last executing test programs: 5m46.571320673s ago: executing program 3 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a00}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m46.386040636s ago: executing program 3 (id=1590): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}]}, &(0x7f0000000340)=0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xc, 0x80}, 0x8) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000180)) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0x113) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x8, 0x4) 5m46.085164327s ago: executing program 3 (id=1595): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000ec0)={{r0}, "6dcc1e6cb8cc10a0a669cb7594feea5c65c0a9ac0a768844b53b933c19879d744e108eabe02e0252562e56df398c4b48edfecbf40297d42f9bc94047082b51f5f55a6aee84fde134509c32d7b09d29eaecd9618149edb040441fd1eb6760e3fde8369d2e54fab61df740f4de631dbae2de13365a5aee1595892c13d1bb456592f861d9d311d046f728e79e9ecabda60facbec005d1c2562691c000d6dd9e5855f8264cfad7329b30084bd43a479482512a9f474cf7a2170249ae29c95c0c852615e916035e84419bbe19e01dd968b69d3127e48c41a1073a7ad1f53d4ddde4d50fa4e0a2a5801bb94c8d0b73d58759e4d3649560a8852e024653ddca11e8d1edb4634a408a835e23bff9a86c3e0ae6445f6ac4a68aba6e1c4d303fb3f0035a00ff3cd80dad062a05a4c2df1959b0dc18adeeae09a8e91f7a69b90ab55631dda787cc0df2e360eabb1f5bdb28b485eb223e6139f60a05e82e80504cea2bce9b9356aba964330653ba4194aac76a88d17473946e4ff25d1ca5a2e4f658b45ce4a61aad345fe11b7e46f5e52327c4a44358806f7f41f2e4cc3c6f19765728c5bec26d9a75b489fdedc63fcaae26ee52042ac508bbe278a6bb298e05e6022d94403a79d9e0ce0818b114700193eb17ee86c119c25569f0c57bcd86285bdb87c83cdf22f593449fd7ad72eb39d9b7d2819cffbdf38f1f476e319d0b89b442debd9bc2e4b9f562954c92fd3d5fdf2cba1586e74dd3264955deb259b64ec81c52c34ab7aa2cf10137a4cb9b81c20d0ea92c66adf92f19930c4316bed4bfc28e967e251dec12999c2a3ba6820c884be94d702d9c516358b623503ebe4aca5c0698edc858ee5dcdf1c31aa58f974cc5e0e9162b0053ff58b4dabb4a09f6d4d0c44e08fd1f84013f4f7df5af73d3f9c330e500a4d2a5e6a136f7b54a190f362c2c53169a38b3ea5d043ed3191dd8a2f126f552afab9cce1cbfa13a3d31e611b61586d150ed6163370fdd2ec3b36a82e44a1fe8761f4eb0333abd1ead3a4184d24e307d807e22f295673a37bca3b425c626992dd8e99ee2fa6407f6fe3f32eb10b7552bd7942509ed6652e39e3ae9dfc3fbd6600fc6622b05ed04ac4fdbab66293c383f3c9cd064d785cd97797173976ba28408617cde8eb932a23fdf456c77ff5aeb8e027652d9d1bf1327fd624ce0329816ef63f88181724221583dedd5ea535cd21f5de1ff9ba4e3398274fdb8f2379b117f3228c2b30457ac3137f3bfd7ffb6e443162a3d2c0d05ba05c0efccd5ee2a742b20ab0e330ae8389d70182cdeae1a61c3a72c9eb3d98596e2716a75eb5ee0b13e38d899ece1670a2702996d258c1cf590e5055645334fc5f5f47fc691d8209e5845c381d0b32a6cf9d3669760db99a7038f91cc830f14563b64a21f64ab97f373d601eda133884b07732cbd2a7deeeb58f0458314968461f4bd3e0ae112fe095a559d9de0ec650c0d0d2c40d0e1f18f179b889f43f90e05b5c1c0dd3e52412abf00555e26cdc74a4964009ace73f26bc1e7847171d3590a50b1ca7e462ed2dc888dc069e1f9192d45c509eb00221055b1b247b277e4078eb4557a4cb5160d725806abb526e5f9c2ebdb2b4b810e8a5e5b36dc54b4b43bfb77ccb8b5cde5a9e34bf10f5956bf1949d1c495ae8f6485a99a480cbda7d03423df1f7da077c7fc8a8e60f88ff769fdd5d5a1bb34d2f1f7ce7a96273666dea482b0b69ae63305753320913805aefa0d0a10feeb54965527299c77cac4c11f30201b6ca75f5b90c1994bd635776eb907caa15574d84c90fead8dac89eb4aa6725c65244bcfae5172419a038c149fd338be9f25a34fc1f799cf5948b600d5efc994d0c177af241a01d90636e938d37eb72db3f00244af8d83beaa3d2248f48d08fe07ed182561f40c2043aa86666cd6da4f0990e4b68efd83fdb41cb2c957474bfdcb7faee8affcf97164771573b865e8b4de9001e175f14e4caef4d70f8cacb2903b5d4fc2b7239392c0d7146b0de6577adbbc3930b528d037e6c143e92b16d34147331075e0277a750c93ca8e30eaf18d61ccf467f3d4991be86f5f9433daa37f4ad259ad6c6d027600a259da3abe8ad6b9a37671e5eaeab8494bce6513b4b513cbffcbc042c1ca53494885fecea957cd913499860e76f285417874e850f350e93b0bca5f372d423ce6664675cdb2b1995efe92705bcb460226a05ad247ef982eb31eeb3428e296f1141cc986b3ff5cc3683759d78bbec1056897036c48e7d4f291561066ef4781f794ab2bc47c7dd90f7234aa43a350e06410882e9afdf138ce0c479bc5c98d07de5351b993b5bd54590af8bf7ecaa08c100ded16596cc76a9e759e6d4034b61c0d4d0453fedd54f6fcf53cf71d36aa8e557a4449863e66f1a72ca53b7f5e880458c4a62b24e345431807501f1197f17c2b28534541723879a6e2db18aa7e0146f221942486792d9c8e5a751edabcf6cc5eacdcf60d8f76ba01a3725943568fcd35aa59a425242cfd86d760ad5a25c76a649c56052dce03cc36ed0fd5114e0a0080e53a076b524dc9258af7409d512ffbbdd30d9cad547234614ff8e4c676d0fe66935fa509cc55faa82d9e738289500b3269dfe18aa6e420772f0f96b5684d580ddb9d0f71264fb27647062f5cf7eef50fa31d97766beed93e34be03589415917a689d9dce6d36afd8f4af975cbd625c602609528e837f51251b81a7e499cc7a9247f625e9d723f41e8e78e21dcdb775c74b704c488be653fde90d62581242cbd2ff00abb65c19b5fa37105cca7ce285b9757770826c2f420e98b539ce0d9163e1a23dc6fda65bed5736e3bd8e9ccd4ef4e7f9a4b1322cbed8ecaa38d5fe50898c36c04804f4e6f095bedca20f6b27c7b3f6ed42d03bf76e45b9e8d68e819f3d76f766e53618c0902d02e276c9e5e725e9f045ce3b46f5cc13f8e4a4ac0a54a5fc5f2ce8d66cde48ed05c569cab0608947b162c4b8bd8168c5a8f85fb54353a3557aeeddaf33fdb2b1abc995a52b5ad299854f865f657739ee811266678a3a2bdb75ea9364281c87373dc62f5e23da18b71ac26fe4bd066463f7dfe4c03e5354717df090068edf42ba5c745833a35ad1e22a4b636ed1ac1686749edfd2644fae09737635c8c565f5c631935005a8f2a7dc5a2e9aa9a795e8c242d2d6255783c0d80a2f0b2540c1884c075834046e99a270ceb99733c411f962f5a323f145b8da9bf93bf781062928b314e3c86e808da503d18046866ae58e1d3bf95c0097707f8c5a221226157e107595d8f96d80feca65ca3ca8576e916672091b8cf4ca2bda477d15cb4869e284278817be61a3d7b351d95539784c26e0ec605f08bf5a7d9533a15687e9e5bb0740265552847daeb83fac801cacb300339fc081dae3af2bdab7d38dbbd9ad2f9cc4e5c1b0b89686f7fee91297e7d75d7ed630228ca52f2141ac16c0cb3c39b7af92016a626e104985bd505e7a36eaae5772c9f229c080fb68ad8039bc8abe84225e8ca3fbd6c0595e52260aeca1b69ea32a8435ece41a3a6d0f79f7fc08df576ddc71da2e9388b3e4e7e25cbe8ea592e6a4cdae3dcdd0e92be967f4a36e57b83088dbd8c0f1a9ba7f260c458383675a2612c1763cdbb04b5fa5037c36a3a020e0c52d97c4d9e21d29f503caa47f55578da82bcea606ffe3df6da2903a4fb25be99d56c7aa28c11820c14021c6fe7528bb71d2c0edbdb12c63e91221592d5e3dbc9ec8026e74e621318c21e326c2e05400c128fce4d423ba24afa691b6346c432e3681374abfcbd515cbfda2c901cf7a4295a88a6eba0c3b82562bd1e904c6204b839c9aec3d06b869f30edb7989bea27d578a6020a6c1b49e00ac2e0eae349d60033b5f98541b5295edfd07992201f772a471f30b8511eb35d43cba6f15bd3ed6e1f0b3930fbf32f188d1e9dcba0e44ba64bc569a6de6dc2562d773634d6ee84c421826e2e028a2cb5634cb62741b6d3ea427baaa254157c4f29d420d48e85d2058a6127ce5cd5727bad39e25dd3988e2229804bd1b5da3f634240ef0e540dea494005fd3159fa154ae2739c4fe61acbede407ab9f0e09cb419fc37a3cd279ddccf549a2f6d4a5630356a59a8c413ec5bf798250206e466ad8cae330a3c40f1ca9699216a64d2ee20eeec4ee825c6d3b638520d2c14eba61c92e0c8eb33e454a2cbac66eb1292c08c5bac6549362ba60cabe2a55a46bb9cec0a4a95c45f45c5e3a4addce59d5479f44b80c8dac1af683c208416434780f50a697bb8e147519ebb586521aba10c09ea1ee6d4a246723c1507037d59c23101df08489d251672bed6bbcf1fc4abb76c9a75c152aa4dfbc55a153541e762dc90504c8ff15521f83ecccb4823916a7f9fa9ebfd8ae3c4e78c87a48d92f6961f3b67a0b2d0a60534a66554fdc79745cf418ad990e39d9577278271433d2da3fecb8abba2caa81bb7913499b7016b62ab60c3c15f80ba0b274eb09e469175dfb8aafb34b1a0fc48e4f3b2898f5cfee4240d5cb15653b35f93ce99f56540286948b25cc37f269e9b81af710cfffd36ee2d0b685cb4a7c7605c9fc5748c99249c3ef5a99f7c0693a874e744d5ad51194167ed290dee7157a5b346860ca091b0085879299adc37fd4705dd9fbe58ced50f1c95c0070b45bab1c1943464e2d4dcb8dc8e5f15efd0d86866bdbfb1a1efbb5f7b9af4ede3c227e3b9f015611cefc5865f556c46a3cf01deeb5bc89675cd9602b5717e4d54291457186be23dbf53a9a256b473e5a56d9fa102bd6d785721a2b6c911c3388a8e8bb54aee0b21aa97347e22f4a4624df3300b7ec36a9a97251d5546ca21bf86053ec489f6355c536127acb96f5360036cc8a36847a756b0c2764337e064cfd2d77d36d1c6164a8d4c785b881b4181c04738f43d376299553856c70a9c6083fd4325ff483f8db286b8ed178be12565945774eefe386f1a0ebb066ef36f2a13f824cba695cfdfdcfaaf58fea81579d741f8ad98967ddc202e0bf683f7786715e9c55dc31abb15f1cc84e2c1b53827a1d0f6789e05645fe0cacee66e7869ea0c7a3906030e7369a257fb3676fb67a43e82a7216ca99c94c33d018d190053a1ed0f7d91b047277c4dacb81516f7bfdaf906357065f6d4c4475e6bf5b5ab40d25aba47b412dd17c570f6b1e3d3b7a8190cd6b0a4fd7321aadb406f42ebeabc6a65b4f7412cd1d9d9a0dc7e87fae59617b1b1dc26370255c27e7fe4cca64c635a51eae631af2ff0eb35e8a659967e9e8016a079dcb2dc361b13122592489d12f4d2645dddaf1bc0a9a5d782dc54939557034da55fdd907cd945b3f21b98784ea284e54f629c3daed6b5ac849abf18eea3dcb4f46daf9948586f39f8947c0b04c6d02bf45741662f72416156743e35533be73c8761de728bc815ee02720fcc1d95dc489757d43ecbd9eb7aee6a2564220866130de27aeb524816f4703d9e63257592b0da4cd4b230a93555ee0ae59329ed7d250cc4968ee6e6d41b82c831acb8c7e63ec0e632f92a38a61b3a23d1430b55c22a92af1bd09dc96660b1105f6eab96fccefd935ded8982c6ca06f5a24157030d34b6d62c889a6f4e6d73803d6b63e36bdac5333fa3e49381d22887225ac04800be8a87336d9c6943568b5d23a742d70ba42b2f27a1e857c5ab46a4b43d417541c695695b73865b41cbf5d7221fb555de088c6ae8d3c6d82da6db9fd507cbafa6f1adf2cbe3e405867823c7d29f7dbe76b3322a3e76b093e6bbb1541c974d85861764e99579c9c9c879b71e"}) listen(r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller1\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="5efd9b2df34dacb827ae4186bc200efd6db8e4c24d91793bf2ac6c53ec66f78beb6a41fa6aeed42984c46c6013960c6ab0bf07c19434be1ae7e3ea3fa4c8b182513c27376ae81369ffe691cd34a30dcf3b188c4eef049d15601fc3ff14532ffb938fcf74e5853fd065cc863c9019102c6574ddcef63c6353f830ddbafe960f94cf1affae7c257440d364aaed21", 0x8d}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x10d, 0x75b}], 0x10}}], 0x2, 0x20000810) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 5m45.5035821s ago: executing program 3 (id=1602): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@bridge_getvlan={0x30, 0x72, 0x20, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 5m45.158872203s ago: executing program 3 (id=1604): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20028840) close(r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 5m44.970132028s ago: executing program 3 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$inet(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000000)={0x8}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0xff02, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf37}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x287}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4c880}, 0x20008091) 5m29.744572404s ago: executing program 32 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$inet(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000000)={0x8}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0xff02, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf37}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x287}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4c880}, 0x20008091) 2m23.400919144s ago: executing program 2 (id=3795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251303000013e414045168ec2e3e16539545b50a52ae642737d6f51fbdcae9995f08790f690f87130395687b01db5203faa04da650862720fcc4206bb2ca1bade968b50c0ddd0af81274d3239600a576e6dc4e824c3e9dc5a4e286320c0e3ad75d05"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x42800) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x4, 0x70bd2e, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="80000000080300001c0012800e00010069703665727370616e001100080002800400120008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r7, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0xc834) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 2m22.600440664s ago: executing program 2 (id=3802): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000040000100fcff0700040081bce719d6e200000100000004004880100001800c00108004000880040008800c0002000000000000000000770000000000000089c94bece35b7017921aeea61614c625846badeae6c4f7"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m22.444969526s ago: executing program 2 (id=3806): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x1004, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xc, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0xb, 0x9, 0x3, 0xfffffffffffffffc, 0x10}, @generic={0xa, 0x9, 0x2, 0x3f, 0x4}, @jmp={0x5, 0x1, 0x2, 0x2, 0xa, 0x42e0d222d4e3e5b2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000000c0)='syzkaller\x00', 0x100, 0xb2, &(0x7f0000000100)=""/178, 0x41100, 0x44, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xe, 0x7, 0x1ff}, 0x10, r6, 0xffffffffffffffff, 0x9, &(0x7f0000000300)=[r0], &(0x7f0000000340)=[{0x5, 0x2, 0xc, 0xb}, {0x5, 0x2, 0x2, 0x8}, {0x5, 0x5, 0xc, 0xa}, {0x4, 0x4, 0xe, 0x4}, {0x3, 0x3, 0xe, 0x7}, {0x3, 0x2, 0xa, 0x6}, {0x1, 0x4, 0x8, 0x2}, {0x0, 0x3, 0x0, 0xc}, {0x1, 0x2, 0x7, 0xb}], 0x10, 0x3}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.20037619s ago: executing program 2 (id=3808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x30}}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40}, 0x94) 2m22.016888551s ago: executing program 2 (id=3811): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000906000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0x0) 2m21.557768667s ago: executing program 2 (id=3818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r2, 0x200, 0x0, 0x25dfdbfb, {0x3a}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4800}, 0x4c811) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}, "000088beffff0000"}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 2m6.447639557s ago: executing program 33 (id=3818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r2, 0x200, 0x0, 0x25dfdbfb, {0x3a}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4800}, 0x4c811) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}, "000088beffff0000"}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 1m6.883446921s ago: executing program 5 (id=4662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x89e1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) 1m6.76532157s ago: executing program 5 (id=4666): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000020180c200000081000000080045000030000000000101b278ac1e0001ac1414aa05009078e00000e0450000000000000000110000ac1414aaac1414aa"], 0x0) 1m6.506847446s ago: executing program 5 (id=4671): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000100000000000300000000000007000000", @ANYRES32=0xffffffffffffffff], 0x2c}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fc"], 0x1c}}, 0x840) r5 = socket(0x1f, 0x3, 0x20000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r5, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESOCT=r0], 0xa6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000780)=""/241, &(0x7f0000000880)=0xf1) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 1m6.158000246s ago: executing program 5 (id=4676): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) 1m0.35085472s ago: executing program 5 (id=4705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r6, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 59.405204252s ago: executing program 5 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bind$netlink(r0, &(0x7f00000002c0), 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000dbdf250800010000000000080015000100000008004b001300000008001500010000000800010002000000080001000100"/64], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4000810) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) bind$netlink(r0, &(0x7f00000002c0), 0xc) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000dbdf250800010000000000080015000100000008004b001300000008001500010000000800010002000000080001000100"/64], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4000810) (async) 40.571424198s ago: executing program 4 (id=4917): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa, '\x00', 0x3, 0xecf0, 0x353476f, 0x4}}}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x48}}, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.525838504s ago: executing program 4 (id=4919): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000061100000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xf0, 0x8001, 0x14, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x8700, 0x40, 0xf, 0x3}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000140)='\x00', 0x1, &(0x7f0000000180)={@align=0xf, {0x7, 0xfffc, 0xa32e, 0x3}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}, {[0xa0d9, 0x7ff, 0x7, 0x1]}, 0x8, 0x93, &(0x7f00000004c0)=""/147}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f0000000100)=r7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000003d9c1de200"/20, @ANYRES32=r1, @ANYBLOB="7f00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05000000020000000200"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x50) 40.391935236s ago: executing program 4 (id=4922): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x28, r2, 0x300, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0xb}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x5f, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000e40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@ipv6_newaddr={0x70, 0x14, 0x510, 0x70bd29, 0x25dfdbfc, {0xa, 0xdf, 0x72, 0xc8, r5}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7, 0x7, 0x1}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x400003}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_emit_ethernet(0x218, &(0x7f0000000980)={@remote, @empty, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0x1e, 0x4, 0x3, 0x4, 0x202, 0x64, 0x0, 0xe3, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0x81, 0x0, 0x9, [0x3, 0x7, 0x1, 0x6, 0x400, 0x0, 0x4e37]}, @cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x26, 0x3, 0x3, [{@multicast2, 0x9}, {@rand_addr=0x64010100, 0x2}, {@remote, 0x4}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010101, 0xf}, {@multicast2, 0x3}, {@remote}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x1, [0xc], "5e1bdf67aa1a339eaf81caa727bfe2"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1862, 0x3], "83ca6ba0d4ad1c8cc1d353fa8c5e832ad0f0d2d54e057e2164e0c11fe37ab94bcbdb45874d13b3014331cee3abc90bce76edf488e51d162278ccdc87e534dd81ca9f8010a29c9cd302fc2b83b92f066c313e49e6fbfbee566733455a2e7f7fd98d960a6db43d511433592beff2bf784ffa850f4ee847f9e7b1af2258735e443347248beec74de03758ca2072700b2596d95e948e0802313a2a3957bbd2c12f76a6bebe1c2268e14f03a0ea252bf771ea70433357bf72198da29b64f78695920e3deb422039829941340fcdef328c47ab6f49f03ca178"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x8], "409ada29b3a986593cdfb30807b20b214803ea60c0678eefb86cf0c6c720fc482e9c7847e8c9d20a9d100cd0915f53684309374d34c6b69737b5a033b33de1c5a24a0e8d95d4ea6245498162979221a1ed38"}, {0x8, 0x88be, 0x4, {{0xd, 0x1, 0x5, 0x1, 0x1, 0x0, 0x0, 0xfb}, 0x1, {0x80}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0xff}, 0x2, {0x4, 0x8, 0x2, 0x1e, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "7cf5184b05"}}}}}}, &(0x7f0000000c00)={0x1, 0x4, [0xd46, 0xec3, 0x31c, 0x4aa]}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r10, 0xf30}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.279920269s ago: executing program 4 (id=4925): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000001086dd6076c8af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00ec121e362a305c4626ff4e75"], 0x0) 40.146827197s ago: executing program 4 (id=4927): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\b\x00', 0xff, 0x7b}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0xffffffffffffff0a, &(0x7f0000000340)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfffffffffffffffd}}, 0x2004c885) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) splice(r5, 0x0, r4, &(0x7f0000000080), 0x6, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703665727370616e00000028000280060011004e21000005001600020000000400120008000100fdf346e699cc190ba8d3ad89a247c0f4d8e7a238068f9d6247615e53431b0a72b5e51668c453312e548a2ee964e885a92b30fcdf5e789762fdd4a9e41ce8221ef9c5396cf610e9c7edf45685d4a5469588a1ff1b6a", @ANYRES32=0x0, @ANYBLOB="060010004e230000"], 0x5c}}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010028bd70000000000004000000"], 0x14}}, 0x4000080) 39.779312008s ago: executing program 4 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) r2 = socket(0xa, 0x3, 0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x60000008}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 37.134668764s ago: executing program 1 (id=4977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'tunl0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'bridge_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'ip_vti0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x26}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7"], 0x4c}}, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) 36.95477587s ago: executing program 1 (id=4980): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@empty, @loopback}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 36.952782499s ago: executing program 1 (id=4982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b0000000080000002040000ff03000001000000", @ANYRES32, @ANYBLOB="00000000000000000022b1e3bff5265d28580170243f8e9700000000000000004f91f16e1b47e389eb0d2e0000008b5d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000009dd041c71af6cd8b8f0e53312f85ecb2f1dde94d73105fca86749349fe48f17db982a05b2880d15a85a6993cd98cfc94d8", @ANYRES16=r2, @ANYBLOB="170928bd7000ffdbdf25010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000800010a01080000000000000000000000085e12aafde5c2bbc33ecd52f3eaf343976c1553f61248d2c261d1678cd81f754154b836e6235ac2c14e3f7cb210e5e3113cd0d7a4eb62351d41cff4bf67e840ce98032a90dbe6fa3a90d08b2056d669030105776a61a834ba910effa03ea483e4698e5bd25d250738bb80c79ee256fd24ce43e378dd"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040012) 36.952542266s ago: executing program 1 (id=4983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="002e7b046f8a6d870c00000000000000c750841a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1}, [@IFLA_LINKMODE={0x5, 0x11, 0x2d}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "5a2b613bb914ee31b26ab6a5986616870f5ebbfe1e5aa4b578bd9b33f00f968a"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x72d6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r2}, 0x4) 36.929864336s ago: executing program 1 (id=4984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002b80)={@val={0x0, 0x86dd}, @void, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x4}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [@routing={0x2b, 0x0, 0x0, 0xf}], "a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b6d13be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead3073a62774b9b019415b5b64589f48f36b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff7042904274a863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce42649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a"}}}}}}, 0xfc4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc00) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24008890) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r11, 0x112, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x95}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r7, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="bcc18714", @ANYRESHEX=r1, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000014) 36.729752708s ago: executing program 1 (id=4986): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="cd0e00000000000000", @ANYRES32=r3, @ANYBLOB="080008000804000014000200fe8000000000000000000000000000bb"], 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 24.53267616s ago: executing program 34 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) r2 = socket(0xa, 0x3, 0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x60000008}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) 21.686134092s ago: executing program 35 (id=4986): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="cd0e00000000000000", @ANYRES32=r3, @ANYBLOB="080008000804000014000200fe8000000000000000000000000000bb"], 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1.157127337s ago: executing program 6 (id=5306): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) read$alg(r1, &(0x7f0000000040)=""/121, 0x79) splice(r1, &(0x7f00000000c0)=0x632, r1, &(0x7f0000000100)=0x7, 0x3d, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}}, 0x4000804) splice(r1, &(0x7f0000000300)=0x200, r0, &(0x7f0000000340)=0x2, 0x40a2, 0xa) r3 = socket(0x1, 0x6, 0x7) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000380)={0xa91, 0xfff, 0x1ff8, 0x101, 0xb2, 0xffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) r6 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008005}, 0x44000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x20}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xc, 0x48}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x40}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x82f, 0x4c}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x190, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x86, 0xa8, @random="f9830ada756faabe015688ef6d9fc2fe7e2fbc912efce2508a7d0dc22a2e1ce7ae5836deb16fbfe14223a2c981f71eb7792da81873c3c9b60c715dc92db8e370767246fc70ab1daf0962b46801b0f3bef8a351428b586939a25f8eb4199f8864401df9f35ed966312da119f528de4636ad609cdcdb80d494ee078ac3a9086f9b3cf6"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe4, 0xa8, @random="fc3a3c475213c95ebea6e2fbdae63ec0f85cbf66320aebd094f099d2db22b9d61566cc9b54c814ca24e73f503f5e8fe2778bcfed18ab9311a9d5fddf147dfdb48c46f23b46f9c8469d7d73f5ab4084e128e316695c895d9ca4e1b5999ec5efa852fd0a4c0c36c9083865d46aea8ed1b1f19d8edbd313b70cf8cf4e36ca780efbd91d97e709caf821162fbfd651ebc5c187248c70d097f644f19cacc136c306eec7b7124b50b31b4ca84bdab77e46a8e475991a4b12fbc9bd82696bb6b813e4a879ba5c8289cb0664135a48d6813b110ea0e082fa87caa8440eb5e1bb82574ecd"}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x20040880) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xd0, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) tee(r0, r3, 0xfffffffffffffffc, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000b80)={"0b30f1695e1cad0f3d8c81e46dc895ca", 0x0, 0x0, {0x9}, {0xfffffffffffffc01, 0x1}, 0x7, [0xbd7, 0x6, 0xffffffff, 0x6, 0x7ff, 0x10001, 0x111, 0x2, 0x1, 0x1, 0x7, 0x10001, 0x5, 0x401, 0xfe2]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000c80)={{r3}, r10, 0x0, @unused=[0x0, 0xb6ae, 0xfffffffffffffeff, 0x25d71ec0], @subvolid=0x7}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c80)='freezer.state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001d00)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)=@newtclass={0x34, 0x28, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x1, 0x8}, {0x0, 0x4}, {0xa, 0x5}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x48080) r13 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r13, &(0x7f0000002140)={&(0x7f0000001e00)=@x25, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/212, 0xd4}, {&(0x7f0000001f80)=""/179, 0xb3}], 0x2, &(0x7f0000002080)=""/143, 0x8f}, 0x2000) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000002180)={0x1, 0xff, "14680776a14f02412b3d56f61eff7ef87e8ac8fc3bb5d3f331964071959475acd061a4884170ccfd82750cfa6e4a237b8947cb0185f8714b802870b64a31f1a7a0405d1285874d3fee394079a2076acb08c6198b0cafb56e9483289aaa67dc3cf916745c3f6d6a5610aecd6a6a9267fbd99f79844a8894078a47fd3e1785bdb6d9d381fbc54b3dbbfad168f7ebf4e0a2b9256f23ef89413932adcd9b16dbdf562b1c7b9c2c4998f2c469fe02a6c3ae9d493272d10a3045b95a95525a1d3b9bb8706f09616db1c9e15eb7e45e524f0b7680bcc047d9d916c9b53fbc4d888e4628fd0f770eaa2af331bb2b3a45aa698623882f1cd78e9b8c674744bfed0b98f6"}) 1.132921496s ago: executing program 6 (id=5307): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$inet_mptcp(0x2, 0x1, 0x106) 1.006679686s ago: executing program 6 (id=5309): r0 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xad}, &(0x7f0000000040)=0x8) 981.853594ms ago: executing program 6 (id=5310): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 733.428029ms ago: executing program 0 (id=5314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0xfce) r2 = socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="9f"], 0x0, 0x3f}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000001280)={0x41424344}, 0x7, 0x1f9) syz_extract_tcp_res$synack(&(0x7f00000012c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000004a40)={@void, @val={0x3, 0x3, 0x0, 0x5, 0x4, 0x1}, @eth={@empty, @multicast, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "9cd1e8", 0x141e, 0x6, 0xff, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0xff, 0x3c, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x5d, 0xe3, "c8ec2122f47614193a0a8b4d335247b7425ab57b96fb707816ac75756a0e828618cfab7eb41e79e50ce6d370d008db43059ddb94f63d5e973462d582c1c4eb4b23d8368f62f374ec08696db3a3c2e182511a103754bef6bedb80ef7d40d543664753e3f3eea1523dd619b60cbafe0622441e10b310807fe885558e58873c9ee5fa8019df8bc794cb67a98a1f56bdfc31c398579933bff001aec25bdfe9351623de4cf04619af80ea176d99323659b093be795f636ca53722b677f0eafd7a75062fa8cc3418830d6cfb40c5fa930d67026e6cade1f4d03b53c2f24d630aa62b92038600"}, @calipso={0x7, 0x38, {0x2, 0xc, 0xf4, 0x40, [0x9, 0x3, 0x100000000, 0x3, 0x5, 0x5]}}, @calipso={0x7, 0x40, {0x5, 0xe, 0x5, 0x8, [0xa, 0x2, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0xfffffffe00000000]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x2, 0x6, [0x7, 0x100000000, 0x9, 0x100, 0x5, 0x1, 0x205, 0x1]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0xc, 0x0, 0x0, 0x1, 0x0, 0x9, 0x66}, @srh={0x84, 0xc, 0x4, 0x6, 0xf, 0x18, 0x8, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x2c, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0xa, 0x100, [0x9, 0x6, 0x0, 0xd2d, 0x1]}}]}, @dstopts={0x0, 0x202, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x3, 0x4, "8dee1823"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x46, 0x1000, "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"}]}, @dstopts={0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @pad1]}, @hopopts={0x33, 0x22, '\x00', [@generic={0x8, 0xfb, "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"}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {{0x4e24, 0x4e20, r5, r6, 0x0, 0x0, 0x8, 0xc2, 0x7ff, 0x0, 0x7, {[@generic={0x5, 0x8, "7e6229171fb0"}, @mptcp=@mp_join={0x1e, 0x3, 0x7}]}}, {"ba9cfa697afcc7b0dcb9d0ec17f8"}}}}}}}}, 0x145e) write$cgroup_subtree(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="2d72646d6101256e6574200670696473202b6465766963657320"], 0x1a) sendmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000840000000100000059767de25026381b5cc7a195cb5ade0d64bc2d9ad30419f43200000000000000d58a13d6880a16121b3fba8b8056be67e7f8ed0c3a9c399a3bc5854e07a1c45dcad55cda9e9d193964bde86dab40cf36fda64b6ecd0b89c1e3b081a2c57deac3d75946c2feb7db36"], 0x30}}], 0x2, 0x0) 590.79734ms ago: executing program 0 (id=5315): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000680)={'HL\x00'}, &(0x7f00000006c0)=0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000140000000150800034000000000080002400000000008000440000000090900010073797a1a000000000900020073797a3200000000140000001100010000000000000000000000000a36c63ae43c687c314ff2e8903b0f8855e3f71254859cb7fc95f18926ab93eec596891046d276f3b8e33a0a42c6f80f0f8d278d1fa13e6392365b45ef49b64b09831b60cebcbe09091d538b64ad3e67665d9a158d85faf7"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0xc063, {}, {}, {}, 0x1, @can={{0x2}, 0x23, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x30, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) bind$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) getpeername$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 539.676458ms ago: executing program 0 (id=5316): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r5], 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x7534, 0x10, 0x3d, 0x9}, &(0x7f0000000600)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000640)={0x0, 0x9}, &(0x7f0000000680)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000780)=[{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x68, @mcast2, 0x8}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="21898c5ea3fdcc257f2236f7c3c9baded26c9c5b653555bf68e0bbb15f54c102ccf63a6246b18b5a5661f2b2d4fd079644bb16a11e8554d88b51990c8def1a8ed44b7434f24f34dbed7eaf4dc6bed2ae3e53c7cd1f789daac136dcf31956b750c393ebf79b52d2bf5d3ae818b030cca485bff5c5f1ff4b3f90f9e227287c9b5517361e0554d3533c8a39451ed1f1189d0f82b10a4dd2e0bdc2ddfa8239c0a2a9af1cf2d0", 0xa4}, {&(0x7f00000001c0)="a7206a3d6980a6cea165f640c3c7fb4e12c3f0f12b", 0x15}, {&(0x7f00000002c0)="21e656f3743ac769bd2ec0", 0xb}, {&(0x7f0000000300)="b0e991bd5bc0d1e5ade93e17936a3ecfb9985bfd3b09f7bcadcc84e9ce7ba422c3070598cecc828f97a71252e33078785993b504446b5bdfd37f43ece5a826b4", 0x40}, {&(0x7f0000000340)="22af76afc1fd17ba22a123c37ef99177681eacbe80d1b0b94ff4c45514d0ee6c7f7d3a2bd664dabe36bf9abe9bc3f7453a263c64a742d899265338a91e7dc8fe1141052eed32d146a81c7161f70d875ac4e233b7d3f42af874c2c86c5d", 0x5d}, {&(0x7f00000003c0)="27cf03efbb997c7e33d28e26d05967a942b49f1b88920be7d0da5bd435da882f0e6577f95d88d7d0e4fcc13a729a9bc07a1046a129e918a3a0105abceab9b27be2334105119a4347f86b93700241777c79941782c0e1a818c68e2a13de1a876f2f470b59251a9608ab87b12651e57a108b7994bbc2329e1bded99796b82179f454ccc7767658f9087a97adf89500908f3930e2b1f719c1a8bdbc97bd41c312b48647d93936999ded04799a90c6755f1c409912c6359ffbb6c23b40d85c5253fa20ce789ac7057f9ab8c2484aa4c51ddc187821c9ddf2edb61d35c6db2429a83ccf15aae58566dd44ba84b77d", 0xec}, {&(0x7f00000004c0)="e9879ea0a92cb9575169de13352ab2ec59c6613d98ec28b392d9307328c11fa342", 0x21}, {&(0x7f0000000500)="4aa146f3d2e026856323d8efab655956bda0dc6b96396ae7e9c34f685c7b82996a489263c44e934987f94448da1341dd66", 0x31}], 0x8, &(0x7f00000006c0)=[@sndinfo={0x20, 0x84, 0x2, {0xc15, 0x8000, 0x4, 0x5, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xa5c, 0x8002, 0x101, 0xff, 0x6, 0x1a, 0x7, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x9719, 0x0, 0x3, 0x9, 0x3, 0x8, 0x9, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x51}}], 0x98}], 0x1, 0x20008090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 422.008755ms ago: executing program 0 (id=5317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000007dd668323a9a563560aab825090a010400000000000000178d3d82040900010073797a3100000000080005400000000209000200730008000a40fffffffc00001100010000000000000000000100000a00800000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 351.517511ms ago: executing program 0 (id=5318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, r0, 0x2dc8f000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) 349.729398ms ago: executing program 0 (id=5319): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e240005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000160000000000000000804000000000000000000800000000ba2b6e000000000000000000"], 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 53.453176ms ago: executing program 6 (id=5320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0xd262f4c02267dd9b, 0x20, 0x73, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0xfffffffffffffffe, 0x0, 0x7}, {0x0, 0x0, 0x5, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'authencesn(sha512-generic,ctr-des3_ede-asm)\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 6 (id=5321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/19, 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0xf}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r8, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) kernel console output (not intermixed with test programs): 2896][T19487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3651'. [ 428.906365][T19494] netlink: 'syz.1.3650': attribute type 3 has an invalid length. [ 429.388281][T19519] veth5: entered promiscuous mode [ 429.405766][T19526] netlink: 'syz.1.3662': attribute type 8 has an invalid length. [ 429.479867][T19524] netlink: 'syz.0.3659': attribute type 1 has an invalid length. [ 429.620228][T19531] bridge1: entered promiscuous mode [ 429.627495][T19531] bridge1: entered allmulticast mode [ 430.273231][T19570] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 430.314862][T19570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 430.504893][T19580] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 430.603858][T19588] __nla_validate_parse: 8 callbacks suppressed [ 430.603879][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 430.860774][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 430.888086][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 430.893579][T19600] netlink: 'syz.5.3687': attribute type 61 has an invalid length. [ 430.928184][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3687'. [ 431.180050][T19620] erspan0: entered promiscuous mode [ 431.185911][T19620] erspan0: entered allmulticast mode [ 431.201739][T19624] xt_hashlimit: size too large, truncated to 1048576 [ 431.400636][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 431.413606][T19636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 431.425855][T19636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 431.761607][T19658] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3704'. [ 431.939149][T19664] netlink: 'syz.1.3707': attribute type 4 has an invalid length. [ 432.196989][T19679] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 432.219859][T19679] bond6 (unregistering): Released all slaves [ 432.330161][T19689] pim6reg: entered allmulticast mode [ 432.552988][T19693] syzkaller0: entered promiscuous mode [ 432.564904][T19693] syzkaller0: entered allmulticast mode [ 432.589336][T19703] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3719'. [ 432.628548][T19705] veth1_macvtap: entered promiscuous mode [ 432.646403][T19705] veth1_macvtap: entered allmulticast mode [ 432.666293][T19705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.699866][T19705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.951615][T19709] syzkaller1: entered promiscuous mode [ 434.957165][T19709] syzkaller1: entered allmulticast mode [ 434.975625][T19713] syzkaller0: entered promiscuous mode [ 434.987158][T19713] syzkaller0: entered allmulticast mode [ 434.997298][T19719] bridge0: port 1(gretap0) entered blocking state [ 435.004400][T19719] bridge0: port 1(gretap0) entered disabled state [ 435.012523][T19719] gretap0: entered allmulticast mode [ 435.020155][T19719] gretap0: entered promiscuous mode [ 435.028485][T19719] bridge0: port 1(gretap0) entered blocking state [ 435.035065][T19719] bridge0: port 1(gretap0) entered forwarding state [ 435.120805][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 435.270287][T19733] netlink: 'syz.4.3726': attribute type 10 has an invalid length. [ 435.293164][T19733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.316497][T19733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.342145][T19733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.369698][T19733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.627681][T19764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.806038][T19770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3734'. [ 436.152205][T19793] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 436.166539][T19793] bond3 (unregistering): Released all slaves [ 436.177347][T19796] netlink: 'syz.4.3741': attribute type 142 has an invalid length. [ 436.291504][T19796] netlink: 'syz.4.3741': attribute type 1 has an invalid length. [ 436.489268][T19808] netlink: 'syz.0.3744': attribute type 4 has an invalid length. [ 436.508355][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 436.534414][T19807] debugfs: 'KŠŸu ™crµ±K:‘£’ˆĢ„ŻBßŻ£| “¼ŚŽlS·œ-!' already exists in 'ieee80211' [ 436.623615][ T29] audit: type=1804 audit(1781725782.099:15): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3746" name="/newroot/93/cgroup.controllers" dev="tmpfs" ino=496 res=1 errno=0 [ 436.686224][ T29] audit: type=1800 audit(1781725782.099:16): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3746" name="cgroup.controllers" dev="tmpfs" ino=496 res=0 errno=0 [ 436.875728][T19826] netlink: 'syz.1.3750': attribute type 1 has an invalid length. [ 436.879475][T19814] netlink: 3544 bytes leftover after parsing attributes in process `syz.4.3746'. [ 436.902986][T19821] syzkaller0: entered promiscuous mode [ 436.913587][T19821] syzkaller0: entered allmulticast mode [ 436.964349][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 437.050717][T19780] sctp: [Deprecated]: syz.2.3737 (pid 19780) Use of int in maxseg socket option. [ 437.050717][T19780] Use struct sctp_assoc_value instead [ 437.112006][T19835] netlink: 'syz.5.3752': attribute type 23 has an invalid length. [ 437.306957][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3754'. [ 437.356610][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3756'. [ 437.369135][T19847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.455708][T19847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.563222][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 437.601102][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 437.615961][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 437.643706][T19861] netlink: 'syz.2.3759': attribute type 2 has an invalid length. [ 437.661851][T19866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3761'. [ 437.664170][T19861] netlink: 'syz.2.3759': attribute type 2 has an invalid length. [ 437.722064][T19873] x_tables: duplicate underflow at hook 1 [ 438.200333][T19896] xt_ecn: cannot match TCP bits for non-tcp packets [ 438.232819][T19904] netlink: 'syz.1.3773': attribute type 20 has an invalid length. [ 438.240943][T19904] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.310948][T19902] syzkaller0: entered promiscuous mode [ 438.329117][T19902] syzkaller0: entered allmulticast mode [ 438.522841][T19912] block nbd0: reconnected socket [ 438.543619][T14733] block nbd0: NBD_DISCONNECT [ 438.562029][T19915] tipc: Enabling of bearer rejected, failed to enable media [ 438.564412][T17526] block nbd0: Receive control failed (result -32) [ 438.570480][T14733] block nbd0: Send disconnect failed -32 [ 438.644919][T14733] block nbd0: Disconnected due to user request. [ 438.684767][T14733] block nbd0: shutting down sockets [ 438.827395][T19931] netlink: 'syz.4.3782': attribute type 1 has an invalid length. [ 439.014519][T14733] udevd[14733]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 439.055268][T19929] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 439.277645][T19946] tipc: Enabling of bearer rejected, failed to enable media [ 439.342941][T19957] bridge_slave_1: default FDB implementation only supports local addresses [ 439.745763][T19977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.823297][T19981] bond7: (slave ip6erspan0): making interface the new active one [ 439.834666][T19981] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 439.950158][T19999] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.979283][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.313271][T20018] xt_hashlimit: size too large, truncated to 1048576 [ 440.490669][ T5294] veth0_vlan: left promiscuous mode [ 440.564166][ T5294] veth0_vlan: entered promiscuous mode [ 440.617368][T20036] openvswitch: netlink: IP tunnel TTL not specified. [ 441.053214][T20066] __nla_validate_parse: 10 callbacks suppressed [ 441.053232][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3812'. [ 441.153493][T20057] bond8: entered promiscuous mode [ 441.185439][T20057] bond8: entered allmulticast mode [ 441.200328][T20057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 441.235700][T20072] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3814'. [ 441.266248][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 441.395156][T20087] veth0: entered promiscuous mode [ 441.463063][T20088] veth0: left promiscuous mode [ 441.669715][T20101] ip6gre1: entered allmulticast mode [ 441.959174][T20121] ip6gre2: entered allmulticast mode [ 442.245415][T20143] validate_nla: 4 callbacks suppressed [ 442.245432][T20143] netlink: 'syz.1.3827': attribute type 21 has an invalid length. [ 442.282237][T20143] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.290089][T20143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.297384][T20143] IPv6: NLM_F_CREATE should be set when creating new route [ 442.304665][T20143] IPv6: NLM_F_CREATE should be set when creating new route [ 442.312049][T20143] IPv6: NLM_F_CREATE should be set when creating new route [ 442.775180][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3832'. [ 442.831510][T20161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.845407][T20158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.894585][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3832'. [ 443.008543][T20162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.148832][T20162] bond3: (slave bond4): Enslaving as an active interface with an up link [ 443.161640][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 443.216548][T20185] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.260879][T20158] bond3 (unregistering): (slave bond4): Releasing backup interface [ 443.296949][T20158] bond3 (unregistering): Released all slaves [ 443.359856][T20199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3838'. [ 443.407278][T20191] syzkaller0: entered promiscuous mode [ 443.426471][T20191] syzkaller0: entered allmulticast mode [ 443.791048][T20219] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3848'. [ 444.003441][T20234] IPVS: set_ctl: invalid protocol: 136 172.20.20.48:20001 [ 444.053761][T20239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3853'. [ 444.176070][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 444.195802][T20254] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 444.334606][T20254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.394223][T20271] bond3: (slave geneve3): making interface the new active one [ 444.406362][T20271] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 444.527933][T20278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.957070][T20309] syzkaller0: entered promiscuous mode [ 444.963371][T20309] syzkaller0: entered allmulticast mode [ 447.539349][T20316] bond0: (slave bond_slave_0): Releasing backup interface [ 447.565605][T20324] netlink: 'syz.0.3878': attribute type 3 has an invalid length. [ 447.581676][T20324] __nla_validate_parse: 12 callbacks suppressed [ 447.581693][T20324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3878'. [ 447.828916][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3885'. [ 447.882494][T20355] netem: change failed [ 447.952853][T20359] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3883'. [ 447.966843][T20355] syzkaller0: entered promiscuous mode [ 447.974438][T20355] syzkaller0: entered allmulticast mode [ 447.992988][T20368] veth7: entered allmulticast mode [ 448.011943][T20363] veth9: entered allmulticast mode [ 449.123638][T20386] netlink: 'syz.1.3890': attribute type 1 has an invalid length. [ 449.132830][T20386] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.3890'. [ 450.733207][T20390] ip6erspan0: entered allmulticast mode [ 450.741603][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 450.786526][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 450.867574][T20402] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 450.896464][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'. [ 450.955652][T20406] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 450.993605][T20406] bond3 (unregistering): Released all slaves [ 451.100335][T20420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3901'. [ 451.120884][T20417] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3900'. [ 451.143177][T20417] netlink: 'syz.5.3900': attribute type 1 has an invalid length. [ 451.346923][T20426] pim6reg: entered allmulticast mode [ 451.363774][T20426] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3904'. [ 451.559741][T20444] netlink: 'syz.4.3909': attribute type 1 has an invalid length. [ 451.600663][T20446] xt_TCPMSS: Only works on TCP SYN packets [ 451.678133][T20450] syzkaller0: entered promiscuous mode [ 451.683791][T20450] syzkaller0: entered allmulticast mode [ 452.224313][T20485] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 452.306930][T20487] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 452.325592][ T91] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 452.377765][T20491] xt_hashlimit: size too large, truncated to 1048576 [ 452.404572][T20487] bond5: option mode: unable to set because the bond device has slaves [ 452.602996][T20487] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 453.258738][T20550] netlink: 'syz.0.3937': attribute type 12 has an invalid length. [ 453.267382][T20550] netlink: 'syz.0.3937': attribute type 29 has an invalid length. [ 453.280017][T20550] __nla_validate_parse: 7 callbacks suppressed [ 453.280032][T20550] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3937'. [ 453.294318][T20552] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3938'. [ 453.306803][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 453.312796][T20550] netlink: 'syz.0.3937': attribute type 1 has an invalid length. [ 453.332023][ T5816] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 453.340785][T20550] netlink: 'syz.0.3937': attribute type 2 has an invalid length. [ 453.349261][T20550] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3937'. [ 453.494037][T20569] openvswitch: netlink: Key type 126 is out of range max 32 [ 453.615932][T20573] netlink: zone id is out of range [ 453.622751][T20573] netlink: del zone limit has 4 unknown bytes [ 453.641735][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 453.662071][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 454.189910][T20603] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 454.198518][T20603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3953'. [ 454.474113][T20621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3959'. [ 455.080681][T20645] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20001 [ 455.389258][T20668] netlink: 'syz.4.3969': attribute type 21 has an invalid length. [ 455.436908][T20668] xt_l2tp: invalid flags combination: 0 [ 455.535542][T20664] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 455.625391][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3971'. [ 455.928640][T20696] syzkaller0: entered promiscuous mode [ 455.940729][T20696] syzkaller0: entered allmulticast mode [ 456.684030][ T4948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.700934][ T4948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.712536][ T4948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.723334][ T4948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.731078][ T4948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.053075][T20731] netlink: 'syz.4.3981': attribute type 2 has an invalid length. [ 457.130990][T20736] gtp1: entered promiscuous mode [ 457.143103][T20737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.163559][T20736] gtp1: entered allmulticast mode [ 457.959262][T20784] syz_tun: entered allmulticast mode [ 458.042952][T20782] syz_tun: left allmulticast mode [ 458.206895][T20720] xfrm0 speed is unknown, defaulting to 1000 [ 458.356227][T20805] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 458.388713][T20805] netlink: 'syz.1.3994': attribute type 3 has an invalid length. [ 458.407955][T20805] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3994'. [ 458.429078][T20805] NCSI netlink: No device for ifindex 813332851 [ 458.456113][T20815] netlink: 1920 bytes leftover after parsing attributes in process `syz.0.3996'. [ 458.481553][T20815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.704347][T20832] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4000'. [ 458.851631][ T4948] Bluetooth: hci4: command tx timeout [ 458.933177][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 459.140345][T20852] xt_hashlimit: size too large, truncated to 1048576 [ 459.300473][T20868] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4009'. [ 459.692956][T20720] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.700285][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.708154][T20720] bridge_slave_0: entered allmulticast mode [ 459.716177][T20720] bridge_slave_0: entered promiscuous mode [ 459.732436][T20720] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.739667][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.747306][T20720] bridge_slave_1: entered allmulticast mode [ 459.761676][T20720] bridge_slave_1: entered promiscuous mode [ 460.029751][T20899] tipc: Enabling of bearer rejected, already enabled [ 460.092941][T20720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.131034][T20915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4020'. [ 460.134674][T20720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.221430][T20720] team0: Port device team_slave_0 added [ 460.232091][T20720] team0: Port device team_slave_1 added [ 460.263925][T20925] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 460.285049][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 460.308575][T20720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.330496][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.364237][T20720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.392704][T20931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4024'. [ 460.426759][T20925] veth5: entered promiscuous mode [ 460.432227][T20925] veth5: entered allmulticast mode [ 460.439532][T20720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.448359][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.458918][T20936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4025'. [ 460.477887][T20720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.555462][T20933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4025'. [ 460.563516][T20720] hsr_slave_0: entered promiscuous mode [ 460.574364][T20720] hsr_slave_1: entered promiscuous mode [ 460.581612][T20720] debugfs: 'hsr0' already exists in 'hsr' [ 460.587576][T20720] Cannot create hsr debugfs directory [ 460.769188][T20945] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.802449][T20945] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.933212][T17526] Bluetooth: hci4: command tx timeout [ 461.337378][T20720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.357357][T20720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.369647][T20720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.390575][T20720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.401611][T20980] syzkaller1: entered promiscuous mode [ 461.409044][T20984] ieee802154 phy1 wpan1: encryption failed: -126 [ 461.411992][T20980] syzkaller1: entered allmulticast mode [ 461.443799][T20720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.487939][T20720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.545833][T20720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 461.557471][T20720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.670088][T20720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.715883][T20720] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.727046][T21003] sit0: entered promiscuous mode [ 461.756475][T21003] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 461.858462][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.865927][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.903448][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.910665][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.046627][T21012] netlink: 'syz.0.4047': attribute type 1 has an invalid length. [ 462.100248][T21012] netlink: 'syz.0.4047': attribute type 4 has an invalid length. [ 462.924506][T20720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.015239][T17526] Bluetooth: hci4: command 0x040f tx timeout [ 463.330453][T21080] syzkaller1: entered promiscuous mode [ 463.337552][T21080] syzkaller1: entered allmulticast mode [ 463.409226][T20720] veth0_vlan: entered promiscuous mode [ 463.446767][T21089] xt_hashlimit: size too large, truncated to 1048576 [ 463.447575][T20720] veth1_vlan: entered promiscuous mode [ 463.497271][T21089] __nla_validate_parse: 9 callbacks suppressed [ 463.497291][T21089] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4067'. [ 463.570065][T20720] veth0_macvtap: entered promiscuous mode [ 463.597000][T20720] veth1_macvtap: entered promiscuous mode [ 463.626643][T20720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.667659][T20720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.815901][ T6113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.864595][ T6113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.908132][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4073'. [ 463.919970][ T6113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.942407][ T6122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.212852][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.248759][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.310322][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4078'. [ 464.380898][T21142] netlink: 'syz.0.4082': attribute type 21 has an invalid length. [ 464.394705][T21142] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.403840][T21142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.412743][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 464.420022][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 464.427308][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 464.427419][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.453406][T21144] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4081'. [ 464.478259][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.519760][T21135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4078'. [ 464.717852][T21140] syzkaller0: entered promiscuous mode [ 464.733120][T21140] syzkaller0: entered allmulticast mode [ 464.827902][T21161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.096622][ T4948] Bluetooth: hci4: command 0x040f tx timeout [ 467.182789][ T4948] Bluetooth: hci4: command 0x040f tx timeout [ 467.701451][T21176] netlink: 'syz.0.4090': attribute type 5 has an invalid length. [ 467.848696][T21192] netlink: 'syz.6.4095': attribute type 5 has an invalid length. [ 467.889137][T21194] netlink: 'syz.1.4097': attribute type 32 has an invalid length. [ 467.923820][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 468.029583][T21194] bond5: option coupled_control: invalid value (192) [ 468.047333][T21194] bond5 (unregistering): Released all slaves [ 468.065966][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 468.112366][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 468.177053][T21215] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4102'. [ 468.220075][T21216] netlink: 'syz.6.4102': attribute type 3 has an invalid length. [ 468.235587][T21217] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 468.250277][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4103'. [ 468.297889][T21222] bridge0: port 1(gretap0) entered disabled state [ 468.304638][T21222] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.485769][T21238] nbd: illegal input index 2958380 [ 468.538549][T21238] __nla_validate_parse: 1 callbacks suppressed [ 468.538567][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4106'. [ 468.595151][T21248] netlink: 'syz.0.4108': attribute type 22 has an invalid length. [ 468.605388][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 468.620233][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4106'. [ 468.714621][T21238] netlink: 'syz.4.4106': attribute type 6 has an invalid length. [ 468.726074][T21238] netlink: 'syz.4.4106': attribute type 7 has an invalid length. [ 468.734816][T21248] netlink: 'syz.0.4108': attribute type 22 has an invalid length. [ 468.744437][T21238] netlink: 'syz.4.4106': attribute type 8 has an invalid length. [ 468.774034][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 468.919678][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4110'. [ 469.064626][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 469.085259][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4112'. [ 469.530940][T21303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4122'. [ 469.600150][T21307] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4124'. [ 469.636804][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4124'. [ 469.668549][T21307] validate_nla: 1 callbacks suppressed [ 469.668567][T21307] netlink: 'syz.5.4124': attribute type 13 has an invalid length. [ 469.824210][ T5747] hsr0: entered promiscuous mode [ 470.103902][T21339] bond5 (unregistering): Released all slaves [ 470.278940][T21347] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 470.336023][ T29] audit: type=1107 audit(1781725815.809:17): pid=21348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ł‹5ž÷Œ•%čĶUżAʁĆĖŁ ė0䁙l…tæŻĶYd’Ųą•/Ö’ Ž' [ 470.460658][T21353] netlink: 'syz.6.4138': attribute type 5 has an invalid length. [ 470.969556][T21378] netlink: 'syz.4.4146': attribute type 2 has an invalid length. [ 471.083032][T21386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.090521][T21386] IPv6: NLM_F_CREATE should be set when creating new route [ 471.269460][T21400] openvswitch: netlink: Missing key (keys=40, expected=80) [ 471.296122][T21395] bond5 (unregistering): Released all slaves [ 471.367738][T21405] syzkaller0: entered promiscuous mode [ 471.390461][T21405] syzkaller0: entered allmulticast mode [ 471.950429][T21437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.205966][T21451] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 472.273581][T21458] openvswitch: netlink: Flow key attr not present in new flow. [ 472.402185][T21452] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 472.536702][T21469] 0ŖX¹¦Dö»: left allmulticast mode [ 472.576191][T21469] erspan0: left promiscuous mode [ 472.587055][T21469] erspan0: left allmulticast mode [ 472.695289][T21469] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.703015][T21469] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.722212][T21484] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 472.867107][T21469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 473.024477][T21500] netlink: 'syz.1.4174': attribute type 11 has an invalid length. [ 473.058325][T21500] netlink: 'syz.1.4174': attribute type 11 has an invalid length. [ 473.171241][ T4948] Bluetooth: hci4: command 0x040f tx timeout [ 473.675528][T21548] __nla_validate_parse: 16 callbacks suppressed [ 473.675548][T21548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4188'. [ 473.723212][T21555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4191'. [ 473.919261][T21570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 474.010299][T21577] netlink: 'syz.5.4195': attribute type 12 has an invalid length. [ 474.191737][T21589] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 474.309230][T21589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.406254][T21591] bond5: (slave veth0_to_bond): making interface the new active one [ 474.423215][T21591] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 474.510454][T21589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.523763][T21589] bond5: (slave bond6): Enslaving as an active interface with a down link [ 474.562884][T21603] syzkaller0: entered promiscuous mode [ 474.595940][T21603] syzkaller0: entered allmulticast mode [ 474.997312][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4205'. [ 475.030646][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4208'. [ 475.054731][T21622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4208'. [ 475.100198][T21622] siw: device registration error -23 [ 475.119773][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4208'. [ 475.157908][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4210'. [ 475.158476][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4208'. [ 475.243663][T21628] netlink: 'syz.0.4210': attribute type 1 has an invalid length. [ 475.257205][T21628] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4210'. [ 475.267112][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4208'. [ 476.157154][T21681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.180354][T21683] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 476.303194][T21689] Cannot find add_set index 0 as target [ 476.667459][T21718] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 476.990790][T21741] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 477.255357][ T57] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 477.565837][T21775] netlink: 'syz.0.4254': attribute type 2 has an invalid length. [ 478.082594][T21809] geneve2: entered allmulticast mode [ 478.263035][T21827] netlink: 'syz.5.4267': attribute type 11 has an invalid length. [ 478.275740][T21827] netlink: 'syz.5.4267': attribute type 11 has an invalid length. [ 478.806847][T21856] __nla_validate_parse: 10 callbacks suppressed [ 478.806866][T21856] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4276'. [ 478.829766][T21856] xt_policy: neither incoming nor outgoing policy selected [ 478.852950][T21838] tipc: Started in network mode [ 478.860582][T21838] tipc: Node identity 0eb3c772d084, cluster identity 4711 [ 478.868947][T21838] tipc: Enabled bearer , priority 0 [ 478.914746][T21838] tipc: Disabling bearer [ 479.075100][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4279'. [ 479.130210][T21865] xfrm1: entered promiscuous mode [ 479.144383][T21865] xfrm1: entered allmulticast mode [ 479.163293][T21871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4279'. [ 479.195747][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4278'. [ 479.311279][T21879] netlink: 'syz.0.4282': attribute type 2 has an invalid length. [ 479.673477][T21870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 479.870663][T21915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4287'. [ 479.935315][T21919] nbd: must specify at least one socket [ 479.982032][T21905] syzkaller1: entered promiscuous mode [ 479.991858][T21905] syzkaller1: entered allmulticast mode [ 480.024524][T21928] ipt_REJECT: TCP_RESET invalid for non-tcp [ 480.099872][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4287'. [ 480.185341][ T4948] block nbd4: Receive control failed (result -32) [ 480.418206][T21947] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4294'. [ 480.463062][T21947] syzkaller1: entered promiscuous mode [ 480.491357][T21947] syzkaller1: entered allmulticast mode [ 480.640426][T21961] netlink: 396 bytes leftover after parsing attributes in process `syz.5.4296'. [ 480.716772][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 480.789729][T21965] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4297'. [ 481.215814][T21994] netlink: 'syz.0.4305': attribute type 12 has an invalid length. [ 481.234134][T21996] netlink: 'syz.0.4305': attribute type 12 has an invalid length. [ 481.422162][T21994] bond5: option primary_reselect: invalid value (255) [ 481.447587][T21994] bond5 (unregistering): Released all slaves [ 481.615796][T21996] bond5: option primary_reselect: invalid value (255) [ 481.630646][T21996] bond5 (unregistering): Released all slaves [ 482.018566][T22004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.053808][T22004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.375012][T22031] netlink: 'syz.6.4312': attribute type 10 has an invalid length. [ 482.414692][T22004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.461658][T22004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.522605][T22031] veth1_macvtap: left promiscuous mode [ 482.537500][T22031] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 482.789769][T22004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.831947][T22004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.159936][T22049] gtp0: entered promiscuous mode [ 483.173363][T22049] gtp0: entered allmulticast mode [ 483.257948][T22004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.288324][T22004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.300174][T22058] netlink: 'syz.4.4320': attribute type 21 has an invalid length. [ 483.464716][T22058] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 483.793456][ T6119] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.815532][ T6119] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.894189][ T1176] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.918896][ T1176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.009684][ T6119] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.025911][ T6119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.156557][ T6119] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.174478][ T6119] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.195383][T22098] netlink: 'syz.4.4331': attribute type 4 has an invalid length. [ 484.288388][T22099] __nla_validate_parse: 2 callbacks suppressed [ 484.288405][T22099] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4331'. [ 484.322609][T22099] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4331'. [ 484.359043][T22098] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4331'. [ 484.379361][T22098] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4331'. [ 484.468378][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'. [ 484.696730][T22111] netlink: 'syz.1.4335': attribute type 17 has an invalid length. [ 484.714446][T22115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.724693][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 484.755345][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4337'. [ 484.756584][T22111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4335'. [ 484.811607][T22119] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.838709][T22111] erspan0: entered promiscuous mode [ 484.894727][T22111] erspan0: left promiscuous mode [ 484.943476][T22121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.949847][T22184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4352'. [ 485.993763][T22185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4353'. [ 486.294115][T22195] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 486.338959][T22195] IPVS: set_ctl: invalid protocol: 153 172.20.20.170:20001 [ 486.354500][T22197] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 486.619378][T22208] netlink: 'syz.0.4358': attribute type 39 has an invalid length. [ 486.897115][T22215] H: renamed from dummy0 (while UP) [ 486.934840][T22218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 487.097579][T22230] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 487.117984][T22232] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 487.147377][T22218] syzkaller0: entered promiscuous mode [ 487.164634][T22218] syzkaller0: entered allmulticast mode [ 488.154444][T22189] Bluetooth: hci6: command 0x0406 tx timeout [ 488.171855][T22189] Bluetooth: hci2: command 0x0406 tx timeout [ 489.438973][T22173] Set syz1 is full, maxelem 65536 reached [ 491.024807][T22247] bond2: option all_slaves_active: invalid value (222) [ 491.074392][T22247] bond2 (unregistering): Released all slaves [ 491.374260][T22274] __nla_validate_parse: 3 callbacks suppressed [ 491.374294][T22274] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4376'. [ 491.527134][T22274] IPVS: Error connecting to the multicast addr [ 491.697777][T22290] can: request_module (can-proto-3) failed. [ 491.774409][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 491.794824][T22299] IPVS: length: 8 != 1152 [ 491.828660][T22297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 491.847816][T22297] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 491.860559][T22297] gretap1: entered promiscuous mode [ 491.871366][T22297] gretap1: entered allmulticast mode [ 492.118425][T22317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4388'. [ 492.266753][T22331] netem: change failed [ 492.287689][T22332] netem: change failed [ 492.327886][T22339] IPVS: Error joining to the multicast group [ 492.375463][T22344] netlink: 'syz.6.4396': attribute type 1 has an invalid length. [ 492.413827][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4396'. [ 492.498936][T22347] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 492.548091][T22347] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 492.636149][T22347] bond5: entered promiscuous mode [ 492.643290][T22347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.680035][T22347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.687305][T22347] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 492.700148][T22347] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 492.725724][T22347] bond5: (slave ip6gre1): making interface the new active one [ 492.741258][T22347] ip6gre1: entered promiscuous mode [ 492.749285][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 492.759423][T22347] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 492.808474][T22358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4401'. [ 492.853552][T22358] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4401'. [ 492.879801][T22358] netlink: 'syz.4.4401': attribute type 6 has an invalid length. [ 492.902427][T22358] netlink: 'syz.4.4401': attribute type 5 has an invalid length. [ 492.923798][T22358] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4401'. [ 492.950885][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'. [ 493.382616][T22386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4406'. [ 493.588119][T22402] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 493.732781][T17526] Bluetooth: hci4: command 0x040f tx timeout [ 493.753375][T22407] bond2: entered promiscuous mode [ 493.767257][T22407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.827808][T22423] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 493.852286][T22423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.864057][T22423] netlink: 'syz.5.4412': attribute type 1 has an invalid length. [ 494.026855][T22433] syzkaller0: entered promiscuous mode [ 494.033111][T22433] syzkaller0: entered allmulticast mode [ 497.308093][T22472] bond6: option resend_igmp: invalid value (32767) [ 497.338450][T22472] bond6: option resend_igmp: allowed values 0 - 255 [ 497.531036][T22497] netlink: 'syz.1.4432': attribute type 1 has an invalid length. [ 497.540027][T22497] netlink: 'syz.1.4432': attribute type 2 has an invalid length. [ 497.550551][T22472] bond6 (unregistering): Released all slaves [ 498.199254][T22529] __nla_validate_parse: 3 callbacks suppressed [ 498.199274][T22529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4440'. [ 498.297254][T22533] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4441'. [ 498.685834][T22550] sit0: left promiscuous mode [ 498.708220][T22510] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 498.842649][T22550] bridge0: port 3(syz_tun) entered disabled state [ 498.895935][T22550] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.903646][T22550] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.961836][T22550] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 499.052651][T22573] macsec1: entered promiscuous mode [ 499.064508][T22573] bond0: entered promiscuous mode [ 499.081467][T22573] bond_slave_0: entered promiscuous mode [ 499.088995][T22573] bond_slave_1: entered promiscuous mode [ 499.118916][T22573] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 499.158063][T22573] bond0: left promiscuous mode [ 499.165304][T22573] bond_slave_0: left promiscuous mode [ 499.178689][T22573] bond_slave_1: left promiscuous mode [ 499.341760][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4453'. [ 499.365632][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4453'. [ 499.429592][T22597] netlink: 'syz.4.4457': attribute type 13 has an invalid length. [ 499.515115][T22604] netlink: 'syz.1.4458': attribute type 11 has an invalid length. [ 499.526179][T22603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4458'. [ 499.560552][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4460'. [ 499.582714][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4459'. [ 499.607040][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4459'. [ 499.698574][T22597] gretap0: refused to change device tx_queue_len [ 499.717586][T22597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 499.918025][T22627] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 499.977613][T22632] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4466'. [ 500.142823][T22647] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.284755][T22651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4472'. [ 500.367059][T22658] netlink: 'syz.1.4475': attribute type 1 has an invalid length. [ 500.491081][T22667] netlink: 'syz.0.4477': attribute type 1 has an invalid length. [ 500.542219][T22667] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 500.569161][T22675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.940976][T22703] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 500.952029][T22703] 8021q: VLANs not supported on ipvlan0 [ 501.213989][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a52d800: rx timeout, send abort [ 501.332517][T22726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.456788][T22733] syz.1.4496: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 501.486260][T22733] CPU: 0 UID: 0 PID: 22733 Comm: syz.1.4496 Not tainted syzkaller #0 PREEMPT(full) [ 501.486295][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.486315][T22733] Call Trace: [ 501.486323][T22733] [ 501.486335][T22733] dump_stack_lvl+0xe8/0x150 [ 501.486366][T22733] warn_alloc+0x249/0x340 [ 501.486395][T22733] ? __pfx_stack_trace_save+0x10/0x10 [ 501.486431][T22733] ? __pfx_warn_alloc+0x10/0x10 [ 501.486470][T22733] ? __kasan_kmalloc+0x93/0xb0 [ 501.486497][T22733] ? __kmalloc_cache_noprof+0x318/0x660 [ 501.486523][T22733] ? xskq_create+0x56/0x170 [ 501.486550][T22733] ? xsk_init_queue+0x8a/0xe0 [ 501.486574][T22733] ? xsk_setsockopt+0x52a/0x960 [ 501.486598][T22733] ? do_sock_setsockopt+0x17c/0x1b0 [ 501.486625][T22733] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 501.486654][T22733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.486682][T22733] __vmalloc_node_range_noprof+0x12c/0x1730 [ 501.486739][T22733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 501.486774][T22733] ? __kasan_kmalloc+0x93/0xb0 [ 501.486807][T22733] vmalloc_user_noprof+0xad/0xe0 [ 501.486835][T22733] ? xskq_create+0xbf/0x170 [ 501.486863][T22733] xskq_create+0xbf/0x170 [ 501.486903][T22733] xsk_init_queue+0x8a/0xe0 [ 501.486930][T22733] xsk_setsockopt+0x52a/0x960 [ 501.486952][T22733] ? __fget_files+0x2a/0x420 [ 501.486977][T22733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 501.487004][T22733] ? __pfx_aa_sk_perm+0x10/0x10 [ 501.487035][T22733] ? aa_sock_opt_perm+0xff/0x1a0 [ 501.487065][T22733] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 501.487089][T22733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 501.487115][T22733] do_sock_setsockopt+0x17c/0x1b0 [ 501.487149][T22733] __x64_sys_setsockopt+0x13d/0x1b0 [ 501.487179][T22733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.487201][T22733] do_syscall_64+0x174/0x580 [ 501.487220][T22733] ? trace_irq_disable+0x3b/0x140 [ 501.487248][T22733] ? clear_bhb_loop+0x40/0x90 [ 501.487273][T22733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.487293][T22733] RIP: 0033:0x7f56ceb9ce59 [ 501.487311][T22733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.487328][T22733] RSP: 002b:00007f56cf9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 501.487350][T22733] RAX: ffffffffffffffda RBX: 00007f56cee15fa0 RCX: 00007f56ceb9ce59 [ 501.487366][T22733] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 501.487378][T22733] RBP: 00007f56cec32d6f R08: 0000000000000004 R09: 0000000000000000 [ 501.487390][T22733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.487402][T22733] R13: 00007f56cee16038 R14: 00007f56cee15fa0 R15: 00007ffdd9f7c488 [ 501.487436][T22733] [ 501.487454][T22733] Mem-Info: [ 501.565650][T22734] veth3: entered promiscuous mode [ 501.575019][T22733] active_anon:6878 inactive_anon:0 isolated_anon:0 [ 501.575019][T22733] active_file:2958 inactive_file:40116 isolated_file:0 [ 501.575019][T22733] unevictable:768 dirty:54 writeback:0 [ 501.575019][T22733] slab_reclaimable:12463 slab_unreclaimable:128193 [ 501.575019][T22733] mapped:39788 shmem:1325 pagetables:1683 [ 501.575019][T22733] sec_pagetables:0 bounce:0 [ 501.575019][T22733] kernel_misc_reclaimable:0 [ 501.575019][T22733] free:1266636 free_pcp:11064 free_cma:0 [ 501.583141][T22734] veth3: entered allmulticast mode [ 501.601667][T22733] Node 0 active_anon:27612kB inactive_anon:0kB active_file:11832kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159152kB dirty:216kB writeback:0kB shmem:3764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16908kB pagetables:6628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 501.722420][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a52d800: abort rx timeout. Force session deactivation [ 501.964095][T22733] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 502.020068][T22749] netlink: 'syz.5.4501': attribute type 3 has an invalid length. [ 502.042020][T22733] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 502.080289][T22733] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 502.087104][T22733] Node 0 DMA32 free:1119644kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27252kB inactive_anon:0kB active_file:11832kB inactive_file:160264kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2553208kB mlocked:0kB bounce:0kB free_pcp:37504kB local_pcp:18012kB free_cma:0kB [ 502.125010][T22733] lowmem_reserve[]: 0 0 0 0 0 [ 502.129916][T22733] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 502.164462][T22733] lowmem_reserve[]: 0 0 0 0 0 [ 502.170320][T22733] Node 1 Normal free:3931500kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:0kB free_cma:0kB [ 502.275969][T22733] lowmem_reserve[]: 0 0 0 0 0 [ 502.297711][T22733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 502.331652][T22733] Node 0 DMA32: 9195*4kB (UME) 5922*8kB (UME) 2924*16kB (UME) 263*32kB (UME) 247*64kB (UME) 767*128kB (UME) 616*256kB (UME) 262*512kB (UME) 145*1024kB (UME) 66*2048kB (UM) 71*4096kB (UM) = 1119644kB [ 502.363357][T22763] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.370749][T22763] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.386872][T22733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 502.410249][T22733] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (M) = 3931552kB [ 502.451873][T22733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.462188][T22733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 502.474645][T22733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.505290][T22733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 502.527144][T22733] 44378 total pagecache pages [ 502.566383][T22733] 0 pages in swap cache [ 502.586892][T22733] Free swap = 124996kB [ 502.609093][T22733] Total swap = 124996kB [ 502.631445][T22733] 2097051 pages RAM [ 502.635748][T22733] 0 pages HighMem/MovableOnly [ 502.652540][T22733] 426961 pages reserved [ 502.669405][T22733] 0 pages cma reserved [ 502.686745][T22777] vlan0: entered promiscuous mode [ 502.700520][T22777] bridge0: entered promiscuous mode [ 503.014601][T22799] vxcan1: entered promiscuous mode [ 503.039013][T22799] vxcan1: entered allmulticast mode [ 503.158331][T22801] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 503.246063][T22811] __nla_validate_parse: 10 callbacks suppressed [ 503.246082][T22811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4517'. [ 503.577696][T22824] openvswitch: netlink: Flow key attribute not present in set flow. [ 504.376554][T22862] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 504.385187][T22862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.485492][T22865] macvtap0: entered promiscuous mode [ 504.491054][T22865] macvtap0: entered allmulticast mode [ 504.496844][T22865] veth1_vlan: entered allmulticast mode [ 504.510947][T22865] macvtap1: entered promiscuous mode [ 504.516407][T22865] macvtap1: entered allmulticast mode [ 506.701948][T22832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.922552][T22873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.944305][T22875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4534'. [ 506.959646][T22876] syzkaller0: entered promiscuous mode [ 506.966890][T22873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.967080][T22876] syzkaller0: entered allmulticast mode [ 506.991077][T22878] syzkaller1: entered promiscuous mode [ 506.997775][T22878] syzkaller1: entered allmulticast mode [ 506.998940][T22869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.446685][T22901] netlink: 'syz.4.4542': attribute type 1 has an invalid length. [ 507.615156][T22915] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4546'. [ 507.652607][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4546'. [ 507.681680][T22911] macvlan2: entered promiscuous mode [ 507.697320][T22911] macvlan2: entered allmulticast mode [ 507.726478][T22911] bond3: entered promiscuous mode [ 507.754428][T22911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.788290][T22911] bond3: left promiscuous mode [ 508.037204][T22922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.063732][T22926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4551'. [ 508.253786][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4554'. [ 508.388849][T22946] netlink: 'syz.6.4556': attribute type 23 has an invalid length. [ 508.432550][T22948] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.545589][T22954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4558'. [ 508.545587][T22946] netlink: 'syz.6.4556': attribute type 30 has an invalid length. [ 508.611927][ T4948] Bluetooth: hci1: command 0x0406 tx timeout [ 508.939990][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4562'. [ 508.963596][T22971] netlink: 'syz.6.4562': attribute type 3 has an invalid length. [ 508.978164][T22971] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4562'. [ 509.349086][T22985] netlink: 'syz.1.4567': attribute type 1 has an invalid length. [ 509.380811][T22985] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4567'. [ 509.657346][T23000] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4574'. [ 509.688915][T23000] syzkaller0: entered promiscuous mode [ 509.697239][T23000] syzkaller0: entered allmulticast mode [ 509.719467][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4574'. [ 509.776500][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4575'. [ 509.840368][T23004] xfrm0 speed is unknown, defaulting to 1000 [ 509.934582][T23017] netlink: 'syz.4.4575': attribute type 16 has an invalid length. [ 510.012441][T23017] netlink: 'syz.4.4575': attribute type 17 has an invalid length. [ 510.070451][T23005] macvtap1: entered promiscuous mode [ 510.076048][T23005] vlan0: entered promiscuous mode [ 510.081806][T23005] macvtap1: entered allmulticast mode [ 510.087373][T23005] vlan0: entered allmulticast mode [ 510.092932][T23005] veth0_vlan: entered allmulticast mode [ 510.384206][T23017] bridge0: port 3(syz_tun) entered blocking state [ 510.390878][T23017] bridge0: port 3(syz_tun) entered forwarding state [ 510.426222][T23017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.484003][T23028] netlink: 'syz.5.4581': attribute type 9 has an invalid length. [ 510.498417][T23017] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.505707][T23017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.516866][T23017] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.525806][T23017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.607993][T23017] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 510.632608][T23017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.647078][T23017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.664483][T23017] ip6gre1: left allmulticast mode [ 510.672678][T23017] ip6gre2: left allmulticast mode [ 510.688445][T23017] veth5: left promiscuous mode [ 510.693904][T23017] veth5: left allmulticast mode [ 510.713294][T23017] macvtap0: left promiscuous mode [ 510.718710][T23017] macvtap0: left allmulticast mode [ 510.724599][T23017] veth1_vlan: left allmulticast mode [ 510.733079][T23017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.742532][T23017] macvtap1: left promiscuous mode [ 510.747659][T23017] vlan0: left promiscuous mode [ 510.753768][T23017] macvtap1: left allmulticast mode [ 510.758988][T23017] vlan0: left allmulticast mode [ 510.765466][T23017] veth0_vlan: left allmulticast mode [ 510.948080][ T6119] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.963105][ T6119] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.994492][ T6119] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.002436][ T5738] IPVS: starting estimator thread 0... [ 511.046141][ T6119] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.091051][T21699] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.100791][T23039] IPVS: using max 26 ests per chain, 62400 per kthread [ 511.142183][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.152367][T21699] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.188682][T21699] ip6_tunnel: ’ xmit: Local address not yet configured! [ 511.218840][ T5738] ip6_tunnel: ’ xmit: Local address not yet configured! [ 511.228476][T21699] ip6_tunnel: ’ xmit: Local address not yet configured! [ 511.615418][T23054] syzkaller0: entered promiscuous mode [ 511.635353][T23054] syzkaller0: entered allmulticast mode [ 511.744564][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.851696][ T5738] ip6_tunnel: ’ xmit: Local address not yet configured! [ 512.051989][ T5738] ip6_tunnel: ’ xmit: Local address not yet configured! [ 512.059838][T23067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.128700][T23072] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4594'. [ 512.179910][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4595'. [ 512.211625][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 512.407541][T23088] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.434528][T23088] erspan0: entered promiscuous mode [ 512.440399][T23090] netlink: 'syz.5.4600': attribute type 62 has an invalid length. [ 512.455641][T23088] gretap0: entered promiscuous mode [ 512.462601][T23088] debugfs: 'hsr1' already exists in 'hsr' [ 512.468398][T23088] Cannot create hsr debugfs directory [ 512.478803][T23086] netem: change failed [ 512.584495][T23093] macvlan2: entered promiscuous mode [ 512.599376][T23093] macvlan2: entered allmulticast mode [ 512.619584][T23093] veth1_to_team: entered promiscuous mode [ 512.655532][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.655963][T23093] veth1_to_team: entered allmulticast mode [ 512.685683][T23093] team0: Port device macvlan2 added [ 512.697637][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.739521][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.764833][T23100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.766070][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.801432][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.824331][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.843294][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.883207][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.907193][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.926348][T23110] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 512.935571][T23095] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 513.108579][T23114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.359868][T23130] __nla_validate_parse: 7 callbacks suppressed [ 513.359886][T23130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4615'. [ 513.536566][T23141] ų: renamed from ip_vti0 [ 513.659476][T23151] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4620'. [ 513.668810][T23151] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4620'. [ 513.670538][T23150] netlink: 'syz.0.4621': attribute type 17 has an invalid length. [ 513.687003][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4621'. [ 513.696562][T23150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4621'. [ 513.878089][T23167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.904176][T23167] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4622'. [ 513.980355][T23174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.996087][T23175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.011839][T23172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.137924][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4629'. [ 514.157719][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 514.181351][T23183] openvswitch: netlink: Flow actions attr not present in new flow. [ 514.247019][T23188] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 514.297199][T23188] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 514.374426][T23201] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 514.572898][T23212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4636'. [ 514.625795][T23218] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4638'. [ 514.929353][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 514.989072][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.028280][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.062941][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.099581][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.131488][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.148133][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.150594][T23247] netlink: 'syz.1.4646': attribute type 1 has an invalid length. [ 515.165988][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.179181][T23247] netlink: 'syz.1.4646': attribute type 1 has an invalid length. [ 515.198840][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.216591][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.233552][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.273915][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.295031][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.321869][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.355580][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.397957][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.464406][T23240] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 515.503688][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.523188][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.551036][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.585547][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.620003][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.643683][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.661391][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.668913][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.686780][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.759917][T23270] bond3: entered promiscuous mode [ 515.773278][T23270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.393069][T23326] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 516.422154][T23326] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 516.865542][T23350] syzkaller0: entered promiscuous mode [ 516.896585][T23350] syzkaller0: entered allmulticast mode [ 517.141012][T23367] xfrm0 speed is unknown, defaulting to 1000 [ 518.812118][ T29] audit: type=1804 audit(1781725864.279:18): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4694" name="/newroot/312/cgroup.controllers" dev="tmpfs" ino=1611 res=1 errno=0 [ 518.861830][ T29] audit: type=1800 audit(1781725864.279:19): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4694" name="cgroup.controllers" dev="tmpfs" ino=1611 res=0 errno=0 [ 518.894417][T23440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.340145][T23449] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 522.376383][T23449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.454866][T23456] tipc: Started in network mode [ 522.459785][T23456] tipc: Node identity 1a4c1b595c6a, cluster identity 246 [ 522.473390][T23456] tipc: Enabled bearer , priority 0 [ 522.503788][T23461] __nla_validate_parse: 7 callbacks suppressed [ 522.503806][T23461] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4703'. [ 522.534712][T23465] syzkaller0: entered promiscuous mode [ 522.547864][T23465] syzkaller0: entered allmulticast mode [ 522.625689][T23466] syzkaller0: entered promiscuous mode [ 522.631669][T23466] syzkaller0: entered allmulticast mode [ 522.639348][T23456] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 522.799547][T23456] tipc: Resetting bearer [ 522.811799][T23456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4701'. [ 522.907347][T23484] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4709'. [ 522.926703][T23485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4709'. [ 522.940197][T23456] geneve2: entered promiscuous mode [ 523.027203][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4709'. [ 523.171516][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 523.171536][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 525.091747][ C0] ip6_tunnel: ’ xmit: Local address not yet configured! [ 526.388204][T23485] xfrm1: entered promiscuous mode [ 526.393688][T23485] xfrm1: entered allmulticast mode [ 526.404985][T23488] bridge1: entered promiscuous mode [ 526.410278][T23488] bridge1: entered allmulticast mode [ 526.421346][T23477] tipc: Resetting bearer [ 526.499214][T23477] tipc: Disabling bearer [ 526.527907][ T5738] tipc: Node number set to 1176902489 [ 526.549138][T23499] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 526.674937][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'. [ 526.710691][T23513] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4716'. [ 526.758857][T23512] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4716'. [ 527.069600][T23535] team0: No ports can be present during mode change [ 527.088773][ T4948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.109807][ T4948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.121482][ T4948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 527.138310][ T4948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 527.149885][ T4948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 527.178021][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4722'. [ 527.739487][T23557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.928093][T23572] validate_nla: 11 callbacks suppressed [ 527.928113][T23572] netlink: 'syz.6.4732': attribute type 17 has an invalid length. [ 527.932047][T23532] xfrm0 speed is unknown, defaulting to 1000 [ 527.935251][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4732'. [ 527.990060][T23572] netlink: 'syz.6.4732': attribute type 5 has an invalid length. [ 528.009087][T23572] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4732'. [ 528.359595][T23594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4741'. [ 528.416485][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4742'. [ 528.459549][T23596] vlan2: entered allmulticast mode [ 528.485946][T23596] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 528.665261][T23606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4747'. [ 528.723374][T23602] bond6: option resend_igmp: invalid value (32767) [ 528.735582][T23602] bond6: option resend_igmp: allowed values 0 - 255 [ 528.750750][T23602] bond6 (unregistering): Released all slaves [ 529.208852][T23636] set match dimension is over the limit! [ 529.217764][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4753'. [ 529.232372][T23632] syzkaller0: entered promiscuous mode [ 529.237988][T23632] syzkaller0: entered allmulticast mode [ 529.249333][T23632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4753'. [ 529.258601][ T4948] Bluetooth: hci7: command tx timeout [ 529.310999][T23639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 529.325516][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4752'. [ 529.695819][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.724030][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.748110][T23532] bridge_slave_0: entered allmulticast mode [ 529.759043][T23532] bridge_slave_0: entered promiscuous mode [ 529.780447][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.796641][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.809799][T23532] bridge_slave_1: entered allmulticast mode [ 529.828319][T23532] bridge_slave_1: entered promiscuous mode [ 529.933360][T23532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.975569][T23532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.106254][T23532] team0: Port device team_slave_0 added [ 530.118482][T23532] team0: Port device team_slave_1 added [ 530.203548][T23532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.210702][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.241443][T23532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.265043][T23532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.281475][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.344713][T23532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.389762][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'. [ 530.496853][T23532] hsr_slave_0: entered promiscuous mode [ 530.514463][T23532] hsr_slave_1: entered promiscuous mode [ 530.529244][T23532] debugfs: 'hsr0' already exists in 'hsr' [ 530.545250][T23532] Cannot create hsr debugfs directory [ 530.645018][T23688] netlink: 'syz.4.4769': attribute type 1 has an invalid length. [ 530.666743][T23688] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4769'. [ 530.676567][T23688] netlink: 'syz.4.4769': attribute type 1 has an invalid length. [ 530.686288][T23688] netlink: 'syz.4.4769': attribute type 8 has an invalid length. [ 530.989537][T23700] debugfs: 'KŠŸu ™crµ±K:‘£’ˆĢ„ŻBßŻ£| “¼ŚŽlS·œ-!' already exists in 'ieee80211' [ 531.332853][ T4948] Bluetooth: hci7: command tx timeout [ 531.763896][T23744] xt_cgroup: xt_cgroup: no path or classid specified [ 531.835677][T23742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.846295][T23742] bridge0: port 3(bond4) entered blocking state [ 531.854116][T23742] bridge0: port 3(bond4) entered disabled state [ 531.861161][T23742] bond4: entered allmulticast mode [ 531.869830][T23742] bond4: entered promiscuous mode [ 532.334603][T23780] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 532.384417][T23787] x_tables: duplicate underflow at hook 2 [ 532.721708][T23805] bond0: (slave bond_slave_0): Releasing backup interface [ 532.923835][T23813] bond6: entered promiscuous mode [ 532.956049][T23821] __nla_validate_parse: 4 callbacks suppressed [ 532.956063][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4804'. [ 533.016587][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4805'. [ 533.258378][T23838] xt_nat: multiple ranges no longer supported [ 533.320634][T23838] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 533.362605][T23838] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 533.411944][ T4948] Bluetooth: hci7: command tx timeout [ 533.436670][T23852] bridge2: entered promiscuous mode [ 533.442326][T23852] bridge2: entered allmulticast mode [ 533.452164][T23854] netlink: 'syz.4.4814': attribute type 1 has an invalid length. [ 533.470262][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4814'. [ 533.698649][T23872] netlink: 'syz.1.4818': attribute type 11 has an invalid length. [ 533.708798][T23872] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4818'. [ 533.835046][T23877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4820'. [ 534.107135][T23889] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4825'. [ 534.410637][T23919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.465382][T23928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4832'. [ 534.524808][T23936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.501608][ T4948] Bluetooth: hci7: command tx timeout [ 537.324791][T23910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.561570][T23951] xt_bpf: check failed: parse error [ 537.780815][T23965] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4847'. [ 537.958038][T23973] netlink: 'syz.0.4850': attribute type 1 has an invalid length. [ 538.012768][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4850'. [ 538.022244][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4850'. [ 538.033651][T23973] bond7: entered promiscuous mode [ 538.052575][T23973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.348008][T23973] bond7: (slave bridge2): making interface the new active one [ 538.367076][T23973] bridge2: entered promiscuous mode [ 538.380398][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'. [ 538.404686][T23973] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 538.453799][T23982] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 538.473005][T23982] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 538.531862][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.816062][T23984] macvtap1: entered promiscuous mode [ 538.821466][T23984] vlan0: entered promiscuous mode [ 538.826851][T23984] macvtap1: entered allmulticast mode [ 538.833586][T23984] vlan0: entered allmulticast mode [ 538.838723][T23984] veth0_vlan: entered allmulticast mode [ 539.003976][T24003] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 539.096727][T24015] netlink: 'syz.4.4860': attribute type 3 has an invalid length. [ 539.117236][T24015] netlink: 'syz.4.4860': attribute type 3 has an invalid length. [ 539.129342][T24008] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 539.144430][T24008] bond5 (unregistering): Released all slaves [ 539.160262][T24015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4860'. [ 539.520175][T24048] bridge3: entered promiscuous mode [ 539.529726][T24048] bridge3: entered allmulticast mode [ 539.538924][T24048] team0: Port device bridge3 added [ 539.605426][T24055] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 539.606519][T24041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.622205][T24052] bridge4: entered promiscuous mode [ 539.630497][T24052] bridge4: entered allmulticast mode [ 539.644842][T24052] team0: Port device bridge4 added [ 539.704741][T24062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.839911][T24071] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4876'. [ 539.902886][ T5738] ip6_tunnel: ’ xmit: Local address not yet configured! [ 539.921576][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 540.030343][ T5816] IPVS: starting estimator thread 0... [ 540.038244][T24082] IPVS: sh: FWM 3 0x00000003 - no destination available [ 540.048014][T24082] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 540.131753][T24083] IPVS: using max 34 ests per chain, 81600 per kthread [ 540.206491][T24094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.373587][T24109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4886'. [ 540.383347][ T9732] ip6_tunnel: ’ xmit: Local address not yet configured! [ 540.405912][T24109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4886'. [ 540.663030][T24120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4891'. [ 540.727295][T24133] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 540.806877][T24138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4895'. [ 540.829808][T24141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.867996][T24142] sctp: [Deprecated]: syz.0.4896 (pid 24142) Use of int in max_burst socket option. [ 540.867996][T24142] Use struct sctp_assoc_value instead [ 540.884703][T24141] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 540.933498][ T5738] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 541.223654][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4902'. [ 541.247166][T24163] veth0_macvtap: left promiscuous mode [ 542.373072][ C0] ip6_tunnel: ’ xmit: Local address not yet configured! [ 542.407133][T24214] netlink: 'syz.6.4918': attribute type 1 has an invalid length. [ 542.422183][T24214] netlink: 'syz.6.4918': attribute type 1 has an invalid length. [ 542.582395][T24231] netlink: 'syz.6.4923': attribute type 21 has an invalid length. [ 542.592565][T24231] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.766432][T24245] netlink: 'syz.4.4927': attribute type 39 has an invalid length. [ 542.857797][T24252] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 542.993770][T24259] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 543.109094][T24264] netlink: 'syz.0.4934': attribute type 1 has an invalid length. [ 543.120400][T24264] __nla_validate_parse: 4 callbacks suppressed [ 543.120419][T24264] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4934'. [ 543.137298][T24264] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4934'. [ 543.662634][T24292] xt_socket: unknown flags 0x8 [ 543.844432][T24303] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4947'. [ 543.854338][T24305] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4948'. [ 543.890306][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4949'. [ 544.117988][T24323] IPVS: sed: FWM 3 0x00000003 - no destination available [ 544.129075][T24319] syzkaller0: entered promiscuous mode [ 544.429485][T24328] geneve4: entered promiscuous mode [ 544.507869][T24330] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4955'. [ 544.576748][T24334] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4957'. [ 544.589996][T24336] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4957'. [ 544.740117][T24346] bond9: option lp_interval: invalid value (0) [ 544.751882][T24346] bond9: option lp_interval: allowed values 1 - 2147483647 [ 544.762251][T24346] bond9 (unregistering): Released all slaves [ 544.965996][T24364] netlink: 'syz.0.4966': attribute type 6 has an invalid length. [ 545.029601][T24364] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.065476][T24364] bond8: (slave lo): Enslaving as an active interface with an up link [ 545.075567][T24364] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 545.094385][T24372] bond0: option miimon: invalid value (18446744071829782528) [ 545.103829][T24372] bond0: option miimon: allowed values 0 - 2147483647 [ 545.238943][T24383] netdevsim netdevsim6: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 545.348520][T24387] netlink: 'syz.6.4972': attribute type 1 has an invalid length. [ 545.388323][T24387] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 545.399197][T24387] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 545.412001][T24387] bond5: (slave ip6gre1): making interface the new active one [ 545.420623][T24387] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 545.547342][T24395] netlink: 'syz.6.4973': attribute type 1 has an invalid length. [ 545.559263][T24395] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4973'. [ 545.575982][T24396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4974'. [ 545.692672][T24403] netlink: 'syz.6.4976': attribute type 3 has an invalid length. [ 545.704622][T24403] netlink: 'syz.6.4976': attribute type 3 has an invalid length. [ 545.742000][T24410] netlink: 'syz.1.4977': attribute type 3 has an invalid length. [ 545.749853][T24410] netlink: 'syz.1.4977': attribute type 3 has an invalid length. [ 545.830732][T24416] Bluetooth: hci1: too big key_count value 32778 [ 546.102786][T24432] syzkaller1: entered promiscuous mode [ 546.108406][T24432] syzkaller1: entered allmulticast mode [ 546.228002][T24436] netlink: 'syz.0.4987': attribute type 1 has an invalid length. [ 546.252991][T24436] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.279718][T24436] bond9: (slave veth0_to_bond): making interface the new active one [ 546.289533][T24436] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.309126][T24436] bond9: entered allmulticast mode [ 546.315077][T24436] veth0_to_bond: entered allmulticast mode [ 546.323783][T24436] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 546.336109][T24436] macvlan3: entered promiscuous mode [ 546.341526][T24436] macvlan3: entered allmulticast mode [ 546.347616][T24436] bond9: entered promiscuous mode [ 546.352920][T24436] veth0_to_bond: entered promiscuous mode [ 546.362391][T24436] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 546.370045][T24436] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 546.387683][T24436] bond9: left promiscuous mode [ 546.392595][T24436] veth0_to_bond: left promiscuous mode [ 546.513626][T24441] team0: Port device team_slave_0 removed [ 547.260205][T24466] netlink: 'syz.0.4996': attribute type 2 has an invalid length. [ 547.305326][T24466] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 547.329092][T24458] syz.6.4994 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 547.351539][T24458] CPU: 1 UID: 0 PID: 24458 Comm: syz.6.4994 Not tainted syzkaller #0 PREEMPT(full) [ 547.351584][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.351606][T24458] Call Trace: [ 547.351614][T24458] [ 547.351623][T24458] dump_stack_lvl+0xe8/0x150 [ 547.351650][T24458] dump_header+0xd3/0x4b0 [ 547.351681][T24458] oom_kill_process+0x3ab/0x970 [ 547.351708][T24458] out_of_memory+0x1064/0x1480 [ 547.351729][T24458] ? try_charge_memcg+0xbca/0x1590 [ 547.351767][T24458] ? __pfx_out_of_memory+0x10/0x10 [ 547.351787][T24458] ? do_raw_spin_unlock+0xf5/0x210 [ 547.351823][T24458] try_charge_memcg+0xc74/0x1590 [ 547.351851][T24458] ? __lock_acquire+0x683/0x2cd0 [ 547.351881][T24458] ? __pfx_try_charge_memcg+0x10/0x10 [ 547.351927][T24458] ? charge_memcg+0x20/0x2b0 [ 547.351963][T24458] charge_memcg+0x19c/0x2b0 [ 547.351987][T24458] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 547.352011][T24458] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 547.352040][T24458] __swap_cache_prepare_and_add+0xdd/0x700 [ 547.352068][T24458] ? page_rmappable_folio+0x9a/0x170 [ 547.352103][T24458] swap_cache_alloc_folio+0xf1/0x240 [ 547.352129][T24458] swap_cluster_readahead+0x355/0x670 [ 547.352158][T24458] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 547.352198][T24458] ? get_vma_policy+0x27b/0x3c0 [ 547.352228][T24458] swapin_readahead+0x196/0xc50 [ 547.352253][T24458] ? swap_table_get+0x1e/0x260 [ 547.352280][T24458] ? __pfx_swapin_readahead+0x10/0x10 [ 547.352303][T24458] ? swap_table_get+0x1e/0x260 [ 547.352323][T24458] ? swap_table_get+0x1e/0x260 [ 547.352339][T24458] ? swap_table_get+0x1e/0x260 [ 547.352360][T24458] ? swap_table_get+0x216/0x260 [ 547.352382][T24458] ? swap_cache_get_folio+0x2ea/0x2f0 [ 547.352410][T24458] do_swap_page+0x545/0x5340 [ 547.352438][T24458] ? __pte_offset_map+0x29/0x240 [ 547.352474][T24458] ? do_swap_page+0x128/0x5340 [ 547.352494][T24458] ? __pfx_do_swap_page+0x10/0x10 [ 547.352512][T24458] ? __pte_offset_map+0x1ae/0x240 [ 547.352537][T24458] ? pte_offset_map_rw_nolock+0xea/0x160 [ 547.352563][T24458] handle_mm_fault+0x124e/0x3080 [ 547.352601][T24458] ? handle_mm_fault+0xec/0x3080 [ 547.352632][T24458] ? __pfx_handle_mm_fault+0x10/0x10 [ 547.352650][T24458] ? lock_vma_under_rcu+0x45a/0x500 [ 547.352703][T24458] do_user_addr_fault+0xa4d/0x1340 [ 547.352735][T24458] ? trace_page_fault_user+0x84/0x1e0 [ 547.352757][T24458] exc_page_fault+0x6a/0xc0 [ 547.352783][T24458] asm_exc_page_fault+0x26/0x30 [ 547.352799][T24458] RIP: 0033:0x7ff5d086a80c [ 547.352814][T24458] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 547.352828][T24458] RSP: 002b:00007ffdf239acd0 EFLAGS: 00010202 [ 547.352843][T24458] RAX: 0000000000000000 RBX: 00007ff5d0c15fa0 RCX: 000055558d43b808 [ 547.352854][T24458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.352862][T24458] RBP: 00007ff5d0c17da0 R08: 0000000000000000 R09: 0000000000000000 [ 547.352871][T24458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000085ade [ 547.352879][T24458] R13: 00007ff5d0c1618c R14: 000000000008584d R15: 00007ff5d0c16180 [ 547.352904][T24458] [ 547.354868][T24458] memory: usage 307200kB, limit 307200kB, failcnt 202 [ 547.701550][T24458] memory+swap: usage 305832kB, limit 9007199254740988kB, failcnt 0 [ 547.710075][T24458] kmem: usage 304700kB, limit 9007199254740988kB, failcnt 0 [ 547.717780][T24458] Memory cgroup stats for /syz6: [ 547.718033][T24458] cache 0 [ 547.728299][T24458] rss 0 [ 547.731111][T24458] rss_huge 0 [ 547.737805][T24458] shmem 0 [ 547.740795][T24458] mapped_file 0 [ 547.744340][T24458] dirty 0 [ 547.747292][T24458] writeback 0 [ 547.750575][T24458] workingset_refault_anon 14 [ 547.758072][T24458] workingset_refault_file 0 [ 547.763673][T24458] swap 196608 [ 547.766992][T24458] swapcached 266240 [ 547.770798][T24458] pgpgin 17647 [ 547.775160][T24458] pgpgout 17644 [ 547.778652][T24458] pgfault 34103 [ 547.782884][T24458] pgmajfault 8 [ 547.786282][T24458] inactive_anon 12288 [ 547.790258][T24458] active_anon 0 [ 547.794312][T24458] inactive_file 0 [ 547.797986][T24458] active_file 0 [ 547.802445][T24458] unevictable 0 [ 547.807110][T24458] hierarchical_memory_limit 314572800 [ 547.815240][T24458] hierarchical_memsw_limit 9223372036854771712 [ 547.821745][T24458] total_cache 0 [ 547.825244][T24458] total_rss 0 [ 547.828531][T24458] total_rss_huge 0 [ 547.856559][T24458] total_shmem 0 [ 547.865531][T24458] total_mapped_file 0 [ 547.873051][T24458] total_dirty 0 [ 547.877338][T24458] total_writeback 0 [ 547.882432][T24458] total_workingset_refault_anon 14 [ 547.893838][T24458] total_workingset_refault_file 0 [ 547.904930][T24458] total_swap 196608 [ 547.914085][T24458] total_swapcached 266240 [ 547.922621][T24458] total_pgpgin 17647 [ 547.930775][T24458] total_pgpgout 17644 [ 547.943454][T24458] total_pgfault 34103 [ 547.952644][T24458] total_pgmajfault 8 [ 547.957556][T24458] total_inactive_anon 12288 [ 547.963699][T24458] total_active_anon 0 [ 547.972933][T24458] total_inactive_file 0 [ 547.982541][T24458] total_active_file 0 [ 547.994812][T24458] total_unevictable 0 [ 548.003452][T24458] anon_cost 0 [ 548.010216][T24458] file_cost 0 [ 548.021230][T24458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4994,pid=24458,uid=0 [ 548.055680][T24458] Memory cgroup out of memory: Killed process 24458 (syz.6.4994) total-vm:102424kB, anon-rss:1252kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 548.288952][T24482] __nla_validate_parse: 14 callbacks suppressed [ 548.288972][T24482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5000'. [ 548.476306][T24487] tipc: New replicast peer: 255.255.255.255 [ 548.491853][T24487] tipc: Enabled bearer , priority 10 [ 548.513357][T24487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5001'. [ 548.804187][T24498] netlink: 'syz.0.5002': attribute type 11 has an invalid length. [ 548.812631][T24498] netlink: 'syz.0.5002': attribute type 4 has an invalid length. [ 548.820487][T24498] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.5002'. [ 548.883381][T24500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5003'. [ 549.273582][T24507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5006'. [ 549.612749][ T9732] tipc: Node number set to 3728197490 [ 549.972960][T24535] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 549.983334][T24535] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5015'. [ 550.258927][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5018'. [ 550.507911][T24556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.668389][T24565] lo speed is unknown, defaulting to 1000 [ 550.676275][T24565] lo speed is unknown, defaulting to 1000 [ 550.689676][T24565] lo speed is unknown, defaulting to 1000 [ 550.696587][T24565] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 550.711502][T24565] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 550.728832][T24565] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 550.747140][T24565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 550.772567][T24565] lo speed is unknown, defaulting to 1000 [ 550.782890][T24565] lo speed is unknown, defaulting to 1000 [ 550.789607][T24565] lo speed is unknown, defaulting to 1000 [ 550.796954][T24565] lo speed is unknown, defaulting to 1000 [ 550.803866][T24565] lo speed is unknown, defaulting to 1000 [ 550.811482][T24565] lo speed is unknown, defaulting to 1000 [ 550.818216][T24565] lo speed is unknown, defaulting to 1000 [ 550.825876][T24565] lo speed is unknown, defaulting to 1000 [ 550.832941][T24565] lo speed is unknown, defaulting to 1000 [ 550.839679][T24565] lo speed is unknown, defaulting to 1000 [ 550.846948][T24565] lo speed is unknown, defaulting to 1000 [ 551.154532][T24586] GUP no longer grows the stack in syz.6.5027 (24586): 200000003000-20000000a000 (200000001000) [ 551.166602][T24586] CPU: 1 UID: 0 PID: 24586 Comm: syz.6.5027 Not tainted syzkaller #0 PREEMPT(full) [ 551.166632][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.166645][T24586] Call Trace: [ 551.166653][T24586] [ 551.166662][T24586] dump_stack_lvl+0xe8/0x150 [ 551.166692][T24586] __get_user_pages+0x238c/0x2720 [ 551.166749][T24586] ? down_read_killable+0x1bb/0x340 [ 551.166780][T24586] __gup_longterm_locked+0xd52/0x15c0 [ 551.166810][T24586] ? lock_acquire+0x106/0x350 [ 551.166852][T24586] gup_fast_fallback+0x1d82/0x20d0 [ 551.166874][T24586] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.166943][T24586] ? __pfx_gup_fast_fallback+0x10/0x10 [ 551.166971][T24586] ? is_valid_gup_args+0x11f/0x200 [ 551.166997][T24586] ? get_user_pages_fast+0x4d/0xb0 [ 551.167024][T24586] __iov_iter_get_pages_alloc+0x378/0xa40 [ 551.167056][T24586] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 551.167094][T24586] iov_iter_get_pages2+0x5e/0xa0 [ 551.167120][T24586] __se_sys_vmsplice+0x7b5/0x1660 [ 551.167167][T24586] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 551.167199][T24586] ? __pfx_futex_wake+0x10/0x10 [ 551.167228][T24586] ? do_raw_spin_lock+0x12b/0x2f0 [ 551.167326][T24586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.167348][T24586] do_syscall_64+0x174/0x580 [ 551.167368][T24586] ? trace_irq_disable+0x3b/0x140 [ 551.167397][T24586] ? clear_bhb_loop+0x40/0x90 [ 551.167423][T24586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.167443][T24586] RIP: 0033:0x7ff5d099ce59 [ 551.167463][T24586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.167480][T24586] RSP: 002b:00007ff5d18d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 551.167502][T24586] RAX: ffffffffffffffda RBX: 00007ff5d0c15fa0 RCX: 00007ff5d099ce59 [ 551.167517][T24586] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 551.167530][T24586] RBP: 00007ff5d0a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.167550][T24586] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 551.167562][T24586] R13: 00007ff5d0c16038 R14: 00007ff5d0c15fa0 R15: 00007ffdf239ab68 [ 551.167598][T24586] [ 551.168786][T24586] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5027'. [ 551.585716][T24593] xt_NFQUEUE: number of total queues is 0 [ 552.173404][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5036'. [ 552.254187][T24616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5037'. [ 553.213459][T24620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.440626][T24657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5043'. [ 553.474425][T24658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5042'. [ 553.495712][T24660] netlink: 'syz.0.5044': attribute type 1 has an invalid length. [ 553.505216][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 553.655629][T24667] netlink: 592 bytes leftover after parsing attributes in process `syz.0.5046'. [ 554.286136][T24678] nft_compat: unsupported protocol 0 [ 554.365771][T24684] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 554.606156][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5057'. [ 554.855296][T24724] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 554.870848][T24718] xt_connbytes: Forcing CT accounting to be enabled [ 554.879295][T24718] xt_bpf: check failed: parse error [ 554.886094][T24718] netdevsim netdevsim6: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 554.900496][T24718] x_tables: duplicate underflow at hook 2 [ 554.983952][T24731] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5063'. [ 554.995794][T24731] nftables ruleset with unbound set [ 555.100062][T24740] xt_ecn: cannot match TCP bits for non-tcp packets [ 555.393171][T24754] netlink: 'syz.0.5071': attribute type 1 has an invalid length. [ 555.426052][T24754] bond10: entered promiscuous mode [ 555.432083][T24754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.450108][T24757] netlink: 'syz.0.5071': attribute type 1 has an invalid length. [ 555.509638][T24760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.556987][T24751] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 555.571023][T24751] netlink: 'syz.6.5070': attribute type 1 has an invalid length. [ 555.579097][T24751] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5070'. [ 555.588810][T24751] netlink: 'syz.6.5070': attribute type 1 has an invalid length. [ 555.596968][T24751] netlink: 'syz.6.5070': attribute type 8 has an invalid length. [ 555.605171][T24751] netlink: 606 bytes leftover after parsing attributes in process `syz.6.5070'. [ 555.912465][T24773] nbd6: detected capacity change from 0 to 63 [ 555.919009][T24774] block nbd6: NBD_DISCONNECT [ 555.924369][T24774] block nbd6: Disconnected due to user request. [ 555.933893][T24773] netlink: 'syz.6.5076': attribute type 21 has an invalid length. [ 555.940399][T24774] block nbd6: shutting down sockets [ 555.941834][T24773] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5076'. [ 555.941917][T24773] netlink: 'syz.6.5076': attribute type 4 has an invalid length. [ 555.941932][T24773] netlink: 'syz.6.5076': attribute type 5 has an invalid length. [ 555.941944][T24773] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5076'. [ 555.952207][ C0] blk_print_req_error: 138 callbacks suppressed [ 555.952225][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.959094][T24773] netlink: 'syz.6.5076': attribute type 21 has an invalid length. [ 555.963994][ C0] buffer_io_error: 138 callbacks suppressed [ 555.964009][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 556.020674][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.029814][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 556.038399][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.041380][ C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.047527][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 556.056562][ C1] Buffer I/O error on dev nbd6, logical block 3, async page read [ 556.072194][T23645] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.081815][T23645] Buffer I/O error on dev nbd6, logical block 0, async page read [ 556.089762][T23645] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.099437][T23645] Buffer I/O error on dev nbd6, logical block 1, async page read [ 556.107782][T23645] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.119981][T23645] Buffer I/O error on dev nbd6, logical block 2, async page read [ 556.128973][T23645] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.139783][T23645] Buffer I/O error on dev nbd6, logical block 3, async page read [ 556.148137][T23645] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.157674][T23645] Buffer I/O error on dev nbd6, logical block 0, async page read [ 556.167323][T23645] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.186933][T23645] Buffer I/O error on dev nbd6, logical block 1, async page read [ 556.204044][T23645] ldm_validate_partition_table(): Disk read failed. [ 556.217988][T23645] Dev nbd6: unable to read RDB block 0 [ 556.228453][T23645] nbd6: unable to read partition table [ 556.238277][T24778] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.253470][T24778] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.272251][T23645] ldm_validate_partition_table(): Disk read failed. [ 556.282715][T24778] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 556.283142][T23645] Dev nbd6: unable to read RDB block 0 [ 556.299622][T23645] nbd6: unable to read partition table [ 556.578598][T24799] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 556.769256][T24813] batadv_slave_1: entered promiscuous mode [ 556.809533][T24811] batadv_slave_1: left promiscuous mode [ 556.887625][T24815] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 556.914627][T24815] bond11 (unregistering): Released all slaves [ 557.077073][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.128462][T24835] bond6: Removing last arp target with arp_interval on [ 557.750474][ T6124] dvmrp0: left allmulticast mode [ 557.940981][ T6124] batman_adv: batadv0: Removing interface: gretap2 [ 558.035281][ T6124] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 558.250150][ T6124] bond0 (unregistering): Released all slaves [ 558.260560][ T6124] bond1 (unregistering): Released all slaves [ 558.275283][ T6124] bond2 (unregistering): Released all slaves [ 558.290822][ T6124] bond3 (unregistering): Released all slaves [ 558.311699][ T6124] bond4 (unregistering): Released all slaves [ 558.339175][ T6124] bond5 (unregistering): Released all slaves [ 558.365704][ T6124] bond6 (unregistering): Released all slaves [ 558.394516][ T6124] bond7 (unregistering): Released all slaves [ 558.415221][ T6124] bond8 (unregistering): Released all slaves [ 558.445161][ T6124] bond9 (unregistering): Released all slaves [ 558.472449][ T6124] bond10 (unregistering): Released all slaves [ 558.501472][ T6124] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 558.513094][T17526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 558.534432][T17526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 558.535841][ T6124] bond11 (unregistering): Released all slaves [ 558.544026][T17526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 558.556065][T17526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.563789][T17526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 558.570433][ T6124] bond12 (unregistering): Released all slaves [ 558.790482][ T6124] : left promiscuous mode [ 559.006104][ T6124] tipc: Left network mode [ 559.046635][T24858] xfrm0 speed is unknown, defaulting to 1000 [ 559.227784][T24858] lo speed is unknown, defaulting to 1000 [ 559.497703][T24858] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.505082][T24858] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.513753][T24858] bridge_slave_0: entered allmulticast mode [ 559.526282][T24858] bridge_slave_0: entered promiscuous mode [ 559.535171][T24858] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.543498][T24858] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.550874][T24858] bridge_slave_1: entered allmulticast mode [ 559.563563][T24858] bridge_slave_1: entered promiscuous mode [ 559.731307][ T6124] hsr_slave_0: left promiscuous mode [ 559.737411][ T6124] hsr_slave_1: left promiscuous mode [ 559.794976][ T6124] pim6reg (unregistering): left allmulticast mode [ 560.048689][T24829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.237470][T24858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.259200][T24858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.273188][T24878] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 560.324333][T24858] team0: Port device team_slave_0 added [ 560.349009][T24858] team0: Port device team_slave_1 added [ 560.429396][T24884] __nla_validate_parse: 5 callbacks suppressed [ 560.429414][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5100'. [ 560.438757][T24858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.465273][T24858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.492251][T24858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.525036][T24858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.533912][T24858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.560981][T24858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.575271][T24881] syzkaller0: entered promiscuous mode [ 560.580894][T24881] syzkaller0: entered allmulticast mode [ 560.627415][ T4948] Bluetooth: hci5: command tx timeout [ 560.647279][T24881] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5099'. [ 560.700837][T24858] hsr_slave_0: entered promiscuous mode [ 560.708489][T24858] hsr_slave_1: entered promiscuous mode [ 560.715238][T24858] debugfs: 'hsr0' already exists in 'hsr' [ 560.721079][T24858] Cannot create hsr debugfs directory [ 560.835640][ T6124] IPVS: stop unused estimator thread 0... [ 561.015314][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5103'. [ 561.024822][T24896] validate_nla: 3 callbacks suppressed [ 561.024843][T24896] netlink: 'syz.0.5103': attribute type 5 has an invalid length. [ 561.039307][T24896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5103'. [ 561.079523][T24898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 561.336428][T17526] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 561.354294][T24913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5110'. [ 561.356546][T17526] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 561.378597][T17526] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 561.390273][T17526] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 561.398315][T17526] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 561.782148][T24929] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 561.970543][T24945] lo: entered promiscuous mode [ 561.978264][T24945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.997652][T24910] xfrm0 speed is unknown, defaulting to 1000 [ 562.158097][T24955] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5116'. [ 562.410865][T24910] lo speed is unknown, defaulting to 1000 [ 562.692991][ T4948] Bluetooth: hci5: command tx timeout [ 562.804439][T24910] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.811900][T24910] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.819350][T24910] bridge_slave_0: entered allmulticast mode [ 562.827979][T24910] bridge_slave_0: entered promiscuous mode [ 562.836857][T24910] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.844386][T24910] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.854808][T24910] bridge_slave_1: entered allmulticast mode [ 562.864743][T24910] bridge_slave_1: entered promiscuous mode [ 562.906600][T24910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.920202][T24910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.966604][T24910] team0: Port device team_slave_0 added [ 562.976081][T24910] team0: Port device team_slave_1 added [ 563.010191][T24910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.018282][T24910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.044824][T24910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.058332][T24910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.066007][T24910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.092364][T24910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.176528][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5121'. [ 563.191318][T24910] hsr_slave_0: entered promiscuous mode [ 563.197969][T24910] hsr_slave_1: entered promiscuous mode [ 563.202195][T24981] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.206924][T24910] debugfs: 'hsr0' already exists in 'hsr' [ 563.219294][T24910] Cannot create hsr debugfs directory [ 563.456018][T24990] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.491473][ T4948] Bluetooth: hci8: command tx timeout [ 563.706259][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 564.110341][T25029] vlan2: entered allmulticast mode [ 564.116590][T25029] bond0: entered allmulticast mode [ 564.122921][T25029] bond_slave_1: entered allmulticast mode [ 564.272671][T25039] netlink: 'syz.0.5142': attribute type 25 has an invalid length. [ 564.379549][T25048] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5143'. [ 564.773257][ T4948] Bluetooth: hci5: command tx timeout [ 565.244293][T25097] netlink: 'syz.6.5155': attribute type 1 has an invalid length. [ 565.301228][T25097] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 565.331029][T25097] veth5: entered promiscuous mode [ 565.339699][T25097] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 565.357896][ T35] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 565.358498][T25097] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.458156][T25109] x_tables: duplicate underflow at hook 1 [ 565.481359][ T417] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 565.542398][T25115] ip6gretap0: left promiscuous mode [ 565.551744][T25115] ip6gretap0: left allmulticast mode [ 565.571404][ T4948] Bluetooth: hci8: command tx timeout [ 565.962258][T25146] netlink: 'syz.6.5169': attribute type 1 has an invalid length. [ 566.022128][T25146] 8021q: adding VLAN 0 to HW filter on device bond8 [ 566.133377][T25155] netlink: 'syz.6.5170': attribute type 1 has an invalid length. [ 566.164616][T25155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.189426][T25155] vlan3: entered allmulticast mode [ 566.200224][T25155] bond9: entered allmulticast mode [ 566.338565][T25167] __nla_validate_parse: 4 callbacks suppressed [ 566.338587][T25167] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5172'. [ 566.419879][T25171] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5173'. [ 566.852284][ T4948] Bluetooth: hci5: command tx timeout [ 567.170355][T25210] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5179'. [ 567.348281][T25219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5181'. [ 567.358172][T25219] openvswitch: netlink: Flow key attr not present in new flow. [ 567.651961][ T4948] Bluetooth: hci8: command tx timeout [ 567.753649][T25244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5185'. [ 567.882726][T25252] lo speed is unknown, defaulting to 1000 [ 567.890786][T25252] lo speed is unknown, defaulting to 1000 [ 567.897995][T25252] lo speed is unknown, defaulting to 1000 [ 568.228064][T25252] infiniband sz1: set active [ 568.233557][ T7431] lo speed is unknown, defaulting to 1000 [ 568.243107][T25252] infiniband sz1: added lo [ 568.268236][T25252] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 568.291759][T25252] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 568.319270][T25252] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 568.382986][T25252] RDS/IB: sz1: added [ 568.400870][T25252] smc: adding ib device sz1 with port count 1 [ 568.415660][T25252] smc: ib device sz1 port 1 has no pnetid [ 568.427252][T25278] netlink: 'syz.0.5190': attribute type 4 has an invalid length. [ 568.436545][ T7436] lo speed is unknown, defaulting to 1000 [ 568.445942][T25252] lo speed is unknown, defaulting to 1000 [ 568.446510][T25278] netlink: 'syz.0.5190': attribute type 5 has an invalid length. [ 568.611897][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 568.823346][T25252] lo speed is unknown, defaulting to 1000 [ 569.093626][T25252] lo speed is unknown, defaulting to 1000 [ 569.246580][T25252] lo speed is unknown, defaulting to 1000 [ 569.374536][T25252] lo speed is unknown, defaulting to 1000 [ 569.512776][T25252] lo speed is unknown, defaulting to 1000 [ 569.650932][T25252] lo speed is unknown, defaulting to 1000 [ 569.731638][ T4948] Bluetooth: hci8: command tx timeout [ 569.809691][T25252] lo speed is unknown, defaulting to 1000 [ 570.031538][T25252] lo speed is unknown, defaulting to 1000 [ 570.050969][T25316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 570.086875][T25316] bond9: (slave veth0_to_bond): Releasing active interface [ 570.094745][T25316] veth0_to_bond: left allmulticast mode [ 570.105551][T25316] bridge4: port 1(veth0_to_bond) entered blocking state [ 570.113674][T25316] bridge4: port 1(veth0_to_bond) entered disabled state [ 570.121083][T25316] veth0_to_bond: entered allmulticast mode [ 570.129719][T25316] veth0_to_bond: entered promiscuous mode [ 570.265118][T25252] lo speed is unknown, defaulting to 1000 [ 570.443796][T25252] lo speed is unknown, defaulting to 1000 [ 570.626683][T25252] lo speed is unknown, defaulting to 1000 [ 571.620804][T25347] lo: left promiscuous mode [ 571.625962][T25347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.105368][T25379] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 572.218800][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5214'. [ 572.541761][T25404] Bluetooth: MGMT ver 1.23 [ 572.738977][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 572.748708][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 572.759605][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 572.769695][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 572.795927][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5224'. [ 572.805542][T25418] netlink: 'syz.6.5224': attribute type 7 has an invalid length. [ 572.814312][T25418] netlink: 'syz.6.5224': attribute type 8 has an invalid length. [ 572.823372][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5224'. [ 572.849915][T25420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5225'. [ 572.860499][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5225'. [ 572.923831][T25423] netlink: 'syz.0.5226': attribute type 49 has an invalid length. [ 573.383049][T25453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5235'. [ 573.395538][T25453] xt_l2tp: missing protocol rule (udp|l2tpip) [ 574.120981][T25482] netlink: 'syz.6.5247': attribute type 2 has an invalid length. [ 574.243531][T25489] netlink: 'syz.0.5249': attribute type 3 has an invalid length. [ 574.252076][T25489] netlink: 'syz.0.5249': attribute type 1 has an invalid length. [ 574.324394][T25491] bridge_slave_0 (unregistering): left allmulticast mode [ 574.333857][T25491] bridge_slave_0 (unregistering): left promiscuous mode [ 574.341021][T25491] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.523234][T25526] openvswitch: netlink: IP tunnel dst address not specified [ 575.651470][ C0] ip6_tunnel: ’ xmit: Local address not yet configured! [ 575.740060][T25541] syzkaller0: entered promiscuous mode [ 575.747509][T25541] syzkaller0: entered allmulticast mode [ 575.846529][T25544] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 576.095997][T25561] netlink: 'syz.6.5265': attribute type 29 has an invalid length. [ 576.120622][T25561] netlink: 'syz.6.5265': attribute type 29 has an invalid length. [ 576.222645][T25564] netlink: 'syz.0.5267': attribute type 1 has an invalid length. [ 576.254777][T25564] 8021q: adding VLAN 0 to HW filter on device bond12 [ 576.288544][T25564] bond12: (slave gretap0): making interface the new active one [ 576.298660][T25564] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 576.739032][T25597] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 577.183371][T25630] IPVS: Unknown mcast interface: vcan0 [ 579.975763][ T4948] Bluetooth: hci8: command tx timeout [ 580.292837][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.699331][T25652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.829038][T25661] lo speed is unknown, defaulting to 1000 [ 580.841448][T25661] lo speed is unknown, defaulting to 1000 [ 580.863563][T25661] lo speed is unknown, defaulting to 1000 [ 580.870349][T25661] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 580.887621][T25661] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 580.905045][T25661] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 580.942005][T25661] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 581.010925][T25661] lo speed is unknown, defaulting to 1000 [ 581.024865][T25661] lo speed is unknown, defaulting to 1000 [ 581.033600][T25661] lo speed is unknown, defaulting to 1000 [ 581.041050][T25661] lo speed is unknown, defaulting to 1000 [ 581.049150][T25661] lo speed is unknown, defaulting to 1000 [ 581.058014][T25661] lo speed is unknown, defaulting to 1000 [ 581.066308][T25661] lo speed is unknown, defaulting to 1000 [ 581.074582][T25661] lo speed is unknown, defaulting to 1000 [ 581.084209][T25661] lo speed is unknown, defaulting to 1000 [ 581.095033][T25661] lo speed is unknown, defaulting to 1000 [ 581.108744][T25661] lo speed is unknown, defaulting to 1000 [ 581.116623][T25661] lo speed is unknown, defaulting to 1000 [ 581.244952][T25683] erspan0: entered allmulticast mode [ 581.391786][T25692] __nla_validate_parse: 16 callbacks suppressed [ 581.391807][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5302'. [ 581.565107][T25689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5301'. [ 582.556543][T25750] tipc: Started in network mode [ 582.562461][T25750] tipc: Node identity 7a6fbc9d0e76, cluster identity 4711 [ 582.569714][T25750] tipc: Enabled bearer , priority 0 [ 582.602415][T25750] syzkaller0: entered promiscuous mode [ 582.607914][T25750] syzkaller0: entered allmulticast mode [ 582.614694][T25750] tipc: Resetting bearer [ 582.625756][T25749] tipc: Resetting bearer [ 585.264862][ T30] INFO: task syz.2.3818:20090 blocked for more than 143 seconds. [ 585.297757][ T30] Not tainted syzkaller #0 [ 585.302944][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.312567][ T30] task:syz.2.3818 state:D stack:26432 pid:20090 tgid:20089 ppid:16778 task_flags:0x400040 flags:0x00080002 [ 585.325484][ T30] Call Trace: [ 585.328859][ T30] [ 585.332171][ T30] __schedule+0x1840/0x57a0 [ 585.336759][ T30] ? __lock_acquire+0x683/0x2cd0 [ 585.341908][ T30] ? __pfx___schedule+0x10/0x10 [ 585.346826][ T30] ? schedule+0x90/0x360 [ 585.351121][ T30] schedule+0x164/0x360 [ 585.355458][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.361030][ T30] __mutex_lock+0x7c5/0x1590 [ 585.365847][ T30] ? __mutex_lock+0x5c5/0x1590 [ 585.370748][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 585.377217][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.382723][ T30] ? stack_trace_save+0xa9/0x100 [ 585.387860][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 585.393311][ T30] ? stack_depot_save_flags+0x33/0x800 [ 585.398806][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 585.405040][ T30] ? kasan_save_track+0x4f/0x80 [ 585.409992][ T30] ? kasan_save_track+0x3e/0x80 [ 585.415339][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 585.420568][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 585.427483][ T30] ? __alloc_skb+0x2bd/0x7a0 [ 585.432154][ T30] ? __netlink_dump_start+0x589/0x7b0 [ 585.437542][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 585.443628][ T30] ? genl_rcv_msg+0x5e1/0x7a0 [ 585.448355][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 585.453355][ T30] ? genl_rcv+0x28/0x40 [ 585.457546][ T30] ? netlink_unicast+0x7bb/0x940 [ 585.462822][ T30] ? netlink_sendmsg+0x813/0xb40 [ 585.467830][ T30] ? ____sys_sendmsg+0x9b9/0xa20 [ 585.472840][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 585.477977][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.483450][ T30] ? do_syscall_64+0x174/0x580 [ 585.488268][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.495117][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 585.501875][ T30] ? rcu_is_watching+0x15/0xb0 [ 585.506688][ T30] ? trace_kmalloc+0x2a/0xf0 [ 585.511362][ T30] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 585.517990][ T30] genl_dumpit+0x10b/0x1b0 [ 585.523114][ T30] netlink_dump+0x711/0xee0 [ 585.527725][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 585.532847][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 585.537668][ T30] ? genl_start+0x497/0x6d0 [ 585.542947][ T30] __netlink_dump_start+0x589/0x7b0 [ 585.548207][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 585.553997][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 585.560258][ T30] ? genl_get_cmd+0x523/0x960 [ 585.565162][ T30] ? __pfx_genl_start+0x10/0x10 [ 585.570077][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 585.575061][ T30] ? __pfx_genl_done+0x10/0x10 [ 585.579881][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 585.585181][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 585.589768][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.595043][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 585.601806][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 585.607509][ T30] netlink_rcv_skb+0x226/0x4a0 [ 585.612350][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.617399][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.622932][ T30] ? down_read+0x270/0x2e0 [ 585.627864][ T30] ? genl_rcv+0xd/0x40 [ 585.632061][ T30] genl_rcv+0x28/0x40 [ 585.636084][ T30] netlink_unicast+0x7bb/0x940 [ 585.640895][ T30] netlink_sendmsg+0x813/0xb40 [ 585.646257][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.652116][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.657157][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.662621][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.667967][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 585.672852][ T30] ? __might_fault+0xaf/0x130 [ 585.677557][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.683090][ T30] ? import_iovec+0x73/0xa0 [ 585.687650][ T30] ___sys_sendmsg+0x2a5/0x360 [ 585.692439][ T30] ? __lock_acquire+0x683/0x2cd0 [ 585.697418][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.702962][ T30] ? futex_wait+0x2a2/0x390 [ 585.707529][ T30] ? __fget_files+0x2a/0x420 [ 585.712229][ T30] ? __fget_files+0x3a2/0x420 [ 585.716953][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.722133][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.728042][ T30] ? rcu_is_watching+0x15/0xb0 [ 585.733047][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.739633][ T30] do_syscall_64+0x174/0x580 [ 585.744417][ T30] ? trace_irq_disable+0x3b/0x140 [ 585.749932][ T30] ? clear_bhb_loop+0x40/0x90 [ 585.754693][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.760626][ T30] RIP: 0033:0x7fb4ab59ce59 [ 585.765312][ T30] RSP: 002b:00007fb4ac4d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.773843][ T30] RAX: ffffffffffffffda RBX: 00007fb4ab815fa0 RCX: 00007fb4ab59ce59 [ 585.781995][ T30] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004 [ 585.789995][ T30] RBP: 00007fb4ab632d6f R08: 0000000000000000 R09: 0000000000000000 [ 585.798056][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.806207][ T30] R13: 00007fb4ab816038 R14: 00007fb4ab815fa0 R15: 00007ffc781e89b8 [ 585.818739][ T30] [ 585.821986][ T30] INFO: task syz.2.3818:20097 blocked for more than 143 seconds. [ 585.830409][ T30] Not tainted syzkaller #0 [ 585.835501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.844287][ T30] task:syz.2.3818 state:D stack:26688 pid:20097 tgid:20089 ppid:16778 task_flags:0x400040 flags:0x00080002 [ 585.860731][ T30] Call Trace: [ 585.864221][ T30] [ 585.867224][ T30] __schedule+0x1840/0x57a0 [ 585.871851][ T30] ? __lock_acquire+0x683/0x2cd0 [ 585.876837][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 585.882165][ T30] ? __pfx___schedule+0x10/0x10 [ 585.887113][ T30] ? schedule+0x90/0x360 [ 585.892380][ T30] schedule+0x164/0x360 [ 585.896608][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.902210][ T30] __mutex_lock+0x7c5/0x1590 [ 585.906863][ T30] ? __mutex_lock+0x5c5/0x1590 [ 585.911699][ T30] ? netlink_dump+0xe7/0xee0 [ 585.916332][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.921974][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.928120][ T30] netlink_dump+0xe7/0xee0 [ 585.933128][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 585.938209][ T30] ? netlink_recvmsg+0x5bf/0xa50 [ 585.943253][ T30] ? kmem_cache_free+0x182/0x650 [ 585.948261][ T30] netlink_recvmsg+0x683/0xa50 [ 585.953128][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 585.958446][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.963551][ T30] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 585.968894][ T30] ? security_socket_recvmsg+0x7e/0x2c0 [ 585.975342][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 585.980703][ T30] sock_recvmsg+0x172/0x1b0 [ 585.985329][ T30] __sys_recvfrom+0x240/0x3c0 [ 585.990084][ T30] ? __pfx___sys_recvfrom+0x10/0x10 [ 585.995376][ T30] ? exc_page_fault+0x6a/0xc0 [ 586.000095][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 586.005527][ T30] __x64_sys_recvfrom+0xde/0x100 [ 586.010517][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.016794][ T30] do_syscall_64+0x174/0x580 [ 586.021567][ T30] ? trace_irq_disable+0x3b/0x140 [ 586.026659][ T30] ? clear_bhb_loop+0x40/0x90 [ 586.031585][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.037990][ T30] RIP: 0033:0x7fb4ab55d68e [ 586.042802][ T30] RSP: 002b:00007fb4ac4b4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 586.051557][ T30] RAX: ffffffffffffffda RBX: 00007fb4ac4b66c0 RCX: 00007fb4ab55d68e [ 586.059573][ T30] RDX: 0000000000001000 RSI: 00007fb4ac4b5000 RDI: 0000000000000004 [ 586.067653][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.075716][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 586.083909][ T30] R13: 00007fb4ac4b4f58 R14: 00007fb4ac4b5000 R15: 0000000000000000 [ 586.092062][ T30] [ 586.095177][ T30] [ 586.095177][ T30] Showing all locks held in the system: [ 586.103112][ T30] 1 lock held by khungtaskd/30: [ 586.108040][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 586.117980][ T30] 3 locks held by kworker/u8:7/417: [ 586.123367][ T30] #0: ffff8880316bf940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.135667][ T30] #1: ffffc900030afc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.150241][ T30] #2: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 586.159870][ T30] 2 locks held by getty/5385: [ 586.164731][ T30] #0: ffff8880370f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 586.174636][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 586.184822][ T30] 3 locks held by kworker/u8:15/6119: [ 586.190398][ T30] #0: ffff88813fe7c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.202219][ T30] #1: ffffc90005b57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.213474][ T30] #2: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 586.222564][ T30] 3 locks held by kworker/0:10/7431: [ 586.227855][ T30] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.239383][ T30] #1: ffffc900056e7c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 586.252545][ T30] #2: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 586.262402][ T30] 2 locks held by syz.3.1606/11707: [ 586.267631][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 586.275914][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 586.286280][ T30] 3 locks held by syz.2.3818/20090: [ 586.291697][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 586.299950][ T30] #1: ffff8880342546e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 586.310552][ T30] #2: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 586.321112][ T30] 1 lock held by syz.2.3818/20097: [ 586.326268][ T30] #0: ffff8880342546e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 586.336161][ T30] 7 locks held by syz-executor/23532: [ 586.342063][ T30] #0: ffff8880353e2410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 586.351034][ T30] #1: ffff88805a9fec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 586.360864][ T30] #2: ffff8880288b5a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 586.371153][ T30] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 586.381724][ T30] #4: ffff888021fff128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 586.392372][ T30] #5: ffff888076887258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 586.402810][ T30] #6: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x692/0xde0 [ 586.412410][ T30] 3 locks held by syz.4.4935/24267: [ 586.417653][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 586.426067][ T30] #1: ffff8880347166e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 586.436611][ T30] #2: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 586.447639][ T30] 2 locks held by syz.1.4986/24434: [ 586.453633][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 586.461892][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 586.472341][ T30] 4 locks held by syz-executor/24858: [ 586.477837][ T30] #0: ffff8880353e2410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 586.487000][ T30] #1: ffff888076da0c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 586.496910][ T30] #2: ffff8880288b5a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 586.506984][ T30] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 586.517325][ T30] 4 locks held by syz-executor/24910: [ 586.522894][ T30] #0: ffff8880353e2410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 586.531924][ T30] #1: ffff888088cca480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 586.541778][ T30] #2: ffff8880288b5a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 586.552442][ T30] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 586.562881][ T30] 2 locks held by syz.0.5319/25749: [ 586.568107][ T30] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 586.577123][ T30] #1: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 586.588185][ T30] 1 lock held by syz.6.5321/25754: [ 586.593404][ T30] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 586.602958][ T30] 1 lock held by syz.6.5321/25755: [ 586.608177][ T30] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 586.617039][ T30] 2 locks held by dhcpcd/25757: [ 586.621932][ T30] #0: ffff8880368cc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 586.631645][ T30] #1: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 586.642697][ T30] [ 586.645094][ T30] ============================================= [ 586.645094][ T30] [ 586.655447][ T30] NMI backtrace for cpu 0 [ 586.655465][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 586.655484][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.655493][ T30] Call Trace: [ 586.655500][ T30] [ 586.655507][ T30] dump_stack_lvl+0xe8/0x150 [ 586.655533][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 586.655555][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 586.655583][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 586.655606][ T30] sys_info+0x135/0x170 [ 586.655622][ T30] watchdog+0xfd7/0x1030 [ 586.655648][ T30] ? watchdog+0x1c7/0x1030 [ 586.655674][ T30] kthread+0x389/0x470 [ 586.655693][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.655711][ T30] ? __pfx_kthread+0x10/0x10 [ 586.655730][ T30] ret_from_fork+0x514/0xb70 [ 586.655749][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 586.655765][ T30] ? __switch_to+0xc89/0x1420 [ 586.655795][ T30] ? __pfx_kthread+0x10/0x10 [ 586.655818][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.655854][ T30] [ 586.655880][ T30] Sending NMI from CPU 0 to CPUs 1: [ 586.770415][ C1] NMI backtrace for cpu 1 [ 586.770436][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 586.770453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.770463][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 586.770494][ C1] Code: 9b 83 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 02 27 00 fb f4 7c ff 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 586.770507][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 586.770523][ C1] RAX: 0000000000195f3f RBX: ffffffff819a301a RCX: 0000000080000001 [ 586.770534][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa1bbe RDI: ffffffff8c2899a0 [ 586.770545][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 586.770557][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 586.770567][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 1ffff11003b5c000 [ 586.770578][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 586.770591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.770601][ C1] CR2: 00005557adada168 CR3: 00000000763d4000 CR4: 00000000003526f0 [ 586.770615][ C1] Call Trace: [ 586.770627][ C1] [ 586.770633][ C1] default_idle+0x9/0x20 [ 586.770650][ C1] default_idle_call+0x72/0xb0 [ 586.770668][ C1] do_idle+0x36a/0x5f0 [ 586.770689][ C1] ? __pfx_do_idle+0x10/0x10 [ 586.770711][ C1] cpu_startup_entry+0x43/0x60 [ 586.770727][ C1] start_secondary+0x101/0x110 [ 586.770749][ C1] common_startup_64+0x13e/0x147 [ 586.770777][ C1] [ 586.771665][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 586.771688][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 586.771709][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.771722][ T30] Call Trace: [ 586.771730][ T30] [ 586.771739][ T30] vpanic+0x56c/0xa60 [ 586.771764][ T30] ? __pfx___schedule+0x10/0x10 [ 586.771790][ T30] ? __pfx_vpanic+0x10/0x10 [ 586.771819][ T30] panic+0xc5/0xd0 [ 586.771838][ T30] ? __pfx_panic+0x10/0x10 [ 586.771855][ T30] ? preempt_schedule_common+0x82/0xd0 [ 586.771880][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 586.771907][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 586.771932][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 586.771958][ T30] watchdog+0x1030/0x1030 [ 586.771990][ T30] ? watchdog+0x1c7/0x1030 [ 586.772019][ T30] kthread+0x389/0x470 [ 586.772043][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.772064][ T30] ? __pfx_kthread+0x10/0x10 [ 586.772086][ T30] ret_from_fork+0x514/0xb70 [ 586.772109][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 586.772127][ T30] ? __switch_to+0xc89/0x1420 [ 586.772154][ T30] ? __pfx_kthread+0x10/0x10 [ 586.772176][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.772212][ T30] [ 587.056053][ T30] Kernel Offset: disabled [ 587.060373][ T30] Rebooting in 86400 seconds..