last executing test programs: 2m25.884660018s ago: executing program 1 (id=4507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r4, &(0x7f0000000240)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe1}, @jmp={0x5, 0x1, 0x4, 0xb, 0xb, 0x80}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x5, 0x6, 0x4, 0xffffffffffffffc0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x7, 0x4e, &(0x7f00000005c0)=""/78, 0x41100, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xb, 0x7ff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x1, 0x3, 0xd, 0xc}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x3, 0x1, 0x2, 0x0, 0x7, 0x80, 0xffffffffffffffff}, @map_fd={0x18, 0x526f3d1322b86f21, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000280)='syzkaller\x00', 0xe8, 0xf1, &(0x7f00000002c0)=""/241, 0x41100, 0x4, '\x00', r5, @cgroup_sysctl, r6, 0x8, &(0x7f0000000440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x4, 0xfffffffc}, 0x10, 0x0, r7, 0x6, 0x0, &(0x7f00000007c0)=[{0x2, 0x2, 0x6, 0xa}, {0x2, 0x2, 0x7, 0x3}, {0x5, 0x4, 0x5, 0x9}, {0x3, 0x5, 0x1, 0x2}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x2, 0x9, 0x7}], 0x10, 0x3}, 0x94) 2m25.654545509s ago: executing program 1 (id=4511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0x100}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100000000000000500000a14000000020a010200ff0000000000000a000026240000000c0a010100000000000000000a0000010900010073797a310000000004000380140000001100010000000000000000040000000a0061aa9db5"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m25.417828614s ago: executing program 1 (id=4515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd700000dcdf250700000005fe018008000700", @ANYBLOB='\b'], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000040)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) 2m24.139551136s ago: executing program 1 (id=4518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m23.967574957s ago: executing program 1 (id=4524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r2, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_macvtap\x00'}]}, 0x30}}, 0x0) 2m23.820714226s ago: executing program 1 (id=4529): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}, {&(0x7f0000000000)=""/81, 0x51}], 0x2}, 0x7377e9a917217d18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}, {&(0x7f0000000000)=""/81, 0x51}], 0x2}, 0x7377e9a917217d18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 2m8.679979136s ago: executing program 32 (id=4529): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}, {&(0x7f0000000000)=""/81, 0x51}], 0x2}, 0x7377e9a917217d18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}, {&(0x7f0000000000)=""/81, 0x51}], 0x2}, 0x7377e9a917217d18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) 2.144770639s ago: executing program 0 (id=6475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000000) 2.142559897s ago: executing program 0 (id=6478): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x45, 0xef3e, 0x1000, 0x50, 0x3, 0x1000, 0x2, {0x0, @in6={{0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x7, 0x8, 0x5, 0x3, 0x2}}, &(0x7f0000000100)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x45, 0xef3e, 0x1000, 0x50, 0x3, 0x1000, 0x2, {0x0, @in6={{0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x7, 0x8, 0x5, 0x3, 0x2}}, &(0x7f0000000100)=0xb0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xfffff801, @dev, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x24}, 0x8) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) (async) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x1fffffffffffffd8, &(0x7f0000001880)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.126548753s ago: executing program 4 (id=6479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000001c0)={0x1, 0x8, 0x9}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000014000280040001000800020000000000040004"], 0x40}}, 0x2008040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r2, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000001c0)={0x1, 0x8, 0x9}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000014000280040001000800020000000000040004"], 0x40}}, 0x2008040) (async) 1.978525418s ago: executing program 2 (id=6484): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x15}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x26, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xdd}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0xffffffee, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=0x1, r2, 0x4, 0x4, 0x0, @void, @value=r2, @void, @void, r3}, 0x20) 1.941181753s ago: executing program 4 (id=6485): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffdd2) (async, rerun: 32) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x264, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x17, 0x8, 0x3, 0x200, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x1}, {0x7, 0x5}, {0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x6, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xd26, 0x7f, 0x2, 0x5, 0x5, 0x6d1e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x6, 0x6, 0xf, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0xc, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x9, 0x624d, 0x5, 0x0, 0x1, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x10, 0x9d30, 0x6, 0x4, 0xff00, 0x9, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x7}, {0x0, 0x6}, {0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x5}, {0x2, 0x9}, {0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x2}, {0x6}, {0x0, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7, 0x81, 0x0, 0xf40, 0x8940, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf75, 0x8, 0x8001, 0x0, 0x81, 0x7ff, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x2}, {0x0, 0x3}, {0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x5}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x60, 0xb, 0x0, 0x6, 0x1b, 0x1, 0x6, 0x2, 0x30, 0x12, 0x36, 0x12, 0xc, 0x18, 0x58, 0x36, 0x48, 0x60, 0x60, 0x3, 0x48, 0x36, 0x2, 0x12, 0x1, 0x0, 0x24, 0x4, 0x0, 0x6]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x5}, {0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x8, 0x3, 0x3, 0x8000, 0x3, 0x7, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x400, 0x36b9, 0x8b, 0x0, 0x6591, 0x7]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x3}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x8}, {0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x1}, {0x4, 0xa}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xd2, 0x0, 0x9, 0x35, 0xce, 0x7384, 0x7fff]}}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x2c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d", 0x87}], 0x1}}], 0x2, 0x2090) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.716430573s ago: executing program 5 (id=6486): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) 1.715369254s ago: executing program 4 (id=6487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="acf17953e0c11e65c6c3f441976c7345017991a29e40925f5661fe3abfd61db9f55a701e5dede2c620b1dfef098e5682338c2868b81d35d768e48261675834303cd6ba43d764c0d18c791feaf696d74493f88e44fe6811", 0x57) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) r4 = socket(0x23, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.708939693s ago: executing program 0 (id=6488): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x29, 0x0, &(0x7f0000000100)) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xf4, 0x10}, &(0x7f0000000680)=0xc) (async) unshare(0x28000600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2d, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x4}, 0x10) (async) close(0x3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) (async, rerun: 64) r9 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000009000)=r8, 0x4) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x602, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20080) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e6bd34c21665a04543ed1470e84e806cfaa9333c2109272b17de779106e70c79975ae210e1c0056395836697c7bd8e6457ff0fec92ab6b756b7ed94680acfd78340c52eaf73f67ce14527bf3b83d525e67de24a4b754c70cc57cd9c96347a17b2cfe0f36acae07323f752a54afa76b06ca9015217804bee75be234573f34f063c66e6db2b2d66d4d4ad9e303df893569568fa274ea4a615e238a143eb3220649377d31582e112dcc39745926f14bdbc920e05a989ab2e0cf2df26b0a176c0b684f86860ea67c55393ceee476cd5513fed7078d5d9b6aa37e043912fb9864437e17fd", @ANYRES16=r12, @ANYBLOB="000129bd7000fddbdf25070000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000011) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1f}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)={0x2854, 0x44, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x6}]}]}, @nested={0x2828, 0x19, 0x0, 0x1, [@nested={0xe0, 0x88, 0x0, 0x1, [@nested={0x4, 0xcb}, @typed={0x8, 0x31, 0x0, 0x0, @pid=r10}, @generic="be340d71b84beacc4232837d999ec1f65a6fe67d06de3a60f3089fe9d440d2e3343ce4cd61da002a497ccc08685ce7546739c6699cb91726ec60640549a27f93b7959cf642ee005ce6079ecec265ef29011bef33eda8d23c1a637b2985ae8b2ef4daac1609a6979267d6ee7aaa48fec8340a050aee42b1f787b78a88c48f530315233ae20403a0a2f42234112d44359c31984f6d86fc39eaec762183d98aaac49c140d01f3f4c64d6a407ae40f9969c83176ed969325a28c09ad82c11861e8621c09376e3855118d287688c9", @nested={0x4, 0xd}]}, @generic="3b5e8fd6f2065d6973b018e0549ae64e529fc4d12c71e81d0a7f45f7dd3fb856e202be3675a94f744c3990a7dac19d958fd3b163b733bc8a40b6618aa13b8485a7f14921558cd244ad3b796f3c2379f59710be414341e29b35bf6ed1b3c0a7789c95f4b315df7c87c3543d81535a0e92bf808c5780eb2340ad561f515f9f3fdfcacb4066d647ffca9f425c390dd3b37bb17cb6a9152f1ec0b93ce9200e3450eb45042f6f134db8baa34e7e491c98", @nested={0x14, 0x67, 0x0, 0x1, [@nested={0x4, 0xb6}, @typed={0x8, 0x102, 0x0, 0x0, @pid}, @typed={0x4, 0x127}]}, @generic="20d4dd3f9dcf09a8959af4628b195761bf4294be3890f13a81e55a4d2a79967a3a73216d34f45acbcd0c7c2d3ee1bdca22f09f9b371ca98a1d4bbb5b8546da04196ac053af2150960036dee5a4a1954da80fbb529f9f4f0a302623e9f9c6890470cd2e7db8999302ed01e57734258bfef7dc0139a5d2e06064733b8544cc6f462dc795d8dfd73bfadd475e1e8df07d0c73a67a7590504157bb27cc", @nested={0x13bc, 0x87, 0x0, 0x1, [@typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}, @nested={0x1280, 0x5d, 0x0, 0x1, [@nested={0x1258, 0x135, 0x0, 0x1, [@nested={0x4, 0x123}, @nested={0x4, 0xe0}, @generic="999e95954d59510d5b3fe2ae06c76125e876dc5feb53fe6a61fd7e3a109cc849afc2778e4e6cb48264a0f24ee7f718c1301bee9b59bee217104efd6a9327fc5e1ce62682104c63869d9df97fc5b1a4868f91c8d0e7b0c4e772957b7bdc822d71692c076308cbb09ddd906f733b53433b1e3b1b256417e1724d0f6acde5018713d042bf06ba4140438f0a262bbb6da52524d8886baec306b68138eef342b81396343eeac36587b1f9551be426f8f77696ebfedbe7d990f2130f06bf7fbf9ba917603b926a4b878287ba30b69392996ae4ea794b99cd4cc74f86479703da0be11d636505f95107ce1b19f56bbb", @typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xb3}, @generic="77d5df1ffc96131418913731283f1842041ab5ff821cb6610c841a37ea402b9138f102f6f030158049d086bed2ece6fb41c3d222c00f3e19ee7139d4effad4d0bbe3e1112888a41dce85002937ca9ea0ed58dd60c7dffc99be7a3c9175507f8c0d38f4e258d1d497226530d1b51d15689e704aec088ff1e0bb9dd9f3064d96bdb11d9c404cd814b208425664c9f6", @nested={0x4, 0x39}, @generic="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", @nested={0x4, 0xf5}, @generic="5f749597c00e662f1828dd71e14bd18833f187e74891006227ba99f38f99e9134c478f9a18ce1b6427c32f6f5fc8ff4c15dcd0d17d96aee51c918846cddef6c01d555ad93792b45ab464ff369e677321efe78d078603e75ea6a09e4d923eca58eec96b64529cce406c5773a9c6ddb805122be4a5d4e4952f9298d7d1b5bbdf6ec2780b7d927318e36f608ae0f65201e7ae48ae07d8b43ef02bf13a65ab778a4d4fe5b612557b8589f719297c83e1b713c64bee150c1aee619727004318b6"]}, @typed={0x21, 0x14a, 0x0, 0x0, @binary="fb625520f026f35fc8b3893f44ba805eecc9007b6117501a8960486c4c"}]}, @generic="8f711f4e26a56d6399bddb5db2757f4ac692e9f2f2ca314a4b0cf5dd03f508e2f490bdb40864b969f6e5d44c175c94ca269498fb99b0179d6e1d5a026136b6f24abe356f1d16f29c980093b4255f988fb7cee57591a8913a40d4b290705be0151c2c43f4e67d31491cda00a6a6736ed57139b27e6353e81c12d9eb5f36", @nested={0x4, 0x4c}, @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x2}, @generic="d551a025176f2d7eadc9f795e4f2855d007dc6be4029d6e85d693b3db88f170b3f5775b885afd6edc1f0819c29b9462eb98732dc1c035a31fa97144aab10f2a421a2c0308f21c4a0fc6a3d94e782f54262220d82217a8b9ad11fdb3bb456d036172cb10db5551fe0d403b08a0b83792bc9718e57b592f424ada22c4b2d0fcecc73cc7ba4bc67a5f7e2c9d8b09589700a180df7c60113d5bed0ed08809e4699ed5e76820db8922a"]}, @generic="78bc7dd073caeb368e3c27d55f17eb38f617feb7aa1f7bbde4dc01bd9f9f6ad33df503d1404bbc0bc2266c763b2557bcd00700000030d68bb18cbf8ae18e6f967d5b10a37f9f6cd7d4bcee70ba96b67f2c8882bc3fb37447aca76b6359c1258da1cfc385d4c702cea8465e5e92c7bd04b6b51ae65d91a0d107e550329a32cac53780b652a8e53932155b68bd875d7f9e54f14cf53bbfd242f785ea9bdad92ac14e1022c486aa2e256d1bcd3a51e7e2849a6e784aabbf11817d0793bcd964cb4fd1ad56da6da38e249b166907ff6da2ca4459f0863b3b49d10f0405f39733b30fad0cd40d3f0d884a2f39d8455748a98714f984", @nested={0x1136, 0x54, 0x0, 0x1, [@generic="00676301c050b7fc6033bf15b5f0c548491726e14c4fc5f2785737e853a508dec76dd0e980615d6c8dc5b6d3978cfec902b88b6a55ee734feec0ad6a31b99fd08192362c663af4a2cba541a0a274a0c16519ceca6abaf0dce29cd7a627c03ac6e6522d29e1edabb17ec38de006275044b2d046fe34a79d55544ba928ee95c0ad4a2ee2d0138c7c366cec6ecaa84f7bc34ee7e6ebb80c5f79e16f7eaf8b953a2378bb9978cc31e1d45944", @generic="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", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="2fbcaa80ffb5994a721ad09ebaebc52aa2a86adabb10c50ce02a69bfb82a9268c1fb16f9a0fffbd6aa23691d5712f0a6dd3fc1c678a8d6b0cb0c18fb048cdf832038f0aaee12f0959aa25483896d4696caedd3576aea2a5d219d72cd418bdb65309337f48016ab545d71530d9a8dcb5f231f7ceb"]}]}]}, 0x2854}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.708483033s ago: executing program 2 (id=6489): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa0000000000000000001c0000000000003c00000700000000ffffffff000000000000000000000000000000000300"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000040)={r8, 0x8001}, 0x8) ioctl$sock_netrom_SIOCDELRT(r0, 0x8916, 0x0) 1.704008655s ago: executing program 5 (id=6490): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r1, &(0x7f0000000080)=""/38, 0x26) (async) read(r1, &(0x7f0000000080)=""/38, 0x26) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) listen(r0, 0x0) 1.61905457s ago: executing program 0 (id=6491): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000640)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bind$unix(r4, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61144f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58d"], 0x0}, 0x94) (async) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0xfffffffffffffd47, 0x2, 0x6, 0xc454ac0687790d44, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20040000) (async, rerun: 32) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r9, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x7c, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa47}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400000}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* rr'], 0x9) (async) close(0x4) (async) sendmsg$nl_route(r0, 0x0, 0x4008840) syz_emit_ethernet(0x4c, &(0x7f0000000400)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}, "3383da3a5544a645035d17bb48125a23758fd9f514758cb814ca443d8d4e3e77e2b145653fc991e42df9"}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.591704516s ago: executing program 4 (id=6493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2000000000000029, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095", @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.55112921s ago: executing program 5 (id=6494): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='ip6gre0\x00') 1.483046707s ago: executing program 0 (id=6495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002a00)=0x0) r2 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a40)={0x0, 0x0, 0x0}, &(0x7f0000002a80)=0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') (async) r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r18, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0}, &(0x7f0000003600)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003640)={0x0, 0x0, 0x0}, &(0x7f0000003680)=0xc) sendmmsg$unix(r0, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000440)="bce7aa949ce0cf2a001a3bc7d4855c80b2f5419e29a2c8033da905ea50e051f652affec51c512277998fc3b3f0ae1ce2be746f09d4fbe290b1a09485992b902561ffab3c2f43a1783ec56d88480caf4f079368460f99edf0250f7adc7d4b9c698929d3f53fe54ef4214077e8a2987f6a1dbe895ae012666236871cfb99add6a0a13312b829616b07977f5b2a8e2634a01d9813ba99fe94c98c17955fef4d94b03046caa02aa118828a29b84ccf1e34e728cdf98e812ddaaebb41e0ccf0e5bd58f182864880", 0xc5}, {&(0x7f0000000540)="32d65b50e4bacd", 0x7}, {&(0x7f0000001540)="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", 0x1000}], 0x3, &(0x7f00000026c0)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x60, 0x4000000}}, {{&(0x7f0000002740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)="faa4b9d999e026fce1c32ebe5ca7681be7827d0d56283d07e096300573203f56b480a9456af99f23e65e6c2135fa96d627b581c609fc93f8b7783b128ee40409acc57158d96b53aa4c7df995ef3e2ba170413e6e18b03cd7457c1012e6643d480cb337c72b5cf81030940c9d35e60f0f9ac2e09b6b92f60b1a4449e327673ade25d92865fc35cb3c52c74b6bb300c147c44e57a44644e1ebe66f326b8707f8b66e223ed166a8c3a31a7fb6479a87231a3858236562732d7d37c01e79bfd63be4b2c5c8a813ae4398d3d93baaa4774972f0d9d8feac00f8ea5f428e478f2bb7d28621cec9ffd02c7c63fbf84b2015", 0xee}], 0x1, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r13}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf8, 0x804}}, {{&(0x7f0000002bc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002c40)="76eaf32baf8a7305271852c04b0392c7df45dc8e0672ce61f8ba5dfb30ba07770e50ecc4b1ecfbec63c04d5c88a57fec25d2eeb9bfab42d224f013a182f8a21fe919c9a5600bead63501d0478dcc026fb3daf15270ec4991376568e2e05fef8b619a98a65ee31c1e6583d940f4", 0x6d}, {&(0x7f0000002cc0)="1f1a2cde9b05a76e6306993d2aca9f587f49a4d2e3e5a381c9208725a03ebb4ba6c6b5ed3a10ee5e95b1ed6676c900aff602fad00d0ce49481d277d353984553f0c995e8e1412794819ba10b5ba9e860a977b2c4b8cf17f6e8f2cc5289ea918f3f0b22dd14aa2b29699c4eee66a0fd0c5f9bd4b11dea5eb7dd9c1829ed9e7e7420ec10faad35641a35f7fe74a0db59955603f8ffac5a0e8efa802c4df96f933c3433e5230d4ad9a6b1319c51207898e3aceff1c86888b3b590c6f76dc9d7780304c25f9a9508442e020aedcad5ef227953646b707387d774ea818c", 0xdb}, {&(0x7f0000002dc0)="ab29280b0b57", 0x6}, {&(0x7f0000002e00)='w', 0x1}, {&(0x7f0000002e40)="5bf7b1d39becf8615c239064b1f146303c95b5457dfea19ab7db28b6d564b71acef110b01f45a9fb7eb0115582b74028e433e5708c78caf8d326f08bc2339d9c2db5c56b5dee8f7b4c932a37bcdf5833b357b08b54da07c4110fdd42f5569240473a556f1033ee61954cfb232ddb7541dc5d538684b1c0561786cb5ad67ffbb3add1763adacc7c4eb9838b6734808467dbfcb431106f1c50af503ccfe09e79d6d7617888de5e6b7b040cf34c8d7b6eff226712afee4e5a57b48934ae9b9dd98689f14c098ea074b59784c5d7", 0xcc}, {&(0x7f0000002f40)="5affcd05f0b10f5975347ae58eec4bc2d638816bb2c0be9398852490c368466af55c9220ec76bb27f9f3f227c10485dc177e77a87322131c36bbe2dc46288f4caa185e8a78b2e0c88768cff1f15c6b4f4160f79c2d54ceeb664ba3d6141995b114a37470fdd6f23362bb", 0x6a}], 0x6, &(0x7f0000003080)=[@rights={{0x1c, 0x1, 0x1, [r0, r16, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r17, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r18]}}], 0x90, 0x20000040}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003140)="6904dcaae8c25a7f64a02f0e6cadfb7121dd24d2bfc1c828fc9da089c393d84644fabb9809d8eebae6d004dbccf5609570d8334cbd0ebdbed6981166715acfecdb7b5ea9a352646f5a56e107159fdd2f10c78afc48f858d67d0021612d5247c9596ed15ee5eba19acdc002a994371bf575173c0f167d0ab475aac0900d7c23a0b3f5b22e86", 0x85}, {&(0x7f0000003200)="ca064fd322b8f264a4f33ff9ff41e143591e02d3c42cb8a608ece2a66c1d9a472f78a9836f845dd0efa84596cef3e2566703a45e07d396ddc7ccbd5acefd73149afe6c0fd6d78be1756bdb11c7451b0a20c82aa33b5c72343a7a4d42480c183f96566862f2f5a7a370876fbf0fd54452bdf4214796c9d0eb", 0x78}, {&(0x7f0000003280)="16491f4bc694ed99b0bb27e1d0375cf96db5bf58ca6ea95217ecd4e37098b2c62982a5822a88867371798a9fd32996b564f573fcc811eef1fc6dfa026b993e3c7eb18b05fbae42", 0x47}, {&(0x7f0000003300)="ecbf5b11e1d8de5f00618b3fc1b04a453e67cbe723ac8d65a63e2e45c632e7d625e2beebcfeae6095a05500875fc8004ea6215", 0x33}, {&(0x7f0000003340)="65480969cfc1be19c934c8a6c2abfb2f27c7a51a7c2e5cec44fda7579459dfa69842b2a72f76c5267bb2114dd888a833294bd7311df0dba5bbcbb203c62e0dcfe057524031b3b5a16fcce0c6ac68aeff8d9d93e5dba5cbf1d8623ffb35a5ed4b0108287e59745823e2b424", 0x6b}, {&(0x7f00000033c0)="8ac472cbe8c652f6cfc57a90cdc73d18f79949b7dd76609ffad266e991e6eb071f1ca93b1e1659d7cb561767b34f2fbbd38f47a77d3625f50200fe56cc8422e4999d51a61e046f538295046b2a780de7fbc29e31e82c213324", 0x59}, {&(0x7f0000003440)="96f7991c926e24accd2c48a80efeb08bb671295fee8cc1a1b980c52b6ed01df841af88a80bf66b4f2dcf3acce64ff57aae6c27b8a667f3bff815ec200c50c975647fd3ee1d63297405c73f67d2248a2303b4813d0aa4d37a2b1474d30f6401e4dad6675ce3dcee909a892530982754cdf9dba64759071814ed71ffddf3853af3e6a878de6a1de65e6106b6dc7445afebf0807aa21add860bde0cafe1f49f139155a4a028e4e64a42ea6cd878762be80f6dca5b763b3031906530f6caa05334feed9eb7e55d8e683c9a34de644458da39806fadb7c57aeb", 0xd7}], 0x7, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r20}}}], 0x20, 0x44010}}, {{&(0x7f0000003700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003780)="6f7e86bcf2dbb2483b6f347810d15858c14057c880198295be6e0b5d66bbc127db1209bec478cf19122a9b15b5790176815e485877e35fc66315e903d3dbb754358459aa404ba6bd8b08714294cfc9cfeb6280fd79b0b7c675314010731a3e7974da73892456fc918f49cf65efc731c774f53e797891b22c75d142a52b255b3a0cce399cbae8eafd80ce7d29fdea19e39e9ef2ddf95d455303a9647c08c28321d2705b1ee702b4ccc4b53ee5ba7dcce79306b424ba002cd75cb752177f8c8ad87c481c3e6cea273ab2e698ec7f0b1cfcaf10025a60ad535a4961a4a6cf2310536a8b367455c250e6e02fa072b0ead6", 0xef}, {&(0x7f0000003880)="bb56f795938ad5920de4d65a516c8d8c59256d279c417c15a103bfb71f79f1707ddd8877fe97e1d8c0da971540abda5644c3f3f8276990800c3c4593ddf44baaf8e055bc11ebab804f48e2e2c2a984800ed30fe80dbfb4f0d78bbd54a0e3c305a152ecf0d44fc98173c070640a95b53b58faace5d8706ddd24ff0888065e86c5a4e9eea429eaaef273436bb606999a9980617d2c13f0371aa4bcd13f9a2e4971cf1d77915046e05cbc0ec4860f4a7cc5f3bfd6d4038cac0ac1796979c1611457aa4f058f7b9236e29c9c47c033a85cd9b59f153b7bcff23a3d5ef58c3b6ccd1b5cad93108b501f99", 0xe8}], 0x2, 0x0, 0x0, 0x4000}}], 0x5, 0x8091) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r21 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r21, &(0x7f0000000140), 0x10) (async) r22 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r22, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$can_bcm(r21, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) (async, rerun: 64) write(r0, &(0x7f00000000c0)="181c17e477c22c3526f2b9346106322b131505d8a28e6b891a0c0be2070030ce56eb39bc308f36bcf1c23f4b55ae1e655499f9a2bcdb588f49efaf0b9636b46dbd67057a381c3140ce9720bac275a70030ad9e8557e8de6efa959be927f5", 0x5e) (rerun: 64) 1.46248692s ago: executing program 3 (id=6496): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00150019000100000000000000000000002bc10b2aee6095f2000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"/180], 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x20}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r9, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000440)={'virt_wifi0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {0x0, 0x8}, {0x8, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x8e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r13 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r13, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in=@private=0xa010102}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.439103909s ago: executing program 2 (id=6497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={r1, 0x8, 0x400, 0x9}) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f00000013c0), 0xc, &(0x7f00000018c0)=[{&(0x7f0000001440)=""/6, 0x8}, {&(0x7f0000001580)=""/232, 0xd9}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f00000017c0)=""/235, 0x35}, {&(0x7f0000003100)=""/126, 0x7e}, {&(0x7f0000001700)=""/179, 0xb3}, {&(0x7f0000003280)=""/248, 0xf8}], 0x7, &(0x7f0000003380), 0x1370, 0x40012001}, 0x38, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r2) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100f86cb4cd000000000200000008000300", @ANYRES32=r3, @ANYBLOB="080022015e00000008009f0006000000"], 0x2c}}, 0x800) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) (async) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0x0, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044070}, 0x4008000) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001940)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="a086e0e11211fa59a8c8f20cfae49e72d50aa8a6c73ea8fa4e4ccfd975caa4530a5c72db56f27dd1ff784fc7c08452b0465427912cfc8821df07e464f6c9708eaac8ffd2c6aae501b2a564044af4f3f166aee9983f7547f1af90041a373fd275ccd6da3d2fb647b5bb29ab55a7606f5f66aef9116a7f2fbd80da2f3cb985475a772056c117e0e6c75cf731e57bfcf57d25f6b0b77e3f12b94a01bfcdbd90f3dbe24e25ff81d157b3e292d29cb400b1690326808a1decaf8ec3", @ANYBLOB="0002000010000000000004000000080005000600000007886c7c8e03e9cff324f6aef56af0ab53377da5d95e0c2efe6062935148904b371d165b05cfaf2b854392b355f52aca64ac078aca5092a7d2b2d6cc70f22d2dec7e90fcebee4077c62b2cdd2ee4a474e9bd7ad922df415d23382164d076e0e07d7b68e49f42f14b1667291e0069f320cdddff573beeb001d6b99ace3e779543f73d9145eeae4d220fa6e0f3940718a65d782678ce9e4e8ae3463717f85bcab058764cbf203eab6935d653d0e5190777345a15387e"], 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0xc801) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003180)=ANY=[@ANYBLOB="a0000000400efb8d66950e9602ac89f941939789fbf8e4bf86917d76440ea103c7f3fa635880bb528f3edd19aca0e9c6", @ANYRES16=r6, @ANYBLOB="0d0a26bd7000fedbdf250f0000002c000280080008000200000006000e004e240000060002004e200000080003000400000005000d00010000002c0001800800090031000000080008003e92000008000b0073697000060001000a00000008000b0073697000080004000500000024000380060004000400000008000100010000000600040006000000060007004e22000008000600ff7f0000"], 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x48894) r13 = socket(0x2d, 0x2, 0x0) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000002d40)=ANY=[@ANYBLOB="38000000031401002cbd7000fe5bdf250900020073797a30000000000800410072786500140033006d6163766c616e300000000000000000"], 0x38}}, 0x0) (async) r14 = socket(0x2b, 0xa, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) read(r15, &(0x7f0000000180)=""/95, 0x5f) (async) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x80010, r16, 0x1c614000) (async) sendto$inet6(r14, &(0x7f0000000380)="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", 0x1000, 0x8880, 0x0, 0x0) 1.319419773s ago: executing program 5 (id=6498): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0xa2a6, 0x3}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 1.228047682s ago: executing program 3 (id=6499): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x3a, 0xa5, 0x76, @mcast1, @private2, 0x40, 0x66, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24049080}, 0x24008054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x80000000, 0x1dc8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x40010) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x8800) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4ecc987b9f75130}, 0x40044) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000300)={0x32, 0x2, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}]}, 0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000680)={0x1, 'pimreg0\x00', 0x4}, 0x18) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x28, r10, 0x60c, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xbe2, 0x3}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000010) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES64, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESOCT=r4, @ANYRESDEC=r5], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r12, &(0x7f0000002a40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x10, 0x29, 0x34, 0x5af}}], 0x10}}], 0x1, 0x4000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.188518105s ago: executing program 2 (id=6500): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4135, 0x1027}, {&(0x7f0000000180)=""/123, 0x7b}], 0x2}, 0x143) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x57, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x47, 0x2, {{0x1, 0x2, 0x1, 0x9, 0x1}, 0xfffffffd, 0x1, 0xe, 0x3, 0xfffffffa, 0x6, 0x8, 0x5, 0x7, 0x14ee808c, {0x2f0095fc, 0x7, 0xffff8001, 0x0, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 1.139201692s ago: executing program 5 (id=6501): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x15c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xff0e}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="48020000", @ANYRES16=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 1.138981656s ago: executing program 4 (id=6502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000180)=ANY=[@ANYBLOB="14a98caadc8d0bffffff7f00000000746ade9afa4a234b7373097d8d9429beb0e2cbb474f92b0ea49012d04c1792a9e8d699e030ef0829b54730a5ff112bb92f1a", @ANYRES16=r2, @ANYBLOB="010f2bbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000a1}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.044787663s ago: executing program 3 (id=6503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x801c581f, 0x30000002000005c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={r1, 0x20, &(0x7f0000001340)={&(0x7f0000000100)=""/123, 0x7b, 0x0, &(0x7f0000000340)=""/4096, 0x1000}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00001508000200e00000020c000280050001000000000006000340000300002400028014000180080001000000004008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001400000000008000340000000000800024000000000"], 0x88}}, 0x0) 1.040381913s ago: executing program 4 (id=6504): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700f82800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) listen(r0, 0xfff) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 959.377979ms ago: executing program 2 (id=6505): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 959.053775ms ago: executing program 5 (id=6506): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000110800000024001201016d6163766c616e0014000280080001000400000008000900ffffffff140035006d6163766c616e300000000000000000006ad7"], 0x58}}, 0x8000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') listen(r1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e24, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0xfffffffffffffffc, 0x10}) unshare(0x6a040000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 935.889424ms ago: executing program 3 (id=6507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r2, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r9}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)=@newsa={0x338, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in=@loopback, 0x4e24, 0x42, 0x4e20, 0xb, 0x2, 0x10, 0x90, 0x5c, r1, r9}, {@in=@remote, 0x4d5, 0x2b}, @in6=@local, {0x7, 0x9, 0x100000001, 0x6, 0x7, 0x7, 0x7a87, 0x8}, {0x80, 0x31d, 0x9, 0x6881}, {0x5, 0x7f, 0xbd}, 0x70bd28, 0x3501, 0x2, 0x2, 0x6, 0x84}, [@algo_auth_trunc={0x85, 0x14, {{'sha3-384\x00'}, 0x1c8, 0xc0, "058a8a560fb7a0d997b9b8344993fe1d33e1a767d9d55f8590591225df1841ab0c49c313498f00c3e0c7c08e34d27541330291a282201234e7"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@mcast1, 0x0, 0x8}}, @algo_crypt={0x8c, 0x2, {{'cts-cbc-aes-ce\x00'}, 0x220, "232b6c1c7f8d57df17b4cd5cc13994d9c27f9052712e23219a256d9c1ff8ae429aa9ab36b25e7e12e27032c1b538717bc369a12b86c42619356c9fb4acf6deffce207ff2"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e23, @in6=@local}}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@empty, 0x4e21, 0x7, 0x4e24, 0xfff7, 0xa, 0x40, 0x0, 0x89, r1, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d5, 0x2b}, @in=@remote, {0x3, 0x81, 0x7, 0x7, 0x0, 0x8, 0x6, 0x9}, {0x1, 0x6, 0x3, 0x4}, {0x4, 0x846b, 0x9}, 0x70bd2d, 0x3504, 0xa, 0x0, 0x55, 0x18}}, @tfcpad={0x8, 0x16, 0x15}]}, 0x338}, 0x1, 0x0, 0x0, 0x4008811}, 0x8800) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r10, 0x8915, 0x0) 672.789481ms ago: executing program 3 (id=6508): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6ab}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x273}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc10c}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x671}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2075}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x40040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@gettaction={0x94, 0x32, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044084}, 0x50) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r0, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000800)={{r4, &(0x7f0000000680)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x240000, &(0x7f00000006c0)={@align=0x9, {0x8, 0x1, 0xfffffffa, 0x7}}, 0x200, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x2}, {[0x8, 0x1, 0xffff2c8a, 0x8]}, 0x4, 0x73, &(0x7f0000000780)=""/115}) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xdd}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x18}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x4c888) (async) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000a00)={0xa99, 0x9, 0x0, 0x8}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x290, r7, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="68a42cb10dfbca2175d563b672feb7db015cb5ca4acafb2f47"}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x20a, 0x2a, [@supported_rates={0x1, 0x7, [{0x24, 0x1}, {0x16, 0x1}, {0x12}, {0x12}, {0x24}, {0x9, 0x1}, {0x12}]}, @random_vendor={0xdd, 0xd1, "fd54435a67d5f14239397a773d6a553bc5450fc201a1a717d5d92077503fcf55ce1032fe34ba65f8bdac032b2836abebeb740ac22ea70e8f3bbb6740fd1fcd13a1da97254a5148ff90ea936bcdb86a81900492fcf9afd33fd9cff10437b9e1685dad17ffaa2493fd207447854eeea3e0c85c2881a8465f9c4ef682039264ac66038f3d20b0b3437c6274a728f620f16af9e7129e937f756d74e225456b4c01dfd59384bc5cea9ccaed18a1e203c7d0868869d762ad13877880c50f7c321abb3dd6cfa67c82a13fe61f90a50efff8d47847"}, @erp={0x2a, 0x1, {0x1}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x3d, {0x5, 0xe8, 0x4, "fbfbdf403e370f594c082c9c1ad43b4fb346fe43849dc65bbe5b63a64ef3018c99c4391b4a190e2fea031768bc814287b9b4fca473f8baaeb3bf"}}, @measure_req={0x26, 0xca, {0x5, 0x5, 0x10, "0873b50177bac65b47dbb189fdce1a75fe7424e3582d0db30a7e27e6cc183c322d9a367cf9e1911b058159e2d829e3fc9c45ae48e19f8d36ec01c03926aa1844e32b957317e0ac14306d4df5ac6ec1c09bf3c6beebb92840905a2eac52989d8ec5a4f2f8a65ed6aa76ffe83cc26d263645ee312cc413888707c45b016e5ce1246c312be59dd53b3cecc0c018b17c960e20ae534de2eab11ae362ae4677ff8b8770c2478c4ee3a6bccf989f34915dbf83c684e324f469cf423e162d9bd455847ea8e09c4989fb7b"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4}, 0x20008145) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000e40)={@private2, 0x25, r3}) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$cgroup_pressure(r5, &(0x7f0000000e80)='io.pressure\x00', 0x2, 0x0) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000ec0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) r10 = socket(0x1a, 0x3, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f0000001040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x0, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_80211_inject_frame(&(0x7f00000010c0)=@device_b, &(0x7f0000001100)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x1, 0xe}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x5b0, 0x5a, @random=0x40, @val={0x1, 0x1, [{0x12, 0x1}]}, @void, [{0xdd, 0x41, "c74a84b7332e7420e0a8d7ed17c1317416dcad59b3688fbe3a416fced609160921cef02d4386d936e4cbcf76dbc0b5003fe55b8834093bee8ed33269af37398822"}]}, 0x68) 539.250178ms ago: executing program 3 (id=6509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x5}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f000000a240)=0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000040)='NLBL_UNLBL\x00', 0x8000, &(0x7f00000000c0)={@align=0x6, {0x1, 0x3, 0x1, 0xc}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000400)=0x6}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000001e40)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'vlan1\x00', 0x8000}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) 53.664282ms ago: executing program 2 (id=6510): read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendto$l2tp6(r1, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) 0s ago: executing program 0 (id=6511): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="bc0100002e00010000000000ffdbdf250501f280080018000a01010214000a"], 0x1bc}], 0x1, 0x0, 0x0, 0x400c445}, 0x4000000) kernel console output (not intermixed with test programs): 537.876139][T23162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.907603][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 537.966528][T23162] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.997641][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.004909][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.058608][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.065801][ T8926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.137361][T23307] hsr0 speed is unknown, defaulting to 1000 [ 538.214471][T23313] netlink: 'syz.4.4775': attribute type 10 has an invalid length. [ 538.262477][T23313] bridge_slave_1: left allmulticast mode [ 538.287388][T23313] bridge_slave_1: left promiscuous mode [ 538.313289][T23313] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.375753][T23313] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 538.523104][T23162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.701825][T23307] lo speed is unknown, defaulting to 1000 [ 538.822894][T23342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.084056][T23352] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4785'. [ 539.118049][T23352] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4785'. [ 539.147084][T23358] x_tables: duplicate underflow at hook 2 [ 539.154362][T23352] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4785'. [ 539.288486][T23364] macvlan0: entered promiscuous mode [ 539.402492][T23162] veth0_vlan: entered promiscuous mode [ 539.424725][T23162] veth1_vlan: entered promiscuous mode [ 539.515841][T23162] veth0_macvtap: entered promiscuous mode [ 539.566081][T23162] veth1_macvtap: entered promiscuous mode [ 539.611354][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 539.620888][ T5827] Bluetooth: hci3: command tx timeout [ 539.627723][T23162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.670808][T23162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.720863][ T8926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.743176][ T8926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.769602][ T8926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.788102][ T8926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.909257][T23387] Bluetooth: MGMT ver 1.23 [ 539.935584][ T8916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.970716][ T8916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.027301][ T8926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.040262][ T8926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.342264][T23410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4797'. [ 540.368369][T23413] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20000 [ 540.393506][T23410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4797'. [ 540.445226][T23415] hsr0 speed is unknown, defaulting to 1000 [ 540.911930][T23415] lo speed is unknown, defaulting to 1000 [ 540.964108][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 540.983799][T23441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 541.015109][T23441] openvswitch: netlink: Flow actions attr not present in new flow. [ 541.051322][T23444] openvswitch: netlink: Flow actions attr not present in new flow. [ 541.083683][T23454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4811'. [ 541.426577][T23476] pim6reg: entered allmulticast mode [ 541.434954][T23479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4818'. [ 541.553532][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4821'. [ 541.691743][ T5827] Bluetooth: hci3: command tx timeout [ 541.855465][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4827'. [ 541.986888][T23515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.049714][T23519] netlink: 'syz.2.4832': attribute type 2 has an invalid length. [ 542.090572][T23521] raw_sendmsg: syz.3.4833 forgot to set AF_INET. Fix it! [ 542.127976][T23521] IPVS: Error connecting to the multicast addr [ 542.222388][T23528] netlink: 'syz.2.4835': attribute type 15 has an invalid length. [ 542.232496][T23528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4835'. [ 542.363161][T23543] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 542.422694][T23543] bond6: (slave bridge7): Enslaving as a backup interface with an up link [ 542.449667][T23543] macvlan3: entered promiscuous mode [ 542.461757][T23543] macvlan3: entered allmulticast mode [ 542.467884][T23543] bond6: entered promiscuous mode [ 542.474383][T23543] bridge7: entered promiscuous mode [ 542.480388][T23543] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 542.490240][T23543] bond6: left promiscuous mode [ 542.496477][T23543] bridge7: left promiscuous mode [ 542.538454][T23553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4839'. [ 542.548360][T23546] netlink: 'syz.3.4841': attribute type 1 has an invalid length. [ 542.626613][T23546] bond6: entered promiscuous mode [ 542.634791][T23546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.641875][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 542.641948][ C1] lec:lec_tx_timeout: lec0 [ 542.642198][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 542.927092][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4850'. [ 542.936321][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4850'. [ 543.045895][T23582] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 543.097293][T23595] xt_hashlimit: size too large, truncated to 1048576 [ 543.772396][ T5838] Bluetooth: hci3: command tx timeout [ 543.839477][T23634] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 543.854088][T23634] bond7 (unregistering): Released all slaves [ 544.252750][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 546.189657][T23607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.392886][T23656] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 546.427180][T23653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 546.454174][T23653] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 546.499266][T23660] netlink: 'syz.4.4871': attribute type 6 has an invalid length. [ 546.502712][T19381] IPVS: starting estimator thread 0... [ 546.511494][T23660] __nla_validate_parse: 65 callbacks suppressed [ 546.511533][T23660] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4871'. [ 546.565098][T23666] netlink: 'syz.5.4872': attribute type 4 has an invalid length. [ 546.574005][T23666] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4872'. [ 546.585484][T23660] netlink: 'syz.4.4871': attribute type 33 has an invalid length. [ 546.632127][T23661] IPVS: using max 29 ests per chain, 69600 per kthread [ 546.642742][T23660] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 546.659107][T23660] bond6 (unregistering): Released all slaves [ 546.934180][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4882'. [ 546.946869][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4882'. [ 546.964304][T23694] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 546.976396][T23693] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 546.985504][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4882'. [ 546.992235][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4882'. [ 547.066466][T23700] netlink: 'syz.5.4881': attribute type 1 has an invalid length. [ 547.084620][T23700] netlink: 'syz.5.4881': attribute type 2 has an invalid length. [ 547.101479][T23700] netlink: 'syz.5.4881': attribute type 4 has an invalid length. [ 547.127731][T23702] netlink: 'syz.0.4884': attribute type 1 has an invalid length. [ 547.661855][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 547.669987][ C1] lec:lec_tx_timeout: lec0 [ 547.675014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.845911][T23718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4887'. [ 548.929604][T23702] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.946851][T23717] netlink: 'syz.2.4887': attribute type 14 has an invalid length. [ 548.977234][T23722] set match dimension is over the limit! [ 549.141257][T23722] tipc: Started in network mode [ 549.146401][T23722] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 549.157280][T23722] tipc: Enabled bearer , priority 10 [ 549.265924][T23733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4889'. [ 549.382777][T23746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4893'. [ 549.482107][T23752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4895'. [ 550.414190][ T5945] tipc: Node number set to 10136234 [ 550.598937][T23812] netlink: 'syz.4.4911': attribute type 10 has an invalid length. [ 550.656073][T23818] netlink: 'syz.4.4911': attribute type 10 has an invalid length. [ 550.743997][T23812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.793685][T23812] .`: (slave batadv0): Enslaving as an active interface with an up link [ 550.817998][T23818] batadv0: entered promiscuous mode [ 550.824833][T23818] batadv0: entered allmulticast mode [ 550.845745][T23818] .`: (slave batadv0): Releasing backup interface [ 550.886212][T23818] bridge0: port 2(batadv0) entered blocking state [ 550.904562][T23818] bridge0: port 2(batadv0) entered disabled state [ 551.021719][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 551.030962][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 551.491389][T23876] netlink: 'syz.0.4934': attribute type 83 has an invalid length. [ 551.549695][T23876] netlink: 'syz.0.4934': attribute type 8 has an invalid length. [ 551.709841][T23893] erspan0: left allmulticast mode [ 551.727727][T23893] erspan0: left promiscuous mode [ 551.741413][T23893] bridge3: port 1(erspan0) entered disabled state [ 551.786199][T23900] __nla_validate_parse: 12 callbacks suppressed [ 551.786215][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4938'. [ 551.794025][T23893] syz_tun: left allmulticast mode [ 551.806862][T23893] syz_tun: left promiscuous mode [ 551.815204][T23893] bridge0: port 3(syz_tun) entered disabled state [ 551.827908][T23893] bridge_slave_0: left allmulticast mode [ 551.834409][T23893] bridge_slave_0: left promiscuous mode [ 551.840346][T23893] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.855270][T23893] bridge_slave_1: left allmulticast mode [ 551.865209][T23893] bridge_slave_1: left promiscuous mode [ 551.871152][T23893] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.886047][T23893] bond3: (slave veth0_to_bond): Releasing active interface [ 551.893828][T23893] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 551.918224][T23893] team0: Port device team_slave_0 removed [ 551.926911][T23893] team0: Port device team_slave_1 removed [ 551.935126][T23893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.945469][T23893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.957413][T23893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.991748][T23900] team0: Mode changed to "activebackup" [ 552.003629][T23904] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4939'. [ 552.214658][T23916] IPv6: sit1: Disabled Multicast RS [ 552.470570][T23936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4947'. [ 552.668147][T23944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4951'. [ 552.691194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 552.697522][T23946] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 552.699343][ C1] lec:lec_tx_timeout: lec0 [ 552.708928][T23946] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4952'. [ 552.712841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 552.868931][T23951] : renamed from hsr0 [ 552.903890][T23952] bond0: entered promiscuous mode [ 552.915641][T23952] bridge2: entered promiscuous mode [ 552.933267][T23952] bond0: left promiscuous mode [ 552.947002][T23952] bridge2: left promiscuous mode [ 553.166907][T23949] infiniband sy1: set down [ 553.173143][T23949] infiniband sy1: added bond0 [ 553.193041][T23966] netlink: 'syz.0.4959': attribute type 9 has an invalid length. [ 553.220475][T23966] netlink: 'syz.0.4959': attribute type 11 has an invalid length. [ 553.252561][T23949] RDS/IB: sy1: added [ 553.256623][T23949] smc: adding ib device sy1 with port count 1 [ 553.265355][T23949] smc: ib device sy1 port 1 has no pnetid [ 553.276630][T23970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4960'. [ 553.291797][T23966] netlink: 'syz.0.4959': attribute type 12 has an invalid length. [ 553.299671][T23966] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4959'. [ 553.463129][T23977] "syz.3.4962" (23977) uses obsolete ecb(arc4) skcipher [ 553.511952][T23982] netlink: 'syz.2.4965': attribute type 1 has an invalid length. [ 553.626320][T23982] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.659708][T23987] netlink: 'syz.3.4967': attribute type 1 has an invalid length. [ 553.691017][T23982] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 553.775621][T23992] macvlan4: entered promiscuous mode [ 553.786846][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4967'. [ 553.791523][T23992] macvlan4: entered allmulticast mode [ 553.805777][T23992] bond15: entered promiscuous mode [ 553.807933][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4967'. [ 553.813186][T23992] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 553.836135][T23992] bond15: left promiscuous mode [ 554.185668][T24013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4974'. [ 554.432905][T24028] xt_ecn: cannot match TCP bits for non-tcp packets [ 555.447238][T24090] bond7: entered allmulticast mode [ 555.454483][T24090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.467257][T24105] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 555.894782][T24132] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 555.918719][T24134] netlink: 'syz.3.5009': attribute type 2 has an invalid length. [ 556.803483][T24178] netlink: 'syz.2.5025': attribute type 1 has an invalid length. [ 556.875917][T24178] 8021q: adding VLAN 0 to HW filter on device bond16 [ 556.949328][T24179] bond16: (slave geneve5): making interface the new active one [ 556.961512][T24179] bond16: (slave geneve5): Enslaving as an active interface with an up link [ 557.043264][T24185] bridge0: entered allmulticast mode [ 557.073385][T24187] batadv_slave_0: entered promiscuous mode [ 557.096828][T24186] batadv_slave_0: left promiscuous mode [ 557.258340][T24196] __nla_validate_parse: 71 callbacks suppressed [ 557.258438][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5032'. [ 557.356834][T24200] syzkaller0: entered promiscuous mode [ 557.369375][T24200] syzkaller0: entered allmulticast mode [ 557.399453][T24200] netlink: 'syz.2.5033': attribute type 1 has an invalid length. [ 557.415329][T24200] netlink: 'syz.2.5033': attribute type 1 has an invalid length. [ 557.430033][T24200] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5033'. [ 557.578246][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5036'. [ 557.731283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.739363][ C1] lec:lec_tx_timeout: lec0 [ 557.744548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.766905][T24224] nbd: couldn't find a device at index 2 [ 557.788955][T24221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5039'. [ 557.886562][T24227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5041'. [ 557.910787][T24231] validate_nla: 4 callbacks suppressed [ 557.910803][T24231] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 557.925491][T24231] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5043'. [ 557.944340][T24231] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 557.952644][T24231] netlink: 'syz.3.5043': attribute type 8 has an invalid length. [ 557.982151][T24231] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5043'. [ 558.041808][T24237] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5044'. [ 558.108192][T24240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5047'. [ 558.385729][T24252] xt_hashlimit: size too large, truncated to 1048576 [ 558.429425][T24260] xt_cluster: node mask cannot exceed total number of nodes [ 558.695385][T24268] netlink: 'syz.5.5055': attribute type 12 has an invalid length. [ 558.720944][T24268] netlink: 'syz.5.5055': attribute type 29 has an invalid length. [ 558.733500][T24268] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5055'. [ 559.014984][T24291] vcan0: tx address claim with different name [ 559.337823][T24314] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 559.660845][T24333] netlink: 'syz.0.5077': attribute type 1 has an invalid length. [ 559.687560][T24333] netlink: 'syz.0.5077': attribute type 2 has an invalid length. [ 559.703852][T24333] netlink: 'syz.0.5077': attribute type 1 has an invalid length. [ 559.732469][T24333] batadv_slave_1: entered promiscuous mode [ 559.747005][T24332] batadv_slave_1: left promiscuous mode [ 559.796024][T24339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.015252][T24349] hsr0 speed is unknown, defaulting to 1000 [ 560.443385][T24349] lo speed is unknown, defaulting to 1000 [ 560.637632][T24393] netlink: 'syz.0.5096': attribute type 10 has an invalid length. [ 560.653292][T24393] team0: Port device vxcan1 added [ 560.661524][T24393] netlink: 'syz.0.5096': attribute type 1 has an invalid length. [ 560.751511][T24393] bond8: (slave gretap1): making interface the new active one [ 560.760871][T24393] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 561.148643][T24413] hsr0 speed is unknown, defaulting to 1000 [ 561.699586][T24440] dvmrp0: entered allmulticast mode [ 561.736052][T24443] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 561.787676][T24445] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 561.828889][T24447] tipc: Enabling of bearer rejected, failed to enable media [ 561.908353][T24413] lo speed is unknown, defaulting to 1000 [ 562.195314][T24460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.234788][ T5893] lo speed is unknown, defaulting to 1000 [ 562.241680][ T5893] syz0: Port: 1 Link ACTIVE [ 562.455431][T24480] __nla_validate_parse: 19 callbacks suppressed [ 562.455449][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5119'. [ 562.517385][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5119'. [ 562.624430][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5120'. [ 562.650626][T24480] nbd: error processing sock list [ 562.661283][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.751186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.759271][ C1] lec:lec_tx_timeout: lec0 [ 562.764503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.900402][T24494] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 563.006843][T24497] validate_nla: 6 callbacks suppressed [ 563.006861][T24497] netlink: 'syz.4.5123': attribute type 1 has an invalid length. [ 563.124453][T24504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5124'. [ 563.196519][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5123'. [ 563.247742][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5123'. [ 563.753566][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5132'. [ 563.763601][T24542] syzkaller0: entered promiscuous mode [ 563.770206][T24542] syzkaller0: entered allmulticast mode [ 563.873300][T24545] "syz.3.5137" (24545) uses obsolete ecb(arc4) skcipher [ 564.122254][T24567] netlink: 'syz.5.5144': attribute type 1 has an invalid length. [ 564.193836][T24573] syzkaller1: entered promiscuous mode [ 564.199346][T24573] syzkaller1: entered allmulticast mode [ 564.200443][T24567] netlink: 'syz.5.5144': attribute type 1 has an invalid length. [ 564.238902][T24567] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5144'. [ 564.264825][T24575] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 565.394343][T24605] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.5154'. [ 565.464098][T24610] IPv6: sit1: Disabled Multicast RS [ 565.476672][T24610] sit1: entered allmulticast mode [ 565.652778][T24618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.711080][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 565.957341][T24641] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 566.047425][T24643] netlink: 'syz.2.5166': attribute type 1 has an invalid length. [ 566.059862][T24643] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 566.103653][T24653] syzkaller0: entered promiscuous mode [ 566.135661][T24653] syzkaller0: entered allmulticast mode [ 566.210012][T24655] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.217347][T24655] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.472471][T24672] : entered promiscuous mode [ 566.620368][T24691] siw: device registration error -23 [ 567.252483][T24740] netlink: 'syz.5.5195': attribute type 1 has an invalid length. [ 567.359492][T24749] netlink: 'syz.0.5198': attribute type 1 has an invalid length. [ 567.413871][T24749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 567.451010][T24753] vlan7: entered allmulticast mode [ 567.457296][T24753] bond10: entered allmulticast mode [ 567.579130][T24758] netlink: 'syz.4.5202': attribute type 1 has an invalid length. [ 567.615721][T24758] 8021q: adding VLAN 0 to HW filter on device bond7 [ 567.634041][T24758] bond7: entered allmulticast mode [ 567.698225][T24758] bond7: (slave ip6gretap1): making interface the new active one [ 567.701606][T24766] xt_nfacct: accounting object `syz1' does not exist [ 567.724925][T24758] ip6gretap1: entered allmulticast mode [ 567.732198][T24758] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 567.776511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.784616][ C1] lec:lec_tx_timeout: lec0 [ 567.789275][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 567.803109][T24771] netlink: 'syz.3.5205': attribute type 61 has an invalid length. [ 567.843548][T24771] __nla_validate_parse: 9 callbacks suppressed [ 567.843566][T24771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5205'. [ 567.896227][T24774] netlink: 'syz.3.5205': attribute type 1 has an invalid length. [ 567.955406][T24774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 568.038381][T24784] ip6erspan0: entered allmulticast mode [ 568.141038][T24786] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 568.160604][T24771] bond8: (slave gretap2): making interface the new active one [ 568.176978][T24771] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 568.188530][T24793] netlink: 'syz.0.5210': attribute type 12 has an invalid length. [ 568.228857][T24793] IPv6: sit1: Disabled Multicast RS [ 568.330989][T24800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5216'. [ 568.362550][T24800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5216'. [ 568.400781][T24800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5216'. [ 568.425769][T24800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5216'. [ 568.426942][T24808] syzkaller0: entered promiscuous mode [ 568.442956][T24800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5216'. [ 568.492019][T24808] syzkaller0: entered allmulticast mode [ 568.686395][T24830] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5223'. [ 568.931710][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5227'. [ 569.090310][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5229'. [ 569.126282][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5229'. [ 569.386884][T24867] pim6reg1: entered promiscuous mode [ 569.392549][T24867] pim6reg1: entered allmulticast mode [ 569.769877][T24886] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 569.854070][T24897] vlan2: entered promiscuous mode [ 569.869474][T24897] erspan0: entered promiscuous mode [ 570.060240][T24910] gretap1: entered promiscuous mode [ 570.505678][T24923] netlink: 'syz.4.5250': attribute type 11 has an invalid length. [ 570.555514][T24923] netlink: 'syz.4.5250': attribute type 4 has an invalid length. [ 570.599553][T24923] netlink: 'syz.4.5250': attribute type 5 has an invalid length. [ 570.607241][T24948] netlink: 'syz.0.5254': attribute type 11 has an invalid length. [ 570.623285][T24950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.634354][T24923] netlink: 'syz.4.5250': attribute type 6 has an invalid length. [ 570.669498][T24953] netlink: 'syz.0.5254': attribute type 11 has an invalid length. [ 570.687805][T24930] syzkaller0: entered promiscuous mode [ 570.703605][T24930] syzkaller0: entered allmulticast mode [ 570.739711][T24959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.460579][T24992] IPv6: NLM_F_CREATE should be specified when creating new route [ 572.684754][T25013] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 572.756769][T25013] bond17: entered promiscuous mode [ 572.762854][T25013] 8021q: adding VLAN 0 to HW filter on device bond17 [ 572.765618][T25016] SET target dimension over the limit! [ 572.816155][T25012] bond17: (slave bridge7): making interface the new active one [ 572.824708][T25012] bridge7: entered promiscuous mode [ 572.830404][T25022] netlink: 'syz.4.5270': attribute type 10 has an invalid length. [ 572.840969][T25012] bridge7: left promiscuous mode [ 573.094064][T25022] wlan1: mtu less than device minimum [ 573.099573][T25022] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 573.140911][T25040] netlink: 'syz.3.5276': attribute type 1 has an invalid length. [ 573.165923][T25040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.497447][T25057] __nla_validate_parse: 12 callbacks suppressed [ 573.497468][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5280'. [ 573.611267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 573.619396][ C1] lec:lec_tx_timeout: lec0 [ 573.625221][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 573.783046][T25064] syzkaller0: entered promiscuous mode [ 573.788702][T25064] syzkaller0: entered allmulticast mode [ 573.896826][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5284'. [ 573.970152][T25076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5285'. [ 574.070406][T25072] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 574.085547][T25072] team0: Device macvlan3 is already an upper device of the team interface [ 574.155274][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5284'. [ 574.179632][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5284'. [ 574.269766][T25077] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5284'. [ 574.324235][T25093] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 574.337063][T25093] bond9 (unregistering): Released all slaves [ 574.354997][T25101] netlink: 'syz.2.5291': attribute type 7 has an invalid length. [ 574.363225][T25101] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5291'. [ 574.384681][T25099] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 574.497288][T25107] gretap0: entered promiscuous mode [ 574.503745][T25107] vlan2: entered promiscuous mode [ 574.557532][T25112] netlink: 'syz.3.5296': attribute type 4 has an invalid length. [ 574.719069][T25124] tipc: New replicast peer: 172.20.20.187 [ 574.763492][T25124] tipc: Enabled bearer , priority 10 [ 574.982143][T25148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5305'. [ 575.064529][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 575.083938][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5307'. [ 575.129824][T25163] veth1_macvtap: left promiscuous mode [ 575.143870][T25163] macsec0: entered promiscuous mode [ 575.169720][T25163] macsec0: entered allmulticast mode [ 575.376831][T25174] xt_hashlimit: size too large, truncated to 1048576 [ 575.848587][T25209] tipc: Enabling of bearer rejected, failed to enable media [ 575.881978][T25210] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 576.099507][T25226] netlink: 'syz.5.5327': attribute type 21 has an invalid length. [ 576.335539][T25245] netlink: 'syz.4.5334': attribute type 39 has an invalid length. [ 576.422058][T25249] syzkaller1: entered promiscuous mode [ 576.428225][T25249] syzkaller1: entered allmulticast mode [ 577.129344][T25308] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.350475][T25314] syzkaller0: entered promiscuous mode [ 577.375836][T25314] syzkaller0: entered allmulticast mode [ 577.399723][T25312] netlink: 'syz.0.5352': attribute type 1 has an invalid length. [ 577.520652][T25320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.532628][T25327] ip6t_srh: unknown srh match flags 4000 [ 577.592983][T25326] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 577.622446][T25330] bond2: entered promiscuous mode [ 577.627580][T25330] bond2: entered allmulticast mode [ 577.633484][T25330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.835008][T25341] bond11: option fail_over_mac: invalid value (16) [ 577.852688][T25341] bond11 (unregistering): Released all slaves [ 577.920812][T25346] bond11: option fail_over_mac: invalid value (16) [ 577.958440][T25358] netlink: 'syz.4.5362': attribute type 1 has an invalid length. [ 577.971406][T25346] bond11 (unregistering): Released all slaves [ 577.995700][T25360] netlink: 'syz.2.5363': attribute type 21 has an invalid length. [ 578.262564][T25360] bond18: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 578.309556][T25360] bond18 (unregistering): Released all slaves [ 578.474146][T25383] xt_recent: Unsupported userspace flags (000000b1) [ 578.519525][T25385] __nla_validate_parse: 11 callbacks suppressed [ 578.519542][T25385] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5372'. [ 578.641776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 578.649829][ C1] lec:lec_tx_timeout: lec0 [ 578.654812][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.739595][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5376'. [ 578.768421][T25402] wg1: entered promiscuous mode [ 578.773925][T25402] wg1: entered allmulticast mode [ 578.959734][T25414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5381'. [ 579.414377][T25443] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 579.432922][T25442] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 579.492368][T25446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5390'. [ 579.693038][T25457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5396'. [ 579.711399][T25457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5396'. [ 579.746251][T25460] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5395'. [ 579.757557][T25457] netlink: 'syz.2.5396': attribute type 2 has an invalid length. [ 579.766635][T25459] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5395'. [ 579.786299][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5396'. [ 579.796474][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5396'. [ 579.826292][T25459] Cannot find set identified by id 65534 to match [ 579.985987][T25470] netlink: 'syz.4.5398': attribute type 2 has an invalid length. [ 580.119386][T25487] x_tables: duplicate underflow at hook 1 [ 580.483781][T25519] FAULT_INJECTION: forcing a failure. [ 580.483781][T25519] name failslab, interval 1, probability 0, space 0, times 0 [ 580.525923][T25519] CPU: 1 UID: 0 PID: 25519 Comm: syz.5.5409 Not tainted syzkaller #0 PREEMPT(full) [ 580.525949][T25519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 580.525961][T25519] Call Trace: [ 580.525969][T25519] [ 580.525976][T25519] dump_stack_lvl+0xe8/0x150 [ 580.526009][T25519] should_fail_ex+0x412/0x560 [ 580.526044][T25519] should_failslab+0xa8/0x100 [ 580.526079][T25519] ? skb_clone+0x212/0x3a0 [ 580.526106][T25519] kmem_cache_alloc_noprof+0x87/0x650 [ 580.526125][T25519] ? sk_filter_trim_cap+0x1e1/0xd90 [ 580.526159][T25519] skb_clone+0x212/0x3a0 [ 580.526187][T25519] __netlink_deliver_tap+0x404/0x850 [ 580.526220][T25519] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.526242][T25519] netlink_deliver_tap+0x19c/0x1b0 [ 580.526264][T25519] netlink_dump+0x926/0xe80 [ 580.526295][T25519] ? __pfx_netlink_dump+0x10/0x10 [ 580.526330][T25519] ? kmem_cache_free+0x187/0x630 [ 580.526351][T25519] ? netlink_recvmsg+0x5d6/0xa50 [ 580.526377][T25519] netlink_recvmsg+0x690/0xa50 [ 580.526406][T25519] ? __pfx_netlink_recvmsg+0x10/0x10 [ 580.526426][T25519] ? is_bpf_text_address+0x26/0x2b0 [ 580.526452][T25519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.526484][T25519] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 580.526505][T25519] ? security_socket_recvmsg+0x7e/0x2c0 [ 580.526528][T25519] ? __pfx_netlink_recvmsg+0x10/0x10 [ 580.526550][T25519] sock_recvmsg+0x172/0x1b0 [ 580.526572][T25519] ____sys_recvmsg+0x1e6/0x4a0 [ 580.526606][T25519] ? __pfx_____sys_recvmsg+0x10/0x10 [ 580.526646][T25519] ? import_iovec+0x73/0xa0 [ 580.526672][T25519] ___sys_recvmsg+0x215/0x590 [ 580.526696][T25519] ? get_pid_task+0x20/0x1f0 [ 580.526719][T25519] ? __pfx____sys_recvmsg+0x10/0x10 [ 580.526769][T25519] ? __fget_files+0x3a0/0x420 [ 580.526797][T25519] __x64_sys_recvmsg+0x1ba/0x2a0 [ 580.526826][T25519] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 580.526861][T25519] ? __pfx_ksys_write+0x10/0x10 [ 580.526894][T25519] do_syscall_64+0x14d/0xf80 [ 580.526919][T25519] ? trace_irq_disable+0x3b/0x150 [ 580.526935][T25519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.526955][T25519] ? clear_bhb_loop+0x40/0x90 [ 580.526978][T25519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.526997][T25519] RIP: 0033:0x7fc5bc99c819 [ 580.527015][T25519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.527031][T25519] RSP: 002b:00007fc5bd837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 580.527051][T25519] RAX: ffffffffffffffda RBX: 00007fc5bcc15fa0 RCX: 00007fc5bc99c819 [ 580.527071][T25519] RDX: 0000000000032120 RSI: 0000200000000100 RDI: 0000000000000003 [ 580.527084][T25519] RBP: 00007fc5bd837090 R08: 0000000000000000 R09: 0000000000000000 [ 580.527095][T25519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.527106][T25519] R13: 00007fc5bcc16038 R14: 00007fc5bcc15fa0 R15: 00007ffc57f67318 [ 580.527137][T25519] [ 581.340363][T25560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.385844][T25564] netlink: 'syz.0.5421': attribute type 3 has an invalid length. [ 581.498861][T25572] FAULT_INJECTION: forcing a failure. [ 581.498861][T25572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.547748][T25572] CPU: 0 UID: 0 PID: 25572 Comm: syz.3.5424 Not tainted syzkaller #0 PREEMPT(full) [ 581.547774][T25572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 581.547803][T25572] Call Trace: [ 581.547811][T25572] [ 581.547819][T25572] dump_stack_lvl+0xe8/0x150 [ 581.547853][T25572] should_fail_ex+0x412/0x560 [ 581.547890][T25572] _copy_from_user+0x2d/0xb0 [ 581.547916][T25572] kstrtouint_from_user+0xd6/0x180 [ 581.547940][T25572] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 581.547978][T25572] proc_fail_nth_write+0x8e/0x210 [ 581.548011][T25572] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.548049][T25572] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.548091][T25572] vfs_write+0x29a/0xb90 [ 581.548123][T25572] ? __pfx_vfs_write+0x10/0x10 [ 581.548146][T25572] ? __fget_files+0x2a/0x420 [ 581.548168][T25572] ? __fget_files+0x3a0/0x420 [ 581.548184][T25572] ? __fget_files+0x2a/0x420 [ 581.548210][T25572] ksys_write+0x150/0x270 [ 581.548240][T25572] ? __pfx_ksys_write+0x10/0x10 [ 581.548273][T25572] do_syscall_64+0x14d/0xf80 [ 581.548299][T25572] ? trace_irq_disable+0x3b/0x150 [ 581.548315][T25572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.548334][T25572] ? clear_bhb_loop+0x40/0x90 [ 581.548358][T25572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.548376][T25572] RIP: 0033:0x7f23e855d04e [ 581.548395][T25572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.548412][T25572] RSP: 002b:00007f23e949ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.548432][T25572] RAX: ffffffffffffffda RBX: 00007f23e94a06c0 RCX: 00007f23e855d04e [ 581.548464][T25572] RDX: 0000000000000001 RSI: 00007f23e94a00a0 RDI: 0000000000000004 [ 581.548476][T25572] RBP: 00007f23e94a0090 R08: 0000000000000000 R09: 0000000000000000 [ 581.548488][T25572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.548500][T25572] R13: 00007f23e8816038 R14: 00007f23e8815fa0 R15: 00007ffe1aeb1de8 [ 581.548534][T25572] [ 582.245542][T25611] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 582.307312][T25611] bond11: entered promiscuous mode [ 582.335015][T25611] 8021q: adding VLAN 0 to HW filter on device bond11 [ 582.422492][T25614] xt_nat: multiple ranges no longer supported [ 582.449074][T25621] bridge0: port 2(batadv0) entered disabled state [ 582.504111][T25621] bridge_slave_0: left allmulticast mode [ 582.519604][T25621] bridge_slave_0: left promiscuous mode [ 582.528947][T25621] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.552220][T25621] .`: (slave bridge_slave_1): Releasing backup interface [ 582.586380][T25621] .`: (slave bond_slave_0): Releasing backup interface [ 582.628604][T25621] .`: (slave bond_slave_1): Releasing backup interface [ 582.657467][T25621] team0: Port device team_slave_0 removed [ 582.693961][T25621] team0: Port device team_slave_1 removed [ 582.710995][T25621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.728437][T25621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.741505][T25621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.749364][T25621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.759684][T25621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.864001][T25626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.937441][T25631] team0: Mode changed to "activebackup" [ 583.548010][T25689] __nla_validate_parse: 14 callbacks suppressed [ 583.548039][T25689] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5451'. [ 583.661697][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 583.669781][ C1] lec:lec_tx_timeout: lec0 [ 583.674785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 583.755049][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'. [ 583.791070][T25705] openvswitch: netlink: Missing key (keys=40, expected=100) [ 583.848220][T25710] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5457'. [ 583.902658][T25710] netlink: 'syz.4.5457': attribute type 1 has an invalid length. [ 583.940716][T25716] openvswitch: netlink: Duplicate key (type 2). [ 584.000029][T25710] bond8 (unregistering): Released all slaves [ 584.024212][T25721] netlink: 'syz.2.5460': attribute type 2 has an invalid length. [ 584.042065][T25722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5457'. [ 584.055936][T25723] x_tables: duplicate underflow at hook 1 [ 584.097144][T25716] team_slave_0: entered promiscuous mode [ 584.103319][T25716] team_slave_1: entered promiscuous mode [ 584.114798][T25716] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 584.125149][T25716] team0: Device macvlan3 is already an upper device of the team interface [ 584.143446][T25716] team_slave_0: left promiscuous mode [ 584.148886][T25716] team_slave_1: left promiscuous mode [ 584.177536][T25721] 9: entered promiscuous mode [ 584.256497][T25727] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5461'. [ 584.328092][T25733] xt_cgroup: xt_cgroup: no path or classid specified [ 584.367383][T25733] netlink: zone id is out of range [ 584.382384][T25733] netlink: zone id is out of range [ 584.399232][T25733] netlink: zone id is out of range [ 584.409682][T25733] netlink: zone id is out of range [ 584.425179][T25733] netlink: zone id is out of range [ 584.665585][T25752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5469'. [ 584.919656][T25779] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 585.050861][T25792] netlink: 'syz.4.5474': attribute type 17 has an invalid length. [ 585.080206][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5474'. [ 585.089705][T25792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5474'. [ 585.113939][T25794] netlink: 'syz.2.5472': attribute type 3 has an invalid length. [ 585.375438][T25812] netlink: 'syz.2.5479': attribute type 13 has an invalid length. [ 585.442452][T25824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5482'. [ 585.529531][T25821] bond3: entered promiscuous mode [ 585.540554][T25821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.598531][T25821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.625162][T25821] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 585.637205][T25821] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 585.860907][T25845] tipc: Invalid UDP bearer configuration [ 585.860953][T25845] tipc: Enabling of bearer rejected, failed to enable media [ 585.876905][T19381] hid-generic 0005:15C2:0006.0004: item fetching failed at offset 0/2 [ 585.888370][T25851] netlink: 'syz.2.5484': attribute type 1 has an invalid length. [ 585.894354][T19381] hid-generic 0005:15C2:0006.0004: probe with driver hid-generic failed with error -22 [ 585.927231][T25849] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 585.940950][T25849] bond4 (unregistering): Released all slaves [ 585.975085][T25861] xt_NFQUEUE: number of total queues is 0 [ 586.040982][T25851] bond18: entered promiscuous mode [ 586.086632][T25851] 8021q: adding VLAN 0 to HW filter on device bond18 [ 586.098310][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5491'. [ 586.238464][T25869] bridge11: port 1(veth15) entered blocking state [ 586.247155][T25869] bridge11: port 1(veth15) entered disabled state [ 586.254255][T25869] veth15: entered allmulticast mode [ 586.264866][T25869] veth15: entered promiscuous mode [ 586.298062][T25875] bridge11: port 2(veth17) entered blocking state [ 586.308438][T25875] bridge11: port 2(veth17) entered disabled state [ 586.337499][T25875] veth17: entered allmulticast mode [ 586.357809][T25875] veth17: entered promiscuous mode [ 586.389624][T25851] bond18: (slave bridge8): making interface the new active one [ 586.397447][T25851] bridge8: entered promiscuous mode [ 586.405623][T25851] bond18: (slave bridge8): Enslaving as an active interface with an up link [ 586.489023][T25881] can: request_module (can-proto-4) failed. [ 586.780313][T25911] syzkaller0: entered promiscuous mode [ 586.796138][T25911] syzkaller0: entered allmulticast mode [ 586.824809][T25910] Cannot find set identified by id 1 to match [ 587.125180][T25925] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 587.157848][T25935] macvlan3: entered promiscuous mode [ 587.163353][T25935] macvlan3: entered allmulticast mode [ 587.169661][T25935] bond4: entered promiscuous mode [ 587.175763][T25935] bridge3: entered promiscuous mode [ 587.182627][T25935] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 587.190603][T25935] bond4: left promiscuous mode [ 587.195989][T25935] bridge3: left promiscuous mode [ 587.214011][T25937] tipc: Enabling of bearer rejected, already enabled [ 587.389211][T25945] hsr0 speed is unknown, defaulting to 1000 [ 587.658542][T25962] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.819983][T25945] lo speed is unknown, defaulting to 1000 [ 587.949976][T25977] bridge: RTM_NEWNEIGH with invalid ether address [ 587.983520][T25977] Bluetooth: MGMT ver 1.23 [ 588.131645][T25992] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.574757][T26020] tipc: Enabling of bearer rejected, media not registered [ 588.681175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 588.689253][ C1] lec:lec_tx_timeout: lec0 [ 588.694674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.760175][T26028] netlink: 'syz.2.5537': attribute type 10 has an invalid length. [ 588.857721][T26028] bond0: (slave ): Enslaving as an active interface with an up link [ 588.869512][T26036] xt_hashlimit: size too large, truncated to 1048576 [ 589.016460][T26044] __nla_validate_parse: 23 callbacks suppressed [ 589.016481][T26044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5538'. [ 589.170344][T26050] sctp: [Deprecated]: syz.0.5540 (pid 26050) Use of int in max_burst socket option deprecated. [ 589.170344][T26050] Use struct sctp_assoc_value instead [ 589.333842][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 589.730628][T26069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.745791][T26068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.760167][T26077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5547'. [ 589.769406][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5547'. [ 589.904431][T26085] netlink: 'syz.2.5549': attribute type 1 has an invalid length. [ 589.913377][T26085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5549'. [ 589.963289][T26087] netlink: 'syz.2.5549': attribute type 1 has an invalid length. [ 589.985501][T26087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5549'. [ 590.023944][T26096] netlink: 'syz.0.5552': attribute type 64 has an invalid length. [ 590.124111][T26091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.590358][T26135] vlan2: entered allmulticast mode [ 590.597399][T26135] bond0: entered allmulticast mode [ 590.605957][T26135] bond_slave_0: entered allmulticast mode [ 590.618262][T26135] bond_slave_1: entered allmulticast mode [ 590.903042][T26150] netlink: 'syz.5.5566': attribute type 1 has an invalid length. [ 590.914608][T26150] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 591.128247][T26160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.143831][T26160] IPv6: NLM_F_CREATE should be set when creating new route [ 591.277301][T26173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5573'. [ 591.552604][T26192] netlink: 'syz.2.5578': attribute type 8 has an invalid length. [ 591.664127][T26196] netlink: 'syz.2.5578': attribute type 39 has an invalid length. [ 592.072727][T26211] net_ratelimit: 1975 callbacks suppressed [ 592.072748][T26211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.213079][T26196] hsr_slave_1 (unregistering): left promiscuous mode [ 592.461688][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5583'. [ 592.709606][T26234] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5589'. [ 592.914301][T26253] tipc: New replicast peer: 255.255.255.255 [ 592.927577][T26253] tipc: Enabled bearer , priority 10 [ 592.943987][T26253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5594'. [ 592.966384][T26253] tipc: Disabling bearer [ 593.077522][T26260] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 593.237565][T26269] netlink: 'syz.4.5601': attribute type 8 has an invalid length. [ 593.427180][T26279] macvlan0: entered promiscuous mode [ 593.528897][T26289] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 593.575978][T26289] bond5: (slave lo): Enslaving as an active interface with an up link [ 593.594164][T26289] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 593.702024][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 593.710081][ C1] lec:lec_tx_timeout: lec0 [ 593.714747][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 594.102893][T26329] __nla_validate_parse: 4 callbacks suppressed [ 594.102912][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 594.234029][T26336] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5625'. [ 594.243798][T26336] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5625'. [ 594.265788][T26336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5625'. [ 594.332261][T26336] bridge11: port 1(veth9) entered blocking state [ 594.338820][T26336] bridge11: port 1(veth9) entered disabled state [ 594.345693][T26336] veth9: entered allmulticast mode [ 594.361585][T26336] veth9: entered promiscuous mode [ 594.679764][T26364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5631'. [ 594.759297][T26367] bond8: (slave ip6_vti0): Device is not bonding slave [ 594.775842][T26367] bond8: option active_slave: invalid value (ip6_vti0) [ 594.785917][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 594.798144][T26367] bond8 (unregistering): Released all slaves [ 594.817203][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 594.897817][T26380] netlink: 'syz.0.5638': attribute type 1 has an invalid length. [ 594.947443][T26377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5633'. [ 595.090717][T26387] bond12: (slave ip6gretap1): making interface the new active one [ 595.103784][T26387] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 595.113145][T26387] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 595.122408][T26387] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 595.176602][T26396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5640'. [ 595.222328][T26396] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5640'. [ 595.487158][T26417] xt_SECMARK: invalid mode: 9 [ 595.654236][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 595.665229][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 595.682302][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 595.690364][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.699545][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 595.808179][T26424] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 595.824671][T26424] bond9 (unregistering): Released all slaves [ 596.256482][T26432] syzkaller0: entered promiscuous mode [ 596.277227][T26432] syzkaller0: entered allmulticast mode [ 597.628006][T26461] kthread_run failed with err -4 [ 597.771571][ T5827] Bluetooth: hci6: command tx timeout [ 598.008273][T26483] openvswitch: netlink: Missing valid actions attribute. [ 598.035744][T26421] lo speed is unknown, defaulting to 1000 [ 598.043208][T26483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.158292][T26491] netlink: 'syz.4.5663': attribute type 3 has an invalid length. [ 598.191404][T26491] netlink: 'syz.4.5663': attribute type 1 has an invalid length. [ 598.278478][T26500] batman_adv: batadv0: Adding interface: dummy0 [ 598.293772][T26500] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.339960][T26500] batman_adv: batadv0: Interface activated: dummy0 [ 598.366302][T26502] batadv0: mtu less than device minimum [ 598.388599][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.400550][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.412316][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.423927][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.435684][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.447274][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.459019][T26502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 598.585606][T26489] siw: device registration error -23 [ 598.624309][T26515] netlink: 'syz.2.5671': attribute type 16 has an invalid length. [ 598.642277][T26515] netlink: 'syz.2.5671': attribute type 17 has an invalid length. [ 598.721156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 598.729256][ C1] lec:lec_tx_timeout: lec0 [ 598.734911][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 598.919396][T26526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.932021][T26526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.943230][T26526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 598.953813][T26526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 598.984366][T26524] tipc: Enabled bearer , priority 10 [ 599.028314][T26533] bond9: Invalid ad_actor_system MAC address. [ 599.035214][T26533] bond9: option ad_actor_system: invalid value (1) [ 599.043351][T26533] bond9 (unregistering): Released all slaves [ 599.174399][T26526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.208121][T26526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.222840][T26526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 599.234461][T26526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.260670][T26421] chnl_net:caif_netlink_parms(): no params data found [ 599.347547][T26526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.361828][T26526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.376042][T26526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 599.387677][T26526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.405193][T26545] netlink: 'syz.5.5681': attribute type 1 has an invalid length. [ 599.447485][T26545] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.483326][T26526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.493817][T26526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.504505][T26526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 599.515722][T26526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 599.535895][T26551] __nla_validate_parse: 11 callbacks suppressed [ 599.535910][T26551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5680'. [ 599.552574][T26551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5680'. [ 599.571846][T26553] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5681'. [ 599.595241][T26545] bond6: (slave veth5): Enslaving as an active interface with a down link [ 599.626411][T26549] bond6: (slave dummy0): making interface the new active one [ 599.637249][T26549] dummy0: entered promiscuous mode [ 599.643717][T26549] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 599.682484][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5682'. [ 599.693045][T26553] bond6: (slave dummy0): Releasing active interface [ 599.699855][T26553] dummy0 (unregistering): left promiscuous mode [ 599.776368][T26421] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.787978][T26421] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.805580][T26421] bridge_slave_0: entered allmulticast mode [ 599.822902][T26421] bridge_slave_0: entered promiscuous mode [ 599.844316][T26421] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.852078][ T5827] Bluetooth: hci6: command tx timeout [ 599.871645][T26421] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.879029][T26421] bridge_slave_1: entered allmulticast mode [ 599.887934][T26557] sctp: [Deprecated]: syz.4.5682 (pid 26557) Use of int in max_burst socket option deprecated. [ 599.887934][T26557] Use struct sctp_assoc_value instead [ 599.905146][T26421] bridge_slave_1: entered promiscuous mode [ 599.912261][T26556] sctp: [Deprecated]: syz.4.5682 (pid 26556) Use of int in max_burst socket option deprecated. [ 599.912261][T26556] Use struct sctp_assoc_value instead [ 600.058366][T26421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.071436][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.082732][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 600.094546][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 600.103638][ T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 600.123134][T26578] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 600.131040][T26421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.142394][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.150702][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 600.160554][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 600.170255][ T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 600.179146][T26578] veth0: entered promiscuous mode [ 600.207749][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.216531][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 600.225762][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 600.234130][ T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 600.250620][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.259957][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 600.268379][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 600.276978][ T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 600.299888][T26421] team0: Port device team_slave_0 added [ 600.308521][T26421] team0: Port device team_slave_1 added [ 600.345042][T26578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5686'. [ 600.375043][T26421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.391460][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.419642][T26421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.441260][T26421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.448956][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.477535][T26421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.496843][T26576] veth0: left promiscuous mode [ 600.503327][T26583] syzkaller0: entered promiscuous mode [ 600.509369][T26583] syzkaller0: entered allmulticast mode [ 600.563114][T26588] netlink: 'syz.5.5689': attribute type 1 has an invalid length. [ 600.570906][T26588] netlink: 'syz.5.5689': attribute type 3 has an invalid length. [ 600.579794][T26588] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5689'. [ 600.592928][T26583] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5688'. [ 600.665221][T26421] hsr_slave_0: entered promiscuous mode [ 600.675372][T26421] hsr_slave_1: entered promiscuous mode [ 600.686296][T26421] debugfs: 'hsr0' already exists in 'hsr' [ 600.693124][T26421] Cannot create hsr debugfs directory [ 600.994927][T26421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.007929][T26421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 601.087729][T26421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.098370][T26421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 601.163279][T26421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.173730][T26421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 601.245949][T26421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.256443][T26421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 601.931758][ T5827] Bluetooth: hci6: command tx timeout [ 603.567517][T26589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.589433][T26603] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5692'. [ 603.620169][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5692'. [ 603.663218][T26421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 603.737669][T26421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 603.752003][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 603.760059][ C1] lec:lec_tx_timeout: lec0 [ 603.765134][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 603.784611][T26421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 603.834901][T26620] net_ratelimit: 13 callbacks suppressed [ 603.834917][T26620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 603.878466][T26421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 603.879135][T26623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5697'. [ 603.913193][T26619] netlink: 'syz.5.5696': attribute type 1 has an invalid length. [ 604.015277][ T5827] Bluetooth: hci6: command tx timeout [ 604.196784][T26421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.506409][T26421] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.518398][T26664] tipc: Enabling of bearer rejected, failed to enable media [ 604.536070][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.537519][T26667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.543232][ T8926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.566605][T26663] netlink: 'syz.3.5707': attribute type 1 has an invalid length. [ 604.581411][T26667] __nla_validate_parse: 2 callbacks suppressed [ 604.581426][T26667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5708'. [ 604.600995][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.608178][ T8926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.734525][T26674] xt_HMARK: spi-set and port-set can't be combined [ 604.770436][T26676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5709'. [ 604.875249][T26687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5714'. [ 605.110953][T26692] netlink: 'syz.4.5715': attribute type 16 has an invalid length. [ 605.164240][T26692] netlink: 'syz.4.5715': attribute type 17 has an invalid length. [ 605.216627][T26421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.320933][T26692] 8021q: adding VLAN 0 to HW filter on device .` [ 605.352629][T26692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.475207][T26723] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 605.483213][T26723] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 605.555678][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.624605][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.652540][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.679820][T26421] veth0_vlan: entered promiscuous mode [ 605.744728][T26737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 605.754773][T26421] veth1_vlan: entered promiscuous mode [ 605.817014][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.846769][T26421] veth0_macvtap: entered promiscuous mode [ 605.855839][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.869228][T26421] veth1_macvtap: entered promiscuous mode [ 605.880180][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.896797][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.925683][T26421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.936192][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.965724][T26421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.982688][T26737] hsr0 speed is unknown, defaulting to 1000 [ 605.994964][T26737] hsr0 speed is unknown, defaulting to 1000 [ 606.007557][ T1340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.035470][T26737] hsr0 speed is unknown, defaulting to 1000 [ 606.044792][ T1340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.077992][T26737] hsr0 speed is unknown, defaulting to 1000 [ 606.084172][ T1340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.114789][T26737] hsr0 speed is unknown, defaulting to 1000 [ 606.125286][ T1340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.244126][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'. [ 606.264268][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.271554][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'. [ 606.286336][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.356567][T26756] 8021q: adding VLAN 0 to HW filter on device bond19 [ 606.426343][T25773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.443464][T25773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.466722][T26772] netlink: 'syz.2.5732': attribute type 39 has an invalid length. [ 606.552977][T26779] netlink: 'syz.2.5732': attribute type 39 has an invalid length. [ 606.694889][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5735'. [ 606.878779][T26804] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 607.138381][T26819] netlink: 'syz.0.5746': attribute type 1 has an invalid length. [ 607.261874][T26825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.5749'. [ 607.526922][T26844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5754'. [ 607.591680][T26848] netlink: 'syz.5.5755': attribute type 1 has an invalid length. [ 607.787996][T26866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5759'. [ 607.945697][T26865] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 607.984241][T26873] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 608.121476][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5766'. [ 608.222207][T26888] openvswitch: netlink: Missing key (keys=40, expected=80) [ 608.626094][T26907] syzkaller0: entered promiscuous mode [ 608.645894][T26907] syzkaller0: entered allmulticast mode [ 608.732456][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 608.781260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 608.789342][ C1] lec:lec_tx_timeout: lec0 [ 608.794823][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 608.932840][T26931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.473946][T26974] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.481591][T26974] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.651073][T26988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 609.826577][T27002] tipc: Started in network mode [ 609.831874][T27002] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 609.839450][T27002] tipc: Enabled bearer , priority 24 [ 609.915039][T27008] netlink: 'syz.5.5799': attribute type 51 has an invalid length. [ 609.925884][T27008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.933950][T27008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.953194][T27008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.960795][T27008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.072312][T27018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.088243][T27016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.144821][T27024] netlink: 'syz.2.5803': attribute type 1 has an invalid length. [ 610.145234][T27023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.272676][T27019] 8021q: adding VLAN 0 to HW filter on device bond21 [ 610.283269][T27019] bond20: (slave bond21): making interface the new active one [ 610.291632][T27019] bond20: (slave bond21): Enslaving as an active interface with an up link [ 610.305728][T27019] __nla_validate_parse: 8 callbacks suppressed [ 610.305742][T27019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5803'. [ 610.328528][T27019] 8021q: adding VLAN 0 to HW filter on device bond20 [ 610.447495][T27041] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 610.468486][T27040] bridge5: entered promiscuous mode [ 610.484339][T27040] bridge5: entered allmulticast mode [ 610.501893][T27040] team0: Port device bridge5 added [ 610.581969][T27051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5812'. [ 610.692107][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5813'. [ 610.706938][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5811'. [ 610.864059][T27072] netlink: 'syz.5.5815': attribute type 21 has an invalid length. [ 610.971083][T27072] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 611.016424][T27072] bond8 (unregistering): Released all slaves [ 611.034590][T27086] netlink: 'syz.4.5819': attribute type 1 has an invalid length. [ 611.110899][T11184] tipc: Node number set to 10005162 [ 611.122602][T27086] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 611.252762][T27099] netlink: 'syz.5.5820': attribute type 1 has an invalid length. [ 611.334841][T27099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.398852][T27099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5820'. [ 611.542365][T27113] netlink: 'syz.3.5826': attribute type 1 has an invalid length. [ 611.689738][T27113] 8021q: adding VLAN 0 to HW filter on device bond9 [ 611.763144][T27128] netlink: 'syz.0.5827': attribute type 5 has an invalid length. [ 611.768531][T27115] bond9: (slave bridge14): making interface the new active one [ 611.789464][T27115] bond9: (slave bridge14): Enslaving as an active interface with an up link [ 611.801696][T27117] wireguard: wg2: Could not create IPv4 socket [ 612.134393][T27147] netlink: 'syz.3.5833': attribute type 1 has an invalid length. [ 612.291961][T27154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.319164][T27147] bond10: entered promiscuous mode [ 612.339150][T27147] 8021q: adding VLAN 0 to HW filter on device bond10 [ 612.453713][T27157] ipvlan3: entered allmulticast mode [ 612.459099][T27157] bond10: entered allmulticast mode [ 612.528452][T27150] bond10: (slave bridge15): making interface the new active one [ 612.543470][T27168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5838'. [ 612.548898][T27150] bridge15: entered promiscuous mode [ 612.573691][T27150] bridge15: entered allmulticast mode [ 612.587905][T27178] netlink: 512 bytes leftover after parsing attributes in process `syz.0.5839'. [ 612.599400][T27179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5838'. [ 612.609460][T27179] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5838'. [ 612.623357][T27150] bond10: (slave bridge15): Enslaving as an active interface with an up link [ 612.649762][T27179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5838'. [ 612.880869][T27196] xt_l2tp: missing protocol rule (udp|l2tpip) [ 613.100752][T27204] netlink: 'syz.5.5848': attribute type 22 has an invalid length. [ 613.186231][T25771] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.186506][T27204] netlink: 'syz.5.5848': attribute type 22 has an invalid length. [ 613.214595][T25771] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.257139][T25771] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.273956][T25771] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.309319][T27216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 613.346630][T27216] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.368249][T27216] gretap4: entered promiscuous mode [ 613.391186][T27216] gretap4: entered allmulticast mode [ 613.518360][T27228] syzkaller1: entered promiscuous mode [ 613.554546][T27228] syzkaller1: entered allmulticast mode [ 613.847624][T27245] syz.3.5858: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 613.907107][T27245] CPU: 0 UID: 0 PID: 27245 Comm: syz.3.5858 Not tainted syzkaller #0 PREEMPT(full) [ 613.907133][T27245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.907146][T27245] Call Trace: [ 613.907154][T27245] [ 613.907162][T27245] dump_stack_lvl+0xe8/0x150 [ 613.907192][T27245] warn_alloc+0x249/0x340 [ 613.907216][T27245] ? stack_trace_save+0xa9/0x100 [ 613.907239][T27245] ? __pfx_warn_alloc+0x10/0x10 [ 613.907266][T27245] ? kasan_save_track+0x4f/0x80 [ 613.907287][T27245] ? kasan_save_track+0x3e/0x80 [ 613.907305][T27245] ? __kasan_kmalloc+0x93/0xb0 [ 613.907325][T27245] ? __kmalloc_cache_noprof+0x31c/0x660 [ 613.907346][T27245] ? xskq_create+0x56/0x170 [ 613.907367][T27245] ? xsk_setsockopt+0x54c/0x990 [ 613.907384][T27245] ? do_sock_setsockopt+0x17c/0x1b0 [ 613.907404][T27245] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 613.907424][T27245] ? do_syscall_64+0x14d/0xf80 [ 613.907452][T27245] __vmalloc_node_range_noprof+0x132/0x1730 [ 613.907503][T27245] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 613.907527][T27245] ? __kasan_kmalloc+0x93/0xb0 [ 613.907551][T27245] vmalloc_user_noprof+0xad/0xe0 [ 613.907570][T27245] ? xskq_create+0xbf/0x170 [ 613.907592][T27245] xskq_create+0xbf/0x170 [ 613.907615][T27245] xsk_init_queue+0x8a/0xe0 [ 613.907637][T27245] xsk_setsockopt+0x54c/0x990 [ 613.907660][T27245] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.907680][T27245] ? __pfx_aa_sk_perm+0x10/0x10 [ 613.907711][T27245] ? aa_sock_opt_perm+0xff/0x1a0 [ 613.907731][T27245] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 613.907753][T27245] ? __pfx_xsk_setsockopt+0x10/0x10 [ 613.907773][T27245] do_sock_setsockopt+0x17c/0x1b0 [ 613.907804][T27245] __x64_sys_setsockopt+0x13d/0x1b0 [ 613.907830][T27245] do_syscall_64+0x14d/0xf80 [ 613.907852][T27245] ? trace_irq_disable+0x3b/0x150 [ 613.907867][T27245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.907895][T27245] ? clear_bhb_loop+0x40/0x90 [ 613.907918][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.907936][T27245] RIP: 0033:0x7f23e859c819 [ 613.907953][T27245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.907967][T27245] RSP: 002b:00007f23e94a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 613.907986][T27245] RAX: ffffffffffffffda RBX: 00007f23e8815fa0 RCX: 00007f23e859c819 [ 613.907999][T27245] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 613.908009][T27245] RBP: 00007f23e8632c91 R08: 0000000000000004 R09: 0000000000000000 [ 613.908020][T27245] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.908032][T27245] R13: 00007f23e8816038 R14: 00007f23e8815fa0 R15: 00007ffe1aeb1de8 [ 613.908063][T27245] [ 613.908238][T27245] Mem-Info: [ 613.918676][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.009249][T27245] active_anon:6751 inactive_anon:0 isolated_anon:0 [ 614.009249][T27245] active_file:3198 inactive_file:40332 isolated_file:0 [ 614.009249][T27245] unevictable:768 dirty:72 writeback:0 [ 614.009249][T27245] slab_reclaimable:14778 slab_unreclaimable:140518 [ 614.009249][T27245] mapped:34772 shmem:1385 pagetables:1579 [ 614.009249][T27245] sec_pagetables:0 bounce:0 [ 614.009249][T27245] kernel_misc_reclaimable:0 [ 614.009249][T27245] free:1253434 free_pcp:10081 free_cma:0 [ 614.256630][T27245] Node 0 active_anon:27004kB inactive_anon:0kB active_file:12792kB inactive_file:161132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138988kB dirty:288kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17644kB pagetables:6180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 614.300674][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.310606][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.319900][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.322754][T27245] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 614.329514][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.424736][T27245] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 614.456120][T27245] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 614.462618][T27245] Node 0 DMA32 free:1076608kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27104kB inactive_anon:0kB active_file:12792kB inactive_file:161132kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:37356kB local_pcp:16236kB free_cma:0kB [ 614.498908][T27245] lowmem_reserve[]: 0 0 0 0 0 [ 614.503875][T27245] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 614.581121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 614.589191][ C1] lec:lec_tx_timeout: lec0 [ 614.615322][T27245] lowmem_reserve[]: 0 0 0 0 0 [ 614.620091][T27245] Node 1 Normal free:3929196kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3772kB local_pcp:0kB free_cma:0kB [ 614.731948][T27245] lowmem_reserve[]: 0 0 0 0 0 [ 614.747183][T27245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 614.822437][T27245] Node 0 DMA32: 10737*4kB (UM) 7168*8kB (UME) 2940*16kB (UM) 142*32kB (UM) 74*64kB (UME) 41*128kB (UM) 532*256kB (UME) 363*512kB (UME) 231*1024kB (UM) 72*2048kB (UM) 55*4096kB (M) = 1093188kB [ 614.862998][T27245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 614.895718][T27245] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 958*4096kB (UM) = 3929196kB [ 614.964074][T27245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 614.984205][T27272] veth0: entered promiscuous mode [ 614.992335][T27272] veth0: left promiscuous mode [ 615.035712][T27245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 615.066316][T27245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 615.093882][T27245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 615.109103][T27245] 44934 total pagecache pages [ 615.117290][T27245] 0 pages in swap cache [ 615.121860][T27245] Free swap = 124996kB [ 615.126033][T27245] Total swap = 124996kB [ 615.130293][T27245] 2097051 pages RAM [ 615.136540][T27245] 0 pages HighMem/MovableOnly [ 615.142209][T27279] netlink: 'syz.4.5866': attribute type 1 has an invalid length. [ 615.144848][T27245] 427071 pages reserved [ 615.154434][T27245] 0 pages cma reserved [ 615.247456][T27290] netlink: 'syz.3.5868': attribute type 1 has an invalid length. [ 615.318461][T27276] bond1: entered promiscuous mode [ 615.324904][T27276] bond1: entered allmulticast mode [ 615.357607][T27294] __nla_validate_parse: 7 callbacks suppressed [ 615.357626][T27294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5868'. [ 615.426868][T27252] lo speed is unknown, defaulting to 1000 [ 615.553802][T27302] gretap0: entered promiscuous mode [ 615.559165][T27302] vlan3: entered promiscuous mode [ 615.727273][T27305] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 615.744900][T27305] bond9 (unregistering): Released all slaves [ 615.883558][T27252] hsr0 speed is unknown, defaulting to 1000 [ 615.979353][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5877'. [ 616.007767][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5877'. [ 616.022623][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5877'. [ 616.304799][T27252] chnl_net:caif_netlink_parms(): no params data found [ 616.424992][ T5827] Bluetooth: hci5: command tx timeout [ 616.631701][T27252] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.639587][T27252] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.653030][T27252] bridge_slave_0: entered allmulticast mode [ 616.798654][T27252] bridge_slave_0: entered promiscuous mode [ 616.836014][T27252] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.844238][T27252] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.851619][T27252] bridge_slave_1: entered allmulticast mode [ 616.859876][T27252] bridge_slave_1: entered promiscuous mode [ 617.015719][T27252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.035002][T27252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.117695][T27252] team0: Port device team_slave_0 added [ 617.126859][T27252] team0: Port device team_slave_1 added [ 617.164539][T27252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.172656][T27252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.199334][T27252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.219048][T27252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.226935][T27252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.253729][T27252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.346506][T27252] hsr_slave_0: entered promiscuous mode [ 617.353772][T27252] hsr_slave_1: entered promiscuous mode [ 617.360466][T27252] debugfs: 'hsr0' already exists in 'hsr' [ 617.366676][T27252] Cannot create hsr debugfs directory [ 617.474600][T27389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.549992][T27392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.655590][T27252] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.667774][T27252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 617.677971][T27252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.688237][T27252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 617.760980][T27252] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.784142][T27252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 617.809851][T27252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.829890][T27252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 617.916254][T27252] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.926410][T27252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 617.937514][T27252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.947761][T27252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 618.010391][T27252] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.025636][T27252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.041664][T27252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.051933][T27252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 618.468280][T27311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.492044][ T5827] Bluetooth: hci5: command tx timeout [ 618.521660][T27252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 618.595955][T27252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 618.646678][T27252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 618.714799][T27252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 618.745878][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5891'. [ 618.767810][T27438] netlink: 'syz.4.5892': attribute type 1 has an invalid length. [ 618.833796][T27438] bond9: entered promiscuous mode [ 618.839384][T27438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 618.879045][T27452] veth0: entered promiscuous mode [ 618.899266][T27448] syzkaller0: entered promiscuous mode [ 618.921696][T27448] syzkaller0: entered allmulticast mode [ 618.957236][T27438] macvtap1: entered allmulticast mode [ 618.985696][T27451] veth0: left promiscuous mode [ 618.998311][T27456] netlink: 'syz.5.5895': attribute type 3 has an invalid length. [ 619.034741][T27438] bond9: (slave bridge5): making interface the new active one [ 619.044012][T27456] netlink: 'syz.5.5895': attribute type 1 has an invalid length. [ 619.063333][T27456] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5895'. [ 619.073391][T27438] bridge5: entered promiscuous mode [ 619.080602][T27438] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 619.098487][T27456] netlink: 'syz.5.5895': attribute type 12 has an invalid length. [ 619.297815][T27252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.350490][T27252] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.398144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.405478][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.454802][T27481] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5901'. [ 619.487529][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.494695][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.532178][T27481] tipc: Resetting bearer [ 619.752281][T27505] Unsupported ieee802154 address type: 0 [ 619.783786][T27506] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 619.821963][T27504] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5907'. [ 619.932744][T27512] openvswitch: netlink: Unknown key attributes 2 [ 620.187424][T27252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.206112][T27526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.305989][T27532] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5914'. [ 620.324429][T27252] veth0_vlan: entered promiscuous mode [ 620.371464][T27252] veth1_vlan: entered promiscuous mode [ 620.464953][T27252] veth0_macvtap: entered promiscuous mode [ 620.497722][T27252] veth1_macvtap: entered promiscuous mode [ 620.516418][T27545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5917'. [ 620.565035][T27252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.575160][ T5827] Bluetooth: hci5: command tx timeout [ 620.598652][T27252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.634825][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.649991][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.720131][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.759867][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.828392][T27562] netlink: 13493 bytes leftover after parsing attributes in process `syz.4.5922'. [ 621.055443][T27579] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 621.079542][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5924'. [ 621.109413][ T8920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.120868][ T8920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.199431][T27581] ksmbd: Unknown IPC event: 3, ignore. [ 621.214491][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.226227][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.235912][T27585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5928'. [ 621.360761][T27593] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5931'. [ 621.537232][ T30] audit: type=1107 audit(1775779557.116:6): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ok [ 621.537232][ T30] J^2W [ 621.537232][ T30] 2^yҦYr?$W|Ʉ¬.T$(5hE03+ZXxPOPcl&gX_.2T yFcG-htL#~<#tE U|I 1CQ1OT5m}::$m kaߦZJ̮;UUsŐ:Aeڜq}KL' [ 621.538050][T27601] syzkaller0: entered promiscuous mode [ 621.592435][T27601] syzkaller0: entered allmulticast mode [ 621.630268][T27601] x_tables: duplicate underflow at hook 1 [ 621.654476][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5936'. [ 621.843944][T27624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5939'. [ 621.874792][T27624] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.891878][T27624] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 622.039992][ T5934] IPVS: starting estimator thread 0... [ 622.151281][T27634] IPVS: using max 32 ests per chain, 76800 per kthread [ 622.208552][T27648] netlink: 'syz.0.5945': attribute type 1 has an invalid length. [ 622.276655][T27648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.327829][T27648] bond2: (slave dummy0): making interface the new active one [ 622.339303][T27648] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 622.382702][T27648] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5945'. [ 622.458252][T27648] bond2: (slave dummy0): Releasing active interface [ 622.661966][ T5827] Bluetooth: hci5: command tx timeout [ 622.680605][T27678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5955'. [ 622.783431][T27684] netlink: 'syz.0.5957': attribute type 4 has an invalid length. [ 622.833658][T27684] netlink: 'syz.0.5957': attribute type 4 has an invalid length. [ 623.133117][T27708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5964'. [ 623.487853][T27736] netlink: 'syz.0.5971': attribute type 10 has an invalid length. [ 623.506828][T27737] netlink: 'syz.0.5971': attribute type 10 has an invalid length. [ 623.599210][T27736] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 623.698874][T27743] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 623.744531][T27745] netlink: 'syz.5.5974': attribute type 1 has an invalid length. [ 623.802762][T27745] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 623.853927][T27752] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.869400][T27752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.877287][T27752] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.884521][T27752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.965363][T27752] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.972660][T27752] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.098645][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.108697][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 624.216031][T27771] netlink: 'syz.0.5983': attribute type 10 has an invalid length. [ 624.284295][T27771] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 624.511850][T27802] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 624.546192][T27800] IPv6: sit2: Disabled Multicast RS [ 624.576441][T27800] sit2: entered allmulticast mode [ 624.853014][T27818] netlink: 'syz.2.5998': attribute type 4 has an invalid length. [ 625.075567][T27833] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 625.855355][T27848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.953962][T27848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.195003][T27848] tipc: Resetting bearer [ 626.291419][T27848] bond1: left promiscuous mode [ 626.296684][T27848] bond1: left allmulticast mode [ 626.346585][T27857] vlan4: entered allmulticast mode [ 626.381274][T27857] hsr0: entered allmulticast mode [ 626.404549][T27857] hsr_slave_0: entered allmulticast mode [ 626.430636][T27857] hsr_slave_1: entered allmulticast mode [ 626.442241][ T8920] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.471502][ T8920] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.531990][ T8920] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.540914][ T8920] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.563753][T27864] __nla_validate_parse: 23 callbacks suppressed [ 626.563769][T27864] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6017'. [ 626.636217][T27864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6017'. [ 626.676510][T27869] netlink: 'syz.3.6018': attribute type 3 has an invalid length. [ 626.877652][T27886] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6025'. [ 627.025184][T27898] : renamed from virt_wifi0 [ 627.085900][T27899] vlan3: entered allmulticast mode [ 627.292005][T27912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6033'. [ 627.539971][T27926] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6036'. [ 627.794525][T27943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6039'. [ 627.906473][T27943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.009427][T27964] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6041'. [ 628.222372][T27970] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6043'. [ 628.412531][T27981] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6047'. [ 628.477647][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6049'. [ 628.495177][T27986] validate_nla: 2 callbacks suppressed [ 628.495191][T27986] netlink: 'syz.5.6049': attribute type 12 has an invalid length. [ 628.518840][T27986] netlink: 'syz.5.6049': attribute type 29 has an invalid length. [ 628.677382][T27992] wireguard0: entered promiscuous mode [ 628.701192][T27992] wireguard0: entered allmulticast mode [ 628.735306][T27992] team0: Device wireguard0 is of different type [ 629.454198][T28043] tipc: Enabling of bearer rejected, failed to enable media [ 629.471663][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880343a3800: rx timeout, send abort [ 629.480939][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880343a3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 629.611425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.619537][ C1] lec:lec_tx_timeout: lec0 [ 630.011852][T28068] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 630.424947][T28109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.762843][T28125] netlink: 'syz.4.6085': attribute type 7 has an invalid length. [ 630.783342][T28125] netlink: 'syz.4.6085': attribute type 8 has an invalid length. [ 630.860349][T28141] nftables ruleset with unbound set [ 631.306019][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 631.366311][T28187] Cannot find add_set index 0 as target [ 631.436177][T28183] 0: renamed from hsr_slave_1 (while UP) [ 631.482846][T28183] 0: entered allmulticast mode [ 631.488386][T28183] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 631.552878][T28197] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.636493][T28204] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.668132][T28206] syzkaller1: entered promiscuous mode [ 631.683376][T28206] syzkaller1: entered allmulticast mode [ 631.808278][T28212] __nla_validate_parse: 7 callbacks suppressed [ 631.808297][T28212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6107'. [ 631.950098][T28230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6113'. [ 631.983030][T28230] vlan3: entered allmulticast mode [ 631.988249][T28230] bridge17: entered allmulticast mode [ 631.999554][T28230] bridge17: port 1(erspan0) entered blocking state [ 632.013745][T28230] bridge17: port 1(erspan0) entered disabled state [ 632.020561][T28230] erspan0: entered allmulticast mode [ 632.028173][T28230] erspan0: entered promiscuous mode [ 632.135304][ T30] audit: type=1107 audit(1775779567.716:7): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 632.195859][ T30] audit: type=1107 audit(1775779567.736:8): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 632.268203][T28246] netlink: 'syz.3.6118': attribute type 1 has an invalid length. [ 632.276756][T28243] netlink: 'syz.4.6116': attribute type 2 has an invalid length. [ 632.289284][T28246] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 632.359246][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6117'. [ 632.635609][T28229] lec:lec_atm_close: lec0: Shut down! [ 632.950581][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.960773][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.968687][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.978194][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.985966][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.349674][T28274] lo speed is unknown, defaulting to 1000 [ 633.586133][T28291] netlink: 548 bytes leftover after parsing attributes in process `syz.5.6130'. [ 633.873930][T28274] hsr0 speed is unknown, defaulting to 1000 [ 633.950186][T28307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6136'. [ 633.963313][T28307] openvswitch: netlink: Flow key attr not present in new flow. [ 633.973906][T28307] netlink: 'syz.2.6136': attribute type 7 has an invalid length. [ 633.988053][T28307] netlink: 'syz.2.6136': attribute type 1 has an invalid length. [ 634.117393][T28315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6138'. [ 634.149192][T28314] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 634.183379][T28315] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 634.239790][T28274] chnl_net:caif_netlink_parms(): no params data found [ 634.443514][T28274] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.450944][T28274] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.490754][T28274] bridge_slave_0: entered allmulticast mode [ 634.532599][T28274] bridge_slave_0: entered promiscuous mode [ 634.580869][T28274] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.602242][T28274] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.619685][T28274] bridge_slave_1: entered allmulticast mode [ 634.646900][T28274] bridge_slave_1: entered promiscuous mode [ 634.755565][T28274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.793424][T28274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.910804][T28274] team0: Port device team_slave_0 added [ 634.924378][T28274] team0: Port device team_slave_1 added [ 635.023918][T28274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.045398][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.082495][ T5827] Bluetooth: hci4: command tx timeout [ 635.119554][T28274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.150707][T28274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.157769][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.185078][T28274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.243590][T28274] hsr_slave_0: entered promiscuous mode [ 635.250459][T28274] hsr_slave_1: entered promiscuous mode [ 635.258704][T28274] debugfs: 'hsr0' already exists in 'hsr' [ 635.264826][T28274] Cannot create hsr debugfs directory [ 635.355703][T28353] sock: sock_timestamping_bind_phc: sock not bind to device [ 635.474231][T28358] netlink: 'syz.0.6150': attribute type 39 has an invalid length. [ 635.554673][T28361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6151'. [ 635.705501][T28366] netlink: 'syz.4.6153': attribute type 2 has an invalid length. [ 635.749150][T28274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.775453][T28366] 9: entered promiscuous mode [ 635.792062][T28369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6155'. [ 635.801370][T28369] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6155'. [ 635.860847][T28274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.906488][T28379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.912541][T28373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.082631][T28274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.277675][T28399] bond10: entered promiscuous mode [ 636.283326][T28399] 8021q: adding VLAN 0 to HW filter on device bond10 [ 636.402316][T28274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.479247][T28413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 636.502108][T28413] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 636.514994][T28413] bond10: (slave ip6gre1): Error -95 calling set_mac_address [ 636.854130][T28416] : entered promiscuous mode [ 636.962524][T28274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.963255][T28441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6167'. [ 636.997117][T28274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.015707][T28274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.048193][T28274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 637.070826][T28417] lo speed is unknown, defaulting to 1000 [ 637.131694][ T5827] Bluetooth: hci4: command tx timeout [ 637.208941][T28274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.230872][T28274] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.313125][T25771] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.320312][T25771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.375308][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.382484][ T8924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.599450][T28417] hsr0 speed is unknown, defaulting to 1000 [ 637.641121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 637.649211][ C1] lec:lec_tx_timeout: lec0 [ 637.923060][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'. [ 637.969047][T28479] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 637.979699][T28479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6179'. [ 638.010851][T28274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.097827][T28489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6179'. [ 638.115185][T28274] veth0_vlan: entered promiscuous mode [ 638.140858][T28274] veth1_vlan: entered promiscuous mode [ 638.258943][T28274] veth0_macvtap: entered promiscuous mode [ 638.284662][T28493] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6184'. [ 638.301629][T28494] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6184'. [ 638.351574][T28274] veth1_macvtap: entered promiscuous mode [ 638.387814][T28274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.409233][T28274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.439047][ T8924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.455063][ T8924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.489791][ T8924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.528122][T28504] syzkaller0: entered promiscuous mode [ 638.533706][T28504] syzkaller0: entered allmulticast mode [ 638.539959][ T8924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.546809][T28504] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 638.580311][T28506] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6188'. [ 638.827795][T28513] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6190'. [ 638.881336][T28513] 0: renamed from nr25 [ 638.903554][T28513] 0: entered allmulticast mode [ 638.913615][T28513] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 638.978458][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.996875][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.138053][T25771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.156219][T25771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.211898][ T5827] Bluetooth: hci4: command tx timeout [ 639.791906][T28567] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 639.844027][T28567] bond8 (unregistering): Released all slaves [ 640.116750][T28573] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 640.170306][T28584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6206'. [ 640.542707][T28599] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6211'. [ 640.968157][T28630] syzkaller0: entered promiscuous mode [ 640.995410][T28638] netlink: 'syz.4.6221': attribute type 1 has an invalid length. [ 641.099244][T28632] xt_policy: too many policy elements [ 641.178192][T28645] openvswitch: netlink: IPv4 tun info is not correct [ 641.189505][T28644] openvswitch: netlink: IPv4 tun info is not correct [ 641.306288][ T5827] Bluetooth: hci4: command tx timeout [ 641.469918][T16335] lec:lec_start_xmit: lec0:No lecd attached [ 642.583481][T28665] tipc: Enabling of bearer rejected, media not registered [ 642.716469][T28679] openvswitch: netlink: IP tunnel dst address not specified [ 642.953517][T28693] __nla_validate_parse: 1 callbacks suppressed [ 642.953537][T28693] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6235'. [ 643.006679][T28704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6237'. [ 643.018498][T28704] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6237'. [ 643.064729][T28704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6237'. [ 643.167371][T28693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6235'. [ 643.435405][T28733] netlink: 'syz.5.6245': attribute type 1 has an invalid length. [ 643.505015][T28738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6247'. [ 643.555402][T28742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6248'. [ 643.916827][T28767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6255'. [ 644.500452][T28810] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 644.544250][T28810] 8021q: adding VLAN 0 to HW filter on device bond12 [ 644.553835][T28810] bond11: (slave bond12): making interface the new active one [ 644.562941][T28810] bond11: (slave bond12): Enslaving as an active interface with an up link [ 644.937438][T28822] geneve2: entered promiscuous mode [ 644.942994][T28822] geneve2: entered allmulticast mode [ 644.949585][ T8924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.960585][ T8924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.976440][ T8924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.986019][ T8924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 646.581415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 646.589525][ C1] lec:lec_tx_timeout: lec0 [ 647.355128][T28791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.557735][T28837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6278'. [ 647.571531][T28837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6278'. [ 648.060601][T28884] __nla_validate_parse: 1 callbacks suppressed [ 648.060621][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6291'. [ 648.103597][T28884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6291'. [ 648.114373][T28879] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 648.289427][T28897] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 648.318076][T28898] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 649.638164][T28884] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 649.639793][T28907] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 649.673077][T28907] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 649.720456][T28907] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 649.792527][T28911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 649.817014][T28911] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 649.885599][T28911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 649.910638][T28911] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 649.946796][T28928] 8021q: VLANs not supported on ip6_vti0 [ 649.957562][T28926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6301'. [ 649.963587][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6300'. [ 650.014402][T28911] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 650.034634][ T8924] tipc: Subscription rejected, illegal request [ 650.043006][T28911] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 650.095749][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6302'. [ 650.122812][T28911] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 650.140010][T28911] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 650.154051][T28938] netlink: 'syz.2.6304': attribute type 10 has an invalid length. [ 650.234888][T28938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 650.294187][T28911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.307562][T28911] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 650.425886][T28950] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6309'. [ 650.446964][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 650.447809][T28951] netlink: 'syz.2.6308': attribute type 1 has an invalid length. [ 650.463960][T28950] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6309'. [ 650.476337][T28951] netlink: 16022 bytes leftover after parsing attributes in process `syz.2.6308'. [ 650.598692][T28957] netlink: 'syz.2.6312': attribute type 1 has an invalid length. [ 650.752674][T28974] x_tables: duplicate underflow at hook 2 [ 650.898212][T28987] xt_ecn: cannot match TCP bits for non-tcp packets [ 651.048058][T28999] netlink: 'syz.0.6324': attribute type 1 has an invalid length. [ 651.079537][T28999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6324'. [ 651.110371][T28999] netlink: 'syz.0.6324': attribute type 2 has an invalid length. [ 651.124785][T28999] netlink: 'syz.0.6324': attribute type 2 has an invalid length. [ 651.184514][T28999] netlink: 'syz.0.6324': attribute type 2 has an invalid length. [ 651.301534][T29009] netlink: 'syz.2.6328': attribute type 1 has an invalid length. [ 651.509771][T29027] netlink: 'syz.0.6331': attribute type 39 has an invalid length. [ 651.568188][T29027] hsr_slave_1 (unregistering): left promiscuous mode [ 651.637573][T29033] vlan2: entered promiscuous mode [ 651.647001][T29033] vlan2: entered allmulticast mode [ 652.022479][T29051] hsr_slave_1 (unregistering): left promiscuous mode [ 652.127930][T29065] syzkaller0: entered promiscuous mode [ 652.134657][T29065] syzkaller0: entered allmulticast mode [ 652.158094][ T8926] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.171464][ T8924] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.195620][ T8924] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.211557][ T8924] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.842367][T29080] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 653.849934][T29085] tc_dump_action: action bad kind [ 653.871433][T29098] __nla_validate_parse: 5 callbacks suppressed [ 653.871449][T29098] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6354'. [ 653.959440][T29106] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 653.984851][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6356'. [ 654.005056][T29113] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6358'. [ 654.033672][T29106] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 654.050695][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6357'. [ 654.185319][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6362'. [ 654.232271][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6362'. [ 654.253800][T29127] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6362'. [ 654.304652][T29130] veth1_macvtap: left promiscuous mode [ 654.398283][T29136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6364'. [ 654.633632][T29155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6368'. [ 654.652414][T29155] netlink: 'syz.5.6368': attribute type 24 has an invalid length. [ 654.689588][T29158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6369'. [ 655.096468][T29188] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 655.449083][T29217] netlink: 'syz.2.6389': attribute type 1 has an invalid length. [ 655.578533][T29228] pimreg: entered allmulticast mode [ 655.600480][ T5827] block nbd0: Receive control failed (result -107) [ 655.618213][T29231] block nbd0: reconnected socket [ 656.473618][T29279] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 656.523065][T29287] netlink: 'syz.0.6411': attribute type 2 has an invalid length. [ 656.530913][T29287] netlink: 'syz.0.6411': attribute type 1 has an invalid length. [ 656.612731][T29294] syzkaller1: entered promiscuous mode [ 656.618349][T29294] syzkaller1: entered allmulticast mode [ 656.750379][T29303] syzkaller0: entered promiscuous mode [ 656.765213][T29303] syzkaller0: entered allmulticast mode [ 656.920327][T29316] SET target dimension over the limit! [ 657.186631][T29342] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 657.576957][T29363] sock: sock_set_timeout: `syz.0.6432' (pid 29363) tries to set negative timeout [ 657.706616][T29374] xt_hashlimit: size too large, truncated to 1048576 [ 657.799422][T29379] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 657.830454][T29379] bond1 (unregistering): Released all slaves [ 658.580118][T29420] netlink: 'syz.3.6447': attribute type 1 has an invalid length. [ 658.594948][T29420] netlink: 'syz.3.6447': attribute type 1 has an invalid length. [ 658.731657][T29425] dvmrp0: entered allmulticast mode [ 658.996794][T29445] __nla_validate_parse: 19 callbacks suppressed [ 658.996815][T29445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6452'. [ 659.024805][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6450'. [ 659.073153][T29440] syzkaller0: entered promiscuous mode [ 659.078835][T29440] syzkaller0: entered allmulticast mode [ 659.086699][T29442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 659.107769][T29445] macsec1: entered promiscuous mode [ 659.114015][T29445] bridge0: entered promiscuous mode [ 659.119674][T29445] macsec1: entered allmulticast mode [ 659.125416][T29445] bridge0: entered allmulticast mode [ 659.131753][T29445] bridge0: port 3(macsec1) entered blocking state [ 659.138447][T29445] bridge0: port 3(macsec1) entered disabled state [ 659.148776][T29445] bridge0: left allmulticast mode [ 659.154349][T29445] bridge0: left promiscuous mode [ 659.739293][T29483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.232119][T29490] nbd3: detected capacity change from 0 to 127 [ 661.244956][ T5827] block nbd3: Receive control failed (result -104) [ 661.328118][T29512] IPVS: set_ctl: invalid protocol: 14432 172.20.20.187:20003 [ 661.349674][T29509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6468'. [ 661.382294][T29506] veth11: entered allmulticast mode [ 661.428120][T29515] netlink: 'syz.5.6469': attribute type 1 has an invalid length. [ 661.441169][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6469'. [ 661.468426][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6469'. [ 661.491246][T29515] netlink: 'syz.5.6469': attribute type 2 has an invalid length. [ 661.530760][T29515] netlink: 'syz.5.6469': attribute type 2 has an invalid length. [ 661.554051][T29520] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6469'. [ 661.564085][T29515] netlink: 'syz.5.6469': attribute type 2 has an invalid length. [ 661.575075][T29522] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6475'. [ 661.584853][T29525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6474'. [ 661.734895][T29532] netlink: 'syz.0.6478': attribute type 8 has an invalid length. [ 661.761930][T29534] netlink: 'syz.0.6478': attribute type 8 has an invalid length. [ 661.796783][T29530] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6476'. [ 662.051206][T29555] hsr_slave_0 (unregistering): left promiscuous mode [ 662.106144][T29567] pimreg3: entered allmulticast mode [ 662.126198][T29569] netlink: 'syz.4.6487': attribute type 1 has an invalid length. [ 662.770125][T29623] netlink: 'syz.2.6500': attribute type 2 has an invalid length. [ 663.482841][T29646] lo speed is unknown, defaulting to 1000 [ 663.961119][T29632] [ 663.963495][T29632] ====================================================== [ 663.970523][T29632] WARNING: possible circular locking dependency detected [ 663.977581][T29632] syzkaller #0 Not tainted [ 663.982008][T29632] ------------------------------------------------------ [ 663.989057][T29632] syz.4.6504/29632 is trying to acquire lock: [ 663.995144][T29632] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 664.004316][T29632] [ 664.004316][T29632] but task is already holding lock: [ 664.011698][T29632] ffff888076e3c8a8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x97c/0x1320 [ 664.021773][T29632] [ 664.021773][T29632] which lock already depends on the new lock. [ 664.021773][T29632] [ 664.032209][T29632] [ 664.032209][T29632] the existing dependency chain (in reverse order) is: [ 664.041238][T29632] [ 664.041238][T29632] -> #9 (mapping.invalidate_lock#2){++++}-{4:4}: [ 664.049795][T29632] down_read+0x47/0x2e0 [ 664.054510][T29632] filemap_fault+0x5ff/0x1320 [ 664.059732][T29632] __do_fault+0x138/0x390 [ 664.064609][T29632] do_pte_missing+0x5c4/0x3490 [ 664.069914][T29632] handle_mm_fault+0x1bec/0x3310 [ 664.072282][T29660] netlink: 'syz.0.6511': attribute type 10 has an invalid length. [ 664.075407][T29632] do_user_addr_fault+0xa73/0x1340 [ 664.088836][T29632] exc_page_fault+0x6a/0xc0 [ 664.093882][T29632] asm_exc_page_fault+0x26/0x30 [ 664.094648][T29660] __nla_validate_parse: 5 callbacks suppressed [ 664.094684][T29660] netlink: 396 bytes leftover after parsing attributes in process `syz.0.6511'. [ 664.099266][T29632] [ 664.099266][T29632] -> #8 (vm_lock){++++}-{0:0}: [ 664.121385][T29632] __vma_start_exclude_readers+0x28a/0x940 [ 664.127760][T29632] __vma_start_write+0xdc/0x290 [ 664.133157][T29632] mprotect_fixup+0x5ee/0xa80 [ 664.138403][T29632] setup_arg_pages+0x565/0xac0 [ 664.143706][T29632] load_elf_binary+0xc5e/0x2980 [ 664.149107][T29632] bprm_execve+0x93d/0x1460 [ 664.154164][T29632] kernel_execve+0x844/0x930 [ 664.159302][T29632] try_to_run_init_process+0x13/0x60 [ 664.165135][T29632] kernel_init+0xad/0x1d0 [ 664.169992][T29632] ret_from_fork+0x51e/0xb90 [ 664.175126][T29632] ret_from_fork_asm+0x1a/0x30 [ 664.180426][T29632] [ 664.180426][T29632] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 664.188004][T29632] __might_fault+0xcb/0x130 [ 664.193043][T29632] _copy_from_user+0x28/0xb0 [ 664.198170][T29632] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 664.204687][T29632] ip_generic_getfrag+0x149/0x2d0 [ 664.210249][T29632] __ip6_append_data+0x36be/0x3c50 [ 664.215909][T29632] ip6_append_data+0x10f/0x280 [ 664.221202][T29632] rawv6_sendmsg+0x12d3/0x18e0 [ 664.226493][T29632] ____sys_sendmsg+0x80a/0x9f0 [ 664.231789][T29632] ___sys_sendmsg+0x2a5/0x360 [ 664.236997][T29632] __x64_sys_sendmsg+0x1bd/0x2a0 [ 664.242482][T29632] do_syscall_64+0x14d/0xf80 [ 664.247603][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.254028][T29632] [ 664.254028][T29632] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 664.261777][T29632] lock_sock_nested+0x48/0x100 [ 664.267071][T29632] inet_shutdown+0x6a/0x390 [ 664.272138][T29632] nbd_mark_nsock_dead+0x2e9/0x560 [ 664.277788][T29632] recv_work+0x1c7f/0x1d90 [ 664.282738][T29632] process_scheduled_works+0xb6e/0x18c0 [ 664.288827][T29632] worker_thread+0xa53/0xfc0 [ 664.293957][T29632] kthread+0x388/0x470 [ 664.298555][T29632] ret_from_fork+0x51e/0xb90 [ 664.303678][T29632] ret_from_fork_asm+0x1a/0x30 [ 664.308976][T29632] [ 664.308976][T29632] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 664.316651][T29632] __mutex_lock+0x19f/0x1300 [ 664.321773][T29632] nbd_queue_rq+0x37b/0x1100 [ 664.326889][T29632] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 664.332970][T29632] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 664.339844][T29632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 664.346364][T29632] blk_mq_run_hw_queue+0x348/0x4f0 [ 664.352010][T29632] blk_mq_dispatch_list+0xd16/0xe10 [ 664.357764][T29632] blk_mq_flush_plug_list+0x48d/0x570 [ 664.363669][T29632] __blk_flush_plug+0x3ed/0x4d0 [ 664.369050][T29632] __submit_bio+0x28d/0x580 [ 664.374132][T29632] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 664.380297][T29632] block_read_full_folio+0x599/0x830 [ 664.386121][T29632] filemap_read_folio+0x137/0x3b0 [ 664.391686][T29632] do_read_cache_folio+0x358/0x590 [ 664.397324][T29632] read_part_sector+0xb6/0x2b0 [ 664.402620][T29632] adfspart_check_ICS+0xa5/0xa40 [ 664.408126][T29632] bdev_disk_changed+0x7ba/0x1550 [ 664.413680][T29632] blkdev_get_whole+0x380/0x510 [ 664.419079][T29632] bdev_open+0x31e/0xd30 [ 664.423874][T29632] blkdev_open+0x470/0x610 [ 664.428834][T29632] do_dentry_open+0x785/0x14e0 [ 664.434133][T29632] vfs_open+0x3b/0x340 [ 664.438733][T29632] path_openat+0x2e08/0x3860 [ 664.443855][T29632] do_file_open+0x23e/0x4a0 [ 664.448888][T29632] do_sys_openat2+0x113/0x200 [ 664.454101][T29632] __x64_sys_openat+0x138/0x170 [ 664.459496][T29632] do_syscall_64+0x14d/0xf80 [ 664.464626][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.471057][T29632] [ 664.471057][T29632] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 664.478298][T29632] __mutex_lock+0x19f/0x1300 [ 664.483444][T29632] nbd_queue_rq+0xc6/0x1100 [ 664.488479][T29632] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 664.494556][T29632] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 664.501419][T29632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 664.507941][T29632] blk_mq_run_hw_queue+0x348/0x4f0 [ 664.513580][T29632] blk_mq_dispatch_list+0xd16/0xe10 [ 664.519313][T29632] blk_mq_flush_plug_list+0x48d/0x570 [ 664.525225][T29632] __blk_flush_plug+0x3ed/0x4d0 [ 664.530605][T29632] __submit_bio+0x28d/0x580 [ 664.535643][T29632] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 664.541805][T29632] block_read_full_folio+0x599/0x830 [ 664.547616][T29632] filemap_read_folio+0x137/0x3b0 [ 664.553176][T29632] do_read_cache_folio+0x358/0x590 [ 664.558851][T29632] read_part_sector+0xb6/0x2b0 [ 664.564142][T29632] adfspart_check_ICS+0xa5/0xa40 [ 664.569623][T29632] bdev_disk_changed+0x7ba/0x1550 [ 664.575189][T29632] blkdev_get_whole+0x380/0x510 [ 664.580571][T29632] bdev_open+0x31e/0xd30 [ 664.585365][T29632] blkdev_open+0x470/0x610 [ 664.590311][T29632] do_dentry_open+0x785/0x14e0 [ 664.595605][T29632] vfs_open+0x3b/0x340 [ 664.600238][T29632] path_openat+0x2e08/0x3860 [ 664.605385][T29632] do_file_open+0x23e/0x4a0 [ 664.610446][T29632] do_sys_openat2+0x113/0x200 [ 664.615695][T29632] __x64_sys_openat+0x138/0x170 [ 664.621088][T29632] do_syscall_64+0x14d/0xf80 [ 664.626211][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.632636][T29632] [ 664.632636][T29632] -> #3 (set->srcu){.+.+}-{0:0}: [ 664.639790][T29632] __synchronize_srcu+0xca/0x300 [ 664.645267][T29632] elevator_switch+0x1e8/0x7a0 [ 664.650558][T29632] elevator_change+0x2cc/0x450 [ 664.655850][T29632] elevator_set_default+0x36c/0x430 [ 664.661589][T29632] blk_register_queue+0x366/0x430 [ 664.667146][T29632] __add_disk+0x677/0xd50 [ 664.672016][T29632] add_disk_fwnode+0xfb/0x480 [ 664.677252][T29632] nbd_dev_add+0x72c/0xb50 [ 664.682200][T29632] nbd_init+0x168/0x1f0 [ 664.686973][T29632] do_one_initcall+0x250/0x8d0 [ 664.692277][T29632] do_initcall_level+0x104/0x190 [ 664.697752][T29632] do_initcalls+0x59/0xa0 [ 664.702619][T29632] kernel_init_freeable+0x2a6/0x3e0 [ 664.708350][T29632] kernel_init+0x1d/0x1d0 [ 664.713241][T29632] ret_from_fork+0x51e/0xb90 [ 664.718378][T29632] ret_from_fork_asm+0x1a/0x30 [ 664.723680][T29632] [ 664.723680][T29632] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 664.731502][T29632] __mutex_lock+0x19f/0x1300 [ 664.736625][T29632] elevator_change+0x1b3/0x450 [ 664.741914][T29632] elevator_set_none+0xb5/0x140 [ 664.747294][T29632] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 664.753651][T29632] nbd_start_device+0x17f/0xb10 [ 664.759041][T29632] nbd_genl_connect+0x165b/0x1cf0 [ 664.764623][T29632] genl_family_rcv_msg_doit+0x22a/0x330 [ 664.770709][T29632] genl_rcv_msg+0x61c/0x7a0 [ 664.775742][T29632] netlink_rcv_skb+0x232/0x4b0 [ 664.781037][T29632] genl_rcv+0x28/0x40 [ 664.785549][T29632] netlink_unicast+0x80f/0x9b0 [ 664.790853][T29632] netlink_sendmsg+0x813/0xb40 [ 664.796330][T29632] ____sys_sendmsg+0x972/0x9f0 [ 664.801645][T29632] ___sys_sendmsg+0x2a5/0x360 [ 664.806858][T29632] __x64_sys_sendmsg+0x1bd/0x2a0 [ 664.812330][T29632] do_syscall_64+0x14d/0xf80 [ 664.817466][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.823898][T29632] [ 664.823898][T29632] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 664.832530][T29632] blk_alloc_queue+0x546/0x680 [ 664.837828][T29632] __blk_mq_alloc_disk+0x197/0x390 [ 664.843472][T29632] nbd_dev_add+0x499/0xb50 [ 664.848414][T29632] nbd_init+0x168/0x1f0 [ 664.853102][T29632] do_one_initcall+0x250/0x8d0 [ 664.858431][T29632] do_initcall_level+0x104/0x190 [ 664.863900][T29632] do_initcalls+0x59/0xa0 [ 664.868760][T29632] kernel_init_freeable+0x2a6/0x3e0 [ 664.874523][T29632] kernel_init+0x1d/0x1d0 [ 664.879396][T29632] ret_from_fork+0x51e/0xb90 [ 664.884536][T29632] ret_from_fork_asm+0x1a/0x30 [ 664.889837][T29632] [ 664.889837][T29632] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 664.897093][T29632] __lock_acquire+0x15a5/0x2cf0 [ 664.902508][T29632] lock_acquire+0xf0/0x2e0 [ 664.907478][T29632] fs_reclaim_acquire+0x71/0x100 [ 664.912956][T29632] prepare_alloc_pages+0x152/0x650 [ 664.918610][T29632] __alloc_frozen_pages_noprof+0x12f/0x380 [ 664.924944][T29632] alloc_pages_mpol+0x232/0x4a0 [ 664.930338][T29632] alloc_pages_noprof+0xa8/0x1a0 [ 664.935818][T29632] folio_alloc_noprof+0x1e/0x30 [ 664.941194][T29632] filemap_alloc_folio_noprof+0x111/0x470 [ 664.947435][T29632] __filemap_get_folio_mpol+0x3fc/0xb00 [ 664.953509][T29632] filemap_fault+0x9ac/0x1320 [ 664.958722][T29632] __do_fault+0x138/0x390 [ 664.963576][T29632] do_pte_missing+0x5c4/0x3490 [ 664.968881][T29632] handle_mm_fault+0x1bec/0x3310 [ 664.974356][T29632] do_user_addr_fault+0xa73/0x1340 [ 664.980043][T29632] exc_page_fault+0x6a/0xc0 [ 664.985087][T29632] asm_exc_page_fault+0x26/0x30 [ 664.990462][T29632] [ 664.990462][T29632] other info that might help us debug this: [ 664.990462][T29632] [ 665.000711][T29632] Chain exists of: [ 665.000711][T29632] fs_reclaim --> vm_lock --> mapping.invalidate_lock#2 [ 665.000711][T29632] [ 665.013504][T29632] Possible unsafe locking scenario: [ 665.013504][T29632] [ 665.020982][T29632] CPU0 CPU1 [ 665.026357][T29632] ---- ---- [ 665.031724][T29632] rlock(mapping.invalidate_lock#2); [ 665.037135][T29632] lock(vm_lock); [ 665.043385][T29632] lock(mapping.invalidate_lock#2); [ 665.051202][T29632] lock(fs_reclaim); [ 665.055213][T29632] [ 665.055213][T29632] *** DEADLOCK *** [ 665.055213][T29632] [ 665.063365][T29632] 1 lock held by syz.4.6504/29632: [ 665.068480][T29632] #0: ffff888076e3c8a8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x97c/0x1320 [ 665.078943][T29632] [ 665.078943][T29632] stack backtrace: [ 665.084836][T29632] CPU: 0 UID: 0 PID: 29632 Comm: syz.4.6504 Not tainted syzkaller #0 PREEMPT(full) [ 665.084859][T29632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 665.084872][T29632] Call Trace: [ 665.084879][T29632] [ 665.084885][T29632] dump_stack_lvl+0xe8/0x150 [ 665.084908][T29632] print_circular_bug+0x2e1/0x300 [ 665.084934][T29632] check_noncircular+0x12e/0x150 [ 665.084960][T29632] __lock_acquire+0x15a5/0x2cf0 [ 665.084982][T29632] ? __blk_flush_plug+0x416/0x4d0 [ 665.085009][T29632] ? __pfx___blk_flush_plug+0x10/0x10 [ 665.085032][T29632] lock_acquire+0xf0/0x2e0 [ 665.085051][T29632] ? prepare_alloc_pages+0x152/0x650 [ 665.085074][T29632] fs_reclaim_acquire+0x71/0x100 [ 665.085093][T29632] ? prepare_alloc_pages+0x152/0x650 [ 665.085111][T29632] prepare_alloc_pages+0x152/0x650 [ 665.085133][T29632] __alloc_frozen_pages_noprof+0x12f/0x380 [ 665.085155][T29632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 665.085177][T29632] ? __pfx_policy_nodemask+0x10/0x10 [ 665.085201][T29632] alloc_pages_mpol+0x232/0x4a0 [ 665.085223][T29632] alloc_pages_noprof+0xa8/0x1a0 [ 665.085245][T29632] folio_alloc_noprof+0x1e/0x30 [ 665.085265][T29632] filemap_alloc_folio_noprof+0x111/0x470 [ 665.085283][T29632] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 665.085304][T29632] __filemap_get_folio_mpol+0x3fc/0xb00 [ 665.085344][T29632] filemap_fault+0x9ac/0x1320 [ 665.085367][T29632] ? __pfx_filemap_fault+0x10/0x10 [ 665.085389][T29632] ? __lock_acquire+0x6b5/0x2cf0 [ 665.085413][T29632] __do_fault+0x138/0x390 [ 665.085433][T29632] do_pte_missing+0x5c4/0x3490 [ 665.085456][T29632] ? handle_mm_fault+0xee/0x3310 [ 665.085483][T29632] handle_mm_fault+0x1bec/0x3310 [ 665.085515][T29632] ? handle_mm_fault+0xee/0x3310 [ 665.085543][T29632] ? __pfx_handle_mm_fault+0x10/0x10 [ 665.085567][T29632] ? lock_vma_under_rcu+0x45a/0x500 [ 665.085606][T29632] do_user_addr_fault+0xa73/0x1340 [ 665.085630][T29632] ? rcu_is_watching+0x15/0xb0 [ 665.085652][T29632] ? trace_page_fault_user+0x84/0x210 [ 665.085673][T29632] exc_page_fault+0x6a/0xc0 [ 665.085695][T29632] asm_exc_page_fault+0x26/0x30 [ 665.085709][T29632] RIP: 0033:0x7f552b870fa0 [ 665.085724][T29632] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 81 93 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 665.085738][T29632] RSP: 002b:00007ffda90df700 EFLAGS: 00010216 [ 665.085752][T29632] RAX: 0000001b2e523f74 RBX: ffffffffffffff74 RCX: ffffffff823c49ce [ 665.085764][T29632] RDX: 0000001b2e523f70 RSI: 0000000000000004 RDI: 00007f552c745720 [ 665.085775][T29632] RBP: 0000000000000000 R08: 00007f552bc00000 R09: 00007f552bc02000 [ 665.085786][T29632] R10: 00000000823c49d2 R11: 0000000000000000 R12: 0000000000000000 [ 665.085796][T29632] R13: 000000000007ffff R14: ffffffff823c49ce R15: 00007f552c745720 [ 665.085808][T29632] ? __page_table_check_zero+0x28e/0x3e0 [ 665.085828][T29632] ? __page_table_check_zero+0x28e/0x3e0 [ 665.085847][T29632] [ 665.207295][T29634] syz.4.6504 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 665.310556][T29646] hsr0 speed is unknown, defaulting to 1000 [ 665.441939][T29634] CPU: 0 UID: 0 PID: 29634 Comm: syz.4.6504 Not tainted syzkaller #0 PREEMPT(full) [ 665.441968][T29634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 665.441982][T29634] Call Trace: [ 665.441991][T29634] [ 665.441999][T29634] dump_stack_lvl+0xe8/0x150 [ 665.442030][T29634] dump_header+0xd3/0x4c0 [ 665.442053][T29634] oom_kill_process+0x3ab/0x970 [ 665.442077][T29634] out_of_memory+0x106c/0x1410 [ 665.442098][T29634] ? percpu_ref_put+0x19/0x180 [ 665.442123][T29634] ? __pfx___mutex_lock+0x10/0x10 [ 665.442153][T29634] ? __pfx_out_of_memory+0x10/0x10 [ 665.442171][T29634] ? do_raw_spin_unlock+0xf5/0x210 [ 665.442205][T29634] try_charge_memcg+0xc53/0x1560 [ 665.442236][T29634] ? __pfx_try_charge_memcg+0x10/0x10 [ 665.442260][T29634] ? lock_release+0x4b/0x3d0 [ 665.442284][T29634] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 665.442307][T29634] ? rcu_is_watching+0x15/0xb0 [ 665.442332][T29634] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 665.442352][T29634] ? lock_release+0x4b/0x3d0 [ 665.442389][T29634] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 665.442412][T29634] __swap_cache_prepare_and_add+0xe8/0x760 [ 665.442463][T29634] ? page_rmappable_folio+0x9a/0x170 [ 665.442491][T29634] swap_cache_alloc_folio+0xf1/0x240 [ 665.442521][T29634] swap_cluster_readahead+0x369/0x690 [ 665.442551][T29634] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 665.442571][T29634] ? __pfx_css_rstat_updated+0x10/0x10 [ 665.442593][T29634] ? get_vma_policy+0x27b/0x3c0 [ 665.442619][T29634] swapin_readahead+0x196/0xc50 [ 665.442637][T29634] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 665.442661][T29634] ? swap_table_get+0x1e/0x260 [ 665.442688][T29634] ? __pfx_swapin_readahead+0x10/0x10 [ 665.442704][T29634] ? lock_release+0x4b/0x3d0 [ 665.442726][T29634] ? rcu_is_watching+0x15/0xb0 [ 665.442751][T29634] ? get_swap_device_info+0x1c/0x2b0 [ 665.442768][T29634] ? swap_table_get+0x1e/0x260 [ 665.442792][T29634] ? swap_table_get+0x1e/0x260 [ 665.442818][T29634] ? swap_table_get+0x216/0x260 [ 665.442843][T29634] ? swap_cache_get_folio+0x513/0x520 [ 665.442872][T29634] do_swap_page+0x56f/0x5a20 [ 665.442900][T29634] ? kvm_sched_clock_read+0x11/0x20 [ 665.442924][T29634] ? sched_clock+0x3f/0x60 [ 665.442946][T29634] ? rcu_is_watching+0x15/0xb0 [ 665.442972][T29634] ? lock_acquire+0x57/0x2e0 [ 665.442996][T29634] ? do_swap_page+0x127/0x5a20 [ 665.443019][T29634] ? __pfx_do_swap_page+0x10/0x10 [ 665.443043][T29634] ? __pte_offset_map+0x45/0x240 [ 665.443058][T29634] ? __pte_offset_map+0x1ae/0x240 [ 665.443076][T29634] ? pte_offset_map_rw_nolock+0xea/0x160 [ 665.443094][T29634] handle_mm_fault+0x12d2/0x3310 [ 665.443127][T29634] ? handle_mm_fault+0xee/0x3310 [ 665.443158][T29634] ? __pfx_handle_mm_fault+0x10/0x10 [ 665.443201][T29634] ? lock_vma_under_rcu+0x45a/0x500 [ 665.443229][T29634] ? rcu_is_watching+0x15/0xb0 [ 665.443255][T29634] do_user_addr_fault+0xa73/0x1340 [ 665.443283][T29634] ? rcu_is_watching+0x15/0xb0 [ 665.443309][T29634] ? trace_page_fault_user+0x84/0x210 [ 665.443332][T29634] exc_page_fault+0x6a/0xc0 [ 665.443356][T29634] asm_exc_page_fault+0x26/0x30 [ 665.443375][T29634] RIP: 0033:0x7f552b99c82b [ 665.443392][T29634] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 665.443409][T29634] RSP: 002b:00007f552c808028 EFLAGS: 00010217 [ 665.443426][T29634] RAX: 000000000000000c RBX: 00007f552bc15fa0 RCX: ffffffffffffffe8 [ 665.443438][T29634] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 665.443449][T29634] RBP: 00007f552ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 665.443460][T29634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.443470][T29634] R13: 00007f552bc16038 R14: 00007f552bc15fa0 R15: 00007ffda90df668 [ 665.443490][T29634] [ 665.443499][T29634] memory: usage 307104kB, limit 307200kB, failcnt 691 [ 665.861032][T29634] memory+swap: usage 257096kB, limit 9007199254740988kB, failcnt 0 [ 665.869300][T29634] kmem: usage 256112kB, limit 9007199254740988kB, failcnt 0 [ 665.876765][T29634] Memory cgroup stats for /syz4: [ 665.876916][T29634] cache 524288 [ 665.886782][T29634] rss 4096 [ 665.889982][T29634] rss_huge 0 [ 665.893335][T29634] shmem 0 [ 665.896362][T29634] mapped_file 65536 [ 665.900266][T29634] dirty 0 [ 665.903767][T29634] writeback 0 [ 665.929813][T29634] workingset_refault_anon 7 [ 665.936699][T29634] workingset_refault_file 174 [ 665.943083][T29634] swap 184320 [ 665.946480][T29634] swapcached 241664 [ 665.950369][T29634] pgpgin 121240 [ 665.973408][T29634] pgpgout 121105 [ 665.977118][T29634] pgfault 215376 [ 665.980723][T29634] pgmajfault 9 [ 665.984367][T29634] inactive_anon 4096 [ 665.988359][T29634] active_anon 24576 [ 666.013951][T29634] inactive_file 0 [ 666.022411][T29634] active_file 507904 [ 666.030823][T29634] unevictable 0 [ 666.038830][T29634] hierarchical_memory_limit 314572800 [ 666.070809][T29634] hierarchical_memsw_limit 9223372036854771712 [ 666.086812][T29634] total_cache 524288 [ 666.098127][T29634] total_rss 4096 [ 666.109091][T29634] total_rss_huge 0 [ 666.125561][T29634] total_shmem 0 [ 666.132449][T29634] total_mapped_file 65536 [ 666.141260][T29634] total_dirty 0 [ 666.149169][T29634] total_writeback 0 [ 666.156384][T29634] total_workingset_refault_anon 7 [ 666.187081][T29634] total_workingset_refault_file 174 [ 666.200830][T29634] total_swap 184320 [ 666.210773][T29634] total_swapcached 241664 [ 666.232846][T29634] total_pgpgin 121242 [ 666.240192][T29634] total_pgpgout 121107 [ 666.248737][T29634] total_pgfault 215392 [ 666.260080][T29634] total_pgmajfault 9 [ 666.267517][T29634] total_inactive_anon 4096 [ 666.290814][T29634] total_active_anon 24576 [ 666.295416][T29634] total_inactive_file 0 [ 666.299645][T29634] total_active_file 507904 [ 666.304315][T29634] total_unevictable 0 [ 666.308363][T29634] anon_cost 0 [ 666.312053][T29634] file_cost 0 [ 666.315419][T29634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6504,pid=29632,uid=0 [ 666.337786][T29634] Memory cgroup out of memory: Killed process 29634 (syz.4.6504) total-vm:102420kB, anon-rss:1252kB, file-rss:22980kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000