last executing test programs: 12.234614457s ago: executing program 2 (id=2477): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x801) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r1}, 0x38) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @empty, 0x0}, &(0x7f00000003c0)=0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000780000000000000002000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004fb9d0085000000410000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r2}, 0x94) 11.495015983s ago: executing program 4 (id=2483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 11.145942259s ago: executing program 4 (id=2486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x20000046, &(0x7f00000002c0)=[{0x4b3, 0x8, 0x2, 0x7}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=0x0, @ANYBLOB="23a5277b1055570b7316b500"/23], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5], 0xcc}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x8000004) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r11 = epoll_create1(0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000140001"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x2}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdc5, 0x810, r13, 0x44ed9000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000040)={r13, &(0x7f0000000200)='\x17\x00\xab\x03\xe0\x96zA\xd64\xa6\xd3\xca\x9b9I\x93\xed7;Y\x8a\x98\x14K\xa2\x91~a\xc6\x93\xe5U\n\xda\xd3]\xf1\x00'/52, 0x88080, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xc8b]}, {0x4, 0xfff4, 0x1, 0xffff}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x58}) 9.579816341s ago: executing program 4 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x9}, {0x6, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8=r3], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0xc, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, r14, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000feff08ff850000008b000000950000000042acb335103ae10202000000000000008ad56b21a87bf3ec25d408a3cd5a00997e0fd7dbfa0d5b32f1afbf2402933768ddb9eca01f7aac38fe317899f23449a1327b6cf59bf1136f29f97f27208a34f43d30dcb0628900800000907b8c8d584053ab021b8ebc8d43100b79c04db00e15bf91b77dc239e0"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 9.20515535s ago: executing program 0 (id=2492): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b35226bd7000fcdbdf251200000008001500c0000000080001005d"], 0x24}, 0x1, 0x0, 0x0, 0x4018041}, 0x2008080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2, 0x20}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 8.784956106s ago: executing program 2 (id=2493): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r6, @ANYBLOB="40100000004104002c00128008000100677265002000028008000700ac1414aa0600030081"], 0x54}}, 0x4040000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r1}, 0x20) 8.3052289s ago: executing program 0 (id=2494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0xfd, 0x3, 0x80000000, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x20, 0x80, 0x2, 0x2}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newnexthop={0x50, 0x68, 0x300, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x3, 0x0, 0x10}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5}}, @NHA_ENCAP={0x20, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x1c, 0x1, [{0x2, 0x0, 0x1}, {0xffff}, {0x1, 0x0, 0x1}, {0x10, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}]}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c000}, 0x8094) readv(r0, &(0x7f0000000200), 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @initdev, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@RTM_DELMDB={0x138, 0x55, 0x109, 0x70bd26, 0x25dfdbfb, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x1, {@in6_addr=@private1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x1, {@in6_addr=@private0, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x2, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x9, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x0, {@ip4=@rand_addr=0x64010102, 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x3, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x2, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x3, {@in6_addr=@mcast1, 0x9edd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40d1}, 0x24000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000540)=0x8, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0xc30c, 0x5, 0x3, 0xc7}, 0x10) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x95e7}]}, 0x54}}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f00000007c0)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x6, {0x40, 0x0, 0x2}}, @nl=@kern={0x10, 0x0, 0x0, 0x2}, @can={0x1d, r1}, 0x100, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000800)='wg0\x00', 0x1fffffffe, 0x70f, 0xfc01}) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000940)=@req3={0x5, 0x8, 0x10001, 0x5e9c914a, 0x9, 0x4, 0x5d}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000980)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000e00)={r0, &(0x7f0000000d00)='\'\x04*{.@-^\x00', 0x0, &(0x7f0000000d40)={@align=0x8, {0x8, 0x2, 0x8, 0x10001}}, 0xfff, &(0x7f0000000d80), &(0x7f0000000dc0)=0x1}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pB \x00'}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='./file0\x00', 0x0, 0xf8d15c913cca4d4a}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x19, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x49}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x1, 0x4, 0x0, 0x4, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2b}, @alu={0x7, 0x1, 0xa, 0x1, 0x2, 0x6, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x23, &(0x7f0000000bc0)=""/35, 0x41000, 0x18, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x9, 0xf97, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[r7, r8, r9, r10, r11], 0x0, 0x10, 0x70}, 0x94) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r9) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r12, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x77}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0a2f5f6eaa11"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c001}, 0x40001) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000001200)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xb, &(0x7f0000001240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc17e31cd4f877821}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf8a5a4}], &(0x7f00000012c0)='GPL\x00', 0x7, 0x4, &(0x7f0000001300)=""/4, 0x41100, 0x3, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000001400)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0x6, 0x7, 0x80}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001480)=[{0x0, 0x4, 0xf, 0x5}, {0x0, 0x3, 0x0, 0xb}, {0x5, 0x3, 0x4, 0xc}, {0x4, 0x3, 0x10, 0x2}, {0x4, 0x2, 0x2, 0x3}, {0x5, 0x5, 0xa, 0x7}], 0x10, 0x3}, 0x94) 7.709198824s ago: executing program 2 (id=2496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000000d9be0576429f145dab4aa9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000300"/26], 0x50) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="020000000980ffff", 0x8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000100)={&(0x7f0000000080)=""/105, 0x69, 0x9, 0xffffffff}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x5e, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7, 0x3, 0xc, @private1, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000, 0x7800, 0x9d, 0x200}}) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) writev(r9, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e", 0x60}], 0x1) (async) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) close(0x4) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) (async) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14, 0x10012, r5, 0x25c80000) (async) socket$nl_generic(0x10, 0x3, 0x10) 7.66824013s ago: executing program 0 (id=2497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0xdee3c0183c34067e, 0x800, 0xfff, {r3, r4/1000+10000}, {}, {0x2, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x3b, 0x2, 0x0, 0x0, "e366375b4c99841b0b8171e69254bb8f52d9636c9b61636ca02b516b1b6c052aeae41c87fed4e9bf710243e4f893d716c038a437591c4a4ec68db065966a9f96"}}, 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 6.362540857s ago: executing program 1 (id=2502): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x0, 0x5, 0x9cb5, 0x7ff, 0x1000]}, &(0x7f0000000100)=0x78) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000200)=0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000740)={&(0x7f0000000240)=0x8, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000700)}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000007c0), 0x2, 0x0) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000800)='cgroup.kill\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000840)={0xd, 0x3}, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000880)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) writev(r0, &(0x7f00000008c0), 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000a40)={r1, 0x0, 0x7, 0x4, 0x4, 0xf}) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x6, 0x6, 0x401, 0x0, 0x0, {0x92e3ea4653c6f248}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000b80)={0x6a, 0x6}, 0x2) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa4, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf59}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000dc0)={0xf, 0x80}) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000e00)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000f00)=0xe8) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x104, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xfc}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xad9}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x1403, 0x4, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000011) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40080) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004280)={'batadv0\x00', 0x0}) (rerun: 64) sendmmsg$inet(r3, &(0x7f0000004d40)=[{{&(0x7f0000001340)={0x2, 0x4e22, @private=0x5}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001380)="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", 0xfe}, {&(0x7f0000001480)="d7a35d9b201b624a7288d911648d5b4d829f2fa72a226e1226c7d5bcaae1a559f76409715215010f9b1ca6224afefa95484033124640547cfda00296655176d69f7f7d69c22fc1c4c5d335eb229974dda2e89f799919cee10aed9e576859932b150513528405048d8ef7929325183eeba45d9cb4223f2bf14513af9fa4c4f1fd3c226e05665fc1", 0x87}], 0x2, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x80}}, {{&(0x7f0000001600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001640)="eb87fe3b3f2169eef51214ca1585fcb7970d3202886f992dc2af32ad0f46b4805409c6ac0e9ef8aaf133f4f311cc0fae1dbe2cf60fc07743da81f54eb2234c0a6db1f797de0abf194b645e6b4c1d244214540079e7103aecb2d3880ab7b4482a23b42530a578d1f5c8d424a7137b69ec6f1fd50b8b89c3174e0a3fe748c447a43dff383ea82fb8c93fbc7dfa21d5c8fa4674b04ae6cdca9adf16d0830d98cd5af5a235e40de9a55be85c854a01349b60ecea556102a9a6a3d56c9d53750f33471a5d61c0595e7d1969d5ffb4a97d4fccb390277977c1e46002d64cf85579735928169f0c7d9a4c7a4bbf7aec8dec9aed790ce9c08728cd6f1e31e22f597ad1", 0xff}, {&(0x7f0000001740)="3f1ff1f72b9d98f9c8aa8c33cd20ab990678d2f59d80acd49adc20622877b595564d332c43a28dc2d825fc321c6d5c14b1c85a88b39dd98366a5ad05193fe2dbb6f72c7c8eda83081bcba174a8429beaa9c3f77cc115fdb52d1a6489ca396441c39a70071463437daba21d9898908dbca36b09924a86d139a7b78165", 0x7c}, {&(0x7f00000017c0)="fd7c84f3e8e251a4700b4b8ad09cea01d91f53a0f2a141a351210a566e576729ed9ed3b9f9f4926f9bc0b129678f326466f54ae61c84c2010ba68445977ddc93ff3195b67ea746a56bd2eec94baeb2c5842090811e23504f55f89828861f376c2d2a414858ccd2fe5a3ea58c818e786d7a9ba5110b29430cdfe5922a7991f78a2d2e29ec786de01f", 0x88}], 0x3, &(0x7f00000018c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001900)="c9b240bf1b2e95620c7cd8366df575139e867b3c0fc29b3ecddb3cddc3dbe0a1295a16cade0d7dfbcb97c5d5652347d841cb69e2479203e77278b661ba711f1707377494c99a25e9e5616ab727117f429f6040614696444c0a0a34d712752abbe8d118ec9a5369b209013d3bbac62cb88491146c23b4f38c446b2bbdd299bfbe6fd7da099cf970fe5e5f0ceca502bc", 0x8f}, {&(0x7f00000019c0)="b16cbb296786e4f4e5a665f7a677667191b2e689979bc3b7114c9725b2b900ae83ecfb690abc1e7996f550e4531ab211efecb2fdc2c9c03ae7620dcc501a6df08166ab1d78110e13f2abe8cfdd4b3e59db841ba35fa88fb666119f922ae6c7c5d97de2df8f31d2921c424dbc114bb6549ed152a7e23cfc5ec2b2", 0x7a}, {&(0x7f0000001a40)="8a0c187ff45043a80c23f1ddda0cbaeecb8c11dfa452afcf19d8195588", 0x1d}, {&(0x7f0000001a80)="6d8dc4478fd6c7ce05249807e4064853a15312a3855e86b1f4de9e154e5b821cac4ad4571f2ed012f8de82e1178bc2ed9fa5c8d8f6f79de478784eacc19aeb9b27ee043f75004b1cc33bbd9f16bf206cdabd9dd0f747d9ac2008d246aec5ed656032181976f346bc687a1f7409a1d21c21f7f2b416ad7fc4d88ef95729231199c410fe011e6f8af4a02d0d3de3853edd341e4e130be977edfea401cb3a665b30ddeb4efcf1c6d25162bc617c8ab42ed7a689c558aa544af1310a02a56247a98006b3cd8c3feb10ed", 0xc8}, {&(0x7f0000001b80)="79671c46166f7d44a26d7c137445af7ad8c1ae", 0x13}, {&(0x7f0000001bc0)="96650764557238645a1fae1107fa5c46112c50eb217a84f165efc3db344b607a4c1b8a4d1fed55e024025d626882d1f2e61ebcd2bd05f1bb7e917826a2ddef74f80a06e8a74225939d27cadab83c11e55e8b93734ec3321f75b7b94e0c01d58b252004e7b893dbb253b42c709d7a8cc58104ce1d837e47e75a0092043a06f9ada6277f17894bc01e99be340020e5056c97a7ade310192fa1cae5d69c1a2115bc813754fbadf2cbcee2c2d06a9f4ecc819629eb9b72d83dfda26a49f8aab2f761c533ba36c0dd03316ad0bf9dd326199fb4c65898ea37d0afc2c84e", 0xdb}, {&(0x7f0000001cc0)="9c00213b3114d4bcd1d525f0a90a59ee21e778448073c982abb1fcd660108cceff171e01309dd687d092bf467029a5013a5dec8651b961183bf89e4182bbde5815ca379292fc099a8b9204589bacab12979ed4289fa5f07e96e4978a13fdf4926998b8bf9c9eb14c36c44e9ad4c5e2b328", 0x71}], 0x7, &(0x7f0000001dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x98}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000001e80)="6b7f61e4994c8da84cc049acde9e3b409fbdaf0d8f823c915041efc6dbb423120e24abfc625f07c1ba845a2e4c98926a431c8f846a553a75ba85d69eece78e9c78ba42810819168cb5fe952a020f6cfd0c04b07f848b39864cb7ce3d4cdfa7a04bcf37d1f0f4a99293f3d551df9499945fcf7c19cd1bf3b331e67963f0fdbd23d9bf3a", 0x83}, {&(0x7f0000001f40)="6a021e65310c1a14c48574948a81d785d6df26ace978188cb37bf8591bcc37e9b6fe9e90903de747facb9695a9bae2552b184a6c60688bb6dec35bf710f230430b01e6dc5a2c19b12592e63e265b83", 0x4f}, {&(0x7f0000001fc0)="bf0ad0fc31cbc7edd841a071e1c8fb1cd84a4fc9a15e3ae73646d32ec7116974197d2753e444ec67d0b6290ba44b7f58cd39469b51abd70d02fdf88787763c02a156c7315320c4ceddc68789c6cb9422efdbd562149fe74287c6ddfa09643493e7db8941e7df7444bef849ff22e5e2fff7bf54f4226a2f76f7794d46bb0f12c433dc7eadb34dd08b96cb38b09f6991", 0x8f}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="4290bf61ce0c74eb450df04ab5da33bf94b056488103feaba1e2881f5caffb52d0110ba1b8d8bf9962b46987591f80282b7c4f8ce3d1205617", 0x39}, {&(0x7f00000030c0)="05f181f1437f5caf5671353d4077b1a3883f08f33b6954136b357beebb98f10ca973fe89f7ce0b1f010b6bdc27ab6964b80b89b4afbc18bf132fa9fcbee799f878bbd1a824797e3263f626c8a032ef9e9554c1cb1b71b8c309ff3a1fd080dea5fa0f03c8bd6fa5b58bd06562b31ddf3378dee4572299802d0e6d16d669fe877d2e7141d440e848a341350e5771f703a0deb97806527b00141fe7cc8369ff9c25ed3126f76f45f24675f1b954507c1e2444f03e3476d7126658df7df785", 0xbd}, {&(0x7f0000003180)="4c3091dcd38dc0d9bf620f281aabb9ef3565e44b73859bff436a27bf1f5f3572149e0af93213b1b5206ed47e87d8e0c1db90d7de40771f24ba098978b4607969c496c5ebb1d73b609e0a78ea6918dd7928ad7623fc4b1c447369e40ee82e1d5491e8a44a91361a4db0d2921e6c94a1c9ff", 0x71}, {&(0x7f0000003200)="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", 0x1000}], 0x8, &(0x7f00000042c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6}]}, @ssrr={0x89, 0xb, 0xae, [@local, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x88, 0x0, 0xd, [0x2, 0x5]}, @generic={0x7, 0x4, "9aba"}]}}}], 0x90}}, {{&(0x7f0000004380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000004640)=[{&(0x7f00000043c0)="fd2c088747932abe82041b9f4067a77c126036ab2c8d4a27e584a482ff0739facca867fb7517e9056605980d1a23d4f28a6632d9d29620ad2f880f0bbadc7c861e6b07a0da9ecd18e6f7857e0f64d339cae0b49478a54ab07fd362af052b774bca9936cd79d467cf4d9a5933", 0x6c}, {&(0x7f0000004440)="4a878c1d68bf0e3ab2cafbc633cfc874f9623642a1c872f1191ed27d81bfb0b8f2aa4417f1356df93f3ddd77727246bc4b250b6c68bfd0a15957029d610b68c72f0b8f6ed7ff60afd1898e71310c611271b8fbbd59c5ce08f606f99210c592cb6186ec61f9e341a2213802df4b8e9633f20db1254812e1d7961c5c46a62064cafb2918fc57e3c56b8409d80c19d76eaad1248b1bb511b044479e1595505cd358165e331e26", 0xa5}, {&(0x7f0000004500)="2ef28cef6411bb2652243692c0230332ff44d2474966939ba42d9250ebb6fe02a2dec6c57f25373505a55f0ceab7e0df0f9d9f4c271e4f9e545fc47ab3c842c7734193bf571faec56479e4f9b6", 0x4d}, {&(0x7f0000004580)="1e5694dd7e4a45a90feec079bb63a7abbe979d0be173e4462bb205d74b1a5ddd8d7015858e65186d8b91d88650cebfcbb4b9c04e198de39123b20a62b9e28d1cd4560f139c2ef57fa3d7bbb4eb58489ea3fe31c1125b6f2a7e40e0dfa56f8fb3d428c0004c08306c00557c", 0x6b}, {&(0x7f0000004600)="d596b1961591b1a9864ba06ba5f659d401ce0eebf77dd60d4397b12abcfba9e5f79827c307ef84e8f8611d", 0x2b}], 0x5, &(0x7f00000046c0)}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004700)="cd6fa417072d228d083fa21e8c7f94d7d82af3d88beebafefb2605887631ec50fbc24873705154aa7ad8bf360da50f5fd4d13231aa8b904c2d6f8dfd766193cb78802793cca118aaec6e2641803517dd1d7f5436eebb9c80684bc146f2014a775d33ffbfc72ad7c4af902644ef8351a2fa16dd85844075b855bbeed34cad12c330ab250548d6d192e4deaae13a0b0d157f21406be29e8bf6997860ef9bd7b2ac3f3f5d7d611c5c03669eda5f2d3e9ca7b8bf19c7a541493d0d882dc0c017ec3e576422b300b9b10b5e489eb3aa417e", 0xcf}, {&(0x7f0000004800)="d0157c29ce37981e01601deeb483139750616278f6e483962bc6ce410beb6269f01cca8ebdbc9724bb798750f02a6169faedb0286cad845ededb2d60c45741fe7c052a78e51e4a6105712782868e69e8f085a4ed74a660f509462a986aee304751dea7635f05cfc2eba10da4c26ba67af296fca5b4a84884535368fa6b6bd89258963d9ec5a3c6a180d686c7d32d726ddb288f0419cf9e8ff1c09421f4d666c144bbe5194f0e5770b32977efc723ea447c7120286d08084171edd6ee8bd889afd15c3a4d7c319ecf968ac149a8ac61a63f8f0a36fe4f714c41a3b70e19466b975e0c43c59640fd1d4235ca4b943085360a5f71b5", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004940)="7eae8a4939d706fa2c6bb6e3a962fc9137b293567d5ae88308bba6bde8ecc12cd2a874d22c2434f2852a00463d78b9e3a2971bffff98e69b6d657871827d03182a4f21ec73c46a172e684c8c2ace6e8f018985578d07ac712ace6257398dda07d8199c1f1b9276d144591a", 0x6b}, {&(0x7f00000049c0)="0b153884616c06549476588d1b0179a7e3393567ca5b2b63ebf719bc3c87c401e18d31ca38da7caa5fc3602bcde369c00c561b9eab5866466716490315f6a31768f18072ef99af35b50d3ac3cae717a7c1cf864e9bf51c7627fdb1749a77963ee84f69ba0459b1439dfe52f868a0c41116c0d927c62cb5dd2e4ba7b6669b339334a4018576796b5626361b8946d0236232b81bee8f4662bc8e9fe76e85c6a59c37827d42de356e3e20ddccbe50958d8b9c079e4c31b496e83c870eff541f1ed88798de7ee8b32faa85", 0xc9}, {&(0x7f0000004ac0)="919e219ca6f77f4a50da18c73e27e5aa73019e423e1a0568a7860e27c524c93ac6942bdd78af0dd2777927a383d6406167805999aac9bb5c2c33707cf4eec729ddb0c87f984c2024e6ca5d221e2334152540bcf32f332a5fc8345518131364c6419a659f2e4251880b375682d4d8a87f762fe8dae78fddaa089449ebea558af0630a00ea41015b6fa3", 0x89}, {&(0x7f0000004b80)="dc186c3f938cd3b8b56692f2f516e7b272cdb159bd1fcbeaa7e2bad49296b147813bc3f6be0a209a97dd93079a3407de6c33647754f68df3285598d7ec38be273c3f8629e0b6844dda21803fd8d4c3d4ddb70def77c6389273260e55cb8e06cb796d5afd5d202c184de6b04badd8f426f372855e70a161c18f96b124ea7f123bee4be78f87aee15767f18cafd087", 0x8e}, {&(0x7f0000004c40)="f456f0613ced74aebcc98fb2e05e1521f1907f1d70f7276fb061a028f4d310268c92e71f506d1ac67d72302e5958a56f7a19c8701a298163", 0x38}], 0x5, &(0x7f0000004d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}], 0x7, 0x200088d0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005300)={&(0x7f00000050c0)={0x240, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x8aa2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x7f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xff2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x7fff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x10}, 0x4040001) 6.129335392s ago: executing program 3 (id=2504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r2, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x1000000000000277) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) readv(r2, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x1000000000000277) (async) 6.002883673s ago: executing program 1 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x55, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0xc}, {0x10, 0xfff3}, {0x7, 0x4}}, [{0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 5.874365924s ago: executing program 3 (id=2506): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000200), &(0x7f00000002c0)=0x4) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000100)={0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r9) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) write(r5, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "4bfab5a6c5592cfd901950dae3ab3c9e"}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.049825046s ago: executing program 3 (id=2507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38b470233d46ea41ec5a3c4b4d82000000000022", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a010101"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcb}}, 0xffffffff, 0x6, 0x0, 0x6, 0x2, 0x10000, 0x7}, 0x9c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16, @ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', r3, 0x0, r4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) 1.929342086s ago: executing program 4 (id=2508): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80008000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000f1401000c000000ffdbdf250d0045006f70615f766e6963000000003e6985bf5b286a51676d448979ab31cc402c790f3653ca6094c4f9"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008014) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb23000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000003000000000000000000f0008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.928791773s ago: executing program 1 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70, 0x6004}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.917877714s ago: executing program 2 (id=2510): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffb8}}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffffffd], 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x313b, 0x1}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xffffffdd, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000100)={'veth0_vlan\x00'}) 1.704780734s ago: executing program 3 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x47, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0xa044}, 0x404c8c5) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000002820010000000000000000000000000000fe8000000000000000000000000000bb00000005000010000a000001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e0802f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e000000000050001100fe800000000000000000000000000011fe800000000000000000000000000028ac1414aa0000000000000000000000000000000000bb3c000000fdff00000a000200"/88], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0x1}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x6, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x5, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x0, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x81}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 1.2780726s ago: executing program 1 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)={0x34, r4, 0x209, 0xe0bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8140}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8a8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc01}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.207142972s ago: executing program 4 (id=2513): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251f00000008000200", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000280)="8bbfb3a14245a650", 0x8}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002800)=@updpolicy={0x1fc, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x2, 0x0, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x2f}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000000, 0x4, 0x2}, {0x0, 0x3fffffffffffd, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3501, 0x0, 0x3, 0x8, 0x8, 0x0, 0x400}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x3, 0x5, 0x1a, 0x10000000, 0x2}, {{@in=@loopback, 0x4d6, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x8, 0x5ba, 0x6, 0x5fc}, {{@in=@empty, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3500, 0x4, 0x2, 0xff, 0x2, 0x2, 0x311d9dc2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x27}, 0x4d2, 0x3c}, 0xa, @in6=@mcast2, 0x3501, 0x0, 0x1, 0x9, 0x9, 0x4, 0xf50d}]}]}, 0x1fc}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}}, 0x4800) 1.198328338s ago: executing program 2 (id=2514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x11, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3d017b30, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000900000a000000060001003500000008000a00", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x40, 0x40, @loopback, @mcast1, 0x7, 0x7, 0xef3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gretap0\x00', r3, 0x80, 0x40, 0x6, 0x3ff, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0x7, 0xc5, [@rand_addr=0x64010101]}, @end, @rr={0x7, 0x7, 0xf3, [@empty]}, @rr={0x7, 0xb, 0xc7, [@rand_addr=0x64010102, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000ec0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r14, @ANYBLOB="000228bd7000fcdbdf2507000000640001800800030003000000080003000100000008000300010000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r3, @ANYRES8=r13, @ANYRESDEC, @ANYRESOCT=r9, @ANYRES32=r3, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r3, @ANYBLOB="440001000000000053584c82ff86cb940a97ab117293b51227b001f0c6b8f3637f8d85dfb274799d2e00a7eabc752203c96acec521b662c1ace2833dc7e315473dd641034315ffb75ee3c0315bafdf4862c46c0a7af16f59f00240f5", @ANYRES32=r14, @ANYBLOB="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", @ANYRES8=r1, @ANYRES8=r9], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf25070000000800030023b53b21e210ab0a8d26f335d4", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000209bd7000fcdfdf258200000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500d92555b25499fbba0000023f4a00", @ANYRES32=r15, @ANYBLOB="080001000a010102"], 0x20}}, 0x0) 1.174279557s ago: executing program 3 (id=2515): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x1}, 0x10}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x1) recvmmsg(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080)=0xffffffff, 0x4) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x41) 941.842313ms ago: executing program 0 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180002"], 0x18, 0x500}}], 0x2, 0x44034) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r5 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async) sendmsg$inet6(r4, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[], 0x380}, 0x8080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xa12, 0x2, 0x771, 0x2, r1, 0x3, '\x00', 0x0, r3, 0x4, 0x3, 0x3, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 801.23497ms ago: executing program 0 (id=2517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'multiq\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694fd2cd00103afffe8004e20000000000000000000000bbff020000000000000000000000000001"], 0x4a) (async, rerun: 64) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) close(r1) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (async) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0x0, 0xd}, {0x8, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}}, 0x2) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x9c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3ff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_VENDOR_DATA={0x6d, 0x1f, "923753ac35f56ff7696d7c3b105ba3daadbbe67ea52a8eea023688dd83a51633ef21cd74d9f7441b3000910a0f40bc37036ca54b546f026cb0d79abab8255eb6506f9d86e96694b12d1e0d8dad7509b94f054105d159cfb5182efc036c4fb1b10af5d3890e77674f0c"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) (async, rerun: 32) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 32) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400244000ff88ff000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) (rerun: 32) 652.492927ms ago: executing program 1 (id=2518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) (async) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000600)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@del={0xf0, 0x11, 0x400, 0x70bd2a, 0x25dfdbfe, {{'sha256-avx\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0xff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8084}, 0x4000040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) unshare(0x8000400) (async) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, &(0x7f0000000080)) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) close(r7) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r6, 0x0, r7, 0x0, 0x8201, 0x9) 310.896611ms ago: executing program 4 (id=2519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000005200), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.262329ms ago: executing program 2 (id=2520): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x1000}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={r4, 0xf10}, &(0x7f0000000540)=0x8) 263.147788ms ago: executing program 1 (id=2521): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{&(0x7f0000000380)=@nl=@proc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000001b00)=""/114, 0x72}, {&(0x7f0000001bc0)=""/31, 0x1f}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=""/4, 0x4}, 0x6a7}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000001d00)=""/214, 0xd6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/79, 0x4f}, {&(0x7f0000001f80)=""/201, 0xc9}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/49, 0x31}], 0x6, &(0x7f0000003740)=""/197, 0xc5}, 0x6}], 0x2, 0x10001, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="02009357b8dd6c074cfa1d691c7e1bb90c5d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r3, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1}}, {{0x0, 0x0, 0x0}, 0x5554b384}], 0x2, 0x40002000, 0x0) unshare(0x400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r6, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000350901000000000a9500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000280)="0130d3e298bb7d5ac91875110400dd26507de2eaffe1eea214a840a2b3e700000000000000edff", 0x27) setsockopt$inet_opts(r8, 0x0, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 112.996679ms ago: executing program 3 (id=2522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRESOCT=r0], 0x68}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xfff3, 0x8}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) close(0x3) r5 = socket(0xa, 0x3, 0xff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)={0x3, 'vlan0\x00', {0x8}, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000000000000ff020000000000000000000000000001ff"], 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x12}], 0x1, 0x20, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003401108004500003800000000000190780a010102ac1414aa0b009078120002282500000000000000002f00007f00000100000000000088be000000002ae9f432ca6828e6f9bacdb19340612d3a7b0b27f807d5429c5e9023c83fa48000fc21b1"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280080001"], 0xf4}}, 0x0) 0s ago: executing program 0 (id=2523): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x148, 0x43, 0xa0, 0x0, 0x98, 0x218, 0x178, 0x178, 0x218, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe8, 0x148, 0x0, {0x0, 0x7a010000}, [@common=@addrtype={{0x30}, {0x1, 0xf04, 0x1}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x4, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x5, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x310) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000380)={{0x5e, @broadcast, 0x4e22, 0x4, 'dh\x00', 0x10, 0x2}, {@multicast2, 0x4e24, 0x10000, 0x3, 0x4, 0x81}}, 0x44) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@udp=r2, 0x2}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB="0a000200aaaaaaaaaabb00000a000100bae7ad4459ac0000de7a394388e595f93557df2db8801fc7de4a7f70301b8e24d9ec728bd3a6c79434d96b09b6b159d0f87545019a9afbb1638975b74d7e92a7c3d2e837e53c64f33d9be5fa2ab55955c43fbd4f334b43ad763340f205bd854af4a09ebc487cbc58068cd91605fab81d8bf8c0912d73d40b6e047e014e6deaebf83fcadc18fbf477fa10c49c9c926be4ec9ae279532527c71c41893e83ab71a9b69c73179bf3d43593d17562f8065365ba3f2e920f0cb6a3c5c6af4049f2e8d05e2a4f330b2982fda496f5986c"], 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) r12 = socket$inet6(0xa, 0x2, 0x0) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000003061d4031223eca2e15c2520b0a7400cdfd2f00400045a3002c00650000401190780a0500000000000000264e2000189078040000"], 0xfdef) (async) bind$l2tp6(r12, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1, 0x400, 0xfffffffd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x2, 0x0, 0x0, 0x6, 0xff, 0xbe7}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r14, 0x8b32, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="21012abd7002ffdbdf2503000000080001000000f6ff0308078043aab23aa2af16614088a3027737b5ab5363c087099f7aa851a75f4c3fee397f4b69250f03e20133a68a3bdc451726c142505187ec7357def7fa99aa61891438643d60ca82220337448bb7d11e3431cc2d42621eab3c1db410b669beda839b66856f14f3a288f89205ebb345f22615aaaccc7c6f1dcf1d0158170e4ac1562da534be6f01ba7d20e1dbd45bdabbc81854205fb3a0d044cc9dbdaedf3d266163600dca520b9cfd37b10ac2fa6a2f55435ee73a44c761e9e7b60768c2baa81b1e45a22d557a572f2ff81a1495d4c3df"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4014) (async) sendmsg$inet6(r1, &(0x7f00000027c0)={&(0x7f0000001740)={0xa, 0x4e24, 0xfffffffa, @remote, 0xfbffff7f}, 0x1c, 0x0}, 0x4040814) kernel console output (not intermixed with test programs): 268.740432][ T9735] dvmrp8: entered allmulticast mode [ 269.070997][ T9751] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 269.201158][ T9753] netlink: 'syz.0.966': attribute type 4 has an invalid length. [ 270.799239][ T9837] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 270.919948][ T9837] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.039508][ T9853] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 271.182219][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 271.278607][ T9856] gretap1: entered allmulticast mode [ 271.815847][ T9886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 271.964212][ T9886] __nla_validate_parse: 6 callbacks suppressed [ 271.964232][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 272.008472][ T9897] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 272.018855][ T9897] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1003'. [ 272.208864][ T9909] netlink: 'syz.4.1007': attribute type 32 has an invalid length. [ 272.485675][ T9915] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1007'. [ 273.681178][ T9951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1018'. [ 273.691498][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1018'. [ 274.097502][ T9964] dvmrp0: entered allmulticast mode [ 274.358060][ T9971] syzkaller0: entered promiscuous mode [ 274.376440][ T9971] syzkaller0: entered allmulticast mode [ 274.784635][ T9988] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1028'. [ 275.348688][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 275.378677][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 275.665341][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 60 seconds [ 275.680092][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 60 seconds [ 275.693154][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 60 seconds [ 275.872648][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 275.944105][T10015] netlink: 'syz.2.1035': attribute type 10 has an invalid length. [ 275.977286][T10015] netlink: 'syz.2.1035': attribute type 10 has an invalid length. [ 276.025938][T10029] xt_socket: unknown flags 0x50 [ 276.289978][T10036] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 276.468526][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 276.600065][T10036] bond3: entered promiscuous mode [ 276.613273][T10036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.642460][T10044] bond3: entered allmulticast mode [ 276.697366][T10056] bond3: (slave bridge3): making interface the new active one [ 276.708753][T10056] bridge3: entered promiscuous mode [ 276.714642][T10056] bridge3: entered allmulticast mode [ 276.724249][T10056] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 277.016453][T10061] __nla_validate_parse: 2 callbacks suppressed [ 277.016502][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 277.080264][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 277.160998][T10070] ipip0: entered promiscuous mode [ 277.517645][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1049'. [ 277.634163][T10085] syzkaller1: entered promiscuous mode [ 277.658861][T10085] syzkaller1: entered allmulticast mode [ 277.705475][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 277.738996][ T29] audit: type=1804 audit(1779875263.458:5): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1058" name="/newroot/218/memory.events" dev="tmpfs" ino=1143 res=1 errno=0 [ 277.770045][ T29] audit: type=1800 audit(1779875263.488:6): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1058" name="memory.events" dev="tmpfs" ino=1143 res=0 errno=0 [ 277.797851][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 278.711518][T10118] bridge0: port 3(team0) entered blocking state [ 278.750895][T10118] bridge0: port 3(team0) entered disabled state [ 278.762701][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 278.790290][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 278.815384][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 278.852474][T10117] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1066'. [ 278.862544][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 279.190529][T10130] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 279.467954][T10151] netlink: 'syz.2.1073': attribute type 2 has an invalid length. [ 280.293966][T10176] nbd: socks must be embedded in a SOCK_ITEM attr [ 280.360509][T10182] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 281.327853][T10204] pim6reg: entered allmulticast mode [ 282.325456][T10244] netlink: 'syz.2.1094': attribute type 30 has an invalid length. [ 282.689879][T10255] __nla_validate_parse: 14 callbacks suppressed [ 282.689901][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 283.065386][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 283.151746][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 283.249347][T10278] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 283.461668][T10287] ip6gre1: entered promiscuous mode [ 283.511312][T10287] ip6gre1: entered allmulticast mode [ 284.040879][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 284.109193][T10313] syzkaller0: entered promiscuous mode [ 284.127730][T10313] syzkaller0: entered allmulticast mode [ 284.273320][T10320] netlink: 'syz.2.1111': attribute type 19 has an invalid length. [ 284.300850][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 284.447496][T10320] netlink: 'syz.2.1111': attribute type 19 has an invalid length. [ 284.456721][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.466439][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 284.477090][ T35] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.496947][ T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.510572][ T35] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.621009][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 284.691620][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 285.004712][T10343] xt_hl: Unknown Hop Limit match mode: 206 [ 285.197157][T10355] Bluetooth: MGMT ver 1.23 [ 285.228465][T10355] Cannot find del_set index 0 as target [ 285.297431][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 285.384485][T10362] xt_l2tp: missing protocol rule (udp|l2tpip) [ 285.579008][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 286.013195][T10372] ip6gre2: entered promiscuous mode [ 286.057454][T10372] ip6gre2: entered allmulticast mode [ 286.709818][T10402] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 286.734455][T10403] netlink: 'syz.3.1133': attribute type 6 has an invalid length. [ 286.757068][T10402] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 286.975292][T10414] dummy0: entered allmulticast mode [ 287.034719][T10412] dummy0: left allmulticast mode [ 289.067314][T10455] __nla_validate_parse: 5 callbacks suppressed [ 289.067336][T10455] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1147'. [ 289.092664][T10455] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1147'. [ 289.169872][T10455] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1147'. [ 289.258158][T10457] batman_adv: batadv0: Adding interface: dummy0 [ 289.302495][T10457] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.432643][T10457] batman_adv: batadv0: Interface activated: dummy0 [ 290.658869][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1154'. [ 291.697924][T10507] syzkaller1: entered promiscuous mode [ 291.764117][T10507] syzkaller1: entered allmulticast mode [ 291.936733][T10512] syzkaller0: entered promiscuous mode [ 291.962597][T10512] syzkaller0: entered allmulticast mode [ 292.295660][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 292.428600][T10528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.891623][T10533] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 293.140758][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 294.660666][T10509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.947224][T10550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1169'. [ 295.041600][T10550] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1169'. [ 295.466711][T10573] netlink: 'syz.3.1174': attribute type 11 has an invalid length. [ 295.543545][T10573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.618087][T10573] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.770191][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.915359][T10573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.948726][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.046379][T10573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.072587][T10573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.162852][T10573] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.211540][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.218867][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.300532][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.307816][ T3311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.346162][T10575] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 296.354529][T10575] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 296.776132][T10601] nbd: couldn't find a device at index 0 [ 296.910502][T10604] sctp: [Deprecated]: syz.2.1182 (pid 10604) Use of int in max_burst socket option deprecated. [ 296.910502][T10604] Use struct sctp_assoc_value instead [ 300.412876][ T4998] udevd[4998]: worker [7922] /devices/virtual/block/nbd1 is taking a long time [ 305.755745][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 90 seconds [ 305.768332][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 90 seconds [ 305.780925][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 90 seconds [ 317.267614][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.731756][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 327.568466][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1196'. [ 327.607341][T10666] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 330.198172][T10649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.501464][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1201'. [ 330.522630][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1201'. [ 330.717004][T10689] netlink: 'syz.1.1202': attribute type 6 has an invalid length. [ 330.740144][T10689] netlink: 'syz.1.1202': attribute type 7 has an invalid length. [ 330.760498][T10689] netlink: 'syz.1.1202': attribute type 8 has an invalid length. [ 330.787431][T10689] netlink: 'syz.1.1202': attribute type 15 has an invalid length. [ 330.837397][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 330.933727][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 331.106810][T10689] team1: entered promiscuous mode [ 331.124908][T10701] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1207'. [ 331.144540][T10689] team1: entered allmulticast mode [ 331.174724][T10689] 8021q: adding VLAN 0 to HW filter on device team1 [ 331.391333][T10695] team2: entered promiscuous mode [ 331.468622][T10695] team2: entered allmulticast mode [ 331.500419][T10695] 8021q: adding VLAN 0 to HW filter on device team2 [ 331.608280][T10712] syzkaller0: entered promiscuous mode [ 331.622174][T10712] syzkaller0: entered allmulticast mode [ 331.657674][T10719] veth0_macvtap: entered allmulticast mode [ 331.693235][T10719] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 331.760535][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 331.778092][T10725] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1213'. [ 331.797523][T10718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1212'. [ 331.837707][T10720] tipc: Enabled bearer , priority 0 [ 331.875059][T10722] syzkaller0: entered promiscuous mode [ 331.936087][T10722] syzkaller0: entered allmulticast mode [ 332.022394][T10718] tipc: Resetting bearer [ 332.121339][T10716] tipc: Resetting bearer [ 332.247855][T10716] tipc: Disabling bearer [ 332.635887][T10747] 0A: renamed from virt_wifi0 [ 332.659845][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 332.802967][T10756] 8021q: VLANs not supported on tunl0 [ 332.887729][T10751] dvmrp0: entered allmulticast mode [ 333.114358][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 333.127009][T10765] netlink: 'syz.4.1222': attribute type 8 has an invalid length. [ 333.187392][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 333.274370][T10765] veth1_to_team: entered promiscuous mode [ 333.298772][T10765] gretap0: entered promiscuous mode [ 333.352511][T10765] veth1_to_team: left promiscuous mode [ 333.396049][T10765] gretap0: left promiscuous mode [ 333.476079][T10770] xt_CT: No such helper "snmp_trap" [ 333.655590][T10774] syzkaller0: entered promiscuous mode [ 333.686020][T10774] syzkaller0: entered allmulticast mode [ 333.752823][T10779] batman_adv: batadv0: Adding interface: dummy0 [ 333.837188][T10779] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.033702][T10779] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 334.679953][T10790] batman_adv: batadv0: Interface deactivated: dummy0 [ 334.747102][T10790] batman_adv: batadv0: Removing interface: dummy0 [ 334.843161][T10790] bridge_slave_0: left allmulticast mode [ 334.880215][T10790] bridge_slave_0: left promiscuous mode [ 334.925836][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.035423][T10790] bridge_slave_1: left allmulticast mode [ 335.063485][T10790] bridge_slave_1: left promiscuous mode [ 335.092824][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.181629][T10790] bond0: (slave bond_slave_0): Releasing backup interface [ 335.240706][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.259061][T10790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.309318][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.322362][T10790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.335409][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 335.381803][T10790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.599284][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1234'. [ 335.679701][T10815] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 335.769292][T10817] netlink: 'syz.0.1232': attribute type 32 has an invalid length. [ 335.833329][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 120 seconds [ 335.845974][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 120 seconds [ 335.860333][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 120 seconds [ 335.911610][T10829] can: request_module (can-proto-0) failed. [ 335.925071][T10829] sctp: [Deprecated]: syz.1.1235 (pid 10829) Use of int in max_burst socket option deprecated. [ 335.925071][T10829] Use struct sctp_assoc_value instead [ 336.105406][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 336.308703][T10842] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1238'. [ 336.470259][T10845] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 336.496249][T10845] netlink: 'syz.0.1240': attribute type 2 has an invalid length. [ 336.746111][T10834] veth3: entered allmulticast mode [ 336.954976][T10834] bond7: (slave veth3): Enslaving as an active interface with an up link [ 337.009207][T10860] netlink: 'syz.1.1243': attribute type 2 has an invalid length. [ 337.089685][T10839] bond7 (unregistering): (slave veth3): Releasing backup interface [ 337.134784][T10839] bond7 (unregistering): Released all slaves [ 337.186004][T10851] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 337.197079][T10851] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 337.706347][T10872] bond7: entered allmulticast mode [ 337.742174][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 338.640918][T10897] ip6tnl1: entered allmulticast mode [ 338.695454][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.745028][ T5733] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.755992][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.962175][ T5733] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.026575][ T5733] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.788878][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1259'. [ 340.038882][T10915] tipc: Resetting bearer [ 340.113408][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1261'. [ 340.123180][T10934] FAULT_INJECTION: forcing a failure. [ 340.123180][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 340.208148][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.3.1260 Not tainted syzkaller #0 PREEMPT(full) [ 340.208175][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.208186][T10934] Call Trace: [ 340.208194][T10934] [ 340.208202][T10934] dump_stack_lvl+0xe8/0x150 [ 340.208231][T10934] should_fail_ex+0x412/0x560 [ 340.208258][T10934] _copy_from_user+0x2d/0xb0 [ 340.208282][T10934] ___sys_recvmsg+0x175/0x590 [ 340.208311][T10934] ? __pfx____sys_recvmsg+0x10/0x10 [ 340.208338][T10934] ? __fget_files+0x2a/0x420 [ 340.208378][T10934] ? __fget_files+0x3a0/0x420 [ 340.208410][T10934] do_recvmmsg+0x334/0x800 [ 340.208441][T10934] ? __pfx_do_recvmmsg+0x10/0x10 [ 340.208476][T10934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.208516][T10934] __x64_sys_recvmmsg+0x198/0x250 [ 340.208542][T10934] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 340.208573][T10934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.208594][T10934] do_syscall_64+0x174/0xf80 [ 340.208615][T10934] ? clear_bhb_loop+0x40/0x90 [ 340.208637][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.208656][T10934] RIP: 0033:0x7f31a379ce59 [ 340.208674][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.208689][T10934] RSP: 002b:00007f31a456f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 340.208710][T10934] RAX: ffffffffffffffda RBX: 00007f31a3a15fa0 RCX: 00007f31a379ce59 [ 340.208723][T10934] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 340.208735][T10934] RBP: 00007f31a456f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.208746][T10934] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 340.208757][T10934] R13: 00007f31a3a16038 R14: 00007f31a3a15fa0 R15: 00007ffcf8abe608 [ 340.208788][T10934] [ 340.430064][T10931] veth0: entered promiscuous mode [ 340.452338][T10931] veth0: left promiscuous mode [ 341.563711][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 341.793674][T10988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.835956][T11031] FAULT_INJECTION: forcing a failure. [ 342.835956][T11031] name fail_futex, interval 1, probability 0, space 0, times 1 [ 342.931240][T11031] CPU: 0 UID: 0 PID: 11031 Comm: syz.3.1277 Not tainted syzkaller #0 PREEMPT(full) [ 342.931268][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.931279][T11031] Call Trace: [ 342.931287][T11031] [ 342.931295][T11031] dump_stack_lvl+0xe8/0x150 [ 342.931323][T11031] should_fail_ex+0x412/0x560 [ 342.931348][T11031] get_futex_key+0x1b0/0x1590 [ 342.931372][T11031] ? perf_lock_task_context+0x785/0x850 [ 342.931410][T11031] ? __pfx_get_futex_key+0x10/0x10 [ 342.931432][T11031] ? __pfx___mutex_trylock_common+0x10/0x10 [ 342.931465][T11031] futex_wake+0x114/0x580 [ 342.931490][T11031] ? __mutex_lock+0x319/0x1550 [ 342.931515][T11031] ? __pfx_futex_wake+0x10/0x10 [ 342.931545][T11031] ? exit_mm_release+0x1a/0x30 [ 342.931571][T11031] do_futex+0x395/0x420 [ 342.931599][T11031] ? __pfx_do_futex+0x10/0x10 [ 342.931623][T11031] ? __might_fault+0xaf/0x130 [ 342.931650][T11031] mm_release+0x101/0x290 [ 342.931672][T11031] exit_mm+0x54/0x2d0 [ 342.931701][T11031] do_exit+0x6a2/0x22c0 [ 342.931733][T11031] ? __pfx_do_exit+0x10/0x10 [ 342.931760][T11031] ? do_raw_spin_lock+0x12b/0x2f0 [ 342.931795][T11031] do_group_exit+0x21b/0x2d0 [ 342.931818][T11031] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.931840][T11031] get_signal+0x1284/0x1330 [ 342.931881][T11031] arch_do_signal_or_restart+0xbc/0x840 [ 342.931911][T11031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 342.931945][T11031] ? __x64_sys_recvmmsg+0x198/0x250 [ 342.931979][T11031] exit_to_user_mode_loop+0xa9/0x680 [ 342.931997][T11031] ? rcu_is_watching+0x15/0xb0 [ 342.932019][T11031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.932039][T11031] do_syscall_64+0x353/0xf80 [ 342.932058][T11031] ? trace_irq_disable+0x3b/0x140 [ 342.932083][T11031] ? clear_bhb_loop+0x40/0x90 [ 342.932106][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.932124][T11031] RIP: 0033:0x7f31a379ce59 [ 342.932143][T11031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.932158][T11031] RSP: 002b:00007f31a456f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 342.932180][T11031] RAX: fffffffffffffe00 RBX: 00007f31a3a15fa0 RCX: 00007f31a379ce59 [ 342.932193][T11031] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 342.932206][T11031] RBP: 00007f31a456f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.932217][T11031] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 342.932228][T11031] R13: 00007f31a3a16038 R14: 00007f31a3a15fa0 R15: 00007ffcf8abe608 [ 342.932258][T11031] [ 343.187272][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.373207][T11039] xt_HMARK: spi-set and port-set can't be combined [ 343.499978][T11049] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1281'. [ 343.763853][T11062] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 343.768604][T11060] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 343.794363][T11064] xt_TCPMSS: Only works on TCP SYN packets [ 343.869204][ T9] bridge0: entered promiscuous mode [ 343.925779][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 344.257348][T11071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1284'. [ 344.337433][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1285'. [ 344.391280][T11065] bond8: (slave geneve3): making interface the new active one [ 344.477065][T11065] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 344.747354][T11084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1287'. [ 344.769218][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.779211][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 344.864013][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.885331][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.032331][T11090] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1289'. [ 345.129565][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.168487][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.385953][ T9457] bridge0: entered promiscuous mode [ 345.482634][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 345.824309][ T9457] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.684895][T11139] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 346.728287][T11139] dvmrp1: linktype set to 0 [ 346.896535][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 347.395170][T11169] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1308'. [ 347.484351][T11169] bond0 (unregistering): left promiscuous mode [ 347.491503][T11169] bond_slave_0: left promiscuous mode [ 347.498171][T11169] bond_slave_1: left promiscuous mode [ 347.519171][T11169] dummy0: left promiscuous mode [ 347.554359][T11169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.574181][T11175] netlink: 'syz.1.1307': attribute type 361 has an invalid length. [ 347.603328][T11169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.618992][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 347.673409][T11169] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 347.692875][T11169] bond0 (unregistering): Released all slaves [ 347.839992][T11173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1307'. [ 347.972889][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 348.019725][T11182] xt_bpf: check failed: parse error [ 348.618497][T11209] netlink: 'syz.4.1314': attribute type 13 has an invalid length. [ 348.748925][T11215] netlink: 'syz.3.1315': attribute type 2 has an invalid length. [ 349.006797][T11221] bond0 (unregistering): Released all slaves [ 349.628963][T11231] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1319'. [ 349.684744][T11231] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1319'. [ 349.710612][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 350.641375][T11269] __nla_validate_parse: 2 callbacks suppressed [ 350.641494][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 350.886911][T11269] veth11: entered allmulticast mode [ 350.962751][T11269] bond6: (slave veth11): Enslaving as an active interface with an up link [ 350.963876][T11251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.101085][T11270] bond6 (unregistering): (slave veth11): Releasing backup interface [ 351.176312][T11270] bond6 (unregistering): Released all slaves [ 351.274077][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 351.648468][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 351.822102][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.411520][T11323] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1340'. [ 352.502020][T11323] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1340'. [ 352.523324][T11326] openvswitch: netlink: EtherType 50a is less than min 600 [ 353.615309][T11362] hsr0: entered promiscuous mode [ 353.714588][T11362] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 354.413800][T11360] hsr0: left promiscuous mode [ 354.430633][T11387] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.460052][T11387] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 354.738250][T11391] bond9: (slave gretap3): making interface the new active one [ 354.755459][T11391] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 354.765033][T11390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1356'. [ 354.860893][T11387] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 355.006922][T11404] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1357'. [ 355.063874][T11404] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1357'. [ 356.509515][T11361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.010086][T11428] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 357.106268][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 357.301702][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 357.434529][T11444] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 357.595345][ T3275] tipc: Subscription rejected, illegal request [ 357.753878][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 357.980796][T11455] gretap0: entered promiscuous mode [ 358.071094][T11456] ip6tnl1: entered allmulticast mode [ 358.675926][T11491] wg1 speed is unknown, defaulting to 1000 [ 358.718734][T11491] wg1 speed is unknown, defaulting to 1000 [ 358.722498][T11493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.782438][T11491] wg1 speed is unknown, defaulting to 1000 [ 359.855304][T11491] infiniband syz0: set down [ 359.859954][ T9457] wg1 speed is unknown, defaulting to 1000 [ 359.918630][T11491] infiniband syz0: added wg1 [ 359.962833][T11491] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 360.000766][T11491] infiniband syz0: Couldn't open port 1 [ 360.039476][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'. [ 360.088425][T11491] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 360.118772][T11525] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 360.170765][T11491] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 360.199062][T11525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1383'. [ 360.277507][T11491] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 360.404010][T11525] dummy0: entered promiscuous mode [ 360.430933][T11491] RDS/IB: syz0: added [ 360.458213][T11491] smc: adding ib device syz0 with port count 1 [ 360.500318][T11491] smc: ib device syz0 port 1 has no pnetid [ 360.581233][T11491] wg1 speed is unknown, defaulting to 1000 [ 360.614859][ T5733] wg1 speed is unknown, defaulting to 1000 [ 360.936765][T11542] syzkaller0: entered allmulticast mode [ 360.974607][T11542] tipc: Enabled bearer , priority 0 [ 361.030662][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 361.043433][T11542] syzkaller0: entered promiscuous mode [ 361.077404][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 361.328047][T11541] tipc: Resetting bearer [ 361.387646][T11541] tipc: Disabling bearer [ 361.640692][T11491] wg1 speed is unknown, defaulting to 1000 [ 361.862787][T11562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.055983][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 363.222175][T11491] wg1 speed is unknown, defaulting to 1000 [ 363.722785][T11600] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1403'. [ 364.113872][T11491] wg1 speed is unknown, defaulting to 1000 [ 364.255336][T11613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 364.800299][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 365.320055][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 365.354328][T11491] wg1 speed is unknown, defaulting to 1000 [ 365.905063][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 150 seconds [ 365.917650][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 150 seconds [ 365.930504][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 150 seconds [ 366.515755][T11642] wg1 speed is unknown, defaulting to 1000 [ 368.123360][T11683] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 368.470249][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.046697][T11683] bond0: entered promiscuous mode [ 372.054033][T11683] batadv0: entered promiscuous mode [ 372.060314][T11683] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 372.092645][T11683] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 372.403797][T11710] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1425'. [ 372.428409][T11710] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1425'. [ 372.519531][T11719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 372.657518][T11704] wg1 speed is unknown, defaulting to 1000 [ 372.668529][T11710] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1425'. [ 373.418824][T11730] netlink: 'syz.3.1429': attribute type 10 has an invalid length. [ 373.478560][T11730] tap0: tun_chr_ioctl cmd 1074025677 [ 373.492267][T11730] tap0: linktype set to 773 [ 373.533329][T11732] geneve1: entered promiscuous mode [ 373.641462][T11730] : entered promiscuous mode [ 374.705668][T11747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'. [ 374.835917][T11747] ip6gre1: entered promiscuous mode [ 374.870820][T11747] ip6gre1: entered allmulticast mode [ 376.711008][T11778] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1441'. [ 377.041535][T11787] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 378.351815][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 378.360665][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 378.392419][T11825] openvswitch: netlink: Message has 2 unknown bytes. [ 378.444008][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 379.638814][T11870] IPVS: set_ctl: invalid protocol: 147 172.20.20.21:20001 [ 380.249380][T11878] tipc: Resetting bearer [ 380.315247][T11878] tipc: Resetting bearer [ 380.347695][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.386644][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.424138][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.500176][ T3265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.510620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.540976][T11470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.552360][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.562823][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.578381][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.650296][T11878] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 380.701108][T11875] tipc: Resetting bearer [ 380.766498][T11875] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 380.972854][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1472'. [ 380.988534][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 381.193897][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 381.567033][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 381.683993][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 381.765633][T11924] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1479'. [ 382.169470][T11938] tipc: Started in network mode [ 382.182621][T11938] tipc: Node identity , cluster identity 4711 [ 382.191461][T11938] tipc: Failed to obtain node identity [ 382.200300][T11938] tipc: Enabling of bearer rejected, failed to enable media [ 383.439148][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 383.491512][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 383.796065][T11989] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 383.820874][T11989] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1493'. [ 383.892688][T11989] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 383.931726][T11989] netlink: 'syz.0.1493': attribute type 8 has an invalid length. [ 383.942425][T11989] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1493'. [ 384.012063][T11989] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1493'. [ 384.308525][T12008] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1498'. [ 384.355819][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'. [ 384.788400][T12022] x_tables: duplicate underflow at hook 1 [ 387.229194][T12085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.239753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.307163][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 387.829844][T12080] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 387.972269][T12090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.603462][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.009402][T12112] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1519'. [ 392.034267][T12114] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1519'. [ 392.065110][ T50] Bluetooth: hci4: link tx timeout [ 392.071832][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.086493][ T50] Bluetooth: hci4: link tx timeout [ 392.091720][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.680359][T12128] wg1 speed is unknown, defaulting to 1000 [ 392.720996][ T50] Bluetooth: hci4: link tx timeout [ 392.729403][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.777712][ T50] Bluetooth: hci4: link tx timeout [ 392.783107][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.004269][ T50] Bluetooth: hci4: link tx timeout [ 393.009492][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.510852][ T50] Bluetooth: hci4: link tx timeout [ 393.516281][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.610032][T12147] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 393.646252][T12147] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1526'. [ 393.690714][T12147] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1526'. [ 393.721768][T12147] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1526'. [ 393.837146][T12151] netlink: 'syz.3.1524': attribute type 8 has an invalid length. [ 394.124376][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 394.143229][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 394.335174][T12165] netlink: 'syz.1.1527': attribute type 8 has an invalid length. [ 394.551433][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 394.715326][T12170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1530'. [ 394.942590][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.324872][T12185] openvswitch: netlink: Unknown key attributes 2 [ 395.628613][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'. [ 395.688325][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 395.766443][T12205] netlink: 'syz.4.1538': attribute type 13 has an invalid length. [ 395.828260][T12210] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 395.993158][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 180 seconds [ 396.005725][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 180 seconds [ 396.018419][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 180 seconds [ 398.933673][T12276] netlink: 'syz.4.1554': attribute type 13 has an invalid length. [ 398.948855][T12268] pim6reg: entered allmulticast mode [ 398.960393][T12277] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 398.979104][T12269] pim6reg: left allmulticast mode [ 398.984494][T12276] __nla_validate_parse: 1 callbacks suppressed [ 398.984511][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 399.344566][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.941525][T12275] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.948985][T12275] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.978249][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 400.002707][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 400.892663][T12277] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 401.060130][T12320] netlink: 'syz.4.1561': attribute type 7 has an invalid length. [ 401.081204][T12317] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 401.097847][T12320] netlink: 'syz.4.1561': attribute type 8 has an invalid length. [ 401.112015][T12317] bond7 (unregistering): Released all slaves [ 401.200951][T11476] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.219836][T11476] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.219930][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1563'. [ 401.286644][T11476] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.312812][T11476] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.325009][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1564'. [ 401.334502][T11476] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.334537][T11476] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.352869][T11476] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.362832][T11476] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.510599][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'. [ 401.520291][T12338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'. [ 401.542456][T12335] netlink: 'syz.3.1566': attribute type 13 has an invalid length. [ 401.571706][T12335] gretap0: refused to change device tx_queue_len [ 401.584879][T12335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.742116][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 402.007843][T12358] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1573'. [ 402.111567][T12355] syzkaller0: entered promiscuous mode [ 402.138758][T12355] syzkaller0: entered allmulticast mode [ 402.879562][T12380] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1579'. [ 403.064534][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1582'. [ 403.119103][T12395] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 403.529786][T12413] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 403.529789][T12412] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 403.779265][T12412] netlink: 'syz.3.1588': attribute type 3 has an invalid length. [ 403.890976][T12412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.904925][T12412] bond4: (slave bond5): making interface the new active one [ 403.913240][T12412] bond4: (slave bond5): Enslaving as an active interface with an up link [ 404.171693][T12450] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 404.181703][T12448] __nla_validate_parse: 4 callbacks suppressed [ 404.181722][T12448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1595'. [ 404.220395][T12448] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 404.369674][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 404.549457][T12469] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1601'. [ 404.595763][T12469] xt_hashlimit: invalid rate [ 404.724862][T12475] syzkaller0: entered promiscuous mode [ 404.730588][T12475] syzkaller0: entered allmulticast mode [ 404.757857][T12471] wg1 speed is unknown, defaulting to 1000 [ 405.219328][T12472] dvmrp0: entered allmulticast mode [ 405.401433][T12495] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1609'. [ 405.932558][T12515] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 406.034993][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1614'. [ 406.417649][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 408.132428][T12602] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 409.021760][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 409.090139][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 409.251673][T12637] bond10: entered promiscuous mode [ 409.278672][T12637] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.306227][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 409.372320][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 409.408795][T12645] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.418149][T12645] bond10: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 409.432739][T12645] bond10: (slave ip6gre4): Error -95 calling set_mac_address [ 409.633930][T12652] wg1 speed is unknown, defaulting to 1000 [ 413.777980][ T4998] udevd[4998]: worker [7922] /devices/virtual/block/nbd1 timeout; kill it [ 413.788122][ T4998] udevd[4998]: seq 13017 '/devices/virtual/block/nbd1' killed [ 426.066119][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 210 seconds [ 426.076949][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 210 seconds [ 426.088468][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 210 seconds [ 426.807505][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 426.841339][T12697] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 426.853436][T12697] netlink: 'syz.1.1646': attribute type 2 has an invalid length. [ 427.188182][T12717] tipc: Enabled bearer , priority 0 [ 427.214254][T12717] syzkaller0: entered promiscuous mode [ 427.223312][T12717] syzkaller0: entered allmulticast mode [ 427.241577][T12720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.264736][T12717] tipc: Resetting bearer [ 427.273300][T12717] IPVS: length: 97 != 24 [ 427.308281][T12716] tipc: Resetting bearer [ 427.360618][T12716] tipc: Disabling bearer [ 427.393540][T12726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1654'. [ 428.237892][T12748] bond11: option miimon: invalid value (18446744073709551607) [ 428.246129][T12748] bond11: option miimon: allowed values 0 - 2147483647 [ 428.255050][T12748] bond11 (unregistering): Released all slaves [ 428.276066][T12766] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1664'. [ 428.289660][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 428.337903][ T4948] block nbd3: Receive control failed (result -32) [ 428.372531][T12764] bond7 (unregistering): Released all slaves [ 428.595002][T12774] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 428.676511][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'. [ 428.685835][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'. [ 428.739866][T12774] bond11: entered promiscuous mode [ 428.760449][T12774] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.814709][T12785] xt_HMARK: spi-set and port-set can't be combined [ 428.882603][T12778] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 429.067027][T12783] bond11: (slave bridge6): making interface the new active one [ 429.085025][T12783] bridge6: entered promiscuous mode [ 429.101195][T12783] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 429.385788][T12814] tipc: Resetting bearer [ 429.457143][T12814] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 429.480196][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'. [ 429.579296][ T4948] block nbd4: Receive control failed (result -32) [ 429.859461][T12833] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1676'. [ 430.092868][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 430.134363][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 430.783401][T12866] dummy0: left promiscuous mode [ 430.852905][T12866] macvtap0: left promiscuous mode [ 430.867801][T12866] geneve1: left promiscuous mode [ 430.869559][T12874] netlink: 'syz.3.1688': attribute type 4 has an invalid length. [ 430.881422][T12866] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 430.881457][T12866] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 431.340127][T12890] lo speed is unknown, defaulting to 1000 [ 431.362018][T12890] lo speed is unknown, defaulting to 1000 [ 431.385855][T12890] lo speed is unknown, defaulting to 1000 [ 431.429798][T12890] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 431.466872][T12890] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 431.519533][T12905] lo: Caught tx_queue_len zero misconfig [ 431.532760][T12905] tipc: Failed to remove unknown binding: 66,0,0/0:1651509846/1651509847 [ 431.537281][T12890] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 431.545511][T12905] tipc: Failed to remove unknown binding: 66,0,0/0:1651509846/1651509847 [ 431.595637][T12879] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 431.623642][T12890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.663341][T12890] lo speed is unknown, defaulting to 1000 [ 431.675748][T12890] lo speed is unknown, defaulting to 1000 [ 431.762859][T12911] bond0: entered promiscuous mode [ 431.782767][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.790314][T12890] lo speed is unknown, defaulting to 1000 [ 431.804284][T12890] lo speed is unknown, defaulting to 1000 [ 431.826951][T12890] lo speed is unknown, defaulting to 1000 [ 431.926108][T12915] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 431.959316][T12915] __nla_validate_parse: 5 callbacks suppressed [ 431.959335][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 432.158022][T12925] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1701'. [ 432.381955][ T4948] Bluetooth: hci0: command 0x0c20 tx timeout [ 433.474705][T12949] wg1 speed is unknown, defaulting to 1000 [ 433.755023][T12975] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1715'. [ 434.072394][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 434.091483][T12990] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 434.112425][T12991] tipc: Resetting bearer [ 434.199872][T12991] tipc: Disabling bearer [ 434.207955][T13000] netlink: 'syz.1.1719': attribute type 11 has an invalid length. [ 434.319005][T12990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.398395][T12996] bond4: (slave gretap1): making interface the new active one [ 434.442138][T12996] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 434.576572][T13012] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 434.593542][T12949] lo speed is unknown, defaulting to 1000 [ 434.601427][T13012] IPVS: sh: FWM 3 0x00000003 - no destination available [ 434.656935][T13006] bridge0: left promiscuous mode [ 434.664771][T13006] bond2: (slave ): speed changed to 0 on port 1 [ 434.673517][T13006] 8021q: adding VLAN 0 to HW filter on device  [ 434.681783][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.692955][T13006] batman_adv: batadv0: Interface activated: dummy0 [ 434.699575][T13006] batadv0: mtu less than device minimum [ 434.709215][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.722745][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.734707][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.746741][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.758661][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.770560][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.782514][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.794496][T13006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.874295][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.998747][T13006] batman_adv: batadv0: Interface activated: @ [ 435.064618][T13006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.118480][T13006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.129200][T13006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.159393][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.166679][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.221421][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.228667][ T3311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.355554][ T5776] wg1 speed is unknown, defaulting to 1000 [ 435.363384][ T5776] syz0: Port: 1 Link ACTIVE [ 435.664578][ T47] wg1 speed is unknown, defaulting to 1000 [ 436.183204][T13054] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 436.390565][T13052] wg1 speed is unknown, defaulting to 1000 [ 437.388990][T13092] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 437.428455][T13095] netlink: 'syz.2.1739': attribute type 287 has an invalid length. [ 438.041237][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 438.061609][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 438.095353][T13123] netlink: 'syz.0.1744': attribute type 4 has an invalid length. [ 438.149497][T13070] wg1 speed is unknown, defaulting to 1000 [ 438.149522][T13052] lo speed is unknown, defaulting to 1000 [ 438.299040][T13133] tipc: Enabling of bearer rejected, failed to enable media [ 438.344337][T13133] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1747'. [ 438.457905][T13137] IPVS: ip_vs_add_dest(): server weight less than zero [ 439.037594][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 439.295886][T13070] lo speed is unknown, defaulting to 1000 [ 439.887464][T13195] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1763'. [ 439.946353][T13188] netlink: 'syz.0.1760': attribute type 287 has an invalid length. [ 439.964249][T13182] syzkaller1: entered promiscuous mode [ 439.977517][T13182] syzkaller1: entered allmulticast mode [ 440.072532][ T6055] net_ratelimit: 65 callbacks suppressed [ 440.072621][ T6055] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.508689][T13212] nbd: must specify a size in bytes for the device [ 440.547946][T13213] nbd: couldn't find device at index 2 [ 440.572701][T13212] nbd: couldn't find device at index 2 [ 440.629846][ T6055] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.935603][T13226] nbd: socks must be embedded in a SOCK_ITEM attr [ 441.194491][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.271248][T11392] udevd[11392]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 441.709360][T13244] syzkaller1: entered promiscuous mode [ 441.723767][T13244] syzkaller1: entered allmulticast mode [ 441.736365][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 441.765312][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 441.804811][T13244] ip6tnl2: entered allmulticast mode [ 442.030958][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 442.065252][ T3265] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.097901][ T9464] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.106606][ T3265] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.310291][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 442.316897][T13274] syzkaller0: entered promiscuous mode [ 442.333139][T11475] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.336033][T13274] syzkaller0: entered allmulticast mode [ 442.432269][ T9464] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.553031][T13291] x_tables: duplicate entry at hook 2 [ 442.829267][T13301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.873683][T11475] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 442.884525][T13301] v: renamed from ip6_vti0 [ 442.922522][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 443.022321][ T9464] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 443.193500][T13311] netlink: 'syz.3.1791': attribute type 4 has an invalid length. [ 443.218697][T13311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1791'. [ 443.424645][T11475] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.815505][T13315] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 443.833953][T13315] bridge1: left promiscuous mode [ 443.844475][T13315] bridge1: left allmulticast mode [ 443.951663][T13315] geneve2: left promiscuous mode [ 443.978285][T13315] bond1: left promiscuous mode [ 443.983131][T11481] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 444.156644][T13315] gretap1: left allmulticast mode [ 444.178086][T13315] ip6gre1: left promiscuous mode [ 444.190250][T13315] ip6gre1: left allmulticast mode [ 444.214065][T13315] ip6gre2: left promiscuous mode [ 444.229291][T13315] ip6gre2: left allmulticast mode [ 444.258346][T13315] veth3: left allmulticast mode [ 444.272092][T13315] bond7: left allmulticast mode [ 444.282614][T13315] ip6tnl1: left allmulticast mode [ 444.335026][T13315] bond11: left promiscuous mode [ 444.350373][T13315] bridge6: left promiscuous mode [ 444.367179][T13315] ip6tnl2: left allmulticast mode [ 444.392804][T11470] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.425283][T11470] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.456322][T11470] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.487191][T11470] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.500450][ T3311] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 444.533463][T11470] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.578377][T11470] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.613246][T11470] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.659345][T11470] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.687314][T11470] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.727195][T11470] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.770503][T11470] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.826554][T11470] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.885853][T13349] ip6gre1: entered promiscuous mode [ 444.891758][T13349] ip6gre1: entered allmulticast mode [ 445.102622][T11470] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.476889][T13366] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 445.496635][T13366] team0 (unregistering): Port device team_slave_0 removed [ 445.518426][T13366] team0 (unregistering): Port device team_slave_1 removed [ 445.543602][T13366] team0 (unregistering): Port device geneve1 removed [ 445.672198][T11470] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.817705][T13377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1811'. [ 445.868189][ T3265] smc: removing ib device syz0 [ 445.930283][ T3265] smbdirect: ib_dev[syz0] removed [ 445.936918][ T8491] wg1 speed is unknown, defaulting to 1000 [ 445.953802][ T8491] syz0: Port: 1 Link DOWN [ 446.132798][T13385] openvswitch: netlink: IP tunnel dst address not specified [ 446.193286][T13385] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 446.224934][T11470] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 446.233476][T13385] netlink: 'syz.4.1813': attribute type 3 has an invalid length. [ 446.288726][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 446.314169][T13385] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1813'. [ 446.385652][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1815'. [ 446.496717][T13390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.589213][T13395] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 446.592009][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'. [ 446.793278][T11481] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.332050][ T6055] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 447.429141][T13403] netlink: 'syz.3.1818': attribute type 58 has an invalid length. [ 447.478388][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'. [ 447.852494][T11470] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.382048][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.743329][T13395] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 448.902702][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 449.320268][T13430] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 449.360677][T13430] bond7 (unregistering): Released all slaves [ 449.971421][T13440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.221167][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 450.429017][T13490] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1837'. [ 450.463602][ T6055] net_ratelimit: 2 callbacks suppressed [ 450.463623][ T6055] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.519564][T13490] netlink: 'syz.1.1837': attribute type 11 has an invalid length. [ 450.716606][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 451.037292][T13511] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1841'. [ 451.064340][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 451.171767][T13512] gretap0: left promiscuous mode [ 451.493160][T13528] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 451.640423][T13512] bridge0: left promiscuous mode [ 451.651967][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 451.773497][T13512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.793336][T13512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.808961][T13512] veth1_vlan: left promiscuous mode [ 451.815940][T13512] veth0_vlan: left promiscuous mode [ 451.822782][T13512] veth0_vlan: entered promiscuous mode [ 451.830793][T13512] veth1_vlan: entered promiscuous mode [ 451.840538][T13512] veth1_macvtap: left promiscuous mode [ 451.848793][T13512] veth0_macvtap: left promiscuous mode [ 451.855657][T13512] veth0_macvtap: entered promiscuous mode [ 451.863093][T13512] veth1_macvtap: entered promiscuous mode [ 451.875826][T13512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.884247][T13512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.892738][T13512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.900926][T13512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.909568][T13512] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 451.928588][T13528] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 451.929967][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.945526][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.995079][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.002412][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.083095][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.093038][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.118384][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.134252][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.182766][ T3311] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 452.284178][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 452.355282][T13550] netlink: 'syz.4.1850': attribute type 7 has an invalid length. [ 452.381281][T13551] vlan2: entered allmulticast mode [ 452.386670][T13551] bond0: entered allmulticast mode [ 452.392137][T13551] bond_slave_0: entered allmulticast mode [ 452.397945][T13551] bond_slave_1: entered allmulticast mode [ 452.407624][T13551] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1849'. [ 452.433891][T13551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.443262][T13551] bond_slave_0: left allmulticast mode [ 452.466869][T13551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.482258][T13551] bond_slave_1: left allmulticast mode [ 452.490683][T13551] bond0 (unregistering): Released all slaves [ 452.520108][T13553] bond4 (unregistering): Released all slaves [ 452.732151][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 453.252000][ T3311] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 453.772159][ T3311] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.133070][T13524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.296387][ T3265] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.420849][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 454.478187][T13561] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1853'. [ 454.685466][T13564] pim6reg0: tun_chr_ioctl cmd 35111 [ 454.855976][T13587] hma(’àÆÂkX: entered promiscuous mode [ 454.893607][T11470] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 455.094749][T13587] netlink: 'syz.4.1862': attribute type 8 has an invalid length. [ 455.142495][ T29] audit: type=1804 audit(1779875440.858:7): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1863" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1841 res=1 errno=0 [ 455.231468][ T29] audit: type=1800 audit(1779875440.858:8): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1863" name="cgroup.controllers" dev="tmpfs" ino=1841 res=0 errno=0 [ 455.322167][T13604] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 455.339590][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 455.369267][T13603] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 455.374752][T13604] batman_adv: batadv0: Interface deactivated: dummy0 [ 455.432780][T13604] dummy0: left promiscuous mode [ 455.452641][T13604] batman_adv: batadv0: Removing interface: dummy0 [ 455.586263][T13604] : (slave dummy0): Enslaving as an active interface with an up link [ 455.644318][T13595] bridge7: entered promiscuous mode [ 455.680254][T13595] bridge7: entered allmulticast mode [ 455.837308][T13615] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1868'. [ 455.899548][T13616] bridge0: Device is already in use. [ 456.090465][T13624] syzkaller0: entered promiscuous mode [ 456.109546][T13624] syzkaller0: entered allmulticast mode [ 456.153148][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 240 seconds [ 456.165792][T13625] lo speed is unknown, defaulting to 1000 [ 456.168385][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 240 seconds [ 456.182692][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 240 seconds [ 456.956943][T13655] openvswitch: netlink: Message has 4 unknown bytes. [ 457.037990][T13658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 457.147961][T13658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.148969][ T4948] Bluetooth: hci4: link tx timeout [ 457.156337][T13658] IPv6: NLM_F_CREATE should be set when creating new route [ 457.160460][ T4948] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.167793][T13658] IPv6: NLM_F_CREATE should be set when creating new route [ 457.182704][T13658] IPv6: NLM_F_CREATE should be set when creating new route [ 457.909546][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1889'. [ 458.134841][T13701] netlink: 'syz.0.1893': attribute type 1 has an invalid length. [ 458.208327][T13704] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1892'. [ 458.216388][T13701] bond7: entered promiscuous mode [ 458.226250][T13701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 458.234492][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1892'. [ 458.251933][T13704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1892'. [ 458.348950][T13701] ipvlan2: entered allmulticast mode [ 458.361953][T13701] bond7: entered allmulticast mode [ 458.392783][T13708] netlink: 'syz.3.1895': attribute type 62 has an invalid length. [ 458.449009][T13703] bond7: (slave bridge2): making interface the new active one [ 458.460773][T13703] bridge2: entered promiscuous mode [ 458.467342][T13703] bridge2: entered allmulticast mode [ 458.476040][T13703] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 458.703109][T13720] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 458.965112][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 458.983533][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 459.267880][ T4948] Bluetooth: hci4: command 0x0405 tx timeout [ 459.814231][T13757] netlink: 'syz.4.1905': attribute type 21 has an invalid length. [ 459.851987][T13757] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1905'. [ 459.876476][T13757] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 459.918007][T13757] netlink: 'syz.4.1905': attribute type 5 has an invalid length. [ 460.027155][T13761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 460.740835][T13778] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 460.831209][T13787] __nla_validate_parse: 1 callbacks suppressed [ 460.831228][T13787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'. [ 460.935363][T13778] bond4: entered promiscuous mode [ 460.972696][T13778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.005414][T13779] bridge0: Device is already in use. [ 461.299096][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 461.714380][T13824] 8021q: VLANs not supported on vcan0 [ 461.787817][T13836] syz.3.1921: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 461.875114][T13836] CPU: 1 UID: 0 PID: 13836 Comm: syz.3.1921 Not tainted syzkaller #0 PREEMPT(full) [ 461.875143][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.875155][T13836] Call Trace: [ 461.875221][T13836] [ 461.875274][T13836] dump_stack_lvl+0xe8/0x150 [ 461.875401][T13836] warn_alloc+0x249/0x340 [ 461.875467][T13836] ? stack_trace_save+0xa9/0x100 [ 461.875549][T13836] ? __pfx_warn_alloc+0x10/0x10 [ 461.875585][T13836] ? kasan_save_track+0x4f/0x80 [ 461.875615][T13836] ? kasan_save_track+0x3e/0x80 [ 461.875637][T13836] ? __kasan_kmalloc+0x93/0xb0 [ 461.875660][T13836] ? __kmalloc_cache_noprof+0x31c/0x660 [ 461.875696][T13836] ? xskq_create+0x56/0x170 [ 461.875812][T13836] ? xsk_setsockopt+0x54c/0x990 [ 461.875834][T13836] ? do_sock_setsockopt+0x17c/0x1b0 [ 461.875915][T13836] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 461.875934][T13836] ? do_syscall_64+0x174/0xf80 [ 461.875983][T13836] __vmalloc_node_range_noprof+0x132/0x1750 [ 461.876041][T13836] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.876073][T13836] ? __kasan_kmalloc+0x93/0xb0 [ 461.876104][T13836] vmalloc_user_noprof+0xad/0xe0 [ 461.876128][T13836] ? xskq_create+0xbf/0x170 [ 461.876156][T13836] xskq_create+0xbf/0x170 [ 461.876185][T13836] xsk_init_queue+0x8a/0xe0 [ 461.876213][T13836] xsk_setsockopt+0x54c/0x990 [ 461.876241][T13836] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.876288][T13836] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.876379][T13836] ? aa_sock_opt_perm+0xff/0x1a0 [ 461.876432][T13836] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 461.876486][T13836] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.876515][T13836] do_sock_setsockopt+0x17c/0x1b0 [ 461.876544][T13836] __x64_sys_setsockopt+0x13d/0x1b0 [ 461.876569][T13836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.876610][T13836] do_syscall_64+0x174/0xf80 [ 461.876629][T13836] ? trace_irq_disable+0x3b/0x140 [ 461.876670][T13836] ? clear_bhb_loop+0x40/0x90 [ 461.876695][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.876714][T13836] RIP: 0033:0x7f31a379ce59 [ 461.876756][T13836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.876778][T13836] RSP: 002b:00007f31a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.876830][T13836] RAX: ffffffffffffffda RBX: 00007f31a3a16090 RCX: 00007f31a379ce59 [ 461.876843][T13836] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 461.876855][T13836] RBP: 00007f31a3832d6f R08: 0000000000000004 R09: 0000000000000000 [ 461.876866][T13836] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.876878][T13836] R13: 00007f31a3a16128 R14: 00007f31a3a16090 R15: 00007ffcf8abe608 [ 461.876910][T13836] [ 462.150142][T13836] Mem-Info: [ 462.199544][T13836] active_anon:6416 inactive_anon:0 isolated_anon:0 [ 462.199544][T13836] active_file:3342 inactive_file:40096 isolated_file:0 [ 462.199544][T13836] unevictable:768 dirty:48 writeback:0 [ 462.199544][T13836] slab_reclaimable:10965 slab_unreclaimable:102680 [ 462.199544][T13836] mapped:29711 shmem:1336 pagetables:1360 [ 462.199544][T13836] sec_pagetables:0 bounce:0 [ 462.199544][T13836] kernel_misc_reclaimable:0 [ 462.199544][T13836] free:1312009 free_pcp:10910 free_cma:0 [ 462.247489][T13836] Node 0 active_anon:25664kB inactive_anon:0kB active_file:13368kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118844kB dirty:192kB writeback:0kB shmem:3808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14648kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 462.285825][T13836] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 462.318992][T13836] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.350115][T13836] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 462.357331][T13836] Node 0 DMA32 free:1298284kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25664kB inactive_anon:0kB active_file:13368kB inactive_file:160188kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:42308kB local_pcp:21432kB free_cma:0kB [ 462.391096][T13836] lowmem_reserve[]: 0 0 0 0 0 [ 462.395959][T13836] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:676kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.431892][T13836] lowmem_reserve[]: 0 0 0 0 0 [ 462.440038][T13836] Node 1 Normal free:3938992kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 462.510544][T13836] lowmem_reserve[]: 0 0 0 0 0 [ 462.531168][T13836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.563540][T13836] Node 0 DMA32: 6475*4kB (UME) 3682*8kB (UME) 1394*16kB (UME) 874*32kB (UME) 330*64kB (UME) 298*128kB (UM) 198*256kB (UME) 84*512kB (UM) 77*1024kB (UME) 25*2048kB (UME) 224*4096kB (UM) = 1306140kB [ 462.583462][T13836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.596442][T13836] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938992kB [ 462.615318][T13836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.625285][T13836] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.635548][T13836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.655700][T13836] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.675960][T13836] 44770 total pagecache pages [ 462.683875][T13836] 0 pages in swap cache [ 462.698619][T13836] Free swap = 124996kB [ 462.708765][T13836] Total swap = 124996kB [ 462.718304][T13836] 2097051 pages RAM [ 462.741924][T13836] 0 pages HighMem/MovableOnly [ 462.747791][T13836] 427070 pages reserved [ 462.763708][T13836] 0 pages cma reserved [ 463.087687][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 463.316209][T13866] xt_CT: No such helper "netbios-ns" [ 463.326220][T13865] vlan0: entered promiscuous mode [ 463.360614][T13865] gretap0: entered promiscuous mode [ 464.654599][T13829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.940866][T13926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1931'. [ 465.058342][T13934] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1932'. [ 465.444449][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 465.526025][T13945] bond8: entered promiscuous mode [ 465.532647][T13945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.602383][T13951] bridge8: entered promiscuous mode [ 465.626900][T13951] bridge8: entered allmulticast mode [ 465.779384][T13960] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.787181][T13960] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 465.813658][T13960] bond8: (slave sit2): Error -95 calling set_mac_address [ 465.884796][T13962] bridge8: entered promiscuous mode [ 465.891372][T13962] bridge8: entered allmulticast mode [ 465.899828][T13967] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 466.230073][T13974] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 466.445031][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 466.624641][T13995] ip6tnl2: entered allmulticast mode [ 466.670811][T13993] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1945'. [ 467.061566][T14020] IPv6: Can't replace route, no match found [ 467.213663][T14027] netlink: 'syz.3.1951': attribute type 2 has an invalid length. [ 467.261701][T14030] netlink: 'syz.3.1951': attribute type 2 has an invalid length. [ 467.311232][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 467.362054][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 467.428213][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 467.816442][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 467.853914][T14052] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1956'. [ 468.450336][T14075] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1962'. [ 468.520235][T14076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 468.623182][T14083] syzkaller0: entered promiscuous mode [ 468.636058][T14083] syzkaller0: entered allmulticast mode [ 469.748546][T14113] netlink: 'syz.3.1966': attribute type 12 has an invalid length. [ 469.792533][T14113] netlink: 'syz.3.1966': attribute type 3 has an invalid length. [ 470.237445][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1974'. [ 470.314758][T14123] netlink: 'syz.4.1972': attribute type 2 has an invalid length. [ 470.364779][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 470.414182][T14133] openvswitch: netlink: Invalid VLAN frame [ 470.798732][T14145] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 470.893885][T14144] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 471.336443][T14158] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 471.867627][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 472.295209][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 472.517012][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.524550][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.093171][T14206] SET target dimension over the limit! [ 473.724298][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 473.736923][T14214] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.775658][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.813841][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.857107][T12311] lo speed is unknown, defaulting to 1000 [ 473.920108][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.975199][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.433884][T14236] syzkaller0: entered promiscuous mode [ 474.476586][T14236] syzkaller0: entered allmulticast mode [ 475.530239][T14256] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2002'. [ 476.510744][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2008'. [ 476.636605][T14283] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 477.001584][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 477.067669][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 477.266991][T14297] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 477.334052][T14300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2013'. [ 477.377467][T14297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 477.389217][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 477.488969][T14301] bond7 (unregistering): Released all slaves [ 478.060001][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 478.137154][T14308] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 478.234982][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 478.269939][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 478.311571][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 478.367635][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 478.425379][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 479.069974][T14342] batadv0 (unregistering): left promiscuous mode [ 479.181324][T14344] netlink: 'syz.2.2023': attribute type 2 has an invalid length. [ 479.216351][T14344] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 479.509627][T14363] xt_hashlimit: size too large, truncated to 1048576 [ 479.525873][ T6055] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 480.803967][T14406] syzkaller1: entered allmulticast mode [ 480.874590][T14409] openvswitch: netlink: Flow key attr not present in new flow. [ 481.392050][T14431] netlink: 'syz.0.2041': attribute type 12 has an invalid length. [ 481.749829][T14445] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 481.769241][T14445] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 483.583740][T14308] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 483.649004][T14468] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 483.690829][T14468] __nla_validate_parse: 11 callbacks suppressed [ 483.690886][T14468] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2052'. [ 483.710021][T14468] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2052'. [ 483.725428][T14468] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 483.949769][T14481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2049'. [ 484.082580][T14469] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 484.114846][T14469] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 484.314181][T14471] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 484.349991][T14496] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 484.364727][T14471] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 484.686346][T14486] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 484.775580][T14486] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 485.048128][T14496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 485.784863][T14532] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2061'. [ 485.839087][T14532] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2061'. [ 485.947659][T14537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'. [ 486.033642][T14529] lo speed is unknown, defaulting to 1000 [ 486.040723][T14540] macsec0: entered allmulticast mode [ 486.099608][T14540] veth1_macvtap: entered allmulticast mode [ 486.112323][T14540] macsec0: left allmulticast mode [ 486.117982][T14540] veth1_macvtap: left allmulticast mode [ 486.230678][T14549] netlink: 'syz.4.2067': attribute type 16 has an invalid length. [ 486.238938][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 270 seconds [ 486.239004][T14549] netlink: 'syz.4.2067': attribute type 17 has an invalid length. [ 486.260181][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 270 seconds [ 486.273060][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 270 seconds [ 486.603177][T14549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.614211][T14549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.629801][T14549] veth1_vlan: left promiscuous mode [ 486.638006][T14549] veth0_vlan: left promiscuous mode [ 486.645505][T14549] veth0_vlan: entered promiscuous mode [ 486.670774][T14549] veth1_vlan: entered promiscuous mode [ 486.690539][T14549] veth1_macvtap: left promiscuous mode [ 486.698101][T14549] veth0_macvtap: left promiscuous mode [ 486.704026][T14549] veth0_macvtap: left allmulticast mode [ 486.710832][T14549] veth0_macvtap: entered promiscuous mode [ 486.718195][T14549] veth1_macvtap: entered promiscuous mode [ 486.732526][T14549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.741104][T14549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.750115][T14549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.759504][T14549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.768246][T14549] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 487.168414][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.175723][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.205851][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.213140][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.387879][T14572] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2073'. [ 487.416795][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 487.421969][T11470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.501476][T11470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.659056][T11470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.724436][T11470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.128993][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2079'. [ 488.296636][T14589] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2078'. [ 488.385519][T14589] unsupported nlmsg_type 40 [ 488.971013][T14615] xt_TCPMSS: Only works on TCP SYN packets [ 488.987921][T14617] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 489.170977][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2083'. [ 489.217380][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 489.418977][T14623] bond10: (slave bridge4): making interface the new active one [ 489.463678][T14623] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 489.506443][T14611] bond10: entered promiscuous mode [ 489.564774][T14611] bridge4: entered promiscuous mode [ 489.620369][T14611] bond10: entered allmulticast mode [ 489.659587][T14611] bridge4: entered allmulticast mode [ 489.696278][T14611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.074672][T14658] vxcan1: entered promiscuous mode [ 490.094364][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 490.116986][ T29] audit: type=1804 audit(1779875475.838:9): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2093" name="/newroot/397/cgroup.controllers" dev="tmpfs" ino=2059 res=1 errno=0 [ 490.140102][T14658] vxcan1: entered allmulticast mode [ 490.269747][ T29] audit: type=1800 audit(1779875475.838:10): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2093" name="cgroup.controllers" dev="tmpfs" ino=2059 res=0 errno=0 [ 491.794182][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 491.984286][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2105'. [ 492.052481][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2105'. [ 492.312538][T14715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2107'. [ 492.346695][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 492.439389][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'. [ 492.673046][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.880104][T14739] bond0: option arp_all_targets: invalid value (8) [ 493.229948][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2115'. [ 494.120202][T14778] vlan2: entered promiscuous mode [ 494.145165][T14778] bridge0: entered promiscuous mode [ 497.193130][T14875] xt_limit: Overflow, try lower: 268435456/134217728 [ 497.833595][T14894] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2155'. [ 497.871452][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2155'. [ 498.334859][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 498.372873][T14907] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2158'. [ 498.793275][T14921] syzkaller0: entered promiscuous mode [ 498.808989][T14921] syzkaller0: entered allmulticast mode [ 498.925783][T14927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2163'. [ 499.300534][T14933] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 499.328718][T14933] bond6 (unregistering): Released all slaves [ 499.695116][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 499.728681][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 499.775304][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 500.632274][T14960] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 500.745514][T14970] nbd: couldn't find device at index 0 [ 500.749687][T14973] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 501.048072][T14973] bond7: entered promiscuous mode [ 501.054581][T14973] bond7: entered allmulticast mode [ 501.061220][T14973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.394871][T14986] xt_TCPMSS: Only works on TCP SYN packets [ 501.438724][T14987] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2180'. [ 501.475274][T14986] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2180'. [ 501.865958][T14991] bond12: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 501.884983][T14991] bond12: entered promiscuous mode [ 501.981571][T15004] geneve2: entered promiscuous mode [ 502.065437][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.112844][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.157048][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.219186][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.967043][T15027] __nla_validate_parse: 1 callbacks suppressed [ 502.967064][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.029320][T15029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.060152][T15029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.115106][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.157134][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.184083][T15029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.247313][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.297423][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.376182][T15029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.428449][T15027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2189'. [ 503.880397][T15047] netlink: 'syz.4.2195': attribute type 2 has an invalid length. [ 503.964740][T15049] netlink: 'syz.4.2195': attribute type 2 has an invalid length. [ 504.418686][T15063] netlink: 'syz.2.2199': attribute type 3 has an invalid length. [ 504.826958][T15074] netlink: 'syz.2.2204': attribute type 4 has an invalid length. [ 504.881301][T15077] netlink: 'syz.2.2204': attribute type 4 has an invalid length. [ 505.856139][T15103] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 505.949694][T15099] bond8: entered promiscuous mode [ 506.001933][T15099] bond8: entered allmulticast mode [ 506.121573][T15111] netlink: 'syz.1.2212': attribute type 3 has an invalid length. [ 506.370961][T15120] netlink: 'syz.2.2215': attribute type 9 has an invalid length. [ 506.460081][T15111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 506.493485][T15111] bond6: (slave bond7): making interface the new active one [ 506.529469][T15111] bond6: (slave bond7): Enslaving as an active interface with an up link [ 506.820848][T15123] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 507.227844][T15138] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 507.554903][T15140] openvswitch: netlink: Invalid VLAN frame [ 507.855069][T15138] bond11: entered promiscuous mode [ 507.862502][T15138] 8021q: adding VLAN 0 to HW filter on device bond11 [ 507.900809][T15131] dvmrp8: entered allmulticast mode [ 508.941729][T15181] __nla_validate_parse: 71 callbacks suppressed [ 508.941751][T15181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 509.705444][T15186] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 509.834747][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'. [ 509.865689][T11392] block nbd64: NBD_DISCONNECT [ 510.481153][T11392] udevd[11392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.713866][T15234] IPVS: Unknown mcast interface: pimreg [ 510.787255][T15237] netlink: 'syz.2.2236': attribute type 4 has an invalid length. [ 510.789133][T15234] IPVS: Unknown mcast interface: pimreg [ 510.833419][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2236'. [ 512.096522][T15267] lo speed is unknown, defaulting to 1000 [ 512.140224][T15275] netlink: 'syz.0.2245': attribute type 11 has an invalid length. [ 512.196775][T15278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2245'. [ 512.684137][T15284] netlink: 'syz.1.2247': attribute type 11 has an invalid length. [ 513.700364][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2251'. [ 513.907121][T15309] veth0_virt_wifi: entered promiscuous mode [ 514.215377][T15316] netlink: 'syz.1.2256': attribute type 5 has an invalid length. [ 514.535148][T15322] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 514.574252][T15322] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 514.642910][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 514.657781][T15325] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2257'. [ 514.683898][T15323] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 514.702641][T15323] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 514.728153][T15308] veth0_virt_wifi: left promiscuous mode [ 514.760022][T15325] bond2: (slave ): Removing an active aggregator [ 514.796967][T15325] bond2: (slave ): Releasing backup interface [ 514.821205][T15325]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.900991][T15325]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.994877][T15325]  (unregistering): (slave dummy0): Releasing backup interface [ 515.070116][T15325]  (unregistering): Released all slaves [ 515.142661][T15335] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 515.169050][T15335] netlink: 'syz.3.2262': attribute type 3 has an invalid length. [ 515.210924][T15335] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2262'. [ 515.692599][T15341] netlink: 'syz.2.2263': attribute type 1 has an invalid length. [ 515.874637][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 515.886967][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2263'. [ 515.925182][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 516.092507][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'. [ 516.329620][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 300 seconds [ 516.343746][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 300 seconds [ 516.356685][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 300 seconds [ 520.721124][T15341] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 520.736098][T11481] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.893984][T15364] netlink: 'syz.2.2263': attribute type 5 has an invalid length. [ 520.896170][T15373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 520.928524][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 520.986453][T11481] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.018367][T11481] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.018980][T15377] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 521.048253][T11481] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.260633][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'. [ 521.330639][T15377] bond9: entered promiscuous mode [ 521.368095][T15389] netlink: 'syz.4.2274': attribute type 1 has an invalid length. [ 521.393776][T15377] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.404407][T15389] netlink: 'syz.4.2274': attribute type 3 has an invalid length. [ 521.433347][T15389] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2274'. [ 521.527913][T15384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.548132][T15384] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 521.577652][T15384] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 521.619684][T15384] bond9: (slave vti0): making interface the new active one [ 521.637445][T15384] vti0: entered promiscuous mode [ 521.657599][T15384] bond9: (slave vti0): Enslaving as an active interface with an up link [ 521.751603][T15398] Unknown options in mask 6 [ 521.792850][T15380] 8021q: adding VLAN 0 to HW filter on device bond12 [ 522.356277][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 522.409960][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 522.439792][T15415] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 522.591154][T15413] team0: entered promiscuous mode [ 522.600004][T15413] team0: entered allmulticast mode [ 522.630323][T15413] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.801495][T15416] team1: entered promiscuous mode [ 522.807810][T15416] team1: entered allmulticast mode [ 522.815444][T15416] 8021q: adding VLAN 0 to HW filter on device team1 [ 523.244097][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 523.266910][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 523.292988][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.401232][T15430] lo speed is unknown, defaulting to 1000 [ 523.680327][T15443] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 523.688882][T15443] netlink: 'syz.1.2288': attribute type 3 has an invalid length. [ 523.720872][T15443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2288'. [ 523.914265][T15445] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 523.924735][T15445] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 524.419891][T15462] sctp: [Deprecated]: syz.2.2292 (pid 15462) Use of int in max_burst socket option. [ 524.419891][T15462] Use struct sctp_assoc_value instead [ 524.476775][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 525.221915][T15489] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 525.287175][T15489] netlink: 'syz.1.2300': attribute type 3 has an invalid length. [ 525.578751][T15494] IPv6: addrconf: prefix option has invalid lifetime [ 526.095890][T15513] tipc: Enabling of bearer rejected, failed to enable media [ 526.418798][T15521] __nla_validate_parse: 7 callbacks suppressed [ 526.418860][T15521] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2310'. [ 526.518255][T15514] lo speed is unknown, defaulting to 1000 [ 526.850469][T15532] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 526.909028][T15532] netlink: 'syz.3.2312': attribute type 3 has an invalid length. [ 526.962000][T15532] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2312'. [ 527.719143][T15543] ±ÿ: renamed from lo (while UP) [ 527.911428][T15547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 527.979837][T15547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 528.092413][T15547] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 528.238512][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'. [ 528.893588][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2324'. [ 529.580088][T15603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.669501][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 531.335815][T15645] syzkaller1: entered promiscuous mode [ 531.376752][T15645] syzkaller1: entered allmulticast mode [ 531.378415][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2342'. [ 531.787145][T15665] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 531.982319][T15664] lo speed is unknown, defaulting to 1000 [ 532.229161][ T29] audit: type=1800 audit(1779875517.948:11): pid=15671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2345" name=20 dev="tmpfs" ino=2309 res=0 errno=0 [ 532.362436][ T29] audit: type=1800 audit(1779875517.968:12): pid=15671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2345" name=20 dev="tmpfs" ino=2309 res=0 errno=0 [ 532.557345][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2346'. [ 532.601082][T15679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2348'. [ 532.815306][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 533.069165][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 533.674044][T15701] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2355'. [ 533.691222][T15699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2354'. [ 533.783436][T15704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2355'. [ 534.007083][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'. [ 535.274411][T15756] sock: sock_timestamping_bind_phc: sock not bind to device [ 535.404513][T15758] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 535.476162][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2366'. [ 535.961189][T15769] netlink: 'syz.3.2371': attribute type 32 has an invalid length. [ 535.990813][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 536.342898][T15769] bond10: option coupled_control: invalid value (12) [ 536.387084][T15769] bond10 (unregistering): Released all slaves [ 537.237057][T15792] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 537.482538][T15797] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 537.644993][T15803] __nla_validate_parse: 2 callbacks suppressed [ 537.645014][T15803] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2380'. [ 537.668124][T15802] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2380'. [ 538.127080][T15810] syzkaller0: entered promiscuous mode [ 538.146302][T15810] syzkaller0: entered allmulticast mode [ 538.177562][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 538.183067][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 538.251615][T15811] vlan3: entered allmulticast mode [ 538.266103][T15811] bond0: entered allmulticast mode [ 538.276954][T15819] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 538.291527][T15819] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2386'. [ 538.301641][T15813] hsr_slave_0: left promiscuous mode [ 538.318139][T15813] hsr_slave_1: left promiscuous mode [ 538.334720][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 538.393422][T15810] veth0_to_batadv: mtu less than device minimum [ 538.688287][T15819] syzkaller1: tun_chr_ioctl cmd 35108 [ 538.807080][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 539.181983][T15845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.182291][ T4948] Bluetooth: hci4: command 0x0405 tx timeout [ 539.300751][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 539.445445][T15857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'. [ 539.604419][T15858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2392'. [ 540.129066][T15876] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 541.509916][T15908] tipc: Enabled bearer , priority 0 [ 541.917876][T15919] tipc: Resetting bearer [ 542.100681][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881584 [ 542.140038][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881583 [ 542.168318][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881582 [ 542.191498][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881584 [ 542.234937][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881583 [ 542.262306][T15924] tipc: Failed to remove unknown binding: 66,0,0/1073741825:310881581/310881582 [ 542.466082][T15931] team0: entered promiscuous mode [ 542.506039][T15931] team0: entered allmulticast mode [ 542.539290][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.711287][T15937] team1: entered promiscuous mode [ 542.720486][T15937] team1: entered allmulticast mode [ 542.726818][T15937] 8021q: adding VLAN 0 to HW filter on device team1 [ 542.941429][T15946] __nla_validate_parse: 8 callbacks suppressed [ 542.941451][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 543.015361][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 543.052910][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 543.065360][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 543.388025][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 543.428964][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 543.485995][T15974] netlink: 'syz.2.2417': attribute type 4 has an invalid length. [ 543.597315][T15980] Cannot find del_set index 8192 as target [ 543.665051][T15974] netlink: 'syz.2.2417': attribute type 4 has an invalid length. [ 543.698711][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 543.754909][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 543.770485][T15983] netlink: 'syz.4.2421': attribute type 1 has an invalid length. [ 543.872390][T15990] netlink: 'syz.0.2420': attribute type 13 has an invalid length. [ 543.913690][T15990] netlink: 'syz.0.2420': attribute type 17 has an invalid length. [ 543.948177][T15981] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2420'. [ 545.136948][T15983] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 545.207623][T15990] sit0: left allmulticast mode [ 545.236280][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.246381][T15990] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.259905][T15990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.270035][T15990] vxcan1: left promiscuous mode [ 545.275753][T15990] vxcan1: left allmulticast mode [ 545.350781][T15990] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 545.460045][T15981] bridge_slave_1: entered allmulticast mode [ 545.475702][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 545.678937][T11475] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.709605][T11480] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.776557][T11480] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.830398][T11480] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.093130][T16022] can: request_module (can-proto-5) failed. [ 546.389627][ T1702] block nbd1: Possible stuck request ffff888027345080: control (read@0,1024B). Runtime 330 seconds [ 546.404052][ T1702] block nbd1: Possible stuck request ffff888027345240: control (read@1024,1024B). Runtime 330 seconds [ 546.423935][ T1702] block nbd1: Possible stuck request ffff888027345400: control (read@2048,1024B). Runtime 330 seconds [ 547.581406][T16074] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 548.027332][T16082] bond6: (slave dummy0): making interface the new active one [ 548.057765][T16082] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 548.069030][T16086] bond6: entered promiscuous mode [ 548.075965][T16086] dummy0: entered promiscuous mode [ 548.194991][T16093] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 548.226348][T16072] bond6: left promiscuous mode [ 548.245089][T16104] __nla_validate_parse: 5 callbacks suppressed [ 548.245109][T16104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2443'. [ 548.254084][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 548.261711][T16072] dummy0: left promiscuous mode [ 548.375590][T16102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2445'. [ 548.537506][T16104] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 548.626570][T16103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2444'. [ 548.752503][T16113] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 549.099083][T16117] bond10 (unregistering): Released all slaves [ 549.191734][T16132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2450'. [ 549.247299][T16113] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 549.355711][T16137] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2453'. [ 550.003051][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 550.082923][T16151] netlink: 'syz.3.2457': attribute type 1 has an invalid length. [ 550.440966][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 550.524954][T16157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2461'. [ 550.614672][T16160] vlan1: entered promiscuous mode [ 550.645799][T16160] bridge0: entered promiscuous mode [ 550.857907][T16162] netlink: 'syz.2.2463': attribute type 4 has an invalid length. [ 551.259100][T16185] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 551.271042][T16188] x_tables: duplicate underflow at hook 1 [ 551.818354][T16202] xt_hashlimit: size too large, truncated to 1048576 [ 552.029511][T16207] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 552.350082][T16214] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 553.221021][T16232] nbd: couldn't find a device at index 0 [ 553.678813][T16247] tipc: Enabling of bearer rejected, failed to enable media [ 553.963329][T16255] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2485'. [ 556.368100][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 556.420752][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 556.461689][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 556.500678][T16308] tipc: Enabled bearer , priority 0 [ 556.949923][T16296] syzkaller0: entered promiscuous mode [ 556.978375][T16296] syzkaller0: entered allmulticast mode [ 557.231695][T16296] tipc: Resetting bearer [ 557.299163][T16340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2496'. [ 557.714280][T16349] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2497'. [ 558.413162][T16364] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 558.698013][T16377] netlink: 'syz.3.2503': attribute type 30 has an invalid length. [ 559.966836][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 562.805654][T16296] tipc: Disabling bearer [ 562.817436][ T9457] tipc: Node number set to 4118041146 [ 562.868458][T16390] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 563.045756][T16353] lo speed is unknown, defaulting to 1000 [ 563.895213][T16413] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 563.903102][T16421] xt_socket: unknown flags 0x8 [ 563.943799][T16413] bond8 (unregistering): Released all slaves [ 564.168731][T16431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2514'. [ 564.193873][T16419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2514'. [ 564.252053][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 564.305673][T16416] bond7: entered promiscuous mode [ 564.345100][T16416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 564.479047][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2518'. [ 564.721448][T16421] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 564.749572][T16449] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 564.922158][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 564.938818][T16452] vlan4: entered promiscuous mode [ 564.956667][ T30] INFO: task udevd:7922 blocked in I/O wait for more than 143 seconds. [ 564.959657][T16452] geneve1: entered promiscuous mode [ 564.975763][T16460] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 564.991875][T16459] Cannot find del_set index 1 as target [ 564.998489][T16452] vlan4: entered allmulticast mode [ 565.001523][ T30] Not tainted syzkaller #0 [ 565.007145][T16452] geneve1: entered allmulticast mode [ 565.037733][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.072013][ T30] task:udevd state:D stack:22336 pid:7922 tgid:7922 ppid:4998 task_flags:0x400140 flags:0x00080802 [ 565.116450][ T30] Call Trace: [ 565.132205][ T30] [ 565.138904][ T30] __schedule+0x1821/0x5740 [ 565.148795][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 565.161154][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 565.167801][ T30] ? __pfx___schedule+0x10/0x10 [ 565.179659][ T30] ? schedule+0x90/0x360 [ 565.186407][ T30] schedule+0x164/0x360 [ 565.197425][ T30] io_schedule+0x7f/0xd0 [ 565.216651][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 565.235237][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 565.252011][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 565.262275][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 565.272291][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 565.283613][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 565.294921][ T30] do_read_cache_folio+0x1ad/0x590 [ 565.304839][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 565.315473][ T30] read_part_sector+0xb6/0x2b0 [ 565.325351][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 565.334896][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.347254][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 565.357682][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 565.369247][ T30] bdev_disk_changed+0x817/0x1770 [ 565.378543][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 565.388413][ T30] blkdev_get_whole+0x380/0x510 [ 565.397961][ T30] bdev_open+0x31e/0xd30 [ 565.412314][ T30] blkdev_open+0x470/0x610 [ 565.426233][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 565.441052][ T30] do_dentry_open+0x822/0x13a0 [ 565.451683][ T30] vfs_open+0x3b/0x340 [ 565.458606][ T30] ? path_openat+0x2df0/0x3860 [ 565.467129][ T30] path_openat+0x2e08/0x3860 [ 565.475949][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 565.484887][ T30] ? stack_depot_save_flags+0x33/0x810 [ 565.494714][ T30] ? __pfx_path_openat+0x10/0x10 [ 565.502491][ T30] ? __x64_sys_openat+0x138/0x170 [ 565.511159][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 565.519625][ T30] do_file_open+0x23e/0x4a0 [ 565.527389][ T30] ? __pfx_do_file_open+0x10/0x10 [ 565.536156][ T30] ? _raw_spin_unlock+0x28/0x50 [ 565.543828][ T30] ? alloc_fd+0x64b/0x6c0 [ 565.550599][ T30] do_sys_openat2+0x113/0x200 [ 565.566524][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 565.582111][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.595886][ T30] ? rcu_is_watching+0x15/0xb0 [ 565.603340][ T30] __x64_sys_openat+0x138/0x170 [ 565.610586][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.620274][ T30] do_syscall_64+0x174/0xf80 [ 565.627906][ T30] ? clear_bhb_loop+0x40/0x90 [ 565.635559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.646913][ T30] RIP: 0033:0x7fd53fea7407 [ 565.655919][ T30] RSP: 002b:00007ffcb1807720 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 565.672177][ T30] RAX: ffffffffffffffda RBX: 00007fd54055e880 RCX: 00007fd53fea7407 [ 565.683444][ T30] RDX: 00000000000a0800 RSI: 0000565407e71670 RDI: ffffffffffffff9c [ 565.701759][ T30] RBP: 0000565407e66910 R08: 0000000000000000 R09: 0000000000000000 [ 565.713113][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565407e7b830 [ 565.731895][ T30] R13: 0000565407e74190 R14: 0000000000000000 R15: 0000565407e7b830 [ 565.739962][ T30] [ 565.748911][ T30] [ 565.748911][ T30] Showing all locks held in the system: [ 565.776359][ T30] 1 lock held by khungtaskd/30: [ 565.791060][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 565.812743][ T30] 7 locks held by kworker/u8:3/48: [ 565.822709][ T30] 3 locks held by kworker/u8:9/3265: [ 565.841927][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 565.857264][ T30] #1: ffffc9000d2b7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 565.881912][ T30] #2: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 565.904769][ T30] 2 locks held by getty/5389: [ 565.916253][ T30] #0: ffff888031e0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 565.942093][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 565.969562][ T30] 1 lock held by udevd/7922: [ 565.993700][ T30] #0: ffff88802726a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 566.012247][ T30] 5 locks held by kworker/u8:20/11475: [ 566.018876][ T30] 2 locks held by syz.4.2519/16447: [ 566.029060][ T30] 1 lock held by syz.2.2520/16448: [ 566.035206][ T30] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 566.046925][ T30] 2 locks held by syz.3.2522/16456: [ 566.053642][ T30] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 566.064918][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 566.077934][ T30] 2 locks held by syz.3.2522/16462: [ 566.084605][ T30] #0: ffffffff8fda6f00 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 566.095917][ T30] #1: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 566.107323][ T30] 1 lock held by syz.3.2522/16464: [ 566.113476][ T30] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 566.125371][ T30] 2 locks held by syz.0.2523/16459: [ 566.131504][ T30] #0: ffffffff8fdc9a80 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 566.145190][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 566.158241][ T30] 1 lock held by syz.0.2523/16460: [ 566.164995][ T30] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 566.176246][ T30] 1 lock held by syz.0.2523/16461: [ 566.182778][ T30] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 566.202253][ T30] 1 lock held by dhcpcd/16470: [ 566.207510][ T30] #0: ffff888055baa260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 566.217779][ T30] [ 566.220337][ T30] ============================================= [ 566.220337][ T30] [ 566.229995][ T30] NMI backtrace for cpu 0 [ 566.230015][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 566.230037][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.230047][ T30] Call Trace: [ 566.230055][ T30] [ 566.230063][ T30] dump_stack_lvl+0xe8/0x150 [ 566.230089][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 566.230177][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 566.230215][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 566.230248][ T30] sys_info+0x135/0x170 [ 566.230294][ T30] watchdog+0xfd3/0x1030 [ 566.230341][ T30] ? watchdog+0x1c9/0x1030 [ 566.230372][ T30] kthread+0x389/0x470 [ 566.230396][ T30] ? __pfx_watchdog+0x10/0x10 [ 566.230419][ T30] ? __pfx_kthread+0x10/0x10 [ 566.230442][ T30] ret_from_fork+0x514/0xb70 [ 566.230479][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 566.230498][ T30] ? __switch_to+0xc79/0x1410 [ 566.230525][ T30] ? __pfx_kthread+0x10/0x10 [ 566.230547][ T30] ret_from_fork_asm+0x1a/0x30 [ 566.230582][ T30] [ 566.230601][ T30] Sending NMI from CPU 0 to CPUs 1: [ 566.267327][T16456] team0: Port device team_slave_0 removed [ 566.270566][ C1] NMI backtrace for cpu 1 [ 566.270584][ C1] CPU: 1 UID: 0 PID: 16456 Comm: syz.3.2522 Not tainted syzkaller #0 PREEMPT(full) [ 566.270603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.270612][ C1] RIP: 0010:select_task_rq_fair+0x2218/0x43b0 [ 566.270661][ C1] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 aa 0f 00 00 31 ed 4c 8b 3c 24 44 39 3d 0e 18 98 0e 0f 87 17 1e 00 00 33 e3 0e 0a 89 c3 83 f8 08 0f 83 2b 0a 00 00 89 6c 24 28 4c 8d [ 566.270674][ C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00000046 [ 566.270689][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 566.270699][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880b863ae98 [ 566.270709][ C1] RBP: 0000000000000000 R08: ffff88801bee0167 R09: 1ffff110037dc02c [ 566.270719][ C1] R10: dffffc0000000000 R11: ffffed10037dc02d R12: ffff8880b8720c40 [ 566.270730][ C1] R13: ffff888041aa42a0 R14: 0000000000000002 R15: ffff888041aa42b0 [ 566.270741][ C1] FS: 00007f31a456f6c0(0000) GS:ffff888125398000(0000) knlGS:0000000000000000 [ 566.270754][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.270765][ C1] CR2: 0000557b72326168 CR3: 0000000041a82000 CR4: 00000000003526f0 [ 566.270780][ C1] Call Trace: [ 566.270787][ C1] [ 566.270802][ C1] try_to_wake_up+0x4db/0x1380 [ 566.270825][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 566.270847][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 566.270865][ C1] hrtimer_wakeup+0x4e/0x60 [ 566.270884][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 566.270910][ C1] hrtimer_interrupt+0x44b/0x950 [ 566.270939][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 566.270959][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 566.270976][ C1] [ 566.270981][ C1] [ 566.270988][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.271004][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 566.271022][ C1] Code: 0f 84 44 ff ff ff e8 62 2a 21 00 fb eb 44 e8 5a 2a 21 00 e8 25 69 02 0a 4d 85 f6 74 94 e8 4b 2a 21 00 fb 48 c7 c7 c0 f0 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 18 [ 566.271034][ C1] RSP: 0018:ffffc9001a526ac0 EFLAGS: 00000283 [ 566.271047][ C1] RAX: ffffffff81a49c55 RBX: ffffffff81a49acf RCX: 0000000000080000 [ 566.271057][ C1] RDX: ffffc9000d509000 RSI: 000000000002ab57 RDI: ffffffff8e94f0c0 [ 566.271067][ C1] RBP: ffffc9001a526b70 R08: ffffffff903052f7 R09: 1ffffffff2060a5e [ 566.271079][ C1] R10: dffffc0000000000 R11: fffffbfff2060a5f R12: 0000000000000000 [ 566.271089][ C1] R13: 0000000000000027 R14: 0000000000000200 R15: 1ffff920034a4d5c [ 566.271101][ C1] ? vprintk_emit+0x2cf/0x560 [ 566.271119][ C1] ? vprintk_emit+0x455/0x560 [ 566.271142][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 566.271160][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 566.271179][ C1] _printk+0xdd/0x130 [ 566.271198][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 566.271276][ C1] ? __pfx__printk+0x10/0x10 [ 566.271296][ C1] ? __netdev_printk+0x36f/0x480 [ 566.271340][ C1] netdev_info+0x11e/0x180 [ 566.271361][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 566.271383][ C1] ? __pfx_netdev_info+0x10/0x10 [ 566.271405][ C1] ? kvfree_call_rcu+0x9f/0x430 [ 566.271434][ C1] team_port_del+0x1081/0x1340 [ 566.271484][ C1] ? __pfx_team_port_del+0x10/0x10 [ 566.271501][ C1] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 566.271529][ C1] team_device_event+0x1ec/0x570 [ 566.271550][ C1] notifier_call_chain+0x1ad/0x3d0 [ 566.271572][ C1] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 566.271598][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 566.271619][ C1] ? unregister_netdevice_queue+0x19b/0x360 [ 566.271639][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 566.271658][ C1] ? __pfx_veth_dellink+0x10/0x10 [ 566.271680][ C1] ? __pfx_veth_dellink+0x10/0x10 [ 566.271700][ C1] rtnl_dellink+0x5d4/0x820 [ 566.271718][ C1] ? __pfx_rtnl_dellink+0x10/0x10 [ 566.271764][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 566.271785][ C1] ? __pfx_rtnl_dellink+0x10/0x10 [ 566.271800][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 566.271818][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 566.271834][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.271849][ C1] ? ref_tracker_free+0x693/0x840 [ 566.271871][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 566.271892][ C1] netlink_rcv_skb+0x232/0x4b0 [ 566.271945][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.271960][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.271982][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.271999][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.272019][ C1] netlink_unicast+0x75c/0x8e0 [ 566.272039][ C1] netlink_sendmsg+0x813/0xb40 [ 566.272061][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.272080][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 566.272102][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.272122][ C1] ____sys_sendmsg+0x972/0x9f0 [ 566.272140][ C1] ? __might_fault+0xaf/0x130 [ 566.272160][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.272181][ C1] ? import_iovec+0x73/0xa0 [ 566.272244][ C1] ___sys_sendmsg+0x2a5/0x360 [ 566.272260][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 566.272277][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.272297][ C1] ? futex_wait+0x2a2/0x390 [ 566.272326][ C1] ? __fget_files+0x2a/0x420 [ 566.272343][ C1] ? __fget_files+0x3a0/0x420 [ 566.272364][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.272382][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.272403][ C1] ? rcu_is_watching+0x15/0xb0 [ 566.272431][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.272447][ C1] do_syscall_64+0x174/0xf80 [ 566.272463][ C1] ? trace_irq_disable+0x3b/0x140 [ 566.272486][ C1] ? clear_bhb_loop+0x40/0x90 [ 566.272504][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.272519][ C1] RIP: 0033:0x7f31a379ce59 [ 566.272535][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.272548][ C1] RSP: 002b:00007f31a456f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.272565][ C1] RAX: ffffffffffffffda RBX: 00007f31a3a15fa0 RCX: 00007f31a379ce59 [ 566.272576][ C1] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 566.272587][ C1] RBP: 00007f31a3832d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.272597][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.272607][ C1] R13: 00007f31a3a16038 R14: 00007f31a3a15fa0 R15: 00007ffcf8abe608 [ 566.272626][ C1] [ 566.275510][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 566.275528][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 566.275548][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.275559][ T30] Call Trace: [ 566.275567][ T30] [ 566.275575][ T30] vpanic+0x56c/0xa60 [ 566.275600][ T30] ? __pfx___schedule+0x10/0x10 [ 566.275619][ T30] ? __pfx_vpanic+0x10/0x10 [ 566.275647][ T30] panic+0xc5/0xd0 [ 566.275665][ T30] ? __pfx_panic+0x10/0x10 [ 566.275685][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 566.275714][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 566.275741][ T30] watchdog+0x102c/0x1030 [ 566.275772][ T30] ? watchdog+0x1c9/0x1030 [ 566.275801][ T30] kthread+0x389/0x470 [ 566.275842][ T30] ? __pfx_watchdog+0x10/0x10 [ 566.275863][ T30] ? __pfx_kthread+0x10/0x10 [ 566.275886][ T30] ret_from_fork+0x514/0xb70 [ 566.275907][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 566.275932][ T30] ? __switch_to+0xc79/0x1410 [ 566.275958][ T30] ? __pfx_kthread+0x10/0x10 [ 566.275981][ T30] ret_from_fork_asm+0x1a/0x30 [ 566.276015][ T30] [ 566.280315][ T30] Kernel Offset: disabled