last executing test programs: 4m48.90906635s ago: executing program 3 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x7, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4m48.743317752s ago: executing program 3 (id=1705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000890007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m48.52185806s ago: executing program 3 (id=1710): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x8000000, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 4m48.387629422s ago: executing program 3 (id=1712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000480)={&(0x7f0000000140)=0x719b74a3, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)}) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010100, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00d63cc05c91f052bcc5e86800000000004a88085f2c106a25f471e56e941a59dacf00001c00126964676500000c000280080008008100000010000100aaaaaa"], 0x48}}, 0x0) 4m48.044500541s ago: executing program 3 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="eab0a7013dc246fe26fc8f34c58b76571001b014"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) 4m48.039233372s ago: executing program 3 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="12aeea007d080000080000000200000000000000468832154135ef1aa4993f7219cde1302a35b96613dbe27420e0cd58b482ab6b4ec89f12a5f69f3b2de57a2b9a322c00000000000000004824891072d816d312ad3cde2682b4d39e6e32e15976e60c1f095361d224619213193027683fad2452aa862c24927f870da6238cf4ef7515d34c58", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create1(0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20006004) 4m32.958444822s ago: executing program 32 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="12aeea007d080000080000000200000000000000468832154135ef1aa4993f7219cde1302a35b96613dbe27420e0cd58b482ab6b4ec89f12a5f69f3b2de57a2b9a322c00000000000000004824891072d816d312ad3cde2682b4d39e6e32e15976e60c1f095361d224619213193027683fad2452aa862c24927f870da6238cf4ef7515d34c58", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create1(0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20006004) 2m36.242182793s ago: executing program 4 (id=2853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x34}}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000080)={0x17cd, 0x2cec, 0xffffff31, 0x0, 0x32b}) 2m35.929606361s ago: executing program 4 (id=2856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x47}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x1e, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xe4bd, 0x0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f0000000240), &(0x7f0000000340)=r10}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r13, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000850000007d00000095", @ANYRES32=r9, @ANYBLOB="a627116148ca1c957c9b45f57017b4ecfb2297c16895a60feee818dea2915111e3e3ef6fc37f9357a541a076612c5dab03e75cd92f64b7cd0d48eeb23e", @ANYBLOB="40b58274977e39f73c0ab051078ca286ef2f6a162a642fb50cad2ed33e06ea3e7a9a7b627840349306b841d79acbe50186946fae7648209f8ab8d7c206b89304f282a35c3c17078fae0ef45dab21e82690e7542a82807ab75c9ed19dc9228f641c2bf498152beeb0d16d8d0acd3f1c27833ca1aa17e6"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="090000566a14159fda23e0d25bf538e3619c0000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r15, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000200)='syzkaller\x00', 0x80, 0x8d, &(0x7f0000000280)=""/141, 0x41100, 0x2c, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x8, &(0x7f0000000740)=[0xffffffffffffffff, r9, r11, 0xffffffffffffffff, r12, r14], &(0x7f0000000780)=[{0x5, 0x2}, {0x3, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x0, 0x6}, {0x1, 0x3, 0xf, 0x3}, {0x0, 0x2, 0x9, 0x8}, {0x5, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x2, 0xa}, {0x4, 0x5, 0x8, 0x6}], 0x10, 0x7}, 0x94) 2m34.968259632s ago: executing program 4 (id=2857): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000040801010000000000000000000000000700030095ee000006000240000000059ea07a9d850f29f1e5f71231e8ee4c9f46146322edcdbea2c1afeb52a062eb436a9c8a2ca4c3116f351074a455340c8004c1950b494ad3b8379c48ded49607c44d2525a70f252703a52124aa1375e33262e917791133598c5f9b02eabf9dcbce61d37ff3ef3e21ed8aa4b3d463c920"], 0x24}}, 0x0) 2m34.883560884s ago: executing program 4 (id=2858): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7668}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x894) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) epoll_create1(0x80000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e00010000000800070064010101060010004e22000008000a00", @ANYRES32=r11, @ANYBLOB="42702b1970e01f8be23a5f6253064187de4c3192b08092549928789aa37e3e1985572c96d8bd284e6670e7a95b5af2385a"], 0x54}}, 0x24000000) shutdown(r0, 0x1) 2m34.798883038s ago: executing program 4 (id=2859): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000100", @ANYRES16=r4, @ANYBLOB="1d0000000010cb0000080000000020"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) 2m33.740984804s ago: executing program 4 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705f, 0x64ef}, {0xb, 0x1203}]}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f50000000000000000000064ace26000442f01fe880000000000000000000000000001200100000000000000000000000000000c21880b000000020000230802010000000000003e080022eb000000032248256102000000fffffffbf587051a0800655800000002700ac185f1d9c87f69342d0e7fd90f41b29ba7bb6369f7bef6a4b9d4613bffe063ad73e01c9ab58b90076143dd49ee"], 0x7a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) 2m18.703290766s ago: executing program 33 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705f, 0x64ef}, {0xb, 0x1203}]}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f50000000000000000000064ace26000442f01fe880000000000000000000000000001200100000000000000000000000000000c21880b000000020000230802010000000000003e080022eb000000032248256102000000fffffffbf587051a0800655800000002700ac185f1d9c87f69342d0e7fd90f41b29ba7bb6369f7bef6a4b9d4613bffe063ad73e01c9ab58b90076143dd49ee"], 0x7a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) 3.468108935s ago: executing program 6 (id=4703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_getnexthop={0x1c, 0x6a, 0x113, 0x70bd29, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240000c4}, 0x4000000) 3.181903017s ago: executing program 1 (id=4704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, 0x6d9, 0x3, 0xb6, 0x100, 0xfffffffffffffff9, 0x40000080}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x1, 0x0, 0xff, 0x1, 0x8, 0x5}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='\x00', 0x4b694156df01aac9, &(0x7f0000000140)={@align=0x101, {0x1, 0x7ff, 0x2, 0xf4}}, 0x81, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x4e21, 0x6, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x1d, r2, r3}, {0x7, 0xfffffffffffffff7, 0x0, 0x4, 0x6, 0x41f, 0x2, 0x8000000000000001}, {0x7b06, 0x8, 0x8, 0x3}, 0x6a9d2b39, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3505, 0x3, 0x2, 0x8, 0xa58b, 0x5, 0x8}}, 0xe8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7e9d576661a15f95f68c74705007814a0d5c5e4f9e2cc9"}}, @TIPC_NLA_NODE_ID={0x44, 0x3, "09cf6144c51cd56f36babc1034c5883719c50a291d4a4d1a325ee6f3e0aa64b1c6855a618a19fcdf15340affa3fa08c791853d7f3f6d510a705b8fb15db92d15"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x8008000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x4c}}, 0x40000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x71}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xd1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000000}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x48011}, 0x4000812) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'tunl0\x00', r2, 0x40, 0x20, 0x5, 0x449c861a, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x66, 0x0, 0xfa, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x3, 0x49}, @noop, @end, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xa, "69a93b73561dd95e"}, @timestamp_prespec={0x44, 0xc, 0x33, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}]}]}}}}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000034c0)={{r6, &(0x7f0000000b40)='sit0\x00', 0x40000, &(0x7f0000000b80)={@align=0x6, {0xa3, 0x9, 0x8, 0x3}}, 0x6, &(0x7f0000000bc0), &(0x7f0000000c00)=0x1}, 0xa, &(0x7f0000003380)=[{0x1, 0xf8, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="b56401cf5b07d4f16c397004285e36e608992a69bcccf022b0cbd22b5fb6e595ab40fc154543f14cf98156499f3dce9925c4282820d0e97766b5cc01e01677b1dd372527a224561de15c2a5be6453d5d556af357020d12c0c69aed73a4995ae622417a81f32465c2d67ee3f7dd3a8dcae4d14c39b7ef76822669a3b0d532d92500df43b9f16cb2147e0e3595b9a5aa9c95ee351cad87571b1be15ecb88b8da22143d1afc23b0bfe522b91c84dcea415b2069f8c02e66aec7807440cd944d7f9b3525efc55c97ab27ff74384aa929fdba45006de7", 0xd4, 0x28}, {0x2, 0x3, &(0x7f0000000d80)='#+\x00', &(0x7f0000000dc0)="6e50290f92cce6b614e395d62ea4259e16422a1d1f5a71f1ca3587cf0c586d366c07acb1886f919ce45df6c154f6767485748dc4ab4c11c00be78a9d0589b165629ff8508a7086baf9baa5708480c25e527b9ec6d081f965aa70c73d27ad1171b67eefa57b5f67775382fcb93075fcdb20d75b570a10362267b709738eb0ae1715320c6cd6481e6dc89134a4f494c9fba4fafe4a37ecce6ddebba71df353e1acf4285cf4ccdeb8a63924283ba013b4b3f13e50d61acb3871c26262bb0ee5a79b585034280e4d9d238b23af59e9dbb3d8699670b406ae6204e25c27", 0xdb, 0x22}, {0x3, 0x8, &(0x7f0000000ec0)='nl80211\x00', &(0x7f0000000f00)="bf2f7888a687cd313c7ef5f108a13724b3", 0x11, 0x32}, {0x3, 0xd350, &(0x7f0000000f40)='\\{-&,\x00', &(0x7f0000000f80)="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", 0x1000, 0x2}, {0x3, 0x3, &(0x7f0000001f80)='wlan0\x00', &(0x7f0000001fc0)="7a1bccedcf9318e6f01a44e1d0d8e94d4ae6876e10f3870253c85763c449375301678e570c26ee3bb7fadf419910b11384c716ebd709ece44671897a3eebb8ec5eb4e749217bf8ef49a9b14c7ad97342a3d268ea8d9875fddb092d363024bf6180dbeb62a49df073f2e2e4063cb49be4b7d46e8ad24b23dd1f82121bad3cb216a5766d86913893aeb27b43c48febfbd91836e34acd078c2f311da1f4a8902a54ecf98de6fdc3341c5f6fb58eb301c7325a59dd760eb4d97e5bcb31573309f2a4075f6693d964f86650439dee3d58393f395e27178f9f00210d50c4b06d5fab5c375189821c52c60ab86f918d", 0xec, 0x30}, {0x3, 0x1, &(0x7f00000020c0)='TIPCv2\x00', &(0x7f0000002100)="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", 0x1000}, {0x3, 0x5, &(0x7f0000003100)='\'\x00', &(0x7f0000003140)="d1c17a2e0b69d158a4ce26a0cf4574c8b5195ef6ec04df7137cbf0ea3e", 0x1d, 0x554e5ab1793fc125}, {0x1, 0x1, &(0x7f0000003180)='\x00', &(0x7f00000031c0)="6225c0f8ffa06827bec40ff085cd4de6459eaed33e1eb51f869d21047aac486728c5d9f1e7fc4140066f0ffe7efe5365b8990c4420946d49dcae01d1b5f332422465d6e989380e906f2f9ebdb7a5623bea537d955fb9a031b88f9342535face96c573d55b638318722a9011edf77abc2bf344e15373549f2e3da7e30dbc91018371443e22db85ab32f1e88495d2fd46954071aa25151a83285eca8307b6d4152", 0xa0, 0x8}, {0x1, 0x8, &(0x7f0000003280)='$\x00', &(0x7f00000032c0)="c2df3b8eb5341a443551c3f3cb882e7aecf356b7c428e81899ee77eaba3f9bc0682bbfcdb8d2d36bd44ee08aaa7b0469547e7e8ef9ccd7", 0x37, 0x20}, {0x3, 0x10001, &(0x7f0000003300)='\x00', &(0x7f0000003340)="a71435c33ffdb27bd1cf7ce8f6dc41c0a35cd629b96e081bb558729a44f3b7da9b35", 0x22}]}) sendmsg$nl_generic(r9, &(0x7f0000003840)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003800)={&(0x7f0000003580)={0x250, 0x35, 0x8, 0x70bd29, 0x25dfdbfc, {0x1}, [@generic="3c265b0e98e8de980542198ed755092d632b075cfe5dbf36a70426e7ae73cc17855474253470e0aa6d5058b257316518aa7000a0b3487763a33897dce6896c12959e7881fa145c7fc059592b548341d9b2ca0210a7d93acfbd36b3109461f70f85fdb5184fde79067b5cdef1d20310de13088e8847da708d779fa84c7f394be80972417d7e4d6cd6f5f9730bfc5a8bbd04895f72f942b53387a85afedd334bd84c1333bb2b0414653c8cc60c4a31a414b5b08e3cd5335b95f7b1742d61504914ae033bd16740fb1212d6425527b80f0da9d1399121dd7522697cb9e3da27261c75a24262", @nested={0x18, 0x143, 0x0, 0x1, [@typed={0x14, 0x105, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="8a9a292b438d28aa1617420bda29e5071541988d2bbbc2c6707028f16ca69be5a9d6dbdae1b5f07c5b3efd5e43014fd90c0d0f57ba6c4f6c2805605a53792ff2367bea3b9273d86ad3f42fb92c9b7e28c17838a3ff45000d00df3946f0cc1eaa3b668fd9a4792f24c8dfe2d1aa91a92403a6", @typed={0x8, 0x12a, 0x0, 0x0, @pid}, @generic="4fd589b5714bf0d0c82d5cfa195f160a63b29790387036a012866602474eff6055d8590715f4873624fbcb7ad977556f21d27fb1f110edca7c08e166d50e3d3b8edb9cbd5146be7c368e9ba29e10bffdad2a61cd944c3a6b36933796da6419f483ed5322cf8af2e66200aa72aff28118d6917aa8a8093c954404ea9a13964f86d58a1227e20dc46f374503454bf1d7bc0cdaae01b1680d44d4ac396ee51109e4160b0e8e37f91101878fb33b94", @typed={0x17, 0x13e, 0x0, 0x0, @binary="743c52d7b7c3c928e2c6a1b577103c76affec5"}]}, 0x250}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000038c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40), r1) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x4c, r13, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{}, {0x1b, 0x1}, {0x2, 0x1}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x9}, {0x24}, {0x30}, {0x4, 0x1}, {0x12}, {0x4, 0x1}, {0x36, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x30}, {0xc, 0x1}, {0x60, 0x1}, {0x12}, {0x0, 0x1}, {0x1b, 0x1}, {0x1b, 0x1}, {0x59}, {0x12}, {0x6, 0x1}, {0x18}, {0x6}, {0x2}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x34, 0x1407, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40) r14 = accept4$inet(r9, &(0x7f0000003c80)={0x2, 0x0, @multicast1}, &(0x7f0000003cc0)=0x10, 0x0) setsockopt$inet_mreqn(r14, 0x0, 0x23, &(0x7f0000003dc0)={@broadcast, @private=0xa010101}, 0xc) 1.922861171s ago: executing program 6 (id=4706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x60, r1, 0xa, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x62}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40085}, 0x4040000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x8}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffe43, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_CHAIN={0x8, 0xb, 0xdf}, @TCA_CHAIN={0x8, 0xb, 0xdf15}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2}}, @TCA_FLOW_MASK={0x8, 0x6, 0xfff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00011075fb6b2e73d62fa2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xbb, &(0x7f000000cf3d)=""/187, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xf}, 0xe1) r10 = accept4(r7, &(0x7f0000000240)=@ax25={{}, [@rose, @rose, @rose, @rose, @bcast]}, &(0x7f0000000000)=0x80, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="02022dbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.877161034s ago: executing program 1 (id=4707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1.875799924s ago: executing program 5 (id=4708): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0x2, 0x8}) sendmsg$kcm(r4, &(0x7f0000000c40)={&(0x7f00000002c0)=@xdp={0x2c, 0x8, r3, 0x20}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)="a1b15bbe48d2f199764c4eb45d667cf78e69345fe7e902f4ff63e437426a2f0db418d9f17f47debbca671d87ab668d306f8fb52c7bec4a6a1dd550396de17e8a83ac806951d880ca75a83df36c51000c4272925ef7ab0929c0d59bc2bc91706816c162198d08e2b4243f991e6dbc14963353f86f635a52f550c4789ad9e618f66978f0f47a548922a8a5fd631c79db7e789506d0b9b587c043a3abe64c023ab2644ad4e17f94293cb2326b86553be10176da0a60d619aa212e6c163b2b9b9d033ea5c059966ee565af871242c9bca176a6ac42c21033409529c8452a94972d9b9b595ba41de00db2a2a82b5834aa", 0xee}, {&(0x7f0000000240)="2c5ac102b132c74c47dd8e4b88ce1cf951756ea8a50b6670094a865e72f701a2b1665f09cca9123356a46848aa", 0x2d}, {&(0x7f0000000840)="c394c58eab245892be3e804bdee0ba3afc628ac07084348d7ace5eeeff02f63a8dbe0496fc9e719265ce70fbbd99b295d37434d3495d356740da8462d6d7a6f56add080dda8cf3564ee10683b4901628f72295cadf71bbcaa87da5a4181182f1b8f87834f51081957462300a1e2c4e9504f083c0cca4cca58de80a73a243ad4676746861b11c3f6aee848a3b4c5014b2ac51076c5091e558eaecfd99de9f16cc5845bdafbd3976e7c3daab757e314eeb899ef38461ad2c284c161b", 0xbb}, {&(0x7f0000000340)="9fffeb4e23adb1a0c7749e1cfd844ee99f7bad074d43f53760cf8024f229621b7758462989073b11e073e2457ee34fa584dc74cf72d69ef5ed85e6078c5ff26ec60690e4547dbaf6974a1b9db0c8df5ab517beaf98ff6d7db4704027", 0x5c}, {&(0x7f0000000900)="7b4244e7e4399df44fcffa613155b21ac818af75ac8250d7efcf3cc3e1872054ab3a64f192bd07c4e2d382b6f438eadfce650f2ac9c5f20fce8b563b852370b3c1442f01e8a1dca89b3c23e82f290b", 0x4f}, {&(0x7f0000000980)="11a6e473657f602d57e5add01188a8affb166e425b41971974e281545c74ae851fd8d46c136bdbdc1405b1401cabb466d515c5df0f4e05b625f20959b9ad75d369c4c8a91701b38a3b605db4918e759ac7db7e19480d8455d225b032956159d43406bc08d93572e36a20856800bf014ee94f8f87e16c31e9923a06792d0b639151", 0x81}, {&(0x7f0000000400)}, {&(0x7f0000000a40)="404d891d71198152e3299dce66e0bb04a4759829d049016914734952f487bd4f206090463148f57bf50e7362cd780d20205c9b995b15da06a96e9ea8e6ebcfbc9c16d8f07ddd8036c16925e354285c3e5fd9864940fa17554eeccb50", 0x5c}, {&(0x7f0000000ac0)="d71629261f3de3e4c88929a3f057711768604a95bcd102516dfb41918ba91261dd28b7f1461d290e28830ed0aa7a7003f1f2932556a88daa3b3e836f4b428bb977fe5a4f66e32b331aa3f0fde1e146a05f322af50c34f5acc1dd5ef7aa90bf810acf5ea398ad72cb30668c623cfd9f278349fe9e9067d2bddc0b9eb75f3fe5ecda29e3ba3024d4d80e9f4aa96e1ebaf574dcd2efaac0b550d3b3fa3b57fbd872528ad47e37a058cd212fea971f56bedb", 0xb0}], 0x9, &(0x7f0000001300)=[{0xd8, 0x116, 0xde, "8de82cf18bb4afaba5a16800c26d00a52885c4be7c8eca803294f6a216c0a6c3af6defa0808dc2bd30515fef9827af21fcb02f7e5b56d4cc820413363997baf31d4ac346e112a83268de5cded01fce567f472232c7d7e71d3d99df48d93cefc5efcbd8a1710051207e93b1e325cb299e6230d789e947f838f127d8f9ba53fb525fd32db574ac76fd38e5a030162c52076e8cf9b54e8851c2f9992acdb9c3d3f1152bb66eb0197ce7b6f1f0de469986395abd2db88ecca4dfbb4c420c71d5a17cff55da2fac6ea1f0"}, {0x1010, 0x1, 0x3, "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"}, {0x80, 0x1, 0x7, "b763169d462520f85c5d9cfd715bee4fcdda4996861c159fe8643cc82678d5013dfe36fbf8355bcbf2307563bf9d9eaffdd0dd1bd54e8d92393887be0b74f3209047c8307c6b0e28a983bb394740f8b0e584cfcb3f8461d388f5e39cc00e8f19433b40b6289bb35a5dc5"}, {0xe0, 0x109, 0x4, "0a4d7f216d910bbb3ca8f0b98ad06114ef0a4af4743abf01046a16a8931e52f6ceb36a95eadf843c85551024651076271fb0c5861607f852106f7c44f3a6c43bd39a99023efb32fb2a255cf4264c06dfbe98aeef8019a9b5da58ee557701687637e152e1fb76b8b5b0cc6be88de1e7d3b32306db4d07fa66304c90e2267bbda512f89b1fbb9a4a64c90aaf382e1ff516e41e08b5cae3f7e6d446da8b810ff80bc209eef03cfd2eb178ab02dd64a404a857918e6cda319515e61c84fc8c71d3585ddbfea0b26f61fbb6"}, {0x18, 0x112, 0x0, "4ae9"}, {0x60, 0x1, 0x5, "a42f6f45f5d2ab66e71f10325f151b2d9fe9ceb3fb0a193aae7c4a13becdcd40c24c0729e04974d98f730950f38a4e78de3db5d5c30a6ddf2a2d7b154f360638c9b636749d44681b4c189c7591"}, {0x38, 0x113, 0x8, "ec8cdd07c3b6447b936a4c6c9aac3f3ab4f3567d163da26d3e9eb7a9f73601cf7beea41b45"}, {0xb8, 0x113, 0x6, "39d5492f321077f9eb3727917267fa82ffc526b74cead5112c66a156a4f1a74a9a1333c00f6804d51f72331e7744799d962be2cd44dd96a0e51fb170f4e815ae49f9c5ae964e13052f076a07633406784be3b476c3c7e3cfdf8298b64fd764af5fb22666e5f8c077399a6e3b7565de08f84c88ce2b5b46375682338f51c78a7141c6da477e04935a3da693c94f68a2526ea9d8430e60ff395eb1b3bbff6e9c6047"}, {0x30, 0x104, 0xfff00, "10bed7982c12b94dc367694d2cca480efc922cea9f209ba597fe37b4"}], 0x13e0}, 0x4000040) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0x42f, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x22c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6906}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x7}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x2010}, 0x4000080) 1.859779654s ago: executing program 2 (id=4709): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000180)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 1.798384501s ago: executing program 1 (id=4710): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.706509498s ago: executing program 2 (id=4712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088b5aaaaaab7aaaabbbbbbbbbbbb08004519fe6d0065000001069078ac14142100000000"], 0x6d) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="adc734370000000008000a00", @ANYRES32=r5, @ANYBLOB="2000128008f701006873720014000280f5000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.687164771s ago: executing program 6 (id=4713): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000010000000000b7080000000000007b8af0ff00000000bf467e4542d0f1971d3ea100000000000007090000f8ffffffbfa400000008000007040000f0ffffffb7000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000390000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x4) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) shutdown(r7, 0x0) recvmmsg$unix(r7, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="95001828c0b5b3ed0000000000000000a44578ec8b12daec0b38d0781f4b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, r5}, 0x94) 1.581454937s ago: executing program 5 (id=4715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, 0x0) mmap(&(0x7f0000388000/0x4000)=nil, 0x4000, 0x1000000, 0x10410, r0, 0xbc32e000) 1.511982645s ago: executing program 5 (id=4717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000000040)=0x5d) (async) listen(r1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="3c83d8044d6c99f44b04fc29ee582ef2501fa2fdad91bfd738ffc693cdc59624e074fa4613fe7d0a3db21369238d5f3f47ce2d8110b0867730affcc30b5409406478e2c65e", @ANYRES8=0x0, @ANYRESHEX=r3, @ANYRES32=r4], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fe}}, 0x0, 0x3}, &(0x7f0000003c00)=0x90) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x241) (async) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="90e74e0b", 0x4}], 0x1}, 0x24000041) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x0) 1.271954291s ago: executing program 5 (id=4718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept(r0, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffc0}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2798}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r3 = socket(0xb, 0x4, 0x80000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x70bd29, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) sendto$inet6(r3, &(0x7f00000004c0)="effcc93485b41c0364646fa73e637f225b4fe421ec51b4bc94aa03f5cd1cd441e5082be5218c6f494be6f6c2aaa25f2e44fef069e67ba5e1bd8ee3e9f649edd7cf05b095d461d9a973eb1aace2901314c311b6b41560fb53a233be9826ca399748c42eaca2dc6df07868a64971de1f51eb607fbfc1c67206844e5454002cf9446cf409f29a9b4565dddadcad51591b536ca3695db101ea8bcd3b577af513f6f2495bf96780856a1e836455f8de3176d9c4b3f32df11727d8627cb73aaf3e06d6192f6ffe96c7abab5fa602cca64996c01e27d72c646e32bd1a70070d45e35a5c69dc9c55dd86b106f54ad722741fcb1a8954b643", 0xf4, 0x20000000, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.208101716s ago: executing program 2 (id=4719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r1, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES8=r0, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x10, 0x2, 0x0) (async) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r1, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES8=r0, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) 1.120327583s ago: executing program 6 (id=4721): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x4}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x18}}], 0x2, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 1.101032379s ago: executing program 2 (id=4722): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) listen(r1, 0x1ad72f7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) accept4(r1, 0x0, 0x0, 0x80000) r4 = accept4$netrom(r1, 0x0, 0x0, 0x80000) connect$netrom(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.032806113s ago: executing program 5 (id=4723): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r6, @ANYBLOB="029000000080040008000a00", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0x2}, {0xd, 0xf}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}}, 0x881) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) (async) accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)={0x1560, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaf3c}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "3afc11740dddc496f4a381b2b3f68263c52832c3b617598242785ddf73925442521553bbf87febeaa73a5d6d5ecd53570d1a30eb9be2cc370d7874c392545c45d3dce3d078199a5e4bdf525fc1678b00e9eff15088f180744e3321be1be9ae7799d4a76d8b8e346faac2b37034feb63eefa65e9e6de8dcb5fc50b31bdfd9b3277ce9c3a70b7cbfe4128f8e426c7fd9cdd88e8be2c9ffe084cf773513b70919d8a9f92ebb53555d70f52d94f05a"}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "7a8fbf599985f992e33b5848878b3ff4bc34a7fafa461c1b0f89a32cee2dfd61eae04c3be14bb409cc7a10c45470b9501d6ffc5b11f93fb29aac62b7d20879bf51602b67daad72f7ebecbfe6b251a33347b1ee7cdf48da6ffb5a17a3839b0a9045b5a74574ed07fab20deccb78c6dd314f1c5ab82eb7888900205d038146daa40a0a872c31537e09a1d43ac317b7e958bffc0ec81e66f4cd4141c7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6003}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "8f9c52e02274bf"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffa}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "f1f16844b41983ba21d37d78e15e8e92408675a58647dd0ab43f92a581ce04a6"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x324, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "c40df13a43a19bb572eb6db18fb67f94ad917c8275c0282cf7358393026b9f18a7c3c4a48cdc679583b1c909d4ea2e0d98756227534a79c236fee397c0532c696dfc6e27246baf6c2453efed8944979dec18d3f4ea10119157e6325e0c9a836551e78ed36c89fd4d165f29949ebdf4d5831fdffea9f6de53b15cf2e6d59635db8f0236fb63e9d6fc4105662f53555bb5f4e142c3cec9e61cca6e4ee8af00973a8bb322d81b70d42a669f59fcc4f2c509d2710d"}, @ETHTOOL_A_BITSET_BITS={0x1f4, 0x3, 0x0, 0x1, [{0x170, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, 'Q'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '3\x00\x00\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12b, 0x2, '\xdf\x1b\xc0\x9c\x8f\xc1/\x00\x00\xd0\xdc\xb0\x89\xab\x9a\x8a\r\xd2\xd9\x00\x8d\xe8\xe9!\x8a\x9e\xbc{\xbb\xb0P\x1e+\xa0\x1c\xfdf\xcd\x16\x140\xa9\xde\xbe\xc8\xa7\x1f$I\xb4&\fY\\\xef\xdddu\x19\v\x83\r\xf0\xc5Vo\xf5\xc8\xb2xv\x02\xe1|\xdf\x7fk\"\x90\xcapjr\xa3\xd9\xb0$\x14=\xaa\x86\x10\xbe\xe4\xd6c\x9cG\xc3\xf2+i&\x1dT\xdbB\xc4l\x885^\x12mnx\xc4\x8ba\xac\v\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcf\xcc1\xe9\xaf\x8d{%\xbbJ;wDW\x96\xb8zhn\x9f\x8e\xc9Ns2\x02\xb2\xd5\x9cd\xac\xbfg\xc4\x10\xdc\xe8\xd6\xa6\x8e\xc7g\x16\xec\xd8\x10d\r;\xec-\x92\xa2*\xb1:\xa4\xd2\xde \x9f\xcb\xfc\x81\xf60\x87a_&\xfd\xb3W?\x9dS7\xc2\xe7\x7f\\\x9cF\xaf\x7f\xcfd\"\xbd\xaf3\xbd\xbd\xaf\x10\xd3\x81\xea\xd7\xfc\xd5\x93\vW\xe6\xbcz\xef\xd6g-;\x83Im\x19)\xd5\xa0\v\xd2\xddxEP\x19\x83\xd2y\x05\xd7\xb3?\xdd\xac0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r3, 0x8102}], 0x1, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bind$phonet(r6, &(0x7f0000000240)={0x23, 0x3, 0x8, 0xe}, 0x10) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r7) sendmmsg$unix(r7, &(0x7f0000000380), 0x0, 0x4000011) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf5, {0x0, 0x0, 0x0, r11, {0x10}, {0x0, 0xffe0}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$unix(0x1, 0x2, 0x0) 662.955947ms ago: executing program 6 (id=4729): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) close(r0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/241, 0xf1}], 0x3, &(0x7f0000000380)=""/62, 0x3e}, 0x1000}, {{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000840)=""/65, 0x41}], 0x7, &(0x7f0000000940)=""/39, 0x27}, 0x1}, {{&(0x7f0000000980)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/238, 0xee}, {&(0x7f0000000b00)=""/49, 0x31}], 0x2}, 0x10000}], 0x3, 0x40000000, 0x0) (rerun: 32) 574.127493ms ago: executing program 1 (id=4731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000400000000000c000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) 406.18096ms ago: executing program 1 (id=4734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3], 0x6f4}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r11, &(0x7f00000000c0)={0x27, r10, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) (async) close(r9) close(r11) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) r13 = socket(0x2c, 0x3, 0x0) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r14, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r13}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r14, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r13}, 0x20) (async) close(r13) 397.835707ms ago: executing program 0 (id=4735): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2000, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) 366.202291ms ago: executing program 1 (id=4736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}], 0x4, 0x2030, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000009c0)={0x24, @none={0x0, 0xfffc}}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "30d336b2343297f9", "1a61658d335c9dcfdac4527f62666cd4", "f2e64ac1", "e20cb0fb5e3b7e74"}, 0x28) 301.387008ms ago: executing program 0 (id=4737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2002, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 267.472715ms ago: executing program 0 (id=4738): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 212.016576ms ago: executing program 2 (id=4739): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x50, '\x00', 0x0, @sk_msg}, 0x94) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x1000}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) 209.110876ms ago: executing program 0 (id=4740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44101) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x3a, &(0x7f0000000100)="8b6b5f326fdabd07bc1d1858709f1136149ea9eae93c388ce8a01c299a2bd64010547b4bfd0b83715718c611a96e3ba66b31212309c42ba35d60"}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRESDEC=r0], 0x114}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 76.415387ms ago: executing program 2 (id=4741): ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f0000000580)={0x5, 0x1, 0x7f, 0x8}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000740)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x3e, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT=r4, @ANYBLOB="ffe8", @ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x80) 75.869439ms ago: executing program 0 (id=4742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003640)={0x40, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 0s ago: executing program 0 (id=4743): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000000008010026bd70f8e200fcdbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x9}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f00000000c0)="ff02040004fffffffff40f936e83775a710cb663", 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0x0, 0xfff2}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x10000000, 0x6, 0x1ff}, 0x4000002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) r14 = socket(0x2b, 0x1, 0x0) read(r14, &(0x7f0000000000)=""/108, 0x6c) kernel console output (not intermixed with test programs): t tx_queue_len zero misconfig [ 394.045586][T16560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.052600][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.119378][T16560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.149241][T16560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.156742][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.183574][T16560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.236933][ T9] IPVS: starting estimator thread 0... [ 394.324870][T16662] IPVS: using max 26 ests per chain, 62400 per kthread [ 394.411747][T16560] hsr_slave_0: entered promiscuous mode [ 394.427924][T16560] hsr_slave_1: entered promiscuous mode [ 394.442468][T16560] debugfs: 'hsr0' already exists in 'hsr' [ 394.448712][T16560] Cannot create hsr debugfs directory [ 394.589176][ T6829] wlan1: Trigger new scan to find an IBSS to join [ 394.744387][ T5840] Bluetooth: hci2: command tx timeout [ 394.823637][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 395.002696][T16560] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.034547][T16560] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 395.068453][T16560] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.451384][T16560] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.492879][T16560] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 395.509053][T16560] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.562174][T16641] chnl_net:caif_netlink_parms(): no params data found [ 395.640532][T16560] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.667957][T16560] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 395.687579][T16560] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.848104][T16560] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.865602][T16560] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 395.896028][T16560] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.950862][ T5840] Bluetooth: hci6: command tx timeout [ 395.975992][T16716] veth7: entered promiscuous mode [ 396.027137][T16721] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 396.039015][T16721] bridge_slave_1: entered promiscuous mode [ 396.045688][T16721] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 396.170367][T16641] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.188658][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.196512][T16641] bridge_slave_0: entered allmulticast mode [ 396.235557][T16641] bridge_slave_0: entered promiscuous mode [ 396.258488][T16641] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.297556][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.313132][T16641] bridge_slave_1: entered allmulticast mode [ 396.326206][T16641] bridge_slave_1: entered promiscuous mode [ 396.479428][T16641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.510537][T16641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.567101][T16560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.632195][T16560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.647233][T16560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.662542][T16641] team0: Port device team_slave_0 added [ 396.679431][T16560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.719257][T16641] team0: Port device team_slave_1 added [ 396.827897][ T5840] Bluetooth: hci2: command tx timeout [ 396.967696][T16751] __nla_validate_parse: 5 callbacks suppressed [ 396.967716][T16751] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3031'. [ 396.997498][T16751] netlink: 'syz.2.3031': attribute type 9 has an invalid length. [ 397.045196][T16641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.052282][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.080255][T16641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.099429][ T6830] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.116745][T16763] netlink: 'syz.1.3032': attribute type 10 has an invalid length. [ 397.125025][ T6830] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.151740][T16641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.165560][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.193431][T16641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.209001][T16763] team0: Device ipvlan1 failed to register rx_handler [ 397.228827][ T6830] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.238079][ T6830] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.320989][T16641] hsr_slave_0: entered promiscuous mode [ 397.330211][T16641] hsr_slave_1: entered promiscuous mode [ 397.337137][T16641] debugfs: 'hsr0' already exists in 'hsr' [ 397.342887][T16641] Cannot create hsr debugfs directory [ 397.349389][T16763] syzkaller0: entered promiscuous mode [ 397.355877][T16763] syzkaller0: entered allmulticast mode [ 397.362629][T16766] netlink: 'syz.1.3032': attribute type 10 has an invalid length. [ 397.395909][T16766] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 397.411665][T16763] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3032'. [ 397.555127][ T9552] wlan1: Trigger new scan to find an IBSS to join [ 397.622269][T16560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.671382][T16560] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.701492][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.708747][ T6829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.726139][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.733284][T10145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.953268][T16560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.003676][T16560] veth0_vlan: entered promiscuous mode [ 398.018707][T16560] veth1_vlan: entered promiscuous mode [ 398.024920][ T5840] Bluetooth: hci6: command tx timeout [ 398.057494][T16560] veth0_macvtap: entered promiscuous mode [ 398.069230][T16560] veth1_macvtap: entered promiscuous mode [ 398.091589][T16560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.107818][T16560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.126408][ T6829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.135528][ T6829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.151617][ T6829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.160947][ T6829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.904845][ T5840] Bluetooth: hci2: command tx timeout [ 399.902794][T16751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.926448][T16641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.975826][T16641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.051818][T16641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.101490][T16641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.122775][T16779] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 400.126565][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 400.165580][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 400.191727][T10145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.235235][T10145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.335218][ T9552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.349340][ T9552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.431828][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'. [ 400.466492][T16641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.508172][T16800] lo: entered allmulticast mode [ 400.519195][T16800] tunl0: entered allmulticast mode [ 400.534662][T16800] gre0: entered allmulticast mode [ 400.549755][T16800] gretap0: entered allmulticast mode [ 400.566491][T16800] erspan0: entered allmulticast mode [ 400.572259][T16800] ip_vti0: entered allmulticast mode [ 400.578105][T16800] ip6_vti0: entered allmulticast mode [ 400.593063][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3040'. [ 400.601966][ T6829] wlan1: Trigger new scan to find an IBSS to join [ 400.614369][T16800] sit0: entered allmulticast mode [ 400.626088][T16800] ip6tnl0: entered allmulticast mode [ 400.631600][T16800] ip6gre0: entered allmulticast mode [ 400.640209][T16800] syz_tun: entered allmulticast mode [ 400.646461][T16800] bridge0: entered allmulticast mode [ 400.651946][T16800] vcan0: entered allmulticast mode [ 400.657919][T16800] bond0: left promiscuous mode [ 400.662738][T16800] bridge_slave_1: left promiscuous mode [ 400.673662][T16800] bond0: entered allmulticast mode [ 400.679127][T16800] bridge_slave_1: entered allmulticast mode [ 400.687531][T16800] team0: entered allmulticast mode [ 400.692764][T16800] batadv1: entered allmulticast mode [ 400.699513][T16800] dummy0: entered allmulticast mode [ 400.705636][T16800] nlmon0: entered allmulticast mode [ 400.711091][T16800] caif0: entered allmulticast mode [ 400.716856][T16800] batadv0: entered allmulticast mode [ 400.722448][T16800] vxcan0: entered allmulticast mode [ 400.736948][T16800] vxcan1: entered allmulticast mode [ 400.742390][T16800] veth0: entered allmulticast mode [ 400.749560][T16800] veth1: entered allmulticast mode [ 400.755401][T16800] wg0: entered allmulticast mode [ 400.760474][T16800] wg1: entered allmulticast mode [ 400.766096][T16800] wg2: entered allmulticast mode [ 400.771276][T16800] veth0_to_bridge: entered allmulticast mode [ 400.778193][T16800] bridge_slave_0: entered allmulticast mode [ 400.785441][T16800] veth1_to_bridge: entered allmulticast mode [ 400.792810][T16800] veth0_to_bond: entered allmulticast mode [ 400.799800][T16800] bond_slave_0: entered allmulticast mode [ 400.806155][T16800] veth1_to_bond: entered allmulticast mode [ 400.812216][T16800] bond_slave_1: entered allmulticast mode [ 400.818578][T16800] veth0_to_team: entered allmulticast mode [ 400.825479][T16800] team_slave_0: entered allmulticast mode [ 400.831404][T16800] veth1_to_team: entered allmulticast mode [ 400.838373][T16800] team_slave_1: entered allmulticast mode [ 400.845469][T16800] veth0_to_batadv: entered allmulticast mode [ 400.851851][T16800] batadv_slave_0: entered allmulticast mode [ 400.859124][T16800] veth1_to_batadv: entered allmulticast mode [ 400.865624][T16800] batadv_slave_1: entered allmulticast mode [ 400.871760][T16800] xfrm0: entered allmulticast mode [ 400.877686][T16800] veth0_to_hsr: entered allmulticast mode [ 400.883587][T16800] hsr_slave_0: entered allmulticast mode [ 400.889968][T16800] veth1_to_hsr: entered allmulticast mode [ 400.895900][T16800] hsr_slave_1: entered allmulticast mode [ 400.902377][T16800] hsr0: entered allmulticast mode [ 400.908267][T16800] veth1_virt_wifi: entered allmulticast mode [ 400.914815][T16800] veth0_virt_wifi: entered allmulticast mode [ 400.921019][T16800] virt_wifi0: entered allmulticast mode [ 400.927262][T16800] veth1_vlan: entered allmulticast mode [ 400.932996][T16800] veth0_vlan: entered allmulticast mode [ 400.939220][T16800] vlan1: entered allmulticast mode [ 400.945183][T16800] macvlan0: entered allmulticast mode [ 400.950753][T16800] macvlan1: entered allmulticast mode [ 400.956930][T16800] ipvlan0: entered allmulticast mode [ 400.962370][T16800] ipvlan1: entered allmulticast mode [ 400.969156][T16800] veth1_macvtap: entered allmulticast mode [ 400.975272][T16800] veth0_macvtap: entered allmulticast mode [ 400.981317][T16800] macvtap0: entered allmulticast mode [ 400.987611][ T5840] Bluetooth: hci2: command tx timeout [ 400.993777][T16800] macsec0: entered allmulticast mode [ 400.999655][T16800] geneve0: entered allmulticast mode [ 401.006094][T16800] geneve1: entered allmulticast mode [ 401.011544][T16800] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 401.019203][T16800] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 401.027339][T16800] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 401.035138][T16800] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 401.043258][T16800] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 401.051019][T16800] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 401.060148][T16800] syztnl1: entered allmulticast mode [ 401.067440][T16800] bond1: entered allmulticast mode [ 401.073031][T16800] bond2: entered allmulticast mode [ 401.086267][T16800] bond3: entered allmulticast mode [ 401.093769][T16800] : entered allmulticast mode [ 401.099589][T16800] bridge1: entered allmulticast mode [ 401.108289][T16800] vxlan0: entered allmulticast mode [ 401.116167][T16800] bond4: entered allmulticast mode [ 401.122074][T16800] bond5: entered allmulticast mode [ 401.128105][T16800] bond6: entered allmulticast mode [ 401.136689][T16800] gretap1: entered allmulticast mode [ 401.142886][T16800] gre1: entered allmulticast mode [ 401.149643][T16800] veth2: entered allmulticast mode [ 401.156301][T16800] veth3: entered allmulticast mode [ 401.162384][T16800] gre2: entered allmulticast mode [ 401.220342][T16800] ip6gre1: entered allmulticast mode [ 401.236154][T16800] bond7: entered allmulticast mode [ 401.241458][T16800] gretap2: entered allmulticast mode [ 401.252734][T16800] team0.0000: entered allmulticast mode [ 401.258990][T16800] bond8: left promiscuous mode [ 401.268204][T16800] vxcan2: entered allmulticast mode [ 401.273643][T16800] vxcan3: left promiscuous mode [ 401.279306][T16800] vxcan3: entered allmulticast mode [ 401.287526][T16800] bond9: entered allmulticast mode [ 401.298093][T16800] bond10: entered allmulticast mode [ 401.308347][T16800] bridge2: entered allmulticast mode [ 401.314314][T16800] ip6tnl1: entered allmulticast mode [ 401.319947][T16800] geneve2: entered allmulticast mode [ 401.326983][T16800] vxcan4: entered allmulticast mode [ 401.332453][T16800] vxcan5: entered allmulticast mode [ 401.340561][T16800] : entered allmulticast mode [ 401.347480][T16800] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode [ 401.356094][T16800] bridge3: entered allmulticast mode [ 401.363045][T16800] gretap3: entered allmulticast mode [ 401.368930][T16800] ip6tnl2: entered allmulticast mode [ 401.375300][T16800] geneve3: entered allmulticast mode [ 401.382201][T16800] veth4: entered allmulticast mode [ 401.389762][T16800] veth5: entered allmulticast mode [ 401.396479][T16800] mac80211_hwsim hwsim24 wlan3: entered allmulticast mode [ 401.403738][T16800] mac80211_hwsim hwsim25 wlan4: entered allmulticast mode [ 401.412354][T16800] bond11: entered allmulticast mode [ 401.420142][T16800] geneve4: entered allmulticast mode [ 401.426458][T16800] ip6gre2: entered allmulticast mode [ 401.433427][T16800] bond12: entered allmulticast mode [ 401.439672][T16800] bond13: entered allmulticast mode [ 401.446518][T16800] vxcan6: entered allmulticast mode [ 401.451895][T16800] vxcan7: entered allmulticast mode [ 401.457535][T16800] : entered allmulticast mode [ 401.463424][T16800] bond14: entered allmulticast mode [ 401.469714][T16800] geneve5: entered allmulticast mode [ 401.476089][T16800] bridge4: entered allmulticast mode [ 401.483936][T16800] gre3: entered allmulticast mode [ 401.490503][T16800] virt_wifi0.0002: entered allmulticast mode [ 401.497302][T16800] bond15: left promiscuous mode [ 401.502901][T16800] bridge5: entered allmulticast mode [ 401.509061][ T12] wlan1: Creating new IBSS network, BSSID b6:17:35:90:ec:0f [ 401.520708][T16800] bridge6: entered allmulticast mode [ 401.529549][T16800] team1: left promiscuous mode [ 401.535532][T16800] bond16: entered allmulticast mode [ 401.541548][T16800] bridge7: entered allmulticast mode [ 401.548712][T16800] sit1: left promiscuous mode [ 401.554921][T16800] bond17: entered allmulticast mode [ 401.567615][ T157] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.605048][ T157] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.636994][ T157] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.678537][ T157] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.718242][ T157] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.730331][ T157] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.756411][ T157] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.778052][ T157] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.809691][ T30] audit: type=1800 audit(1774682285.947:5): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3044" name="memory.events" dev="tmpfs" ino=3196 res=0 errno=0 [ 401.847147][T16641] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.885723][T10145] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.891926][ T30] audit: type=1804 audit(1774682285.967:6): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3044" name="/newroot/625/memory.events" dev="tmpfs" ino=3196 res=1 errno=0 [ 401.893077][T10145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.925868][T16828] netlink: 'syz.5.3047': attribute type 10 has an invalid length. [ 402.013343][T16834] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 402.033936][T16834] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.079229][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.086452][T10145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.136043][T16837] netlink: 'syz.1.3049': attribute type 5 has an invalid length. [ 402.238076][T16845] ksmbd: Unknown IPC event: 3, ignore. [ 402.259617][T16825] syzkaller0: entered promiscuous mode [ 402.289865][T16641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.324866][T16641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.417478][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3054'. [ 402.417563][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3054'. [ 404.293365][T16641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.387039][T16902] netlink: 'syz.0.3066': attribute type 39 has an invalid length. [ 404.517683][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3067'. [ 404.887681][T16932] syzkaller1: entered promiscuous mode [ 404.905558][T16932] syzkaller1: entered allmulticast mode [ 405.009921][T16641] veth0_vlan: entered promiscuous mode [ 405.050319][T16641] veth1_vlan: entered promiscuous mode [ 405.125765][T16641] veth0_macvtap: entered promiscuous mode [ 405.149902][T16641] veth1_macvtap: entered promiscuous mode [ 405.181108][T16641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.205231][T16641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.218325][T16942] netlink: 'syz.5.3077': attribute type 83 has an invalid length. [ 405.236468][ T6829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.297750][T16942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.320199][ T6829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.336315][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3078'. [ 405.365354][ T6829] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.385681][ T6829] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.461878][T16948] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3077'. [ 405.532499][T16945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3078'. [ 405.685507][ T9552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.698829][ T9552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.715379][T16952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3080'. [ 405.756897][T16952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3080'. [ 405.801215][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.823031][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.192259][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 406.557031][T16978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 406.567899][T16978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 406.585651][T16978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 406.619831][T16978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 406.632020][T16978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 407.019935][T16997] netlink: 'syz.5.3092': attribute type 24 has an invalid length. [ 407.313448][T17002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3093'. [ 407.695211][T16978] block nbd3: Receive control failed (result -32) [ 407.772211][T16976] chnl_net:caif_netlink_parms(): no params data found [ 408.163769][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.233400][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.243956][T16976] bridge_slave_0: entered allmulticast mode [ 408.260312][T16976] bridge_slave_0: entered promiscuous mode [ 408.271465][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.284861][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.292360][T16976] bridge_slave_1: entered allmulticast mode [ 408.310248][T16976] bridge_slave_1: entered promiscuous mode [ 408.630283][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.675146][T16978] Bluetooth: hci7: command tx timeout [ 408.729382][T17034] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 409.299981][T10145] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 409.381644][T10145] bond7 (unregistering): (slave gretap2): Releasing active interface [ 410.092743][T10145] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 410.103194][T10145] bond0 (unregistering): Released all slaves [ 410.120897][T10145] bond1 (unregistering): Released all slaves [ 410.142265][T10145] bond2 (unregistering): Released all slaves [ 410.171595][T10145] bond3 (unregistering): Released all slaves [ 410.192134][T10145] bond4 (unregistering): Released all slaves [ 410.223040][T10145] bond5 (unregistering): (slave bond6): Releasing backup interface [ 410.232526][T10145] bond5 (unregistering): Released all slaves [ 410.260580][T10145] bond6 (unregistering): Released all slaves [ 410.282688][T10145] bond7 (unregistering): Released all slaves [ 410.302851][T10145] team0: Port device bond8 removed [ 410.309897][T10145] bond8 (unregistering): Released all slaves [ 410.340871][T10145] bond9 (unregistering): Released all slaves [ 410.360579][T10145] bond10 (unregistering): Released all slaves [ 410.387688][T10145] bond11 (unregistering): Released all slaves [ 410.406781][T10145] bond12 (unregistering): Released all slaves [ 410.439539][T10145] bond13 (unregistering): Released all slaves [ 410.459513][T10145] bond14 (unregistering): Released all slaves [ 410.483539][T10145] bond15 (unregistering): Released all slaves [ 410.503888][T10145] bond16 (unregistering): Released all slaves [ 410.520863][T10145] bond17 (unregistering): Released all slaves [ 410.538932][T10145] bond18 (unregistering): Released all slaves [ 410.562068][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.583318][T17039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.742095][T17034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.762495][T16978] Bluetooth: hci7: command tx timeout [ 410.821912][T17065] veth0_to_team: entered promiscuous mode [ 410.860368][T17065] veth0_to_team: left promiscuous mode [ 410.887777][ T8072] lec:lec_start_xmit: lec0:No lecd attached [ 410.961210][T16976] team0: Port device team_slave_0 added [ 410.999981][T10145] : left promiscuous mode [ 411.114612][T16976] team0: Port device team_slave_1 added [ 411.196125][T10145] : left promiscuous mode [ 411.243389][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.252693][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.280934][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.322079][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.340913][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.384501][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.433562][T10145] tipc: Left network mode [ 411.470576][T17087] syzkaller0: entered promiscuous mode [ 411.478554][T17087] syzkaller0: entered allmulticast mode [ 411.532694][T17087] tipc: Started in network mode [ 411.539116][T17087] tipc: Node identity 9a0b0e748a66, cluster identity 4711 [ 411.551558][T10145] IPVS: stopping backup sync thread 12695 ... [ 411.561586][T17087] tipc: Enabled bearer , priority 0 [ 411.589424][T17084] tipc: Resetting bearer [ 411.624649][T17084] tipc: Disabling bearer [ 411.812290][T16976] hsr_slave_0: entered promiscuous mode [ 411.829169][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3120'. [ 411.837776][T16976] hsr_slave_1: entered promiscuous mode [ 411.859727][T16976] debugfs: 'hsr0' already exists in 'hsr' [ 411.874610][T16976] Cannot create hsr debugfs directory [ 411.887390][T17114] lo: Caught tx_queue_len zero misconfig [ 411.957853][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3120'. [ 411.987512][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3120'. [ 412.395505][T17137] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 412.529705][T17137] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3123'. [ 412.757835][T17151] : entered promiscuous mode [ 412.825903][T16978] Bluetooth: hci7: command tx timeout [ 412.890898][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3126'. [ 412.997508][T17169] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 413.227003][ T1612] block nbd0: Possible stuck request ffff888026ac0000: control (read@0,1024B). Runtime 240 seconds [ 413.238198][ T1612] block nbd0: Possible stuck request ffff888026ac0200: control (read@1024,1024B). Runtime 240 seconds [ 413.249273][ T1612] block nbd0: Possible stuck request ffff888026ac0400: control (read@2048,1024B). Runtime 240 seconds [ 413.260594][ T1612] block nbd0: Possible stuck request ffff888026ac0600: control (read@3072,1024B). Runtime 240 seconds [ 413.349762][T10145] hsr_slave_0: left promiscuous mode [ 413.364577][T10145] hsr_slave_1: left promiscuous mode [ 413.412958][T10145] team0 (unregistering): Port device batadv1 removed [ 413.450085][T17184] netlink: 'syz.0.3132': attribute type 9 has an invalid length. [ 413.458246][T17184] netlink: 'syz.0.3132': attribute type 11 has an invalid length. [ 413.469233][T17184] netlink: 'syz.0.3132': attribute type 12 has an invalid length. [ 413.490070][T17184] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3132'. [ 413.501672][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3132'. [ 413.952893][T17199] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3135'. [ 413.993211][T17174] syzkaller1: entered promiscuous mode [ 414.010730][T17174] syzkaller1: entered allmulticast mode [ 414.029119][T17189] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3134'. [ 414.064566][T17202] netlink: 'syz.1.3136': attribute type 10 has an invalid length. [ 414.092002][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.127773][T17202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 414.300110][T17209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.434571][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3138'. [ 414.520321][T17214] ip6gretap0: entered promiscuous mode [ 414.905573][T16978] Bluetooth: hci7: command tx timeout [ 414.951432][T10179] IPVS: starting estimator thread 0... [ 415.003226][T10145] IPVS: stop unused estimator thread 0... [ 415.046549][T17246] IPVS: using max 34 ests per chain, 81600 per kthread [ 416.584301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 416.592420][ C0] lec:lec_tx_timeout: lec0 [ 416.983980][T16976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.024519][T17278] __nla_validate_parse: 4 callbacks suppressed [ 417.024539][T17278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3151'. [ 417.060303][T17279] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3151'. [ 417.092697][T16976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.135366][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 417.147369][T17281] IPVS: Error connecting to the multicast addr [ 417.190812][T16976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.255257][T16976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.691617][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3159'. [ 417.722166][T17314] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3159'. [ 417.731772][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 418.471328][T17349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3162'. [ 420.208300][T16976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.260386][T16976] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.293073][T10145] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.300441][T10145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.342928][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.350248][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.485556][T17393] syzkaller0: entered promiscuous mode [ 420.496372][T17393] syzkaller0: entered allmulticast mode [ 420.601024][T16976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.626910][T16976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.752738][T17406] bond3 (unregistering): Released all slaves [ 420.881851][T17414] nbd: must specify a device to reconfigure [ 420.914589][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 421.116458][T16976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.336481][T17436] openvswitch: netlink: Missing valid actions attribute. [ 421.343679][T17436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.369351][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3173'. [ 421.378862][T17428] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3173'. [ 421.407208][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 421.435099][T16976] veth0_vlan: entered promiscuous mode [ 421.514409][T17439] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 421.560615][T16976] veth1_vlan: entered promiscuous mode [ 423.128012][T17445] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 423.200816][T16976] veth0_macvtap: entered promiscuous mode [ 423.222006][T16976] veth1_macvtap: entered promiscuous mode [ 423.306062][T16976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.335235][T17467] IPv6: Can't replace route, no match found [ 423.351492][T16976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.433568][T10145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.451438][T10145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.538459][T10145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.587193][T10145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.113405][ T6830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.153740][ T6830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.203579][T17504] __nla_validate_parse: 5 callbacks suppressed [ 424.203600][T17504] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3195'. [ 424.235773][ T6830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.253476][ T6830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.395820][T17512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3197'. [ 424.454959][T17512] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 424.489889][T17518] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3199'. [ 424.795218][T17531] netlink: 'syz.6.3202': attribute type 2 has an invalid length. [ 424.803391][T17531] netlink: 'syz.6.3202': attribute type 2 has an invalid length. [ 424.993454][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 425.013416][T17539] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.112638][T17539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.454478][T17559] veth0: entered promiscuous mode [ 425.512982][T17564] macsec1: entered promiscuous mode [ 425.738753][T17557] veth0: left promiscuous mode [ 425.879296][T17585] netlink: 'syz.2.3216': attribute type 3 has an invalid length. [ 426.204677][T17602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3222'. [ 426.357007][T17616] bond0: entered promiscuous mode [ 426.362295][T17616] bond_slave_0: entered promiscuous mode [ 426.380609][T17616] bond_slave_1: entered promiscuous mode [ 426.405082][T17619] x_tables: duplicate underflow at hook 2 [ 426.428345][T17616] batadv0: entered promiscuous mode [ 426.448829][T17619] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3226'. [ 426.465446][T17616] hsr1: entered promiscuous mode [ 426.470490][T17616] hsr1: entered allmulticast mode [ 426.490865][T17616] bond0: entered allmulticast mode [ 426.500973][T17616] bond_slave_0: entered allmulticast mode [ 426.530401][T17616] bond_slave_1: entered allmulticast mode [ 426.536441][T17616] batadv0: entered allmulticast mode [ 426.542373][T17616] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 426.562371][T17616] bond0: left promiscuous mode [ 426.567574][T17616] bond_slave_0: left promiscuous mode [ 426.573305][T17616] bond_slave_1: left promiscuous mode [ 426.585010][T17616] batadv0: left promiscuous mode [ 426.951834][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'. [ 426.962505][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'. [ 427.005668][T17653] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 427.080362][T17651] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3233'. [ 427.211560][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3237'. [ 427.239777][T17660] erspan0: entered promiscuous mode [ 427.274442][T17660] gretap0: entered promiscuous mode [ 427.382349][T17663] bond3 (unregistering): Released all slaves [ 427.723491][T17695] openvswitch: netlink: EtherType 50a is less than min 600 [ 428.074618][T17707] syzkaller1: entered promiscuous mode [ 428.080165][T17707] syzkaller1: entered allmulticast mode [ 428.128283][T17713] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 428.289494][T17713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.364701][T17724] vlan0: entered promiscuous mode [ 428.369936][T17724] bond1: entered promiscuous mode [ 428.383220][T17724] vlan0: entered allmulticast mode [ 428.388942][T17724] bond1: entered allmulticast mode [ 428.410388][T17726] bond1: (slave bridge2): making interface the new active one [ 428.418416][T17726] bridge2: entered promiscuous mode [ 428.423859][T17726] bridge2: entered allmulticast mode [ 428.430581][T17726] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 428.689268][T17749] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 428.722262][T17751] IPVS: length: 187 != 24 [ 428.908495][T17763] veth9: entered promiscuous mode [ 428.918095][T17763] veth9: entered allmulticast mode [ 429.206449][T17773] delete_channel: no stack [ 429.463861][T17798] __nla_validate_parse: 6 callbacks suppressed [ 429.463885][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3279'. [ 429.898888][T17819] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 430.019869][T17828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.157532][T17834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3287'. [ 430.280597][T17839] syzkaller0: entered promiscuous mode [ 430.286575][T17839] syzkaller0: entered allmulticast mode [ 430.437770][T17844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3290'. [ 430.822465][T17866] netlink: 'syz.6.3295': attribute type 21 has an invalid length. [ 430.831398][T17866] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.855729][T17866] netlink: 'syz.6.3295': attribute type 1 has an invalid length. [ 430.902624][T17863] syzkaller0: entered promiscuous mode [ 430.922518][T17866] openvswitch: netlink: IPv4 tun info is not correct [ 430.934780][T17863] syzkaller0: entered allmulticast mode [ 431.265883][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 431.451134][T17902] lo: entered promiscuous mode [ 431.486145][T17902] tunl0: entered promiscuous mode [ 431.509192][T17902] gre0: entered promiscuous mode [ 431.521086][ T157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.575273][T17902] gretap0: entered promiscuous mode [ 431.610551][T17902] erspan0: entered promiscuous mode [ 431.629868][T17910] x_tables: duplicate underflow at hook 1 [ 431.630650][T17907] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3307'. [ 431.647524][T17902] ip_vti0: entered promiscuous mode [ 431.844311][T17919] netlink: 'syz.6.3314': attribute type 1 has an invalid length. [ 431.857201][T17919] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3314'. [ 431.890264][T17925] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 431.955228][T17925] bond1: entered promiscuous mode [ 431.960867][T17925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.974662][T17925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3313'. [ 432.329528][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3321'. [ 432.386867][T17953] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 432.565066][T17955] netlink: 'syz.5.3322': attribute type 4 has an invalid length. [ 432.747731][T17963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3325'. [ 432.771141][T17963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3325'. [ 433.105323][T17983] sctp: [Deprecated]: syz.1.3333 (pid 17983) Use of int in maxseg socket option. [ 433.105323][T17983] Use struct sctp_assoc_value instead [ 433.156773][T17985] netlink: 'syz.2.3334': attribute type 19 has an invalid length. [ 433.188286][T17985] netlink: 'syz.2.3334': attribute type 19 has an invalid length. [ 433.189595][T10145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.236641][T10145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.255619][T10145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.267563][T10145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.501900][T17996] : entered promiscuous mode [ 433.508667][T18001] Bluetooth: MGMT ver 1.23 [ 433.535063][T18002] netlink: 'syz.1.3337': attribute type 3 has an invalid length. [ 433.565239][T18002] netlink: 'syz.1.3337': attribute type 1 has an invalid length. [ 433.646521][T18009] netlink: 'syz.6.3340': attribute type 21 has an invalid length. [ 433.675841][T18009] netlink: 'syz.6.3340': attribute type 22 has an invalid length. [ 433.683979][T18009] netlink: 'syz.6.3340': attribute type 23 has an invalid length. [ 433.692522][T18009] netlink: 'syz.6.3340': attribute type 25 has an invalid length. [ 433.701390][T18009] netlink: 'syz.6.3340': attribute type 26 has an invalid length. [ 433.957272][T18021] netlink: 'syz.6.3345': attribute type 16 has an invalid length. [ 434.050117][T18021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.062283][T18070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.088427][T18075] __nla_validate_parse: 10 callbacks suppressed [ 435.088466][T18075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3361'. [ 435.333706][T18093] tipc: Enabled bearer , priority 0 [ 435.369443][T18093] tipc: Resetting bearer [ 435.475540][T18092] tipc: Disabling bearer [ 435.496620][T18114] x_tables: duplicate underflow at hook 1 [ 435.657736][T18116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.669310][T18121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 435.672551][T18120] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3371'. [ 436.663930][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3385'. [ 437.441609][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3395'. [ 437.478869][T18208] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3395'. [ 437.528308][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3395'. [ 438.296874][T18255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3407'. [ 439.341191][T18231] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 439.581877][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 439.638113][T18270] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3412'. [ 439.699533][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3414'. [ 439.710129][T18270] vlan2: entered allmulticast mode [ 439.726822][T18270] erspan0: entered allmulticast mode [ 439.787690][T18273] : entered promiscuous mode [ 439.862306][T18287] xt_hashlimit: size too large, truncated to 1048576 [ 440.352067][T18306] wireguard0: entered promiscuous mode [ 440.360205][T18306] wireguard0: entered allmulticast mode [ 440.758194][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.785061][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 441.065340][T18359] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3437'. [ 441.301211][T18361] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3438'. [ 441.314605][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3438'. [ 441.527694][T18385] ip6tnl0: Caught tx_queue_len zero misconfig [ 441.556247][T18385] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3444'. [ 441.594603][T18380] lo speed is unknown, defaulting to 1000 [ 441.710113][T18380] lo speed is unknown, defaulting to 1000 [ 441.736790][T18380] lo speed is unknown, defaulting to 1000 [ 441.776057][T18380] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 441.829812][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 441.860547][T18380] lo speed is unknown, defaulting to 1000 [ 441.870850][T18380] lo speed is unknown, defaulting to 1000 [ 441.879631][T18380] lo speed is unknown, defaulting to 1000 [ 441.887810][T18380] lo speed is unknown, defaulting to 1000 [ 441.896100][T18380] lo speed is unknown, defaulting to 1000 [ 441.903792][T18380] lo speed is unknown, defaulting to 1000 [ 441.912221][T18380] lo speed is unknown, defaulting to 1000 [ 441.926167][T18380] lo speed is unknown, defaulting to 1000 [ 441.933880][T18380] lo speed is unknown, defaulting to 1000 [ 442.107273][T18398] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3449'. [ 442.224632][T18403] validate_nla: 3 callbacks suppressed [ 442.224652][T18403] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 442.239100][T18403] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3451'. [ 442.352074][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 442.447983][T18411] bond4: entered promiscuous mode [ 442.485807][T18411] bond4: entered allmulticast mode [ 442.491357][T18411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.997349][T18453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3464'. [ 443.007616][T18453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3464'. [ 443.305609][ T1612] block nbd0: Possible stuck request ffff888026ac0000: control (read@0,1024B). Runtime 270 seconds [ 443.316530][ T1612] block nbd0: Possible stuck request ffff888026ac0200: control (read@1024,1024B). Runtime 270 seconds [ 443.328269][ T1612] block nbd0: Possible stuck request ffff888026ac0400: control (read@2048,1024B). Runtime 270 seconds [ 443.339926][ T1612] block nbd0: Possible stuck request ffff888026ac0600: control (read@3072,1024B). Runtime 270 seconds [ 443.411422][T18471] xt_cgroup: path and classid specified [ 443.424535][T18471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.519992][T18477] netlink: 'syz.0.3472': attribute type 2 has an invalid length. [ 443.836465][T18485] tipc: Enabled bearer , priority 0 [ 443.859072][T18494] netlink: 'syz.0.3478': attribute type 12 has an invalid length. [ 444.530283][T18481] tipc: Disabling bearer [ 444.869060][T18542] netlink: 'syz.6.3494': attribute type 1 has an invalid length. [ 444.910638][T18542] netlink: 'syz.6.3494': attribute type 3 has an invalid length. [ 445.118284][T18551] netlink: 'syz.2.3498': attribute type 25 has an invalid length. [ 445.282170][T18558] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 445.313910][T18560] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 445.396469][T18562] netlink: 'syz.6.3501': attribute type 12 has an invalid length. [ 445.404803][T18562] netlink: 'syz.6.3501': attribute type 29 has an invalid length. [ 445.794435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.802533][ C0] lec:lec_tx_timeout: lec0 [ 446.585748][T18638] __nla_validate_parse: 15 callbacks suppressed [ 446.585770][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 446.671738][T18652] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 446.688858][T18652] bond3 (unregistering): Released all slaves [ 446.770987][T18638] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 446.783134][T18638] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3527'. [ 447.049507][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3534'. [ 447.118583][T18665] bond1: entered promiscuous mode [ 447.129401][T18665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.180844][T18677] netlink: 'syz.1.3538': attribute type 5 has an invalid length. [ 447.204349][T18679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3537'. [ 447.462931][T18690] lo: entered allmulticast mode [ 447.465267][T18691] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 447.469843][T18690] lo: left allmulticast mode [ 447.514637][T18691] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3542'. [ 448.041866][T18710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3544'. [ 448.186687][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 448.267412][T18717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.002368][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3549'. [ 449.083314][T18722] xt_l2tp: v2 sid > 0xffff: 1114112 [ 449.248002][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3546'. [ 449.257751][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3546'. [ 449.850704][T18750] netlink: 'syz.2.3558': attribute type 1 has an invalid length. [ 450.048281][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.056107][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.111758][T18756] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 450.158477][T18769] netlink: 'syz.5.3561': attribute type 1 has an invalid length. [ 450.167296][T18751] lo speed is unknown, defaulting to 1000 [ 450.760363][T18796] bond5: entered promiscuous mode [ 450.766793][T18796] bond5: entered allmulticast mode [ 450.796781][T18796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.119554][T18810] netlink: 'syz.2.3574': attribute type 29 has an invalid length. [ 451.161275][T18813] netlink: 'syz.2.3574': attribute type 29 has an invalid length. [ 451.402523][T18825] 0·: renamed from hsr_slave_1 (while UP) [ 451.424398][T18825] 0·: entered allmulticast mode [ 451.429845][T18825] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 451.552451][T18825] delete_channel: no stack [ 451.695237][T18840] __nla_validate_parse: 8 callbacks suppressed [ 451.695258][T18840] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3582'. [ 451.807022][T18842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3584'. [ 452.365281][T18859] bond2 (unregistering): Released all slaves [ 452.473713][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3591'. [ 452.869506][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.913289][ T157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.014998][T18897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3600'. [ 453.058088][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3599'. [ 453.074997][T18898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3599'. [ 453.108813][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'. [ 453.245624][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 453.285650][T18903] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.686152][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3606'. [ 453.736225][T18920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.767679][T18920] vxcan3: entered promiscuous mode [ 453.789412][T18919] syzkaller1: entered promiscuous mode [ 453.795173][T18919] syzkaller1: entered allmulticast mode [ 454.127519][T18938] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 454.248077][T18938] bond2: entered promiscuous mode [ 454.255527][T18938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.304283][T18943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.311475][T18943] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 454.321944][T18943] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 454.338160][T18943] bond2: (slave vti0): making interface the new active one [ 454.378935][T18943] vti0: entered promiscuous mode [ 454.387683][T18943] bond2: (slave vti0): Enslaving as an active interface with an up link [ 454.655106][T18963] netlink: 'syz.6.3617': attribute type 13 has an invalid length. [ 454.664027][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3617'. [ 454.689949][ T9552] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.699224][T18963] netlink: 'syz.6.3617': attribute type 13 has an invalid length. [ 454.707808][ T9552] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.728550][ T9552] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.766481][ T9552] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.063196][T18974] nbd: must specify a size in bytes for the device [ 455.079573][T18973] bond2: entered promiscuous mode [ 455.084864][T18973] bond2: entered allmulticast mode [ 455.090689][T18973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.110033][T18974] netlink: 'syz.6.3623': attribute type 1 has an invalid length. [ 455.154412][T18974] netlink: 'syz.6.3623': attribute type 3 has an invalid length. [ 455.194894][T18980] tipc: Started in network mode [ 455.199795][T18980] tipc: Node identity 14000780080008402e5f002d, cluster identity 4711 [ 455.360987][T18986] netlink: 'syz.0.3629': attribute type 11 has an invalid length. [ 455.387092][T18986] netlink: 'syz.0.3629': attribute type 11 has an invalid length. [ 455.518099][T18998] @: renamed from bond_slave_1 (while UP) [ 455.577036][T19000] lo: left promiscuous mode [ 455.588781][T19000] tunl0: left promiscuous mode [ 455.612596][T19000] gre0: left promiscuous mode [ 455.640545][T19000] gretap0: left promiscuous mode [ 455.675394][T19000] erspan0: left promiscuous mode [ 455.680569][T19000] ip_vti0: left promiscuous mode [ 455.739254][T19007] netlink: 'syz.6.3635': attribute type 1 has an invalid length. [ 455.750274][T19007] netlink: 'syz.6.3635': attribute type 1 has an invalid length. [ 455.821901][T19000] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.829640][T19000] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.033267][T19000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.054305][T19000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.317649][T19000] bond2: left promiscuous mode [ 456.329308][T19000] vti0: left promiscuous mode [ 456.375398][ T9552] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.414838][ T9552] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.542201][ T9552] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.584402][ T9552] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.662557][T19027] syzkaller0: entered promiscuous mode [ 456.704454][T19027] syzkaller0: entered allmulticast mode [ 456.773704][T19044] __nla_validate_parse: 5 callbacks suppressed [ 456.773726][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3642'. [ 457.079241][T19049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3643'. [ 457.104173][T19049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3643'. [ 457.403300][T19060] xt_hashlimit: size too large, truncated to 1048576 [ 457.452634][T19064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 457.622444][T19070] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 457.694557][T19070] syzkaller1: linktype set to 823 [ 457.728891][T19076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3650'. [ 457.928465][T19083] bond3: entered promiscuous mode [ 457.960581][T19078] macvlan0: entered promiscuous mode [ 457.994866][T19078] macvlan0: entered allmulticast mode [ 458.007827][T19078] bond3: (slave macvlan0): Opening slave failed [ 458.561624][T19111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.623957][T19116] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3663'. [ 458.682320][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'. [ 458.832933][T19121] netlink: 'syz.6.3665': attribute type 3 has an invalid length. [ 459.033841][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 459.225486][T19140] netlink: 'syz.0.3670': attribute type 24 has an invalid length. [ 459.268219][T19145] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3672'. [ 459.657097][T19161] veth5: entered promiscuous mode [ 459.680737][T19161] veth5: entered allmulticast mode [ 459.997478][T19181] netlink: 'syz.6.3684': attribute type 1 has an invalid length. [ 460.017277][T19181] netlink: 'syz.6.3684': attribute type 3 has an invalid length. [ 460.035930][T19181] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3684'. [ 460.047367][T19181] NCSI netlink: No device for ifindex 813332851 [ 460.377055][T19196] netlink: 'syz.6.3690': attribute type 19 has an invalid length. [ 460.402887][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3690'. [ 460.431953][T19196] netlink: 'syz.6.3690': attribute type 19 has an invalid length. [ 460.724610][T19218] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 460.756250][T19219] netlink: 'syz.0.3697': attribute type 1 has an invalid length. [ 460.846367][T19218] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 460.890116][T19219] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 460.955089][T19231] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.001581][T19231] syzkaller1: linktype set to 823 [ 461.262692][T19248] netlink: 'syz.6.3703': attribute type 1 has an invalid length. [ 461.313590][T19248] netlink: 'syz.6.3703': attribute type 1 has an invalid length. [ 461.384970][T19253] netlink: 'syz.0.3706': attribute type 1 has an invalid length. [ 461.500444][T19253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.712911][T19269] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 462.247458][T19296] __nla_validate_parse: 10 callbacks suppressed [ 462.247554][T19296] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3719'. [ 462.306900][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3721'. [ 462.327875][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3720'. [ 462.760225][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3727'. [ 462.769308][T19316] syzkaller0: entered promiscuous mode [ 462.769331][T19316] syzkaller0: entered allmulticast mode [ 462.989403][T19328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3728'. [ 463.403225][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'. [ 464.994493][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3731'. [ 465.015876][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3731'. [ 465.033947][T19334] netlink: 'syz.6.3731': attribute type 4 has an invalid length. [ 465.172172][T19352] netlink: 'syz.1.3733': attribute type 1 has an invalid length. [ 465.227483][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 465.240961][T19352] bond3: entered promiscuous mode [ 465.250245][T19352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.459504][T19370] netlink: 'syz.2.3736': attribute type 10 has an invalid length. [ 465.469205][T19359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3734'. [ 465.822588][T19389] bond3: entered promiscuous mode [ 465.828397][T19389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.946935][T19399] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 465.972699][T19399] team0: Device macvlan0 is already an upper device of the team interface [ 466.030853][T19395] netlink: 'syz.0.3744': attribute type 5 has an invalid length. [ 466.422540][T19425] xt_CONNSECMARK: invalid mode: 0 [ 466.760805][T19437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.795625][T19447] netlink: 'syz.2.3760': attribute type 5 has an invalid length. [ 467.039083][T19463] tc_dump_action: action bad kind [ 467.217650][T19477] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 467.350659][T19485] __nla_validate_parse: 12 callbacks suppressed [ 467.350682][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3771'. [ 467.432318][T19477] bond3: entered promiscuous mode [ 467.456876][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3771'. [ 467.462032][T19477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.542183][T19481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.567050][T19481] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 467.591528][T19481] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 467.608524][T19481] bond3: (slave vcan1): making interface the new active one [ 467.619015][T19481] vcan1: entered promiscuous mode [ 467.628424][T19481] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 467.676511][T19485] vxcan2: entered allmulticast mode [ 467.734974][T19489] vxcan2: entered allmulticast mode [ 467.862490][T19507] atomic_op ffff88806a721198 conn xmit_atomic 0000000000000000 [ 468.428758][T16978] Bluetooth: hci5: command 0x0406 tx timeout [ 468.445487][T19455] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 468.451547][T19455] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 468.675500][T19541] syzkaller0: entered promiscuous mode [ 468.681076][T19541] syzkaller0: entered allmulticast mode [ 468.720035][T19560] syzkaller0: left allmulticast mode [ 468.909658][T19455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.916214][T19455] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 468.962202][T19455] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 468.977389][T19455] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 469.034250][T19455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.049376][T19455] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 469.142159][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 469.179810][T19582] openvswitch: netlink: IP tunnel dst address not specified [ 469.201472][T19455] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 469.214430][T19455] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 469.227666][T19580] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3787'. [ 469.238803][T19580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3787'. [ 469.320656][T19543] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 469.373150][T19590] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 469.598533][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3792'. [ 469.672301][T19601] netlink: 576 bytes leftover after parsing attributes in process `syz.6.3792'. [ 469.966322][T19620] bond0: entered promiscuous mode [ 469.974625][T19620] bond_slave_0: entered promiscuous mode [ 469.989111][T19620] @: entered promiscuous mode [ 470.004941][T19620] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 470.036701][T19620] batadv0: entered promiscuous mode [ 470.077472][T19620] bond0: left promiscuous mode [ 470.082369][T19620] bond_slave_0: left promiscuous mode [ 470.090739][T19620] @: left promiscuous mode [ 470.103883][T19620] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 470.125465][T19620] batadv0: left promiscuous mode [ 470.334488][T19637] bridge0: port 3(gretap0) entered blocking state [ 470.348975][T19637] bridge0: port 3(gretap0) entered disabled state [ 470.364845][T19637] gretap0: entered allmulticast mode [ 470.372271][T19637] gretap0: entered promiscuous mode [ 470.417713][T19637] bridge0: port 3(gretap0) entered blocking state [ 470.424340][T19637] bridge0: port 3(gretap0) entered forwarding state [ 470.598965][T19652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3806'. [ 470.886096][T19674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3807'. [ 470.913530][T19662] bond4: entered promiscuous mode [ 470.961440][T19662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3807'. [ 471.001170][T19669] macvlan0: entered promiscuous mode [ 471.007212][T19669] macvlan0: entered allmulticast mode [ 471.027330][T19669] bond4: (slave macvlan0): Opening slave failed [ 471.358226][T19696] syzkaller0: entered promiscuous mode [ 471.359058][T19692] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 471.363761][T19696] syzkaller0: entered allmulticast mode [ 471.460940][T19699] tipc: Enabled bearer , priority 0 [ 471.925391][T19735] : entered promiscuous mode [ 472.520025][T19773] x_tables: duplicate underflow at hook 2 [ 472.551867][T19770] Cannot find add_set index 2 as target [ 472.578408][T19770] 8021q: VLANs not supported on ip6_vti0 [ 472.624430][ T797] tipc: Node number set to 1 [ 472.630378][T19776] sctp: [Deprecated]: syz.5.3835 (pid 19776) Use of int in max_burst socket option deprecated. [ 472.630378][T19776] Use struct sctp_assoc_value instead [ 472.707531][T19780] __nla_validate_parse: 3 callbacks suppressed [ 472.707549][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 472.725878][T19777] syzkaller0: entered promiscuous mode [ 472.763018][T19776] IPVS: set_ctl: invalid protocol: 135 172.30.0.6:20002 [ 472.770757][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'. [ 473.073554][T19798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3842'. [ 473.136670][T19804] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3844'. [ 473.155413][T19804] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3844'. [ 473.215502][T19804] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3844'. [ 473.384748][ T1612] block nbd0: Possible stuck request ffff888026ac0000: control (read@0,1024B). Runtime 300 seconds [ 473.396014][ T1612] block nbd0: Possible stuck request ffff888026ac0200: control (read@1024,1024B). Runtime 300 seconds [ 473.407320][ T1612] block nbd0: Possible stuck request ffff888026ac0400: control (read@2048,1024B). Runtime 300 seconds [ 473.418746][ T1612] block nbd0: Possible stuck request ffff888026ac0600: control (read@3072,1024B). Runtime 300 seconds [ 474.139601][T19854] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.3859'. [ 474.188241][T19854] netlink: 'syz.6.3859': attribute type 3 has an invalid length. [ 474.202603][T19854] netlink: 'syz.6.3859': attribute type 1 has an invalid length. [ 474.214594][T19854] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3859'. [ 474.394826][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.414862][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.472684][T19869] siw: device registration error -23 [ 474.490292][T19879] syzkaller0: entered promiscuous mode [ 474.501731][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.501731][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.524329][T19879] syzkaller0: entered allmulticast mode [ 474.721693][T19894] netlink: 'syz.2.3872': attribute type 10 has an invalid length. [ 474.790261][T19894] team0: Device vxcan1 is of different type [ 474.988520][T19906] netlink: 'syz.6.3876': attribute type 21 has an invalid length. [ 475.004178][T19906] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3876'. [ 475.013346][T19906] netlink: 'syz.6.3876': attribute type 5 has an invalid length. [ 475.043835][T19906] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3876'. [ 475.086944][T19914] netlink: 'syz.5.3877': attribute type 9 has an invalid length. [ 475.259781][ T157] tipc: Subscription rejected, illegal request [ 475.418612][ T8072] lec:lec_start_xmit: lec0:No lecd attached [ 476.001613][T19980] netlink: 'syz.1.3898': attribute type 1 has an invalid length. [ 476.160250][T19986] netlink: 'syz.1.3902': attribute type 26 has an invalid length. [ 476.209719][T19986] netlink: 'syz.1.3902': attribute type 26 has an invalid length. [ 476.301785][T19994] hsr_slave_0: left promiscuous mode [ 476.309781][T19994] hsr_slave_1: left promiscuous mode [ 476.577986][T20020] xt_hashlimit: size too large, truncated to 1048576 [ 476.618567][T20022] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 476.727851][ T6829] bridge_slave_1: left allmulticast mode [ 476.758798][ T6829] bridge_slave_1: left promiscuous mode [ 476.774310][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.806237][ T6829] bridge_slave_0: left allmulticast mode [ 476.816279][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.184401][ T6829] bond10 (unregistering): (slave ip6erspan0): Releasing active interface [ 477.349207][ T6829] bond1 (unregistering): (slave vti0): Releasing backup interface [ 477.408747][ T6829] bond7 (unregistering): (slave geneve2): Releasing active interface [ 477.577254][ T6829] bond4 (unregistering): (slave bridge2): Releasing active interface [ 477.630566][T20067] netlink: 'syz.6.3923': attribute type 1 has an invalid length. [ 477.849489][ T6829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.859907][ T6829] bond0 (unregistering): (slave @): Releasing backup interface [ 477.872651][ T6829] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 477.882526][ T6829] bond0 (unregistering): Released all slaves [ 477.893968][ T6829] bond1 (unregistering): Released all slaves [ 477.911440][ T6829] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 477.925376][ T6829] bond2 (unregistering): Released all slaves [ 477.941258][ T6829] bond3 (unregistering): Released all slaves [ 477.961615][ T6829] bond4 (unregistering): Released all slaves [ 477.984532][ T6829] bond5 (unregistering): (slave veth7): Releasing active interface [ 477.994785][ T6829] bond5 (unregistering): Released all slaves [ 478.009631][ T6829] bond6 (unregistering): Released all slaves [ 478.031135][ T6829] bond7 (unregistering): Released all slaves [ 478.047723][ T6829] bond8 (unregistering): Released all slaves [ 478.072578][ T6829] bond9 (unregistering): Released all slaves [ 478.087671][ T6829] bond10 (unregistering): Released all slaves [ 478.102847][ T6829] bond11 (unregistering): Released all slaves [ 478.120326][ T6829] bond12 (unregistering): Released all slaves [ 478.148341][ T6829] bond13 (unregistering): (slave lo): Releasing backup interface [ 478.156891][ T6829] bond13 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 478.168625][ T6829] bond13 (unregistering): Released all slaves [ 478.187251][ T6829] bond14 (unregistering): Released all slaves [ 478.218426][T20044] __nla_validate_parse: 8 callbacks suppressed [ 478.218446][T20044] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3917'. [ 478.373267][T20067] bond4: entered promiscuous mode [ 478.401020][T20067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.457121][T20068] bond4: (slave bridge1): making interface the new active one [ 478.465600][T20068] bridge1: entered promiscuous mode [ 478.472365][T20068] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 478.481413][T20044] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3917'. [ 478.654361][T20078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3928'. [ 478.998809][ T6014] udevd[6014]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 479.125597][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3932'. [ 479.419862][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3937'. [ 479.617681][ T6829] hsr_slave_0: left promiscuous mode [ 479.639459][ T6829] 0·: left promiscuous mode [ 479.801217][T20146] validate_nla: 1 callbacks suppressed [ 479.801237][T20146] netlink: 'syz.0.3943': attribute type 1 has an invalid length. [ 479.857563][T20146] netlink: 'syz.0.3943': attribute type 2 has an invalid length. [ 480.539628][ T6829] smc: removing net device lo with user defined pnetid SYZ0 [ 480.584162][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 480.592234][ C0] lec:lec_tx_timeout: lec0 [ 480.617275][T20173] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3945'. [ 480.781440][T20179] netlink: 'syz.6.3947': attribute type 11 has an invalid length. [ 480.868687][T20187] ip6t_srh: unknown srh match flags 5F28 [ 481.002095][T20197] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.011920][T20197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.019281][T20197] IPv6: NLM_F_CREATE should be set when creating new route [ 481.190764][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3954'. [ 481.336008][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.453831][ T6829] IPVS: stop unused estimator thread 0... [ 481.587976][T20235] syzkaller0: entered promiscuous mode [ 481.597713][T20235] syzkaller0: entered allmulticast mode [ 481.650787][T20240] tipc: MTU too low for tipc bearer [ 481.992685][T20257] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3969'. [ 482.093211][T20262] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 482.332861][T20277] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3974'. [ 482.342575][T20277] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3974'. [ 482.597583][T20292] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 482.698983][T20299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 482.951952][T20316] sch_fq: defrate 0 ignored. [ 482.963321][T20316] sch_fq: defrate 0 ignored. [ 483.341194][T20342] __nla_validate_parse: 4 callbacks suppressed [ 483.341213][T20342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3994'. [ 483.601724][T20356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3999'. [ 483.679380][T20360] vcan1: entered promiscuous mode [ 483.696367][T20360] vcan1: entered allmulticast mode [ 483.745938][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 483.792988][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 483.886207][T20368] netlink: 'syz.2.4003': attribute type 10 has an invalid length. [ 483.901889][T20370] openvswitch: netlink: Multiple metadata blocks provided [ 483.910687][T20368] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.918074][T20368] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.948387][T20368] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.955659][T20368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.963208][T20368] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.970435][T20368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.007493][T20368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 484.648216][T20418] netlink: 'syz.2.4015': attribute type 10 has an invalid length. [ 484.682439][T20418] team0: Device vxcan1 is of different type [ 484.791502][T20421] netlink: 'syz.6.4017': attribute type 39 has an invalid length. [ 484.886983][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4020'. [ 484.917324][T20428] vxcan2: entered allmulticast mode [ 485.008336][T20435] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 485.073903][T20437] openvswitch: netlink: Key type 237 is out of range max 32 [ 485.127825][T20441] syzkaller0: entered promiscuous mode [ 485.138014][T20441] 0: reclassify loop, rule prio 0, protocol 800 [ 485.211316][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 485.284689][T20450] lo speed is unknown, defaulting to 1000 [ 485.292329][T20451] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4027'. [ 485.309395][T20444] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4027'. [ 485.345068][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 485.384236][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 485.850852][T20466] veth3: entered allmulticast mode [ 485.934010][T20486] sctp: [Deprecated]: syz.5.4039 (pid 20486) Use of int in max_burst socket option deprecated. [ 485.934010][T20486] Use struct sctp_assoc_value instead [ 486.622773][T20532] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 486.661384][T20532] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 486.873845][T20549] openvswitch: netlink: IP tunnel TTL not specified. [ 486.999516][T20561] C: renamed from lo [ 487.028159][T20561] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 487.095303][T20568] syzkaller0: entered promiscuous mode [ 487.100903][T20568] syzkaller0: entered allmulticast mode [ 487.109406][T20568] tipc: Started in network mode [ 487.114681][T20568] tipc: Node identity 7ecfd17828cc, cluster identity 4711 [ 487.122427][T20568] tipc: Enabled bearer , priority 0 [ 487.144935][T20567] tipc: Resetting bearer [ 487.182190][T20567] tipc: Disabling bearer [ 487.228939][T20572] x_tables: duplicate underflow at hook 2 [ 487.236565][T20574] macvtap1: entered allmulticast mode [ 487.242400][T20574] veth0_macvtap: entered allmulticast mode [ 487.631843][T20599] netlink: 'syz.5.4072': attribute type 10 has an invalid length. [ 487.822535][T20602] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.833083][T20602] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.866496][T20608] netlink: 'syz.6.4073': attribute type 11 has an invalid length. [ 487.952594][T20602] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.963746][T20602] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.046314][T20602] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.080188][T20602] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.199965][T20602] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.224639][T20602] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.417818][T10147] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.427730][T10147] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.483661][ T157] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.506941][ T157] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.525818][T20629] netlink: 'syz.1.4079': attribute type 21 has an invalid length. [ 488.549593][T20629] netlink: 'syz.1.4079': attribute type 22 has an invalid length. [ 488.562079][T10147] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.576368][T20629] netlink: 'syz.1.4079': attribute type 23 has an invalid length. [ 488.596148][T10147] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.607272][T20629] __nla_validate_parse: 10 callbacks suppressed [ 488.607287][T20629] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4079'. [ 488.652831][T10145] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.674463][T10145] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.722583][T20643] netlink: 'syz.2.4083': attribute type 10 has an invalid length. [ 488.879248][T20643] team0: Device vxcan1 is of different type [ 489.066010][T20666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4089'. [ 489.076227][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4089'. [ 489.387826][T20682] netlink: 'syz.2.4094': attribute type 3 has an invalid length. [ 489.400481][T20682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4094'. [ 489.598682][T20701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'. [ 489.727921][T20708] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4101'. [ 489.737160][T20708] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4101'. [ 489.777684][T20708] xt_nat: multiple ranges no longer supported [ 489.877604][T20717] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 489.911950][T20720] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4104'. [ 489.925657][T20714] lo speed is unknown, defaulting to 1000 [ 491.055841][T20794] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.4126'. [ 491.078352][T20795] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.4126'. [ 491.127215][T20797] veth0: entered promiscuous mode [ 491.158590][T20797] veth0: left promiscuous mode [ 491.301261][T20808] syzkaller0: entered promiscuous mode [ 491.324466][T20808] syzkaller0: entered allmulticast mode [ 491.584299][T20832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.591634][T20832] IPv6: NLM_F_CREATE should be set when creating new route [ 491.599080][T20832] IPv6: NLM_F_CREATE should be set when creating new route [ 491.636368][T20834] xt_l2tp: unknown flags: 10 [ 492.071931][T20858] syzkaller0: entered promiscuous mode [ 492.078642][T20858] syzkaller0: entered allmulticast mode [ 492.087971][T20858] tc action pedit offset must be on 32 bit boundaries [ 492.466445][T20886] openvswitch: netlink: Invalid VLAN frame [ 492.914261][T20916] netem: invalid attributes len -24 [ 492.929367][T20916] netem: change failed [ 492.958569][T20918] netlink: 'syz.6.4170': attribute type 4 has an invalid length. [ 492.981673][T20918] netlink: 'syz.6.4170': attribute type 4 has an invalid length. [ 493.176170][T20928] syzkaller0: entered promiscuous mode [ 493.181981][T20928] syzkaller0: entered allmulticast mode [ 493.203037][T20928] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 493.218033][ T797] IPVS: starting estimator thread 0... [ 493.304294][T20937] IPVS: using max 30 ests per chain, 72000 per kthread [ 493.381815][T20947] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 493.455919][T20951] delete_channel: no stack [ 493.717711][ T5193] udevd[5193]: worker [5890] /devices/virtual/block/nbd0 timeout; kill it [ 493.726776][ T5193] udevd[5193]: seq 14140 '/devices/virtual/block/nbd0' killed [ 494.903652][T20975] __nla_validate_parse: 19 callbacks suppressed [ 494.903671][T20975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4188'. [ 495.022448][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4187'. [ 495.103207][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4191'. [ 495.138522][T20986] bridge_slave_0 (unregistering): left allmulticast mode [ 495.159969][T20986] bridge_slave_0 (unregistering): left promiscuous mode [ 495.306362][T20986] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.627465][T20997] netlink: 'syz.2.4195': attribute type 4 has an invalid length. [ 495.664681][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 495.878672][T21007] netlink: 'syz.5.4198': attribute type 32 has an invalid length. [ 495.900038][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4198'. [ 495.956874][T21007] bond6: Setting coupled_control to off (0) [ 496.118212][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 496.128395][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 496.147519][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 496.178819][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4205'. [ 496.284880][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4208'. [ 496.908199][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.919550][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.581217][T21126] netlink: 'syz.5.4232': attribute type 2 has an invalid length. [ 497.605615][T21126] netlink: 'syz.5.4232': attribute type 4 has an invalid length. [ 498.077319][T21157] netlink: 'syz.2.4238': attribute type 12 has an invalid length. [ 498.136123][T21161] lo speed is unknown, defaulting to 1000 [ 498.297333][T21167] syzkaller0: entered promiscuous mode [ 498.320315][T21167] syzkaller0: entered allmulticast mode [ 498.359610][T21176] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.453142][T21179] netlink: 'syz.6.4246': attribute type 12 has an invalid length. [ 498.563620][T21188] netlink: 'syz.0.4250': attribute type 15 has an invalid length. [ 498.602484][T10145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 498.602692][T21188] netlink: 'syz.0.4250': attribute type 15 has an invalid length. [ 498.619965][T10145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 498.669904][T10145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 498.686806][T10145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 498.773143][T21197] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.798246][T21197] bond6: (slave lo): Enslaving as an active interface with an up link [ 498.832938][T21197] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 499.857400][T21302] syzkaller1: entered promiscuous mode [ 499.863018][T21302] syzkaller1: entered allmulticast mode [ 500.017633][T21314] __nla_validate_parse: 26 callbacks suppressed [ 500.017654][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4284'. [ 500.138005][T21324] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.145355][T21324] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.181156][T21324] bond0: (slave bridge0): Releasing backup interface [ 500.215974][T21331] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 500.244983][T21331] bond0: (slave gre0): Error -95 calling set_mac_address [ 500.338555][T21338] ip6t_srh: unknown srh invflags 4000 [ 500.341500][T21339] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4293'. [ 500.443440][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4295'. [ 500.619069][T21360] netlink: 'syz.1.4300': attribute type 1 has an invalid length. [ 500.682561][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 500.704937][T21360] bond6: entered promiscuous mode [ 500.710395][T21360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 500.751710][T21370] netlink: 'syz.5.4302': attribute type 3 has an invalid length. [ 500.811360][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4302'. [ 500.892251][T21376] netlink: 'syz.1.4304': attribute type 1 has an invalid length. [ 500.924323][T21376] netlink: 'syz.1.4304': attribute type 11 has an invalid length. [ 500.932201][T21376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4304'. [ 501.172686][T21396] syzkaller1: entered promiscuous mode [ 501.187500][T21396] syzkaller1: entered allmulticast mode [ 501.200492][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4308'. [ 501.434851][T21400] bond7: entered allmulticast mode [ 501.448067][T21401] bridge6: entered promiscuous mode [ 501.453287][T21401] bridge6: entered allmulticast mode [ 501.514495][T21411] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4311'. [ 501.729458][T21420] syzkaller0: entered promiscuous mode [ 501.750998][T21420] syzkaller0: entered allmulticast mode [ 502.018644][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4319'. [ 502.098587][T21451] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4324'. [ 502.176783][T21451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.198554][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 502.231130][T21451] bond0 (unregistering): (slave @): Releasing backup interface [ 502.263412][T21451] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 502.275297][T21451] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 502.313651][T21451] bond0 (unregistering): Released all slaves [ 502.457436][T21468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.511842][T21471] veth1_macvtap: left promiscuous mode [ 502.614610][T21481] netlink: 'syz.5.4332': attribute type 12 has an invalid length. [ 502.851021][T21504] nftables ruleset with unbound chain [ 502.925980][T21510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.108786][T21522] tipc: Enabling of bearer rejected, failed to enable media [ 503.464461][ T1612] block nbd0: Possible stuck request ffff888026ac0000: control (read@0,1024B). Runtime 330 seconds [ 503.479306][ T1612] block nbd0: Possible stuck request ffff888026ac0200: control (read@1024,1024B). Runtime 330 seconds [ 503.490459][ T1612] block nbd0: Possible stuck request ffff888026ac0400: control (read@2048,1024B). Runtime 330 seconds [ 503.501701][ T1612] block nbd0: Possible stuck request ffff888026ac0600: control (read@3072,1024B). Runtime 330 seconds [ 503.609558][T21558] netlink: 'syz.6.4354': attribute type 4 has an invalid length. [ 503.839210][T21579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.036968][T21592] syzkaller0: entered allmulticast mode [ 504.547308][T21639] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.608066][T21639] bond7: (slave lo): Enslaving as an active interface with an up link [ 504.616781][T21639] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 504.832862][T21650] delete_channel: no stack [ 504.988956][T21666] Cannot find del_set index 4 as target [ 505.012143][T21671] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 505.267580][T21688] nbd: must specify at least one socket [ 505.276642][T21687] syzkaller0: entered promiscuous mode [ 505.305853][ T6829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.307229][T21687] syzkaller0: entered allmulticast mode [ 505.383844][T21687] bond0: Error: Cannot enslave bond to itself. [ 505.543288][T21713] __nla_validate_parse: 9 callbacks suppressed [ 505.543305][T21713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4397'. [ 505.851393][T21741] tipc: Started in network mode [ 505.856484][T21741] tipc: Node identity 7e7236c0d6a5, cluster identity 4711 [ 505.863749][T21741] tipc: Enabled bearer , priority 0 [ 505.892427][T21746] netlink: 'syz.5.4404': attribute type 1 has an invalid length. [ 505.942011][T21740] tipc: Disabling bearer [ 505.975190][T21756] netlink: 'syz.6.4405': attribute type 3 has an invalid length. [ 506.026651][T21754] Cannot find set identified by id 65534 to match [ 506.121707][T21746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 506.166052][T21761] vlan0: entered allmulticast mode [ 506.171477][T21761] veth0_to_bond: entered allmulticast mode [ 506.292505][T21778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4410'. [ 506.436753][ T6829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.502995][T21790] SET target dimension over the limit! [ 507.226805][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 507.300703][T21825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4415'. [ 507.477361][T21830] syzkaller0: entered promiscuous mode [ 507.495703][T21830] syzkaller0: entered allmulticast mode [ 507.534740][T21841] netlink: 'syz.0.4422': attribute type 29 has an invalid length. [ 507.541383][T21830] tc action pedit offset must be on 32 bit boundaries [ 507.542704][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'. [ 507.567429][ T9551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.593185][T21841] netlink: 'syz.0.4422': attribute type 29 has an invalid length. [ 507.611358][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'. [ 507.624126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.632175][ C0] lec:lec_tx_timeout: lec0 [ 507.812384][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4427'. [ 508.038239][T21879] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 508.096594][T21880] 8021q: adding VLAN 0 to HW filter on device bond9 [ 508.141594][T21879] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.186320][T21884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.193419][T21884] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 508.217161][T21884] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 508.244650][T21889] lo speed is unknown, defaulting to 1000 [ 508.266644][T21886] vlan0: entered allmulticast mode [ 508.271801][T21886] bond7: entered allmulticast mode [ 508.304927][T21889] lo speed is unknown, defaulting to 1000 [ 508.322482][T21889] lo speed is unknown, defaulting to 1000 [ 508.660273][T10418] lo speed is unknown, defaulting to 1000 [ 508.668430][T21889] infiniband syz2: set active [ 508.679643][T21889] infiniband syz2: added lo [ 508.714866][ T9551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.745845][T21889] RDS/IB: syz2: added [ 508.750362][T21889] smc: adding ib device syz2 with port count 1 [ 508.765551][T21889] smc: ib device syz2 port 1 has no pnetid [ 508.776538][T10418] lo speed is unknown, defaulting to 1000 [ 508.785278][T21889] lo speed is unknown, defaulting to 1000 [ 508.807706][T21913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.815022][T21913] IPv6: NLM_F_CREATE should be set when creating new route [ 508.979802][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 509.085705][T21889] lo speed is unknown, defaulting to 1000 [ 509.207315][T21933] bond6: option mode: unable to set because the bond device has slaves [ 509.245381][T21933] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 509.283470][T21934] bond6: option mode: unable to set because the bond device has slaves [ 509.292245][T21935] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 509.359130][T21937] netlink: 'syz.6.4451': attribute type 1 has an invalid length. [ 509.413327][T21942] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4452'. [ 509.445690][T21937] bond5: entered promiscuous mode [ 509.451247][T21937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.473828][T21889] lo speed is unknown, defaulting to 1000 [ 509.476951][T21942] syzkaller0: entered promiscuous mode [ 509.501511][T21942] syzkaller0: entered allmulticast mode [ 509.752283][T21889] lo speed is unknown, defaulting to 1000 [ 509.820093][T21962] netlink: 'syz.6.4458': attribute type 39 has an invalid length. [ 509.828489][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.837675][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4458'. [ 510.252334][T21889] lo speed is unknown, defaulting to 1000 [ 510.304630][T22016] netlink: 'syz.1.4467': attribute type 3 has an invalid length. [ 510.323535][T22016] netlink: 'syz.1.4467': attribute type 3 has an invalid length. [ 510.469344][T22027] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 510.654486][T22030] __nla_validate_parse: 6 callbacks suppressed [ 510.654506][T22030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4472'. [ 510.677181][T22041] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 510.815748][T21889] lo speed is unknown, defaulting to 1000 [ 510.925663][T22054] netlink: 'syz.1.4482': attribute type 2 has an invalid length. [ 510.945258][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.966600][T22054] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4482'. [ 511.342832][T21889] lo speed is unknown, defaulting to 1000 [ 511.373032][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4489'. [ 511.550204][T22093] x_tables: duplicate underflow at hook 1 [ 511.567597][T22090] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 511.849107][T22109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4498'. [ 511.871089][T22112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4498'. [ 511.906252][T22116] netlink: 'syz.6.4501': attribute type 1 has an invalid length. [ 511.926636][T21889] lo speed is unknown, defaulting to 1000 [ 511.940895][T22120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4502'. [ 512.045068][T21992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.275300][T22139] IPv6: sit2: Disabled Multicast RS [ 512.280841][T22137] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 512.293657][T22136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.317370][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4507'. [ 512.337173][T22137] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4507'. [ 512.348531][T22137] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 512.360053][T22137] netlink: 'syz.2.4507': attribute type 9 has an invalid length. [ 512.424952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.632048][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4510'. [ 512.866378][T22172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4519'. [ 513.043375][T22180] tc_dump_action: action bad kind [ 513.150228][T22187] xfrm2: entered promiscuous mode [ 513.158762][T21996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.166906][T22187] xfrm2: entered allmulticast mode [ 513.227228][T22191] ip6t_srh: unknown srh match flags 4000 [ 513.258782][T22194] IPv6: sit2: Disabled Multicast RS [ 513.265238][T22194] sit2: entered allmulticast mode [ 513.620543][T22221] sctp: [Deprecated]: syz.6.4534 (pid 22221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.620543][T22221] Use struct sctp_sack_info instead [ 513.890356][T22244] tunl0: entered promiscuous mode [ 513.898631][T22243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 514.296099][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.635622][T22301] IPVS: ip_vs_edit_dest(): server weight less than zero [ 514.650251][T22302] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:20003 [ 514.697773][T22308] nbd: nbd0 already in use [ 514.710671][T22308] block nbd0: NBD_DISCONNECT [ 514.736026][T22308] block nbd0: Disconnected due to user request. [ 514.754844][T22308] block nbd0: shutting down sockets [ 514.779678][ C0] blk_print_req_error: 138 callbacks suppressed [ 514.779698][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.789005][T22311] validate_nla: 1 callbacks suppressed [ 514.789046][T22311] netlink: 'syz.0.4562': attribute type 10 has an invalid length. [ 514.795555][ C0] buffer_io_error: 138 callbacks suppressed [ 514.795569][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 514.826780][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.836352][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 514.845888][T22311] team0: Port device dummy0 added [ 514.851171][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.854167][T22315] unsupported nla_type 33542 [ 514.860728][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 514.873670][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.883216][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 514.891846][ T5890] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.913147][ T5890] Buffer I/O error on dev nbd0, logical block 0, async page read [ 514.934973][ T5890] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.947869][T22312] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 514.955554][ T5890] Buffer I/O error on dev nbd0, logical block 1, async page read [ 514.963391][ T5890] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 514.994730][ T5890] Buffer I/O error on dev nbd0, logical block 2, async page read [ 515.008375][ T5890] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.020131][ T5890] Buffer I/O error on dev nbd0, logical block 3, async page read [ 515.028465][ T5890] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.072211][ T5890] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.080430][ T5890] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.091095][ T5890] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.130933][ T5890] ldm_validate_partition_table(): Disk read failed. [ 515.160346][ T5890] Dev nbd0: unable to read RDB block 0 [ 515.171706][ T5890] nbd0: unable to read partition table [ 515.226904][T22331] block nbd6: not configured, cannot reconfigure [ 515.238383][ T5193] udevd[5193]: worker [5890] terminated by signal 9 (Killed) [ 515.255584][ T5193] udevd[5193]: worker [5890] failed while handling '/devices/virtual/block/nbd0' [ 515.397954][T22336] netlink: 'syz.5.4570': attribute type 7 has an invalid length. [ 515.448580][T21995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.557578][T22348] rdma_rxe: rxe_newlink: failed to add lo [ 516.565142][T21991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.725274][T22357] macvtap1: entered allmulticast mode [ 516.730708][T22357] veth0_macvtap: entered allmulticast mode [ 516.815879][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.823315][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.854999][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.872652][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.882728][T22368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.891724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.901132][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.910653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.048802][T22365] syzkaller0: entered promiscuous mode [ 517.054530][T22365] syzkaller0: entered allmulticast mode [ 517.061975][T22367] __nla_validate_parse: 12 callbacks suppressed [ 517.062018][T22367] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4576'. [ 517.086956][T22379] ip6t_srh: unknown srh invflags 4000 [ 517.102630][T22368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.111167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.139994][T22384] netlink: 'syz.1.4579': attribute type 1 has an invalid length. [ 517.148758][T22384] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4579'. [ 517.159531][T22384] netlink: 'syz.1.4579': attribute type 1 has an invalid length. [ 517.167674][T22384] netlink: 'syz.1.4579': attribute type 8 has an invalid length. [ 517.176231][T22384] netlink: 606 bytes leftover after parsing attributes in process `syz.1.4579'. [ 517.190856][T22384] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4579'. [ 517.260263][T22386] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4574'. [ 517.585710][T22391] sctp: [Deprecated]: syz.5.4580 (pid 22391) Use of int in maxseg socket option. [ 517.585710][T22391] Use struct sctp_assoc_value instead [ 517.736326][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.990511][T22379] netlink: 38 bytes leftover after parsing attributes in process `syz.2.4578'. [ 519.001650][T22385] netlink: 'syz.0.4574': attribute type 12 has an invalid length. [ 519.152491][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4583'. [ 519.346718][T22427] netlink: 'syz.1.4591': attribute type 4 has an invalid length. [ 519.405556][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4593'. [ 519.472057][T22437] net_ratelimit: 1 callbacks suppressed [ 519.472074][T22437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.557082][T22437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.576363][T22447] xt_hashlimit: size too large, truncated to 1048576 [ 519.586936][T22437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.596115][T22444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.615378][T22451] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4598'. [ 519.625120][T22444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.633662][T22449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.643565][T22449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.656702][T22449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.698658][T22449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.714425][T22449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.775910][T22460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4601'. [ 519.818816][T22463] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20003 [ 519.940344][T22466] bond6 (unregistering): Released all slaves [ 520.022580][T22471] ipvlan1: entered allmulticast mode [ 520.041034][T22471] batadv_slave_1: entered allmulticast mode [ 520.081387][T22471] batman_adv: batadv0: Adding interface: ipvlan1 [ 520.096472][T22471] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.143936][T22471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.171605][T22471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.200221][T22471] batman_adv: batadv0: Interface activated: ipvlan1 [ 520.443190][T22498] netlink: 'syz.0.4612': attribute type 4 has an invalid length. [ 520.484475][T22500] netlink: 'syz.2.4613': attribute type 2 has an invalid length. [ 520.492580][T22500] netlink: 'syz.2.4613': attribute type 2 has an invalid length. [ 520.885610][T22519] sock: sock_timestamping_bind_phc: sock not bind to device [ 521.230335][T22539] syzkaller1: entered promiscuous mode [ 521.250047][T22539] syzkaller1: entered allmulticast mode [ 521.520936][T22557] netlink: 'syz.6.4631': attribute type 2 has an invalid length. [ 522.001536][T22583] veth5: entered allmulticast mode [ 522.251923][T22609] syzkaller0: entered promiscuous mode [ 522.257559][T22609] syzkaller0: entered allmulticast mode [ 522.304446][T22607] syzkaller1: entered promiscuous mode [ 522.312565][T22607] syzkaller1: entered allmulticast mode [ 522.573128][T22633] __nla_validate_parse: 8 callbacks suppressed [ 522.573145][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 522.658689][T22638] IPVS: length: 194 != 24 [ 522.816845][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4653'. [ 522.826526][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4653'. [ 522.841021][T22649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4653'. [ 522.866489][T22649] delete_channel: no stack [ 522.962195][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 522.971054][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 522.981627][T22652] bond5 (unregistering): Released all slaves [ 522.998055][T22659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4656'. [ 523.028030][T22660] team0: Device gtp1 is up. Set it down before adding it as a team port [ 523.092388][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.106707][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.114135][T22667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4656'. [ 523.126205][T22652] bond5 (unregistering): Released all slaves [ 523.204003][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.266370][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.275428][T22652] bond5 (unregistering): Released all slaves [ 523.302717][T22673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4659'. [ 523.383258][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.391619][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.405878][T22652] bond5 (unregistering): Released all slaves [ 523.517513][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.526424][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.537554][T22652] bond5 (unregistering): Released all slaves [ 523.638674][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.646803][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.655595][T22652] bond5 (unregistering): Released all slaves [ 523.734925][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'. [ 523.757027][T22652] bond5: option miimon: invalid value (18446744073709551585) [ 523.765785][T22652] bond5: option miimon: allowed values 0 - 2147483647 [ 523.774232][T22652] bond5 (unregistering): Released all slaves [ 524.266419][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4675'. [ 524.322527][T22723] tipc: Resetting bearer [ 524.527440][T22737] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4680'. [ 524.537919][T21992] net_ratelimit: 45 callbacks suppressed [ 524.537935][T21992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.239757][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.694338][T21992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.777954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807926cc00: rx timeout, send abort [ 525.975256][T22757] netlink: 'syz.5.4686': attribute type 5 has an invalid length. [ 526.141403][T22775] syz.6.4692: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 526.156458][T22775] CPU: 1 UID: 0 PID: 22775 Comm: syz.6.4692 Not tainted syzkaller #0 PREEMPT(full) [ 526.156485][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.156501][T22775] Call Trace: [ 526.156509][T22775] [ 526.156517][T22775] dump_stack_lvl+0xe8/0x150 [ 526.156550][T22775] warn_alloc+0x249/0x340 [ 526.156574][T22775] ? stack_trace_save+0xa9/0x100 [ 526.156598][T22775] ? __pfx_warn_alloc+0x10/0x10 [ 526.156627][T22775] ? kasan_save_track+0x4f/0x80 [ 526.156647][T22775] ? kasan_save_track+0x3e/0x80 [ 526.156666][T22775] ? __kasan_kmalloc+0x93/0xb0 [ 526.156686][T22775] ? __kmalloc_cache_noprof+0x31c/0x660 [ 526.156707][T22775] ? xskq_create+0x56/0x170 [ 526.156726][T22775] ? xsk_setsockopt+0x54c/0x990 [ 526.156753][T22775] ? do_sock_setsockopt+0x17c/0x1b0 [ 526.156773][T22775] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 526.156793][T22775] ? do_syscall_64+0x14d/0xf80 [ 526.156819][T22775] __vmalloc_node_range_noprof+0x132/0x1730 [ 526.156871][T22775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 526.156899][T22775] ? __kasan_kmalloc+0x93/0xb0 [ 526.156926][T22775] vmalloc_user_noprof+0xad/0xe0 [ 526.156947][T22775] ? xskq_create+0xbf/0x170 [ 526.156969][T22775] xskq_create+0xbf/0x170 [ 526.156993][T22775] xsk_init_queue+0x8a/0xe0 [ 526.157015][T22775] xsk_setsockopt+0x54c/0x990 [ 526.157049][T22775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 526.157079][T22775] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.157107][T22775] ? aa_sock_opt_perm+0xff/0x1a0 [ 526.157137][T22775] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 526.157158][T22775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 526.157191][T22775] do_sock_setsockopt+0x17c/0x1b0 [ 526.157218][T22775] __x64_sys_setsockopt+0x13d/0x1b0 [ 526.157245][T22775] do_syscall_64+0x14d/0xf80 [ 526.157267][T22775] ? trace_irq_disable+0x3b/0x150 [ 526.157284][T22775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.157304][T22775] ? clear_bhb_loop+0x40/0x90 [ 526.157328][T22775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.157354][T22775] RIP: 0033:0x7fb622b9c799 [ 526.157373][T22775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.157390][T22775] RSP: 002b:00007fb623afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 526.157418][T22775] RAX: ffffffffffffffda RBX: 00007fb622e15fa0 RCX: 00007fb622b9c799 [ 526.157433][T22775] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 526.157445][T22775] RBP: 00007fb622c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 526.157457][T22775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.157470][T22775] R13: 00007fb622e16038 R14: 00007fb622e15fa0 R15: 00007ffda9cea178 [ 526.157500][T22775] [ 526.157512][T22775] Mem-Info: [ 526.275204][T22778] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 526.284165][T22775] active_anon:7015 inactive_anon:0 isolated_anon:0 [ 526.284165][T22775] active_file:3545 inactive_file:40101 isolated_file:0 [ 526.284165][T22775] unevictable:771 dirty:87 writeback:0 [ 526.284165][T22775] slab_reclaimable:13397 slab_unreclaimable:126571 [ 526.284165][T22775] mapped:40323 shmem:1741 pagetables:3743 [ 526.284165][T22775] sec_pagetables:0 bounce:0 [ 526.284165][T22775] kernel_misc_reclaimable:0 [ 526.284165][T22775] free:1263934 free_pcp:9725 free_cma:0 [ 526.288274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807926cc00: abort rx timeout. Force session deactivation [ 526.554260][T22775] Node 0 active_anon:31960kB inactive_anon:0kB active_file:14180kB inactive_file:160200kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:169392kB dirty:348kB writeback:0kB shmem:9428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15488kB pagetables:14936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.648335][T22775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.692539][T22773] netlink: 'syz.0.4691': attribute type 3 has an invalid length. [ 526.704369][T22773] netlink: 'syz.0.4691': attribute type 12 has an invalid length. [ 526.712911][T22787] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 526.738820][T22775] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 526.814379][T21992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.841637][T22775] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 526.857636][T22775] Node 0 DMA32 free:1096748kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35980kB inactive_anon:0kB active_file:14180kB inactive_file:160200kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:29320kB local_pcp:18388kB free_cma:0kB [ 526.921746][T22775] lowmem_reserve[]: 0 0 0 0 0 [ 526.930271][T22775] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 526.960523][T22775] lowmem_reserve[]: 0 0 0 0 0 [ 526.965599][T22775] Node 1 Normal free:3943636kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:0kB free_cma:0kB [ 527.039790][T22775] lowmem_reserve[]: 0 0 0 0 0 [ 527.057926][T22775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 527.101997][T22775] Node 0 DMA32: 6723*4kB (UM) 4852*8kB (UME) 2196*16kB (UME) 598*32kB (UME) 434*64kB (UME) 320*128kB (UM) 317*256kB (UM) 287*512kB (UME) 142*1024kB (UME) 7*2048kB (UM) 127*4096kB (UM) = 1096748kB [ 527.141943][T22775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 527.179065][T22775] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943688kB [ 527.198762][T22775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.208989][T22775] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.218756][T22775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.228982][T22775] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.274187][T22000] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 527.284781][T22775] 46972 total pagecache pages [ 527.289494][T22775] 0 pages in swap cache [ 527.293656][T22775] Free swap = 124996kB [ 527.308054][T22775] Total swap = 124996kB [ 527.312434][T22775] 2097051 pages RAM [ 527.316722][T22775] 0 pages HighMem/MovableOnly [ 527.321516][T22775] 427052 pages reserved [ 527.326143][T22775] 0 pages cma reserved [ 527.446215][T22815] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 527.580129][T22815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 527.635105][T22830] __nla_validate_parse: 2 callbacks suppressed [ 527.635124][T22830] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4702'. [ 527.658818][T22818] syzkaller0: entered promiscuous mode [ 527.684577][T22834] netlink: 'syz.1.4701': attribute type 4 has an invalid length. [ 527.697362][T22834] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4701'. [ 527.709498][T22827] bond8: (slave geneve2): making interface the new active one [ 527.720310][T22827] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 527.757335][T22830] netlink: 'syz.5.4702': attribute type 1 has an invalid length. [ 527.765892][T22830] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4702'. [ 527.779999][T22830] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4702'. [ 527.814273][T22830] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4702'. [ 527.934425][T21989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.070871][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.232175][T22853] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4706'. [ 529.448938][T22864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.464667][T22864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.645890][T22864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.669427][T22864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.709993][T22869] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4713'. [ 529.825854][T22899] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4719'. [ 529.836502][T22899] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4719'. [ 529.847699][T22864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.871260][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4718'. [ 529.872362][T22864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.981855][T22864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.992994][T22864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.030159][T22911] netlink: 'syz.5.4723': attribute type 1 has an invalid length. [ 530.115446][T22911] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.125888][T22911] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 530.176739][T10145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.210175][T22911] bond11: (slave vxcan3): making interface the new active one [ 530.233169][T22911] bond11: (slave vxcan3): Enslaving as an active interface with an up link [ 530.257561][T22924] gre0: entered promiscuous mode [ 530.262539][T22924] gre0: entered allmulticast mode [ 530.314967][T22000] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.323243][T22000] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.360417][T22000] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.371808][T22000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.403374][T22000] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.415377][T22000] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.433024][T22000] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.451687][T22000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.561201][T22946] openvswitch: netlink: IP tunnel dst address not specified [ 530.984791][ T31] INFO: task syz.4.2860:16190 blocked for more than 143 seconds. [ 530.992833][ T31] Not tainted syzkaller #0 [ 531.001670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.007233][T22973] xt_nat: multiple ranges no longer supported [ 531.021341][ T31] task:syz.4.2860 state:D stack:27040 pid:16190 tgid:16189 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 531.052516][ T31] Call Trace: [ 531.064644][ T31] [ 531.069627][ T31] __schedule+0x15dd/0x52d0 [ 531.089632][ T31] ? __pfx___schedule+0x10/0x10 [ 531.107860][ T31] ? schedule+0x90/0x360 [ 531.116670][ T31] schedule+0x164/0x360 [ 531.121492][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.127278][ T31] __mutex_lock+0x7fe/0x1300 [ 531.132360][ T31] ? __mutex_lock+0x5ac/0x1300 [ 531.137487][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 531.143337][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.151078][ T31] ? __nlmsg_put+0xef/0x1b0 [ 531.155734][ T31] ? genlmsg_put+0x137/0x2e0 [ 531.160464][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 531.166349][ T31] ? kmem_cache_free+0x187/0x630 [ 531.171428][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 531.179077][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 531.184628][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 531.190408][ T31] ? __asan_memcpy+0x40/0x70 [ 531.196134][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.202445][ T31] genl_rcv_msg+0x61c/0x7a0 [ 531.207254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.212517][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 531.218766][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 531.223923][ T31] netlink_rcv_skb+0x232/0x4b0 [ 531.234495][T22937] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 531.234648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.247673][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.262018][T22977] syzkaller0: entered promiscuous mode [ 531.267645][T22977] syzkaller0: entered allmulticast mode [ 531.290628][ T31] ? down_read+0x272/0x2e0 [ 531.295087][T10145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.303389][ T31] ? genl_rcv+0xd/0x40 [ 531.308216][ T31] genl_rcv+0x28/0x40 [ 531.312322][ T31] netlink_unicast+0x80f/0x9b0 [ 531.317374][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 531.322805][ T31] ? netlink_sendmsg+0x650/0xb40 [ 531.328106][ T31] ? skb_put+0x11b/0x210 [ 531.332483][ T31] netlink_sendmsg+0x813/0xb40 [ 531.337460][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.342978][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.348236][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.353753][ T31] ____sys_sendmsg+0x972/0x9f0 [ 531.358745][ T31] ? futex_unqueue+0x211/0x240 [ 531.363638][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.369307][ T31] ? import_iovec+0x73/0xa0 [ 531.373939][ T31] ___sys_sendmsg+0x2a5/0x360 [ 531.378834][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.384606][ T31] ? futex_wait+0x29a/0x380 [ 531.389318][ T31] ? __fget_files+0x2a/0x420 [ 531.394134][ T31] ? __fget_files+0x3a0/0x420 [ 531.399069][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 531.411915][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.418106][ T31] ? rcu_is_watching+0x15/0xb0 [ 531.423017][ T31] do_syscall_64+0x14d/0xf80 [ 531.428170][ T31] ? trace_irq_disable+0x3b/0x150 [ 531.433299][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.440218][ T31] ? clear_bhb_loop+0x40/0x90 [ 531.445315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.451291][ T31] RIP: 0033:0x7f5c67d9c799 [ 531.456173][ T31] RSP: 002b:00007f5c68cec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.465120][ T31] RAX: ffffffffffffffda RBX: 00007f5c68015fa0 RCX: 00007f5c67d9c799 [ 531.473152][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 531.481746][ T31] RBP: 00007f5c67e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 531.490064][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.499074][ T31] R13: 00007f5c68016038 R14: 00007f5c68015fa0 R15: 00007fff4eed6ae8 [ 531.507525][ T31] [ 531.511936][ T31] [ 531.511936][ T31] Showing all locks held in the system: [ 531.520287][ T31] 1 lock held by khungtaskd/31: [ 531.525992][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 531.536425][ T31] 2 locks held by getty/5582: [ 531.551609][ T31] #0: ffff88803264e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.574216][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 531.590555][ T31] 3 locks held by kworker/0:4/5882: [ 531.596920][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 531.610256][ T31] #1: ffffc90003c57c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 531.623321][ T31] #2: ffff888075754240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 531.634219][ T31] 2 locks held by syz.3.1719/12289: [ 531.639506][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.647928][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 531.658552][ T31] 2 locks held by syz.4.2860/16190: [ 531.663830][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.672388][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 531.682728][ T31] 1 lock held by syz.1.4736/22965: [ 531.688032][ T31] [ 531.690428][ T31] ============================================= [ 531.690428][ T31] [ 531.702999][ T31] NMI backtrace for cpu 1 [ 531.703015][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 531.703035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.703047][ T31] Call Trace: [ 531.703054][ T31] [ 531.703062][ T31] dump_stack_lvl+0xe8/0x150 [ 531.703091][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 531.703119][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.703145][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 531.703177][ T31] sys_info+0x135/0x170 [ 531.703200][ T31] watchdog+0xfd9/0x1030 [ 531.703222][ T31] ? watchdog+0x21a/0x1030 [ 531.703246][ T31] kthread+0x388/0x470 [ 531.703265][ T31] ? __pfx_watchdog+0x10/0x10 [ 531.703279][ T31] ? __pfx_kthread+0x10/0x10 [ 531.703299][ T31] ret_from_fork+0x51e/0xb90 [ 531.703332][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 531.703355][ T31] ? __switch_to+0xc7d/0x1450 [ 531.703380][ T31] ? __pfx_kthread+0x10/0x10 [ 531.703399][ T31] ret_from_fork_asm+0x1a/0x30 [ 531.703441][ T31] [ 531.703447][ T31] Sending NMI from CPU 1 to CPUs 0: [ 531.814655][ C0] NMI backtrace for cpu 0 [ 531.814674][ C0] CPU: 0 UID: 0 PID: 22965 Comm: syz.1.4736 Not tainted syzkaller #0 PREEMPT(full) [ 531.814695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.814707][ C0] RIP: 0010:unwind_next_frame+0x1ab9/0x23c0 [ 531.814739][ C0] Code: 48 c7 c2 80 a3 c9 8b e8 c5 3c 2b 00 48 c7 c7 20 e6 75 8e 4c 89 fe e8 36 23 2b 00 e8 11 de 34 00 89 d8 48 81 c4 98 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 4c 8b 7c 24 50 eb 89 [ 531.814756][ C0] RSP: 0018:ffffc90000007818 EFLAGS: 00000092 [ 531.814773][ C0] RAX: 0000000090a63001 RBX: ffffc90000007900 RCX: 0000000000000101 [ 531.814786][ C0] RDX: 0000000000000005 RSI: ffffffff8e16a5d7 RDI: ffff8880361f8000 [ 531.814798][ C0] RBP: dffffc0000000000 R08: ffffc900033c6b28 R09: 0000000000000000 [ 531.814811][ C0] R10: ffffc90000007898 R11: fffff52000000f15 R12: ffffc900033c6b38 [ 531.814824][ C0] R13: ffffc900033c0000 R14: ffffc90000007848 R15: ffffffff81767e95 [ 531.814838][ C0] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 531.814853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.814864][ C0] CR2: 0000200001000000 CR3: 0000000076e68000 CR4: 00000000003526f0 [ 531.814881][ C0] Call Trace: [ 531.814887][ C0] [ 531.814894][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.814917][ C0] arch_stack_walk+0x11b/0x150 [ 531.814948][ C0] ? unwind_next_frame+0x18c6/0x23c0 [ 531.814978][ C0] stack_trace_save+0xa9/0x100 [ 531.814997][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 531.815017][ C0] ? stack_depot_save_flags+0x33/0x810 [ 531.815047][ C0] kasan_save_stack+0x3e/0x60 [ 531.815074][ C0] ? kasan_save_stack+0x3e/0x60 [ 531.815091][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 531.815117][ C0] ? insert_work+0x3d/0x330 [ 531.815138][ C0] ? __queue_work+0xbe1/0x1020 [ 531.815161][ C0] ? call_timer_fn+0x192/0x640 [ 531.815184][ C0] ? __run_timer_base+0x67e/0x8b0 [ 531.815203][ C0] ? run_timer_softirq+0xb7/0x170 [ 531.815223][ C0] ? handle_softirqs+0x22a/0x870 [ 531.815246][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 531.815268][ C0] ? irq_exit_rcu+0x9/0x30 [ 531.815290][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 531.815310][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.815341][ C0] ? deref_stack_reg+0x63/0x230 [ 531.815400][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 531.815424][ C0] insert_work+0x3d/0x330 [ 531.815445][ C0] __queue_work+0xbe1/0x1020 [ 531.815470][ C0] ? __queue_work+0x1a1/0x1020 [ 531.815493][ C0] call_timer_fn+0x192/0x640 [ 531.815514][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 531.815536][ C0] ? call_timer_fn+0xd4/0x640 [ 531.815556][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 531.815587][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 531.815604][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 531.815648][ C0] __run_timer_base+0x67e/0x8b0 [ 531.815668][ C0] ? ktime_get+0x45/0x200 [ 531.815692][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 531.815716][ C0] ? sched_clock_cpu+0x74/0x440 [ 531.815743][ C0] run_timer_softirq+0xb7/0x170 [ 531.815769][ C0] handle_softirqs+0x22a/0x870 [ 531.815794][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 531.815823][ C0] __irq_exit_rcu+0x5f/0x150 [ 531.815845][ C0] irq_exit_rcu+0x9/0x30 [ 531.815867][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 531.815887][ C0] [ 531.815893][ C0] [ 531.815900][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.815919][ C0] RIP: 0010:deref_stack_reg+0x63/0x230 [ 531.815946][ C0] Code: 48 89 df e8 7f 52 b9 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df 48 89 5c 24 10 49 8b 5f 08 4d 8d 77 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 35 00 00 74 16 4c 89 f7 e8 4d 52 b9 00 4c 8b 04 24 48 be [ 531.815962][ C0] RSP: 0018:ffffc900033c6ae0 EFLAGS: 00000a02 [ 531.815976][ C0] RAX: fffffffffffffff0 RBX: ffffc900033c0000 RCX: 0000000000000000 [ 531.815989][ C0] RDX: ffffc900033c6c48 RSI: dffffc0000000000 RDI: ffffc900033c6c08 [ 531.816002][ C0] RBP: dffffc0000000000 R08: ffffc900033c7c80 R09: 0000000000000000 [ 531.816014][ C0] R10: ffffc900033c6c58 R11: fffff52000678d8d R12: 1ffff92000678d82 [ 531.816027][ C0] R13: 1ffff92000678d83 R14: ffffc900033c6c18 R15: ffffc900033c6c08 [ 531.816056][ C0] unwind_next_frame+0x18c6/0x23c0 [ 531.816098][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 531.816124][ C0] ? do_group_exit+0x21b/0x2d0 [ 531.816144][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.816164][ C0] arch_stack_walk+0x11b/0x150 [ 531.816194][ C0] ? get_signal+0x1284/0x1330 [ 531.816219][ C0] stack_trace_save+0xa9/0x100 [ 531.816237][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 531.816262][ C0] save_stack+0x122/0x230 [ 531.816283][ C0] ? __pfx_save_stack+0x10/0x10 [ 531.816301][ C0] ? free_unref_folios+0xed5/0x16d0 [ 531.816321][ C0] ? folios_put_refs+0x789/0x8d0 [ 531.816344][ C0] ? free_pages_and_swap_cache+0x2e7/0x5b0 [ 531.816370][ C0] ? tlb_flush_mmu+0x6d3/0xa30 [ 531.816390][ C0] ? unmap_page_range+0x3c1d/0x48f0 [ 531.816412][ C0] ? unmap_vmas+0x48f/0x6a0 [ 531.816431][ C0] ? exit_mmap+0x280/0xa10 [ 531.816447][ C0] ? __mmput+0x118/0x430 [ 531.816468][ C0] ? exit_mm+0x168/0x220 [ 531.816484][ C0] ? do_exit+0x6a2/0x23c0 [ 531.816499][ C0] ? do_group_exit+0x21b/0x2d0 [ 531.816521][ C0] ? page_ext_put+0x97/0xc0 [ 531.816543][ C0] __reset_page_owner+0x71/0x1f0 [ 531.816564][ C0] free_unref_folios+0xed5/0x16d0 [ 531.816594][ C0] folios_put_refs+0x789/0x8d0 [ 531.816624][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 531.816651][ C0] ? free_swap_cache+0x109/0x300 [ 531.816678][ C0] free_pages_and_swap_cache+0x2e7/0x5b0 [ 531.816710][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 531.816752][ C0] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 531.816776][ C0] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 531.816801][ C0] ? lruvec_stat_mod_folio+0x345/0x4b0 [ 531.816844][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 531.816865][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 531.816882][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 531.816901][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 531.816920][ C0] unmap_page_range+0x3c1d/0x48f0 [ 531.816962][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 531.816987][ C0] ? mas_find+0xb0e/0xd30 [ 531.817003][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 531.817023][ C0] unmap_vmas+0x48f/0x6a0 [ 531.817047][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 531.817083][ C0] exit_mmap+0x280/0xa10 [ 531.817099][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 531.817126][ C0] ? __pfx_exit_aio+0x10/0x10 [ 531.817146][ C0] ? uprobe_clear_state+0x27c/0x290 [ 531.817167][ C0] __mmput+0x118/0x430 [ 531.817187][ C0] exit_mm+0x168/0x220 [ 531.817203][ C0] do_exit+0x6a2/0x23c0 [ 531.817221][ C0] ? __pfx_do_exit+0x10/0x10 [ 531.817237][ C0] ? cgroup1_freezing+0x20/0x350 [ 531.817256][ C0] ? cgroup1_freezing+0x20/0x350 [ 531.817281][ C0] do_group_exit+0x21b/0x2d0 [ 531.817296][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.817314][ C0] get_signal+0x1284/0x1330 [ 531.817344][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 531.817364][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 531.817386][ C0] ? __fget_files+0x3a0/0x420 [ 531.817413][ C0] exit_to_user_mode_loop+0x86/0x480 [ 531.817431][ C0] ? rcu_is_watching+0x15/0xb0 [ 531.817454][ C0] do_syscall_64+0x32d/0xf80 [ 531.817472][ C0] ? trace_irq_disable+0x3b/0x150 [ 531.817485][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.817500][ C0] ? clear_bhb_loop+0x40/0x90 [ 531.817518][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.817533][ C0] RIP: 0033:0x7fa39e39c799 [ 531.817545][ C0] Code: Unable to access opcode bytes at 0x7fa39e39c76f. [ 531.817553][ C0] RSP: 002b:00007fa39f29e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 531.817568][ C0] RAX: fffffffffffffe00 RBX: 00007fa39e616188 RCX: 00007fa39e39c799 [ 531.817579][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa39e616188 [ 531.817589][ C0] RBP: 00007fa39e616180 R08: 0000000000000000 R09: 0000000000000000 [ 531.817598][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.817607][ C0] R13: 00007fa39e616218 R14: 00007fffd30a9400 R15: 00007fffd30a94e8 [ 531.817627][ C0] [ 532.406154][T21980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.422639][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 532.422696][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 532.422765][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.422805][ T31] Call Trace: [ 532.422824][ T31] [ 532.422850][ T31] vpanic+0x56c/0xa60 [ 532.422924][ T31] ? __pfx___schedule+0x10/0x10 [ 532.422999][ T31] ? __pfx_vpanic+0x10/0x10 [ 532.423090][ T31] ? __pfx_console_unlock+0x10/0x10 [ 532.423181][ T31] panic+0xc5/0xd0 [ 532.423259][ T31] ? __pfx_panic+0x10/0x10 [ 532.423348][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 532.423411][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 532.423499][ T31] watchdog+0x1023/0x1030 [ 532.423560][ T31] ? watchdog+0x21a/0x1030 [ 532.423627][ T31] kthread+0x388/0x470 [ 532.423683][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.423729][ T31] ? __pfx_kthread+0x10/0x10 [ 532.423780][ T31] ret_from_fork+0x51e/0xb90 [ 532.423874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 532.423960][ T31] ? __switch_to+0xc7d/0x1450 [ 532.424032][ T31] ? __pfx_kthread+0x10/0x10 [ 532.424091][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.424219][ T31] [ 532.425844][ T31] Kernel Offset: disabled