722] IPv6: NLM_F_CREATE should be specified when creating new route [ 935.776209][T29726] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5445'. [ 935.837513][T16365] tipc: Subscription rejected, illegal request [ 935.990871][T29751] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5449'. [ 936.097834][T29748] netlink: 'syz.3.5448': attribute type 16 has an invalid length. [ 936.097859][T29748] netlink: 'syz.3.5448': attribute type 17 has an invalid length. [ 936.160928][T29748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.167054][T29748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.252589][T29748] veth0_to_team: left promiscuous mode [ 936.281686][T29748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.302495][T29748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 936.323038][T29748] veth1_vlan: left promiscuous mode [ 936.327056][T29748] veth0_vlan: left promiscuous mode [ 936.339452][T29748] veth0_vlan: entered promiscuous mode [ 936.357206][T29748] veth1_vlan: entered promiscuous mode [ 936.396426][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.405345][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.432331][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 936.435134][T29748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.467673][T29748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.516841][T29748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.529486][T29748] batman_adv: batadv0: Interface activated: ipvlan3 [ 936.581865][T29748] veth0_to_team: entered promiscuous mode [ 936.583359][T29748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.676974][T29748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.688922][T29748] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 936.712435][T29748] batman_adv: batadv0: Interface activated: gretap2 [ 936.821954][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.822076][ T8096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.825011][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.825122][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.862269][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5454'. [ 937.028860][T29672] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.029107][T29672] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.046632][T29672] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.046863][T29672] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.053239][T22624] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.068936][T22624] net_ratelimit: 496 callbacks suppressed [ 937.069000][T22624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.074882][T29672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.078303][ T8096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.079182][ T8096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.144798][T22630] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.160604][ T8096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.305119][T22614] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.360278][T29788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5458'. [ 937.360305][T29788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5458'. [ 937.391022][T22614] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.402567][T29786] 8021q: adding VLAN 0 to HW filter on device bond14 [ 937.405569][T29788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.416590][T29788] bond14: (slave bond0): making interface the new active one [ 937.423414][T22614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.442378][T29788] bond14: (slave bond0): Enslaving as an active interface with an up link [ 937.464673][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5459'. [ 937.503024][T29793] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5460'. [ 937.520485][T29786] bond14 (unregistering): (slave bond0): Releasing active interface [ 937.543879][T29786] bond14 (unregistering): Released all slaves [ 937.544929][T29788] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5458'. [ 937.574842][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5460'. [ 937.611825][T22630] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.668275][T29796] netlink: 3528 bytes leftover after parsing attributes in process `syz.5.5461'. [ 937.917949][T29801] netlink: 'syz.5.5463': attribute type 2 has an invalid length. [ 937.957231][T29815] netlink: 'syz.4.5466': attribute type 1 has an invalid length. [ 937.985733][T29804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5463'. [ 938.010963][T22624] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 938.052669][T29804] hsr_slave_1 (unregistering): left promiscuous mode [ 938.090251][T29815] bond15: (slave bridge4): Enslaving as a backup interface with an up link [ 938.098879][T29819] 8021q: adding VLAN 0 to HW filter on device bond15 [ 938.154826][T16377] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 938.220702][T29815] bond15: (slave bridge5): Enslaving as a backup interface with a down link [ 938.290149][ T8096] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 938.331822][T29815] bond15: (slave bridge6): Enslaving as a backup interface with a down link [ 938.376918][T16374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.377602][T16374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.440294][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5469'. [ 938.654531][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 330 seconds [ 938.654579][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 330 seconds [ 938.654610][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 330 seconds [ 938.654639][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 330 seconds [ 939.036007][T29851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.092631][T29851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.135870][T22624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.423633][T29865] netlink: 'syz.4.5482': attribute type 3 has an invalid length. [ 939.598162][T29869] syzkaller1: entered promiscuous mode [ 939.598188][T29869] syzkaller1: entered allmulticast mode [ 939.616811][T29869] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 940.000184][T29891] tipc: Enabling of bearer rejected, already enabled [ 941.272324][T29940] syzkaller0: left promiscuous mode [ 941.272353][T29940] syzkaller0: left allmulticast mode [ 941.605443][T29948] 8021q: VLANs not supported on ip6gre0 [ 942.237567][T29964] tap0: tun_chr_ioctl cmd 35108 [ 942.388441][T29979] __nla_validate_parse: 9 callbacks suppressed [ 942.388464][T29979] netlink: 3528 bytes leftover after parsing attributes in process `syz.5.5517'. [ 942.570280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.736754][T29999] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5523'. [ 945.728858][T30036] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5531'. [ 946.187801][T30065] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5540'. [ 946.187837][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5540'. [ 946.187854][T30065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5540'. [ 946.723295][T30086] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5545'. [ 946.821741][T30089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.822256][T30090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.164848][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5550'. [ 947.165082][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5550'. [ 947.165316][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5550'. [ 947.402913][T29672] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 948.064960][T30134] __nla_validate_parse: 45 callbacks suppressed [ 948.064982][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5555'. [ 948.140965][T30143] netlink: 'syz.3.5559': attribute type 10 has an invalid length. [ 948.189069][T30145] netlink: 'syz.3.5559': attribute type 10 has an invalid length. [ 948.235753][T30145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.259449][T30145] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 948.416642][T30150] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5562'. [ 948.432557][T30153] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5562'. [ 948.484513][T30156] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 948.615846][T30155] tipc: Enabling of bearer rejected, already enabled [ 948.645777][T30156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 948.700415][T30162] netlink: 'syz.5.5564': attribute type 1 has an invalid length. [ 948.700449][T30162] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5564'. [ 948.789225][T30169] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.5563'. [ 948.890157][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 948.890180][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 949.261427][T30187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5569'. [ 949.311182][T30187] syzkaller1: entered promiscuous mode [ 949.311210][T30187] syzkaller1: entered allmulticast mode [ 949.753312][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5572'. [ 949.763597][T30204] –: renamed from virt_wifi0 [ 949.940524][T30206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5574'. [ 950.024419][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5576'. [ 950.090604][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 950.170402][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 950.205842][T30212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 950.571772][T30240] hsr0: entered promiscuous mode [ 950.606749][T30240] sctp: [Deprecated]: syz.5.5583 (pid 30240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.606749][T30240] Use struct sctp_sack_info instead [ 950.797964][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.798550][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.798953][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.812679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.848671][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.849342][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.870385][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.871246][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.871651][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.872145][T30251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.470792][T30275] bridge_slave_0: left allmulticast mode [ 951.470823][T30275] bridge_slave_0: left promiscuous mode [ 951.471156][T30275] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.637314][T30279] mac80211_hwsim hwsim46 wlan0: left allmulticast mode [ 951.637377][T30279] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 951.637623][T30279] bridge0: port 5(wlan0) entered disabled state [ 951.663886][T30279] bond0: left allmulticast mode [ 951.663912][T30279] bond_slave_0: left allmulticast mode [ 951.664082][T30279] bond0: left promiscuous mode [ 951.664098][T30279] bond_slave_0: left promiscuous mode [ 951.664670][T30279] bridge0: port 4(bond0) entered disabled state [ 951.714008][T30279] bridge_slave_1: left allmulticast mode [ 951.714030][T30279] bridge_slave_1: left promiscuous mode [ 951.714190][T30279] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.099090][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 450 seconds [ 952.099127][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 450 seconds [ 952.099149][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 450 seconds [ 952.099169][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 450 seconds [ 952.169852][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 952.667393][T30303] netlink: 'syz.0.5601': attribute type 8 has an invalid length. [ 952.688040][T30303] veth1_to_team: entered promiscuous mode [ 952.698934][T30303] gretap0: entered promiscuous mode [ 952.712558][T30303] veth1_to_team: left promiscuous mode [ 952.743359][T30303] gretap0: left promiscuous mode [ 953.138450][T30318] __nla_validate_parse: 47 callbacks suppressed [ 953.138477][T30318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5604'. [ 953.345466][T30330] netlink: 3528 bytes leftover after parsing attributes in process `syz.0.5609'. [ 953.348336][T30328] sch_tbf: burst 4363 is lower than device ip6gre0 mtu (32769) ! [ 953.967610][T27524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 953.993123][T27524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 953.994587][T27524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 954.000482][T27524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 954.023273][T27524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.400367][T30373] Bluetooth: MGMT ver 1.23 [ 954.400410][T30373] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 954.436843][T16365] smbdirect: ib_dev[s`z1] removed [ 954.482613][T30377] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 954.497546][T30373] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 954.527455][ T30] audit: type=1804 audit(1790354266.183:19): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5618" name="/newroot/536/cgroup.controllers" dev="tmpfs" ino=2774 res=1 errno=0 [ 954.527517][ T30] audit: type=1800 audit(1790354266.183:20): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5618" name="cgroup.controllers" dev="tmpfs" ino=2774 res=0 errno=0 [ 954.593908][T30369] netlink: 'syz.4.5616': attribute type 10 has an invalid length. [ 954.593935][T30369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5616'. [ 954.594099][T30369] dummy0: entered promiscuous mode [ 954.632257][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5616'. [ 954.781174][T30374] syzkaller1: entered promiscuous mode [ 954.781203][T30374] syzkaller1: entered allmulticast mode [ 954.913885][T30388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5620'. [ 955.039934][T30390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5620'. [ 955.053045][T22614] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 955.145914][T22630] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.350729][T22630] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 955.375873][T30356] wg2 speed is unknown, defaulting to 1000 [ 955.529200][T30407] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 955.585840][T22630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 955.646539][T30407] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5624'. [ 955.928016][T30411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5625'. [ 956.091385][ T52] Bluetooth: hci0: command tx timeout [ 956.596609][T30436] bridge0: port 3(veth1_to_bridge) entered blocking state [ 956.596798][T30436] bridge0: port 3(veth1_to_bridge) entered disabled state [ 956.596978][T30436] veth1_to_bridge: entered allmulticast mode [ 956.626231][T30436] veth1_to_bridge: entered promiscuous mode [ 956.626394][T30436] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.627109][T30436] bridge0: port 3(veth1_to_bridge) entered blocking state [ 956.627208][T30436] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 956.714792][T30416] macvlan0: entered promiscuous mode [ 956.724190][T30356] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.724477][T30356] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.724862][T30356] bridge_slave_0: entered allmulticast mode [ 956.749351][T30356] bridge_slave_0: entered promiscuous mode [ 956.765067][T30356] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.767218][T30356] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.767703][T30356] bridge_slave_1: entered allmulticast mode [ 956.785283][T30356] bridge_slave_1: entered promiscuous mode [ 956.916293][T30356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.931539][T30356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.975051][T30356] team0: Port device team_slave_0 added [ 956.986542][T30356] team0: Port device team_slave_1 added [ 957.136882][T30356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.136903][T30356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.136933][T30356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.214745][T30356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.214766][T30356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.214796][T30356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.303023][T30451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5632'. [ 957.918887][T30356] hsr_slave_0: entered promiscuous mode [ 957.927270][T30356] hsr_slave_1: entered promiscuous mode [ 957.928194][T30356] debugfs: 'hsr0' already exists in 'hsr' [ 957.928216][T30356] Cannot create hsr debugfs directory [ 957.977587][T30468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5637'. [ 958.170562][ T52] Bluetooth: hci0: command tx timeout [ 958.176081][T30472] __nla_validate_parse: 2 callbacks suppressed [ 958.176103][T30472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5637'. [ 958.589156][T30491] tc_dump_action: action bad kind [ 958.934289][T30504] netlink: 3528 bytes leftover after parsing attributes in process `syz.2.5646'. [ 958.978253][T30502] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5648'. [ 959.055157][T30522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5648'. [ 959.312551][T30526] tipc: Enabling of bearer rejected, already enabled [ 959.347555][T30530] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5651'. [ 959.864522][T30356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 959.884845][T30356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 959.887929][T30356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 959.916396][T30356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.927847][T30356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 959.967511][T30356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 959.977817][T30562] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 960.012772][T30560] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 960.031237][T30564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5657'. [ 960.036247][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5657'. [ 960.036277][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5657'. [ 960.105399][T30356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.134150][T30356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.191029][T30564] sit0: entered promiscuous mode [ 960.191486][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5657'. [ 960.250257][ T52] Bluetooth: hci0: command tx timeout [ 960.562364][T30356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.618080][T30356] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.648402][T30596] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 960.648485][T30596] syzkaller0: linktype set to 8 [ 960.662324][T20721] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.662449][T20721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.708286][T20721] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.708400][T20721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.864345][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 961.765501][T29672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.765526][T29672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.982081][T30639] netlink: 'syz.5.5668': attribute type 9 has an invalid length. [ 962.266249][T30356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.334730][ T52] Bluetooth: hci0: command tx timeout [ 962.446823][T30654] net_ratelimit: 28 callbacks suppressed [ 962.446846][T30654] openvswitch: netlink: IP tunnel dst address not specified [ 962.446876][T30654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.498332][T30652] gretap0: entered promiscuous mode [ 962.507556][T30652] gretap0: left promiscuous mode [ 962.527069][T30647] wg2 speed is unknown, defaulting to 1000 [ 962.629294][T30656] gretap0: entered promiscuous mode [ 962.638287][T30656] gretap0: left promiscuous mode [ 962.796530][T30661] macsec0: entered allmulticast mode [ 962.806889][T30661] ip6gretap0: entered allmulticast mode [ 963.026525][T30356] veth0_vlan: entered promiscuous mode [ 963.208237][T30356] veth1_vlan: entered promiscuous mode [ 963.325425][T30679] syzkaller0: entered promiscuous mode [ 963.325451][T30679] syzkaller0: entered allmulticast mode [ 963.379193][T30649] netlink: 'syz.4.5669': attribute type 15 has an invalid length. [ 963.379218][T30649] __nla_validate_parse: 72 callbacks suppressed [ 963.379232][T30649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5669'. [ 963.460682][T30356] veth0_macvtap: entered promiscuous mode [ 963.502206][T30356] veth1_macvtap: entered promiscuous mode [ 963.588431][T30356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.794279][T30356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.890899][T29672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891786][T29672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891826][T29672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.891861][T29672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.298957][T16374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.298982][T16374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.393694][T20721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.393721][T20721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.513705][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5610'. [ 964.517679][T30702] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 964.801351][T30720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5688'. [ 964.890804][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 964.987033][T30726] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5685'. [ 965.105338][T30729] bond_slave_0: entered promiscuous mode [ 965.105365][T30729] bond_slave_0: entered allmulticast mode [ 965.172744][T30729] bond0: (slave bond_slave_0): Releasing backup interface [ 965.204375][T30729] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 965.875415][T30752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5697'. [ 965.936959][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5700'. [ 966.110886][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 966.156011][T30777] bridge7: entered allmulticast mode [ 966.194299][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 966.244376][T30783] bridge8: entered allmulticast mode [ 966.421800][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 966.421826][T30793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5705'. [ 967.141098][T30817] wg2 speed is unknown, defaulting to 1000 [ 967.293341][T30827] macvlan2: entered promiscuous mode [ 967.293367][T30827] macvlan2: entered allmulticast mode [ 967.304766][T18000] dummy0: entered promiscuous mode [ 967.325876][T30827] dummy0: entered allmulticast mode [ 967.377944][T30827] team0: Port device macvlan2 added [ 967.689811][T27524] Bluetooth: hci0: command 0x0405 tx timeout [ 968.100405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.101465][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 968.725583][T30859] bond1: option tlb_dynamic_lb: invalid value (128) [ 968.749513][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 360 seconds [ 968.752309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.754775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.757235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.759832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.762256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.763784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.764690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.765437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.766312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 968.766648][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 360 seconds [ 968.766686][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 360 seconds [ 968.766716][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 360 seconds [ 968.986737][T30859] bond1 (unregistering): Released all slaves [ 970.989643][ C0] sched: DL replenish lagged too much [ 971.495334][T30897] gre3: entered promiscuous mode [ 971.862985][T30903] __nla_validate_parse: 3 callbacks suppressed [ 971.863008][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5730'. [ 971.985028][T30911] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5733'. [ 972.876999][T30921] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5734'. [ 972.877031][T30921] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5734'. [ 972.910754][T30925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5735'. [ 972.910783][T30925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5735'. [ 973.110716][ C0] net_ratelimit: 3840 callbacks suppressed [ 973.110743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 973.111059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.113041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 973.113361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.115257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 973.115572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.117523][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 973.117836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.122900][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 973.123636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.453010][T30931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5736'. [ 973.480311][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5737'. [ 973.480338][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5737'. [ 973.565579][T30934] debugfs: '!ù' already exists in 'ieee80211' [ 973.671548][T30948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5736'. [ 974.566402][T30961] veth15: entered allmulticast mode [ 976.581053][T30996] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 976.673017][T31001] netlink: 'syz.0.5754': attribute type 362 has an invalid length. [ 977.126221][T31014] __nla_validate_parse: 1 callbacks suppressed [ 977.126246][T31014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5757'. [ 977.126274][T31014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5757'. [ 977.406445][T31010] netlink: 'syz.2.5756': attribute type 23 has an invalid length. [ 978.044430][T31036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5761'. [ 978.120454][ C0] net_ratelimit: 4615 callbacks suppressed [ 978.120484][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 978.120778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.122567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 978.122877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.124596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 978.124869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.126567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 978.126892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.128577][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fe:53:2a:59:ae:b1, vlan:0) [ 978.128846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.600012][T31047] netlink: 'syz.2.5763': attribute type 2 has an invalid length. [ 979.147900][T31061] block nbd6: server does not support multiple connections per device. [ 979.148275][T31061] block nbd6: shutting down sockets [ 979.488765][T31075] netlink: 'syz.5.5768': attribute type 16 has an invalid length. [ 979.488789][T31075] netlink: 'syz.5.5768': attribute type 17 has an invalid length. [ 979.583578][T31075] sit0: left promiscuous mode [ 979.674112][T31075] ip6gretap0: entered promiscuous mode [ 979.712993][T31075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.717315][T31075] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.722702][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5774'. [ 979.752641][T31091] netlink: 'syz.4.5774': attribute type 16 has an invalid length. [ 979.752666][T31091] netlink: 'syz.4.5774': attribute type 17 has an invalid length. [ 979.754012][T31092] netlink: 'syz.4.5774': attribute type 16 has an invalid length. [ 979.754033][T31092] netlink: 'syz.4.5774': attribute type 17 has an invalid length. [ 979.756403][T31075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.837227][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5774'. [ 979.837761][T31095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5774'. [ 979.839843][T31094] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 979.907698][T31075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.918108][T31075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.928649][T31075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 979.928697][T31075] hsr0: left promiscuous mode [ 979.951851][T31075] v: entered promiscuous mode [ 979.954245][T31075] macvlan0: left promiscuous mode [ 979.974373][T31075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.975534][T31075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.976685][T31075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.977671][T31075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.014475][T31075] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 980.032685][T31075] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 980.039954][T29674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.040765][T29674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.073265][T31077] syzkaller0: left promiscuous mode [ 980.073290][T31077] syzkaller0: left allmulticast mode [ 980.266587][T31091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.283499][T31091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.332055][T31091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.333669][T31091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.336976][T31091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.346985][T31091] veth1_vlan: left promiscuous mode [ 980.355087][T31091] veth0_vlan: left promiscuous mode [ 980.377987][T31091] veth0_vlan: entered promiscuous mode [ 980.384321][T31091] veth1_vlan: entered promiscuous mode [ 980.407102][T31091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 980.422417][T31091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 980.425573][T31091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 980.463100][ T204] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.463179][ T204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.465822][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.465897][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.523532][ T204] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.523610][ T204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.525692][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.525765][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.658273][T31100] syzkaller0: entered promiscuous mode [ 980.658303][T31100] syzkaller0: entered allmulticast mode [ 980.944355][T31128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5780'. [ 982.181855][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 480 seconds [ 982.181902][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 480 seconds [ 982.181934][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 480 seconds [ 982.181964][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 480 seconds [ 984.600579][T29672] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.600619][T29672] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.600663][T29672] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.600691][T29672] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.600731][T29672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.600770][T29672] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.600798][T29672] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.600836][T29672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.831966][T29672] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.832009][T29672] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.997060][T31147] gretap0: entered promiscuous mode [ 984.997370][T31147] vlan3: entered promiscuous mode [ 985.564904][T31096] infiniband syz0: set active [ 985.565069][T31096] infiniband syz0: added bond_slave_1 [ 985.569521][T31096] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 985.583580][T31171] syzkaller1: entered promiscuous mode [ 985.583604][T31171] syzkaller1: entered allmulticast mode [ 985.594540][T31096] infiniband syz0: Couldn't open port 1 [ 985.607825][T31096] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 985.608258][T31096] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 985.608376][T31096] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 985.757579][T31096] RDS/IB: syz0: added [ 985.757623][T31096] smc: adding ib device syz0 with port count 1 [ 985.757640][T31096] smc: ib device syz0 port 1 has no pnetid [ 986.014025][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 986.014064][T31175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5793'. [ 986.098497][T31182] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.5795'. [ 986.957240][T31207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5802'. [ 987.352100][T31213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5804'. [ 987.663455][T31221] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 987.663493][T31221] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 988.233765][T31241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5812'. [ 988.233793][T31241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5812'. [ 988.364426][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5815'. [ 988.491148][T31255] netlink: 'syz.4.5813': attribute type 1 has an invalid length. [ 988.491173][T31255] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5813'. [ 988.562495][T31251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5814'. [ 988.562854][T31250] net_ratelimit: 924 callbacks suppressed [ 988.562874][T31250] openvswitch: netlink: Missing key (keys=40, expected=100) [ 988.811638][T31257] tipc: Enabled bearer , priority 0 [ 988.893462][T31270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.981652][T31270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.919736][T10954] tipc: Node number set to 2328054512 [ 990.006364][T31297] netlink: 'syz.5.5829': attribute type 4 has an invalid length. [ 990.022657][T31297] .`: renamed from bond0 (while UP) [ 990.254717][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056aa9400: rx timeout, send abort [ 990.449555][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.453346][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.453592][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.453778][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.454046][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.454237][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.454435][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.454627][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.596725][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.754789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d9a800: rx timeout, send abort [ 990.757049][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056aa9400: abort rx timeout. Force session deactivation [ 990.820637][T31335] netlink: 'syz.0.5835': attribute type 16 has an invalid length. [ 990.820662][T31335] netlink: 'syz.0.5835': attribute type 17 has an invalid length. [ 990.912034][T31335] macvlan2: left promiscuous mode [ 990.912232][T31335] macvlan2: left allmulticast mode [ 990.912250][T31335] dummy0: left allmulticast mode [ 991.109275][T31358] netlink: 'syz.5.5837': attribute type 1 has an invalid length. [ 991.254852][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d9a800: abort rx timeout. Force session deactivation [ 992.151700][T31390] netlink: 'syz.2.5846': attribute type 2 has an invalid length. [ 992.397406][T31393] __nla_validate_parse: 4 callbacks suppressed [ 992.397431][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5846'. [ 992.483155][T31395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5846'. [ 992.822229][T31388] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.825248][T31388] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.933357][T31388] dummy0: left promiscuous mode [ 993.357783][T31388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.403502][T31388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.864403][T31388] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode [ 993.864427][T31388] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode [ 993.919429][T31388] bridge7: left allmulticast mode [ 993.940474][T31388] bridge8: left allmulticast mode [ 994.027302][T31402] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 994.241388][T29674] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.241423][T29674] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.241460][T29674] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.241482][T29674] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.241513][T29674] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.241535][T29674] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.241564][T29674] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.241587][T29674] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.363137][T31415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5852'. [ 994.385867][T31415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5852'. [ 994.385897][T31415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5852'. [ 994.622899][T31424] netlink: 3528 bytes leftover after parsing attributes in process `syz.5.5855'. [ 994.741719][T31429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5857'. [ 994.944723][T31435] bridge0: port 3(veth1_to_bridge) entered disabled state [ 994.945044][T31435] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.946079][T31435] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.047021][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 995.392760][T31461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5867'. [ 995.521678][T31466] netlink: 'syz.3.5869': attribute type 1 has an invalid length. [ 995.527453][T31469] netlink: 'syz.2.5870': attribute type 4 has an invalid length. [ 995.688265][T31466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5869'. [ 995.771530][T31467] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 995.842695][T31474] veth15: entered promiscuous mode [ 995.848503][T31474] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 995.907780][T31484] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.908358][T31484] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.399973][T29172] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 996.892460][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 997.297825][T31528] batadv_slave_1: entered promiscuous mode [ 997.327955][T31527] batadv_slave_1: left promiscuous mode [ 997.371365][T20717] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 997.461597][T18000] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 997.570681][T31542] __nla_validate_parse: 3 callbacks suppressed [ 997.570703][T31542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5887'. [ 997.574421][T31542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5887'. [ 997.738398][T31550] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5886'. [ 997.858458][T31554] netlink: 3536 bytes leftover after parsing attributes in process `syz.5.5889'. [ 998.085042][T31562] net_ratelimit: 26 callbacks suppressed [ 998.085066][T31562] ip_tables: iptables: counters copy to user failed while replacing table [ 998.162044][T31564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5890'. [ 998.410526][T16377] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 998.411008][T16377] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 998.581366][T18000] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 998.624743][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5901'. [ 998.657410][T31591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5899'. [ 998.659557][T31591] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 998.817384][ T1723] block nbd2: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 390 seconds [ 998.817442][ T1723] block nbd2: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 390 seconds [ 998.817474][ T1723] block nbd2: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 390 seconds [ 998.817503][ T1723] block nbd2: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 390 seconds [ 999.965731][T31612] syzkaller1: entered promiscuous mode [ 999.965751][T31612] syzkaller1: entered allmulticast mode [ 1000.061785][T31614] wg2 speed is unknown, defaulting to 1000 [ 1000.703494][T27524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1000.706369][T27524] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1000.724845][T27524] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1000.748128][T27524] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1000.748921][T27524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1001.603681][T31663] syzkaller1: entered promiscuous mode [ 1001.603710][T31663] syzkaller1: entered allmulticast mode [ 1001.938591][T31670] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1001.938947][T31659] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1002.010464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.259959][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1002.320826][T31646] wg2 speed is unknown, defaulting to 1000 [ 1002.496025][T31682] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1002.532139][T31682] tipc: Enabling of bearer rejected, failed to enable media [ 1002.534950][T31682] syzkaller1: entered promiscuous mode [ 1002.534974][T31682] syzkaller1: entered allmulticast mode [ 1002.890820][ T52] Bluetooth: hci5: command tx timeout [ 1002.923403][T31691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1002.996253][T31695] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 1003.878296][T31731] netlink: 'syz.0.5933': attribute type 4 has an invalid length. [ 1003.878323][T31731] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1003.930280][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1003.960850][T31646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.960967][T31646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.961153][T31646] bridge_slave_0: entered allmulticast mode [ 1003.966277][T31646] bridge_slave_0: entered promiscuous mode [ 1004.001988][T31646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.002184][T31646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.002347][T31646] bridge_slave_1: entered allmulticast mode [ 1004.004484][T31646] bridge_slave_1: entered promiscuous mode [ 1004.108276][T31646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.123762][T31646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.161798][T29674] IPVS: starting estimator thread 0... [ 1004.162002][T31739] netlink: 'syz.3.5935': attribute type 21 has an invalid length. [ 1004.217235][T31646] team0: Port device team_slave_0 added [ 1004.232721][T31646] team0: Port device team_slave_1 added [ 1004.250352][T31740] IPVS: using max 25 ests per chain, 60000 per kthread [ 1004.357654][T31646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.357675][T31646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.357703][T31646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.407924][T31646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.407957][T31646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.407987][T31646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.486072][T31746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1004.754165][T31646] hsr_slave_0: entered promiscuous mode [ 1004.762736][T31646] hsr_slave_1: entered promiscuous mode [ 1004.781823][T31646] debugfs: 'hsr0' already exists in 'hsr' [ 1004.781851][T31646] Cannot create hsr debugfs directory [ 1004.969937][ T52] Bluetooth: hci5: command tx timeout [ 1005.107996][T31765] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1005.109130][T31765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1005.224592][T31753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1005.229030][T31777] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.5942'. [ 1005.277862][ T30] audit: type=1804 audit(1790354316.933:21): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5942" name="/newroot/473/cgroup.controllers" dev="tmpfs" ino=2446 res=1 errno=0 [ 1005.298326][ T30] audit: type=1800 audit(1790354316.943:22): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5942" name="cgroup.controllers" dev="tmpfs" ino=2446 res=0 errno=0 [ 1005.404825][T31646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.404867][T31646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1005.404905][T31646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.404933][T31646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52449 - 0 [ 1005.543324][T31765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1005.703465][T31785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5944'. [ 1005.835887][T31778] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1005.944735][T31646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.944764][T31646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1005.944786][T31646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.944826][T31646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52449 - 0 [ 1006.314878][T31646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.314919][T31646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1006.314949][T31646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.314978][T31646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52449 - 0 [ 1006.639169][T31814] netlink: 'syz.3.5950': attribute type 1 has an invalid length. [ 1006.675772][T31646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.675814][T31646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1006.675844][T31646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.675874][T31646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52449 - 0 [ 1006.773883][T31817] netlink: 'syz.3.5950': attribute type 58 has an invalid length. [ 1006.773907][T31817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1006.856218][T31814] bond8: option mode: invalid value (9) [ 1006.871385][T31814] bond8 (unregistering): Released all slaves [ 1006.907071][T31811] netlink: 'syz.3.5950': attribute type 29 has an invalid length. [ 1006.907099][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1007.038769][T31833] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 1007.038802][T31833] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 1007.057842][ T52] Bluetooth: hci5: command tx timeout [ 1007.427128][T31646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1007.446185][T31646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.457942][T31646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1007.473013][T31646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.473992][T31646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1007.496590][T31646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.533917][T31646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1007.549345][T31646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.748349][T31859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5960'. [ 1007.910229][T31646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.997369][T31646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.029495][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.029725][ T8096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.081273][T29674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.081408][T29674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.739132][T31893] syzkaller0: left promiscuous mode [ 1008.739158][T31893] syzkaller0: left allmulticast mode [ 1008.759015][T31893] netlink: 'syz.5.5967': attribute type 30 has an invalid length. [ 1008.778928][T31891] block nbd6: server does not support multiple connections per device. [ 1008.784987][T31891] block nbd6: shutting down sockets [ 1009.129773][ T52] Bluetooth: hci5: command tx timeout [ 1009.353073][T31905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1009.493489][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1009.915009][T31924] netlink: 'syz.3.5973': attribute type 2 has an invalid length. [ 1010.045490][T31646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.210830][T31931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1010.329873][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1010.479604][T31646] veth0_vlan: entered promiscuous mode [ 1010.525020][T31646] veth1_vlan: entered promiscuous mode [ 1010.744265][T31941] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1010.747838][T31646] veth0_macvtap: entered promiscuous mode [ 1010.805426][T31946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.835515][T31946] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1010.893189][T31946] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1010.917099][T31946] bond0 (unregistering): Released all slaves [ 1011.001163][T29172] syz0: Port: 1 Link DOWN [ 1011.049545][T31646] veth1_macvtap: entered promiscuous mode [ 1011.077462][T31646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.108804][T31646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.160501][T16374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.160611][T16374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.160654][T16374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.172080][T20717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.586830][T16374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.586855][T16374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.674661][T16374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.674686][T16374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.075513][T31978] tipc: Started in network mode [ 1012.075549][T31978] tipc: Node identity 00000000000000000071000000000001, cluster identity 4711 [ 1012.075601][T31978] tipc: Enabling of bearer rejected, failed to enable media [ 1012.164098][T31983] pim6reg: entered allmulticast mode [ 1012.206024][T31983] pim6reg: left allmulticast mode [ 1012.267680][ T1687] block nbd1: Possible stuck request ffff8880271ee000: control (read@0,1024B). Runtime 510 seconds [ 1012.267729][ T1687] block nbd1: Possible stuck request ffff8880271ee1c0: control (read@1024,1024B). Runtime 510 seconds [ 1012.267783][ T1687] block nbd1: Possible stuck request ffff8880271ee380: control (read@2048,1024B). Runtime 510 seconds [ 1012.267850][ T1687] block nbd1: Possible stuck request ffff8880271ee540: control (read@3072,1024B). Runtime 510 seconds [ 1012.776503][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1012.914192][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5999'. [ 1013.334208][T32011] xt_CT: No such helper "snmp" [ 1013.578143][T32024] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1013.668915][T32032] netlink: 'syz.2.6007': attribute type 1 has an invalid length. [ 1013.739509][T32035] netlink: 'syz.2.6007': attribute type 10 has an invalid length. [ 1013.739535][T32035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1013.951727][T32045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1014.064847][T32035] dummy0: entered promiscuous mode [ 1014.066510][T32036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.427388][T32058] xt_check_table_hooks: 55 callbacks suppressed [ 1014.427478][T32058] x_tables: duplicate underflow at hook 1 [ 1014.479437][T32059] x_tables: duplicate underflow at hook 1 [ 1014.596591][T32072] ip6erspan2: entered allmulticast mode [ 1014.711214][T32077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1014.711591][T32076] netlink: 'syz.3.6013': attribute type 21 has an invalid length. [ 1014.712032][T32077] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1014.804952][T32086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6017'. [ 1015.295538][T32089] syzkaller1: entered promiscuous mode [ 1015.295568][T32089] syzkaller1: entered allmulticast mode [ 1016.384003][T32115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.385846][T32115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1016.408941][T32115] openvswitch: netlink: Missing valid actions attribute. [ 1016.527009][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1016.548904][T32117] netlink: 'syz.3.6022': attribute type 4 has an invalid length. [ 1016.548930][T32117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1016.613424][T32121] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1016.732349][T32129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6025'. [ 1016.734690][T32122] syzkaller0: entered promiscuous mode [ 1016.734713][T32122] syzkaller0: entered allmulticast mode [ 1016.798644][T32129] netlink: 'syz.2.6025': attribute type 10 has an invalid length. [ 1016.912625][T32125] netlink: 'syz.2.6025': attribute type 1 has an invalid length. [ 1017.016045][T32137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1017.034016][T32137] veth1_to_team: entered promiscuous mode [ 1017.035628][T32137] gretap0: entered promiscuous mode [ 1017.036518][T32137] debugfs: 'hsr1' already exists in 'hsr' [ 1017.036540][T32137] Cannot create hsr debugfs directory [ 1017.036559][T32137] hsr1: entered promiscuous mode [ 1017.085297][T32139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1017.246302][T32149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1017.543288][ T30] audit: type=1804 audit(1790354329.203:23): pid=32157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6032" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=60 res=1 errno=0 [ 1017.543354][ T30] audit: type=1800 audit(1790354329.203:24): pid=32157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6032" name="cgroup.controllers" dev="tmpfs" ino=60 res=0 errno=0 [ 1017.603434][T32157] No such timeout policy "syz0" [ 1018.028382][T32180] netlink: 'syz.0.6037': attribute type 4 has an invalid length. [ 1018.542503][T32173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1019.057769][T32206] bond0: option arp_validate: invalid value (8192) [ 1019.075801][T32206] bond0 (unregistering): Released all slaves [ 1019.312486][T32231] Set syz1 is full, maxelem 2 reached [ 1019.334994][T32215] wg2 speed is unknown, defaulting to 1000 [ 1019.406762][T32237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1019.817085][T32250] __nla_validate_parse: 68 callbacks suppressed [ 1019.817107][T32250] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1020.132269][T29674] nci: nci_rsp_packet: unknown rsp opcode 0xd [ 1020.368732][T32270] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6059'. [ 1020.445217][T32270] syzkaller0: entered promiscuous mode [ 1020.445243][T32270] syzkaller0: entered allmulticast mode [ 1020.734304][T32283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1020.734420][T32283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1020.861278][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6063'. [ 1020.861307][T32287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.862375][T32287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.899542][T32257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.904446][T32277] netlink: 'syz.5.6060': attribute type 23 has an invalid length. [ 1023.134454][ T31] INFO: task udevd:14646 blocked in I/O wait for more than 143 seconds. [ 1023.134480][ T31] Not tainted syzkaller #0 [ 1023.134492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.134504][ T31] task:udevd state:D stack:23400 pid:14646 tgid:14646 ppid:4982 task_flags:0x400140 flags:0x00080002 [ 1023.134568][ T31] Call Trace: [ 1023.134578][ T31] [ 1023.134594][ T31] __schedule+0x17db/0x58f0 [ 1023.134653][ T31] ? __lock_acquire+0x747/0x2de0 [ 1023.134694][ T31] ? __pfx___schedule+0x10/0x10 [ 1023.134733][ T31] ? schedule+0x90/0x2b0 [ 1023.134764][ T31] schedule+0x164/0x2b0 [ 1023.134795][ T31] io_schedule+0x7f/0xd0 [ 1023.134835][ T31] folio_wait_bit_common+0x836/0xbc0 [ 1023.134894][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 1023.134940][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1023.134967][ T31] ? filemap_read_folio+0x234/0x3a0 [ 1023.135011][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1023.135055][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 1023.135099][ T31] do_read_cache_folio+0x1ac/0x590 [ 1023.135135][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1023.135259][ T31] read_part_sector+0xb6/0x2b0 [ 1023.135310][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1023.135340][ T31] ? rcu_is_watching+0x16/0xb0 [ 1023.135384][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1023.135413][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1023.135442][ T31] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1023.135466][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 1023.135490][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 1023.135522][ T31] bdev_disk_changed+0x851/0x17a0 [ 1023.135571][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1023.135608][ T31] blkdev_get_whole+0x372/0x510 [ 1023.135647][ T31] bdev_open+0x324/0xd70 [ 1023.135706][ T31] blkdev_open+0x461/0x600 [ 1023.135740][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1023.135769][ T31] do_dentry_open+0x816/0x1380 [ 1023.135814][ T31] vfs_open+0x3b/0x340 [ 1023.135839][ T31] ? path_openat+0x1428/0x1d60 ** replaying previous printk message ** [ 1023.135839][ T31] ? path_openat+0x1428/0x1d60 [ 1023.135866][ T31] path_openat+0x1443/0x1d60 [ 1023.136067][ T31] do_file_open+0x23e/0x4a0 [ 1023.136099][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1023.136148][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1023.136221][ T31] ? alloc_fd+0x651/0x6c0 [ 1023.136265][ T31] do_sys_openat2+0x115/0x200 [ 1023.136298][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.136326][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1023.136367][ T31] __x64_sys_openat+0x138/0x170 [ 1023.136403][ T31] do_syscall_64+0x166/0x520 [ 1023.136435][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.136461][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1023.136490][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.136514][ T31] RIP: 0033:0x7f1e620a7407 [ 1023.136537][ T31] RSP: 002b:00007ffc77533d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1023.136563][ T31] RAX: ffffffffffffffda RBX: 00007f1e6282b880 RCX: 00007f1e620a7407 [ 1023.136581][ T31] RDX: 00000000000a0800 RSI: 000055dcbd262430 RDI: ffffffffffffff9c [ 1023.136599][ T31] RBP: 000055dcbd261910 R08: 0000000000000000 R09: 0000000000000000 [ 1023.136615][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dcbd275ba0 [ 1023.136631][ T31] R13: 000055dcbd26f190 R14: 0000000000000000 R15: 000055dcbd275ba0 [ 1023.136669][ T31] [ 1023.136707][ T31] INFO: task udevd:19554 blocked in I/O wait for more than 143 seconds. [ 1023.136724][ T31] Not tainted syzkaller #0 [ 1023.136746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.136757][ T31] task:udevd state:D stack:23400 pid:19554 tgid:19554 ppid:4982 task_flags:0x400140 flags:0x00080002 [ 1023.136820][ T31] Call Trace: [ 1023.136829][ T31] [ 1023.136843][ T31] __schedule+0x17db/0x58f0 [ 1023.136892][ T31] ? __lock_acquire+0x747/0x2de0 [ 1023.136929][ T31] ? __pfx___schedule+0x10/0x10 [ 1023.136968][ T31] ? schedule+0x90/0x2b0 [ 1023.137013][ T31] schedule+0x164/0x2b0 [ 1023.137045][ T31] io_schedule+0x7f/0xd0 [ 1023.137076][ T31] folio_wait_bit_common+0x836/0xbc0 [ 1023.137106][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 1023.137152][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1023.137178][ T31] ? filemap_read_folio+0x234/0x3a0 [ 1023.137212][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1023.137248][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 1023.137290][ T31] do_read_cache_folio+0x1ac/0x590 [ 1023.137326][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1023.137362][ T31] read_part_sector+0xb6/0x2b0 [ 1023.137393][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1023.137423][ T31] ? rcu_is_watching+0x16/0xb0 [ 1023.137456][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1023.137486][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1023.137516][ T31] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1023.137557][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 1023.137584][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 1023.137618][ T31] bdev_disk_changed+0x851/0x17a0 [ 1023.137698][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1023.137738][ T31] blkdev_get_whole+0x372/0x510 [ 1023.137772][ T31] bdev_open+0x324/0xd70 [ 1023.137812][ T31] blkdev_open+0x461/0x600 [ 1023.137845][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1023.137874][ T31] do_dentry_open+0x816/0x1380 [ 1023.137916][ T31] vfs_open+0x3b/0x340 [ 1023.137942][ T31] ? path_openat+0x1428/0x1d60 [ 1023.137969][ T31] path_openat+0x1443/0x1d60 [ 1023.138024][ T31] do_file_open+0x23e/0x4a0 [ 1023.138055][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1023.138105][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1023.138131][ T31] ? alloc_fd+0x651/0x6c0 [ 1023.138174][ T31] do_sys_openat2+0x115/0x200 [ 1023.138207][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.138235][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1023.138275][ T31] __x64_sys_openat+0x138/0x170 [ 1023.138312][ T31] do_syscall_64+0x166/0x520 [ 1023.138343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.138368][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1023.138396][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.138420][ T31] RIP: 0033:0x7f1e620a7407 [ 1023.138440][ T31] RSP: 002b:00007ffc77533d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1023.138464][ T31] RAX: ffffffffffffffda RBX: 00007f1e6282b880 RCX: 00007f1e620a7407 [ 1023.138482][ T31] RDX: 00000000000a0800 RSI: 000055dcbd281c90 RDI: ffffffffffffff9c [ 1023.138500][ T31] RBP: 000055dcbd261910 R08: 0000000000000000 R09: 0000000000000000 [ 1023.138515][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dcbd279e00 [ 1023.138531][ T31] R13: 000055dcbd26f190 R14: 0000000000000000 R15: 000055dcbd279e00 [ 1023.138569][ T31] [ 1023.138675][ T31] [ 1023.138675][ T31] Showing all locks held in the system: [ 1023.138706][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1023.138797][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1023.138968][ T31] locks held by getty/5369: 2, on CPU#1: [ 1023.139013][ T31] #0: ffff8880359ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1023.139139][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1023.139212][ T31] locks held by udevd/14646: 1, on CPU#0: [ 1023.139229][ T31] #0: ffff8880270e2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1023.139292][ T31] locks held by udevd/19554: 1, on CPU#1: [ 1023.139308][ T31] #0: ffff8880270e6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1023.139366][ T31] locks held by syz-executor/19613: 4, last CPU#0: [ 1023.139383][ T31] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1023.139447][ T31] #1: ffff88807b9883b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1023.139515][ T31] #2: ffff88807b98b6b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1023.281453][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1023.281656][ T31] locks held by syz-executor/20188: 4, last CPU#0: [ 1023.281700][ T31] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1023.281864][ T31] #1: ffff888032f79d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1023.282039][ T31] #2: ffff88807b98d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1023.282221][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1023.302814][ T31] locks held by syz-executor/32301: 4, last CPU#0: [ 1023.302887][ T31] #0: ffff888050d30088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1023.303128][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1023.303278][ T31] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1023.303451][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1023.303614][ T31] locks held by syz-executor/32302: 4, last CPU#0: [ 1023.303668][ T31] #0: ffff888050ad7088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1023.303913][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 1023.304055][ T31] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 1023.304244][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1023.317808][ T31] [ 1023.317820][ T31] ============================================= [ 1023.317820][ T31] [ 1023.317854][ T31] NMI backtrace for cpu 0 [ 1023.317908][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1023.317986][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1023.318028][ T31] Call Trace: [ 1023.318059][ T31] [ 1023.318082][ T31] dump_stack_lvl+0xe8/0x150 [ 1023.318197][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1023.318339][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1023.318455][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1023.318534][ T31] sys_info+0x135/0x170 [ 1023.318587][ T31] watchdog+0xfd7/0x1030 [ 1023.318667][ T31] ? watchdog+0x1c7/0x1030 [ 1023.318744][ T31] kthread+0x38b/0x480 [ 1023.318808][ T31] ? __pfx_watchdog+0x10/0x10 [ 1023.318872][ T31] ? __pfx_kthread+0x10/0x10 [ 1023.318938][ T31] ret_from_fork+0x514/0xb70 [ 1023.319012][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1023.319077][ T31] ? __switch_to+0xc89/0x1420 [ 1023.319192][ T31] ? __pfx_kthread+0x10/0x10 [ 1023.319256][ T31] ret_from_fork_asm+0x1a/0x30 [ 1023.319410][ T31] [ 1023.320714][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1023.320856][ C1] NMI backtrace for cpu 1 [ 1023.320872][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1023.320893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1023.320906][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1023.320987][ C1] Code: 99 54 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c 9e c4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 17 c7 76 06 cc 44 89 f9 80 e1 07 38 c1 [ 1023.321005][ C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002 [ 1023.321023][ C1] RAX: 000000000000000a RBX: 000000000000000a RCX: 0000000000000000 [ 1023.321035][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 1023.321048][ C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 1023.321059][ C1] R10: dffffc0000000000 R11: ffffffff857341c0 R12: dffffc0000000000 [ 1023.321074][ C1] R13: 000000000000000a R14: ffffffff9ad45300 R15: 0000000000000000 [ 1023.321088][ C1] FS: 0000000000000000(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 1023.321104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1023.321118][ C1] CR2: 00007f93c133f780 CR3: 00000000810f8000 CR4: 00000000003526f0 [ 1023.321137][ C1] Call Trace: [ 1023.321145][ C1] [ 1023.321156][ C1] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 1023.321191][ C1] serial8250_console_write+0xaa1/0x1200 [ 1023.321220][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1023.321241][ C1] ? __schedule+0x17f1/0x58f0 [ 1023.321274][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1023.321306][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1023.321334][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1023.321366][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1023.321391][ C1] nbcon_kthread_func+0x679/0x880 [ 1023.321416][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1023.321435][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1023.321459][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1023.321488][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1023.321518][ C1] kthread+0x38b/0x480 [ 1023.321536][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1023.321555][ C1] ? __pfx_kthread+0x10/0x10 [ 1023.321574][ C1] ret_from_fork+0x514/0xb70 [ 1023.321593][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1023.321611][ C1] ? __switch_to+0xc89/0x1420 [ 1023.321645][ C1] ? __pfx_kthread+0x10/0x10 [ 1023.321664][ C1] ret_from_fork_asm+0x1a/0x30 [ 1023.321703][ C1] [ 1023.347148][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1024.412974][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1024.422123][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.432198][ T31] Call Trace: [ 1024.435502][ T31] [ 1024.438453][ T31] vpanic+0x56d/0xa60 [ 1024.442469][ T31] ? __pfx___schedule+0x10/0x10 [ 1024.447377][ T31] ? __pfx_vpanic+0x10/0x10 [ 1024.451922][ T31] panic+0xc5/0xd0 [ 1024.455696][ T31] ? __pfx_panic+0x10/0x10 [ 1024.460179][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1024.465723][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1024.471154][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1024.477344][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1024.483529][ T31] watchdog+0x1030/0x1030 [ 1024.487894][ T31] ? watchdog+0x1c7/0x1030 [ 1024.492341][ T31] kthread+0x38b/0x480 [ 1024.496437][ T31] ? __pfx_watchdog+0x10/0x10 [ 1024.501135][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.505766][ T31] ret_from_fork+0x514/0xb70 [ 1024.510384][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.515519][ T31] ? __switch_to+0xc89/0x1420 [ 1024.520231][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.524962][ T31] ret_from_fork_asm+0x1a/0x30 [ 1024.529791][ T31] [ 1024.533533][ T31] Kernel Offset: disabled [ 1024.537873][ T31] Rebooting in 86400 seconds..