last executing test programs: 3.33240845s ago: executing program 1 (id=595): r0 = epoll_create(0x97) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@null, @remote, @default, @bcast, @rose, @remote, @rose, @bcast]}, &(0x7f0000000080)=0x48, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x80000000, 0x4) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) 2.518367545s ago: executing program 2 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, r5, 0x3000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000000000000000722fae796bf5f14d000000000000000000000000000000000000ac1414bb0000000000000000000000002000000000000a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000006c0000000a000000fc010000000000000000000000000000000000000400"/500], 0x23c}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.263643574s ago: executing program 1 (id=609): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0xfffffffffffffc01, 0xfffffffffffffffd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @private1, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0xfdef) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) 2.09522516s ago: executing program 2 (id=612): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f00000000c0)={0x7, 'vlan0\x00', {0x380}, 0xcc}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790000000000800000000000000000000000000000000000000500"/45], 0x78) 2.044868396s ago: executing program 0 (id=613): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="f7ffffff", @ANYRES16=r2, @ANYBLOB="11002bbd7000fcdbdf25010000000500030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000100)='b', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 1.879075824s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="00800000080408001c001a8018000a8014000700200100000000000000000000000000001400350073797a5f74756e000000000000000000b6ee8d31cddd17510210a20b87febddd337779aa36e8b569781bbaf822"], 0x50}}, 0x0) 1.868107031s ago: executing program 1 (id=615): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r0, 0x0, 0x0, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x3, 0x4) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20004084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket(0x1e, 0x4, 0x0) socketpair(0x2, 0x80000, 0x11, &(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r8, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x4) getsockname$inet(r7, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e22, @local}}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x112) sendmmsg(r6, &(0x7f0000000080), 0x1a1, 0x0) 1.788569004s ago: executing program 3 (id=616): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01031b57c38d085641a726000008251a014e000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x240000c5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7c4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x42de}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe1d}, @NL80211_ATTR_FRAME={0x42, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8b2}, @broadcast, @device_b, @random="46c342426124", {0x4, 0x4}, @value=@ver_80211n={0x0, 0x773a, 0x3, 0x0, 0x0, 0x3}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0xd7, @void, @val=0x42, @val="a02e175c494610a241f5201bbcba3fe9"}}}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6fa}, @NL80211_ATTR_FRAME={0x33, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ff8}, @device_a, @device_a, @random="facea208ec13", {0x4, 0x8}}, @tdls_disc_req={0xc, 0xa, {0x25, {0x65, 0x12, {@from_mac}}}}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) recvfrom$llc(r5, &(0x7f0000000040)=""/7, 0x7, 0x10020, &(0x7f0000000080)={0x1a, 0x206, 0x7f, 0x3, 0x7, 0x4}, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.720279006s ago: executing program 0 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000001c0)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002bf000000000500190001004100"/46], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x8}}}}}}}, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x1000) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000000c0)={{0x6, 0x924}, 0x100, './file0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000380)={0xa2f4, 0xea2e, 0x6, 0x7ff, 0xb67}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000900010069706970000000000c00028f060011004e230000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r5], 0x38}}, 0x10) 1.457291656s ago: executing program 3 (id=620): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="334b8233163c0d3c34f6e717891a9a555d4ce6982981ef29e1443c21001c7d274e460041", 0x24, 0x4000000, &(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.370624956s ago: executing program 0 (id=622): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1.080494388s ago: executing program 0 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 1.048441698s ago: executing program 3 (id=625): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000440)={'virt_wifi0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="92100000000004001400030076657468315f766c616e0000000000001518f7e0b5db3c2541ad7e063dbe29f6ab81b400c3f58a9724144d02c1372991d203879d1432ae0d020f3db634924a220d0fc8fd0c845a7178683c63f19815b23978bb423c5d2a8f4d3fac18a5bf6ae4e43b5d8930a4118d0a493bed7baffcffb94bc88a85b55be20141fa560946af445aaab1e939e5b7b114d9cd40703c1e06562b3bd4902d7a6d06018f45a0258d95851f09aae8c4649e474cd7fe49d26685528e815fd9ffde50323c23a11fa158550960d090f3882978fc2e496d"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.02946799s ago: executing program 2 (id=626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffbffffe, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0xc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000040), 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x200000}, 0xd02fc66d73d382c6) 976.883587ms ago: executing program 4 (id=627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) 872.257741ms ago: executing program 0 (id=628): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec040867", @ANYRES16=r5, @ANYBLOB="100027bd7000ffdbdf250d0000005800018008000300020000000800030002000000140002000000000000000000000000000000000008000300020000000800030002000000080003000400000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r10, 0x5}, 0x8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r8, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 809.797318ms ago: executing program 4 (id=629): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) listen(r0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @netrom, @default, @default, @netrom, @rose, @bcast, @default]}, &(0x7f00000000c0)=0x48) accept$netrom(r2, &(0x7f0000000180)={{}, [@rose, @remote, @null, @bcast, @netrom, @bcast, @netrom]}, &(0x7f0000000340)=0x48) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3b80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 756.654214ms ago: executing program 2 (id=630): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x3f6, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="ba05aa20e6f78cc28cab72c75d1b4ddbd9d82b994398ca2664968653fd2d5fd986c7bc7850ad466a697f21c1b140a5005ee95fc86b67c64d"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xffffffff}, 0x1c) listen(r1, 0x4) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x10a, 0x26, 0x691}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYBLOB="000129bd7000fcdbdf250200000020000780080001000b0000000800e100070000000c00040008000000000000005981ba88cc08dd581d96a4f3f725b30177e268538ea28fcc9fee439f8148186d8c0751fc9f04c1614bef9985e6b433f4f1ee771082a55a5ed90f7b006979d366dd458802e413e760f5e9980b5f047e9fe89d78afc2051e87df459b574e4c49c97f426e6195a19cb11f098d2b6941bd5bae8758a4d404231342300f77eff5eb6cc572af8298b1e2f6ae5532eb1d64254d"], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0108c34f79fce597f6a372cef9a7d758de8dd23cd37da18d01604ea0a0b7803ac6f3ac67155d6c7a2a3bbcaf513ba9cad7652daa948e9c24f2f79910ee79a6094b7a1cc8c6ec960cd1007cb9d17bbf1a311b"], 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) socket$key(0xf, 0x3, 0x2) recvfrom$llc(r0, 0x0, 0x0, 0x12100, 0x0, 0x0) 755.184748ms ago: executing program 1 (id=631): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 600.33342ms ago: executing program 2 (id=632): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x28, 0x7ffffff7}}], 0x1, 0x4040) r1 = socket(0x22, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd23, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) socket$isdn(0x22, 0x2, 0x26) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r9, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) r10 = openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r11, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r12 = openat$cgroup_procs(r10, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) 592.807551ms ago: executing program 4 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 376.750445ms ago: executing program 3 (id=634): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="51ef991c4a87fa9034649143878da04cee8311b7", @ANYRES16=r4, @ANYBLOB="10002dbd7000fedbdf250c00000005002a000000000008003b00070400000800390009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000140)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) 375.931247ms ago: executing program 1 (id=635): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)={0x16}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) 280.295048ms ago: executing program 2 (id=636): r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 278.775147ms ago: executing program 4 (id=637): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r1, &(0x7f0000000180), 0x100000000000003c) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 266.911135ms ago: executing program 3 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRES64=r7], 0x6c}}, 0x44840) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r8) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fadbdf252a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900218100003300000006006500010000000600650005000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, &(0x7f0000000280)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) write$cgroup_devices(r11, &(0x7f0000000340)={'a', ' *:* ', 'w\x00'}, 0x8) 164.816082ms ago: executing program 1 (id=639): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e00)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x80000001, 0x6, 0x1, 0x3, 0x1b962e9b, 0x0, 0xfffffffb, 0x7, 0x7, 0x14, 0x1c, 0x17, 0xf, 0x2, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r13, 0x29, 0x8, 0xf, 0x4, 0x28, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x40, 0x700, 0x8, 0x40}}) 138.684796ms ago: executing program 4 (id=640): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000440)=@phonet={0x23, 0x1, 0x1}, 0x80, 0x0}}], 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)='\\\x16,\xf5@:(\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0xfffffffc, 0xfff]}, {0x37, 0x8, 0x4, 0xa1}}, 0x80000000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x12}, 0x2, &(0x7f0000000300)=[{0x3, 0x5, &(0x7f0000000100)='\x00', &(0x7f0000000680)="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", 0x113, 0x12}, {0x3, 0x2000000, &(0x7f0000000200)='\\\a[#6[', &(0x7f0000000240)="0bf3c559c8dd70fd40cabc3472913a1bc281d2652788e5ecb776882b60d03367bf0c6600c44615353adba9ca2bca6c818a72cdb3559b10a3aec58330a1b1743ce40bbd93b08de82086feb240ae6afddb0ebf943c7c42f1831f1c6a2610e8c94602afcd8d2f8731c7d5076961dd7d6559fdb878359d7256da11947b69aeeae1550dabe4449d752f3a8897c25f947318155eb2f569ed0c72b892984242a9", 0x9d, 0x8}]}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x24008840}, 0x4001) 519.547µs ago: executing program 3 (id=641): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x9}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6f0}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=642): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0xfffffffd) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000013c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 62.705493][ T5824] cgroup: Unknown subsys name 'net' [ 62.839589][ T5824] cgroup: Unknown subsys name 'cpuset' [ 62.847870][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.166199][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.880365][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.893505][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.902934][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.913038][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.920020][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.921730][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.935385][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.935721][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.944455][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.951826][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.958899][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.965345][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.974912][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.985515][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.990382][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.993725][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.001580][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.017241][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.017680][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.028445][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.032474][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.039956][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.053001][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.055214][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.072956][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.725051][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 68.740006][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 68.750681][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 68.787505][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 68.892335][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 68.979866][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.987980][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.995624][ T5839] bridge_slave_0: entered allmulticast mode [ 69.002703][ T5839] bridge_slave_0: entered promiscuous mode [ 69.047623][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.054744][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.062175][ T5839] bridge_slave_1: entered allmulticast mode [ 69.069068][ T5839] bridge_slave_1: entered promiscuous mode [ 69.129060][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.136506][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.143825][ T5840] bridge_slave_0: entered allmulticast mode [ 69.150982][ T5840] bridge_slave_0: entered promiscuous mode [ 69.158266][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.165421][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.172614][ T5851] bridge_slave_0: entered allmulticast mode [ 69.179474][ T5851] bridge_slave_0: entered promiscuous mode [ 69.196734][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.203936][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.211534][ T5837] bridge_slave_0: entered allmulticast mode [ 69.218622][ T5837] bridge_slave_0: entered promiscuous mode [ 69.231390][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.238590][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.245989][ T5840] bridge_slave_1: entered allmulticast mode [ 69.252831][ T5840] bridge_slave_1: entered promiscuous mode [ 69.260022][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.267142][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.274271][ T5851] bridge_slave_1: entered allmulticast mode [ 69.282262][ T5851] bridge_slave_1: entered promiscuous mode [ 69.291686][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.300966][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.308499][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.315645][ T5837] bridge_slave_1: entered allmulticast mode [ 69.322782][ T5837] bridge_slave_1: entered promiscuous mode [ 69.357509][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.419333][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.426635][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.433786][ T5838] bridge_slave_0: entered allmulticast mode [ 69.441382][ T5838] bridge_slave_0: entered promiscuous mode [ 69.450768][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.463095][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.483621][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.493107][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.500806][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.508051][ T5838] bridge_slave_1: entered allmulticast mode [ 69.514905][ T5838] bridge_slave_1: entered promiscuous mode [ 69.523633][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.534816][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.557469][ T5839] team0: Port device team_slave_0 added [ 69.565223][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.604008][ T5839] team0: Port device team_slave_1 added [ 69.641889][ T5851] team0: Port device team_slave_0 added [ 69.667069][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.677977][ T5840] team0: Port device team_slave_0 added [ 69.685435][ T5851] team0: Port device team_slave_1 added [ 69.701886][ T5837] team0: Port device team_slave_0 added [ 69.709961][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.720826][ T5840] team0: Port device team_slave_1 added [ 69.737308][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.744283][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.770178][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.783977][ T5837] team0: Port device team_slave_1 added [ 69.814324][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.821632][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.848165][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.886674][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.893623][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.919552][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.949187][ T5838] team0: Port device team_slave_0 added [ 69.955445][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.962695][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.988643][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.000512][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.007621][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.033601][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.053042][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.060044][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.076963][ T5842] Bluetooth: hci0: command tx timeout [ 70.086200][ T5848] Bluetooth: hci2: command tx timeout [ 70.092157][ T5852] Bluetooth: hci1: command tx timeout [ 70.098475][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.115613][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.122677][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.148964][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.160355][ T5852] Bluetooth: hci3: command tx timeout [ 70.164303][ T5838] team0: Port device team_slave_1 added [ 70.166514][ T5852] Bluetooth: hci4: command tx timeout [ 70.182421][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.189554][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.215666][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.277991][ T5839] hsr_slave_0: entered promiscuous mode [ 70.284590][ T5839] hsr_slave_1: entered promiscuous mode [ 70.293943][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.300935][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.327048][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.374344][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.381346][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.407298][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.466771][ T5851] hsr_slave_0: entered promiscuous mode [ 70.473196][ T5851] hsr_slave_1: entered promiscuous mode [ 70.479567][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 70.485372][ T5851] Cannot create hsr debugfs directory [ 70.495379][ T5837] hsr_slave_0: entered promiscuous mode [ 70.501722][ T5837] hsr_slave_1: entered promiscuous mode [ 70.507970][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 70.513702][ T5837] Cannot create hsr debugfs directory [ 70.547897][ T5840] hsr_slave_0: entered promiscuous mode [ 70.554180][ T5840] hsr_slave_1: entered promiscuous mode [ 70.560830][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 70.566609][ T5840] Cannot create hsr debugfs directory [ 70.667340][ T5838] hsr_slave_0: entered promiscuous mode [ 70.673775][ T5838] hsr_slave_1: entered promiscuous mode [ 70.680031][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 70.685827][ T5838] Cannot create hsr debugfs directory [ 71.088581][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.101343][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.109473][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.120346][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.136816][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.146301][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.154215][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.164713][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.237842][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.247825][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.256504][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.266616][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.274407][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.284509][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.292421][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.301631][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.363024][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370522][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.406827][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.416740][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.425244][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.435467][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.444684][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.454580][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.463028][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.472266][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.581860][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.591333][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.605898][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.616676][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.624576][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.634410][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.643087][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.653354][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.670755][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.764263][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.779847][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.790185][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.798548][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.808376][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.817385][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.827550][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.842697][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.851889][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.863494][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.871238][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.912375][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.922635][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.929822][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.976415][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.007901][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.021722][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.028873][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.059342][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.066459][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.079527][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.116398][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.123554][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.138941][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.156280][ T5852] Bluetooth: hci2: command tx timeout [ 72.156324][ T5842] Bluetooth: hci1: command tx timeout [ 72.161967][ T5848] Bluetooth: hci0: command tx timeout [ 72.183605][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.190799][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.235960][ T5848] Bluetooth: hci3: command tx timeout [ 72.242049][ T5852] Bluetooth: hci4: command tx timeout [ 72.269101][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.337136][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.364794][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.384041][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.391216][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.425217][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.432444][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.463840][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.518370][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.601772][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.634687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.642073][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.682136][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.689328][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.772312][ T5839] veth0_vlan: entered promiscuous mode [ 72.784378][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.828862][ T5839] veth1_vlan: entered promiscuous mode [ 72.970831][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.994206][ T5840] veth0_vlan: entered promiscuous mode [ 73.026269][ T5839] veth0_macvtap: entered promiscuous mode [ 73.048988][ T5840] veth1_vlan: entered promiscuous mode [ 73.062388][ T5839] veth1_macvtap: entered promiscuous mode [ 73.112295][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.166928][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.208833][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.243906][ T5840] veth0_macvtap: entered promiscuous mode [ 73.267498][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280549][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.295304][ T5840] veth1_macvtap: entered promiscuous mode [ 73.311326][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.320795][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.371479][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.380628][ T5837] veth0_vlan: entered promiscuous mode [ 73.413435][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.438895][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.484226][ T5837] veth1_vlan: entered promiscuous mode [ 73.494592][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.504038][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.518865][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.532352][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.532946][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.549727][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.600216][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.608212][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.648521][ T5838] veth0_vlan: entered promiscuous mode [ 73.657899][ T5851] veth0_vlan: entered promiscuous mode [ 73.703639][ T5851] veth1_vlan: entered promiscuous mode [ 73.716212][ T5838] veth1_vlan: entered promiscuous mode [ 73.731675][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.793963][ T5837] veth0_macvtap: entered promiscuous mode [ 73.837212][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.862490][ T5837] veth1_macvtap: entered promiscuous mode [ 73.873935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.889406][ T5851] veth0_macvtap: entered promiscuous mode [ 73.928304][ T5851] veth1_macvtap: entered promiscuous mode [ 74.041884][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.044139][ T5838] veth0_macvtap: entered promiscuous mode [ 74.057931][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.060663][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.093360][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.112259][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.132728][ T5838] veth1_macvtap: entered promiscuous mode [ 74.149777][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.205502][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.236624][ T5848] Bluetooth: hci2: command tx timeout [ 74.236635][ T5842] Bluetooth: hci0: command tx timeout [ 74.248195][ T5852] Bluetooth: hci1: command tx timeout [ 74.260081][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.277442][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.296999][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.316223][ T5848] Bluetooth: hci4: command tx timeout [ 74.322337][ T5852] Bluetooth: hci3: command tx timeout [ 74.336853][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349194][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.380063][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.390312][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.408709][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.425162][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.475679][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490561][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.529561][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.542355][ T5974] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8'. [ 74.566694][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.743678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.778736][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.787825][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.855391][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866787][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.883711][ T5974] Zero length message leads to an empty skb [ 74.947560][ T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.988527][ T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.033486][ T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.051706][ T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.224373][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.253234][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.352399][ T5995] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 75.440291][ T5994] geneve2: entered promiscuous mode [ 75.466883][ T5994] geneve2: entered allmulticast mode [ 75.493317][ T80] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 75.511068][ T80] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 75.523283][ T6003] netlink: 'syz.0.13': attribute type 153 has an invalid length. [ 75.539134][ T80] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 75.549220][ T80] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 75.883719][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 76.147149][ T6010] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 76.317846][ T5852] Bluetooth: hci2: command tx timeout [ 76.323479][ T5848] Bluetooth: hci1: command tx timeout [ 76.323530][ T5842] Bluetooth: hci0: command tx timeout [ 76.396323][ T5842] Bluetooth: hci3: command tx timeout [ 76.396501][ T5848] Bluetooth: hci4: command tx timeout [ 78.466613][ T6003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.677740][ T6037] tipc: Can't bind to reserved service type 1 [ 78.701498][ T6041] Cannot find add_set index 0 as target [ 78.761335][ T1229] IPVS: starting estimator thread 0... [ 78.879367][ T6046] IPVS: using max 39 ests per chain, 93600 per kthread [ 78.904927][ T6057] netlink: 548 bytes leftover after parsing attributes in process `syz.4.21'. [ 78.933458][ T6062] Bluetooth: MGMT ver 1.23 [ 78.993969][ T6062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24'. [ 79.192037][ T6048] netlink: 'syz.4.21': attribute type 29 has an invalid length. [ 79.202574][ T6051] netlink: 'syz.4.21': attribute type 29 has an invalid length. [ 79.480153][ T6076] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.27'. [ 79.789686][ T6085] xt_socket: unknown flags 0x8 [ 80.347606][ T6103] netlink: 'syz.4.36': attribute type 142 has an invalid length. [ 80.407435][ T6105] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 80.425386][ T6105] netlink: 666 bytes leftover after parsing attributes in process `syz.2.37'. [ 80.618703][ T6109] netlink: 'syz.2.39': attribute type 29 has an invalid length. [ 80.645864][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 80.681047][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 80.894051][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.593517][ T6145] netlink: 'syz.4.51': attribute type 2 has an invalid length. [ 81.602907][ T10] cfg80211: failed to load regulatory.db [ 81.640169][ T6145] netlink: 'syz.4.51': attribute type 11 has an invalid length. [ 81.678868][ T6149] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 81.685034][ T6145] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51'. [ 81.867236][ T6121] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 81.924124][ T6158] netlink: 'syz.3.53': attribute type 5 has an invalid length. [ 82.001197][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 82.034989][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 82.205448][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.240163][ T6170] netlink: 'syz.3.60': attribute type 7 has an invalid length. [ 82.276897][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.803149][ T6210] syzkaller1: entered promiscuous mode [ 82.836580][ T6210] syzkaller1: entered allmulticast mode [ 82.990817][ T6197] vlan2: entered promiscuous mode [ 83.003158][ T6197] geneve1: entered promiscuous mode [ 83.019646][ T6197] vlan2: entered allmulticast mode [ 83.024857][ T6197] geneve1: entered allmulticast mode [ 83.033934][ T6217] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 83.050637][ T6216] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.115863][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 83.382466][ T6231] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 83.397091][ T6243] rdma_op ffff88807c0e61f0 conn xmit_rdma 0000000000000000 [ 83.404740][ T6231] bond1: option packets_per_slave: allowed values 0 - 65535 [ 83.447500][ T6231] bond1 (unregistering): Released all slaves [ 83.492298][ T6235] netlink: 'syz.4.76': attribute type 12 has an invalid length. [ 83.500357][ T6235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.76'. [ 83.509850][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 83.657411][ T6251] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 83.710748][ T6243] bond1: option lacp_rate: invalid value (6) [ 83.742373][ T6243] bond1 (unregistering): Released all slaves [ 83.952644][ T6270] trusted_key: syz.1.85 sent an empty control message without MSG_MORE. [ 83.963252][ T6251] batman_adv: batadv0: Adding interface: netdevsim0 [ 83.963365][ T6269] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 83.980405][ T6251] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.036780][ T6251] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 84.580126][ T6306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.630652][ T6299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.114814][ T6326] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 85.150243][ T6326] bond1 (unregistering): Released all slaves [ 85.712415][ T6367] __nla_validate_parse: 3 callbacks suppressed [ 85.712432][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 86.132249][ T6387] syzkaller0: entered promiscuous mode [ 86.309526][ T6407] : renamed from veth1_vlan (while UP) [ 86.694927][ T6427] batadv0: entered promiscuous mode [ 86.728219][ T6427] macsec1: entered promiscuous mode [ 86.743861][ T6427] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 86.767844][ T6427] batadv0: left promiscuous mode [ 86.797514][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 87.047656][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 87.106228][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 87.121197][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 87.162122][ T6456] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 87.201039][ T6456] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 87.231541][ T6456] netlink: 172 bytes leftover after parsing attributes in process `syz.0.139'. [ 87.257428][ T6456] NCSI netlink: No device for ifindex 813332851 [ 87.674920][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 87.709254][ T6477] can: request_module (can-proto-0) failed. [ 87.720163][ T6477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.895144][ T6496] veth0: entered promiscuous mode [ 87.902931][ T6496] veth0: left promiscuous mode [ 88.027952][ T6503] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 88.037166][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 88.059938][ T6506] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 88.124798][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 88.232366][ T6513] netlink: 'syz.0.158': attribute type 11 has an invalid length. [ 88.408089][ T6517] syzkaller0: entered promiscuous mode [ 88.426241][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 88.461943][ T6521] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.527060][ T6521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.902474][ T6550] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001 [ 88.985297][ T6556] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 89.082612][ T6555] openvswitch: netlink: IP tunnel dst address not specified [ 89.181009][ T6562] netlink: 'syz.1.171': attribute type 21 has an invalid length. [ 89.205421][ T6562] netlink: 'syz.1.171': attribute type 5 has an invalid length. [ 89.425466][ T6575] syzkaller1: entered promiscuous mode [ 89.439091][ T6575] syzkaller1: entered allmulticast mode [ 89.752825][ T6589] hsr_slave_0: left promiscuous mode [ 89.783841][ T6589] hsr_slave_1: left promiscuous mode [ 89.820917][ T6591] Cannot find add_set index 3 as target [ 90.082936][ T6604] xt_hashlimit: size too large, truncated to 1048576 [ 90.295032][ T6613] vlan3: entered allmulticast mode [ 90.300329][ T6613] bond0: entered allmulticast mode [ 90.305490][ T6613] bond_slave_0: entered allmulticast mode [ 90.312030][ T6613] bond_slave_1: entered allmulticast mode [ 90.389837][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.412582][ T6613] bond_slave_0: left allmulticast mode [ 90.429615][ T6613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.439566][ T6618] netlink: 'syz.4.190': attribute type 83 has an invalid length. [ 90.449122][ T6613] bond_slave_1: left allmulticast mode [ 90.460020][ T6613] bond0 (unregistering): Released all slaves [ 90.471906][ T6622] netlink: 'syz.4.190': attribute type 83 has an invalid length. [ 91.133202][ T6669] __nla_validate_parse: 9 callbacks suppressed [ 91.133219][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 91.294522][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 91.501817][ T6690] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 91.544636][ T6686] netlink: 'syz.3.201': attribute type 29 has an invalid length. [ 91.575391][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 91.630905][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 91.636147][ T6683] netlink: 14 bytes leftover after parsing attributes in process `syz.4.199'. [ 91.675633][ T6673] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.686985][ T6673] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.708670][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 91.782436][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.808382][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.824562][ T6683] bond0 (unregistering): Released all slaves [ 91.834989][ T6673] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.846453][ T6673] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.870881][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.258700][ T6730] netlink: 104 bytes leftover after parsing attributes in process `syz.4.213'. [ 92.280084][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 92.355191][ T6734] macvtap1: entered promiscuous mode [ 92.360602][ T6734] vlan0: entered promiscuous mode [ 92.366166][ T6734] macvtap1: entered allmulticast mode [ 92.371810][ T6734] vlan0: entered allmulticast mode [ 92.378764][ T6734] veth0_vlan: entered allmulticast mode [ 92.386852][ T6733] sch_fq: defrate 0 ignored. [ 92.752497][ T6762] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 132.801535][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.807974][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.510801][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.228'. [ 146.746506][ T6810] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 146.768993][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 147.033123][ T6835] bond2: invalid ARP target 0.0.0.0 specified for addition [ 147.044299][ T6835] bond2: option arp_ip_target: invalid value (0) [ 147.055540][ T6835] bond2 (unregistering): Released all slaves [ 147.098749][ T6840] validate_nla: 1 callbacks suppressed [ 147.098768][ T6840] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 147.234018][ T6850] netlink: 'syz.1.242': attribute type 64 has an invalid length. [ 147.260775][ T6850] netlink: 5 bytes leftover after parsing attributes in process `syz.1.242'. [ 147.286133][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.239'. [ 147.299984][ T6855] unsupported nlmsg_type 40 [ 147.306534][ T6840] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 147.329648][ T6671] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.331216][ T6854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.415009][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 147.457164][ T6664] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.473486][ T6859] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 147.484116][ T6859] netlink: 'syz.3.244': attribute type 2 has an invalid length. [ 147.614354][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 147.772917][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 147.849141][ T6873] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 148.009110][ T6873] bond2: entered promiscuous mode [ 148.015038][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.029466][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 148.045054][ T6873] netlink: 404 bytes leftover after parsing attributes in process `syz.1.250'. [ 148.132257][ T6882] bond2: (slave bridge2): making interface the new active one [ 148.151656][ T6882] bridge2: entered promiscuous mode [ 148.180709][ T6882] bridge2: left promiscuous mode [ 148.399082][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 148.482155][ T6904] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967272. macoff=96 [ 148.637466][ T6917] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 148.637501][ T6918] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 148.695493][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.207689][ T6946] Bluetooth: MGMT ver 1.23 [ 149.237666][ T6956] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.432352][ T6966] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 149.447545][ T6966] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 149.530942][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.637556][ T5899] IPVS: starting estimator thread 0... [ 149.767047][ T6972] IPVS: using max 32 ests per chain, 76800 per kthread [ 149.825662][ T6978] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 150.098034][ T6994] nftables ruleset with unbound set [ 150.726182][ T7028] netlink: 'syz.0.299': attribute type 9 has an invalid length. [ 150.827436][ T7034] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 150.844347][ T7034] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 150.853347][ T7034] gretap1: entered promiscuous mode [ 150.859549][ T7034] gretap1: entered allmulticast mode [ 151.133435][ T7056] syzkaller0: entered promiscuous mode [ 151.139157][ T7056] syzkaller0: entered allmulticast mode [ 151.231203][ T7062] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 151.305095][ T7061] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 151.392913][ T7062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.435964][ T5848] Bluetooth: hci4: command tx timeout [ 151.562406][ T7083] __nla_validate_parse: 12 callbacks suppressed [ 151.562423][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 151.583220][ T7030] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 151.660062][ T7088] bond1: entered promiscuous mode [ 151.665940][ T7088] bond1: entered allmulticast mode [ 151.744567][ T7095] Can't find ip_set type [ 151.774516][ T7096] Can't find ip_set type [ 151.881880][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 152.253035][ T7125] netlink: 72 bytes leftover after parsing attributes in process `syz.4.322'. [ 152.292574][ T7129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.309627][ T7129] validate_nla: 3 callbacks suppressed [ 152.309644][ T7129] netlink: 'syz.0.323': attribute type 21 has an invalid length. [ 152.325538][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 152.344505][ T7132] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.373235][ T7132] syzkaller0: entered promiscuous mode [ 152.380978][ T7132] syzkaller0: entered allmulticast mode [ 152.434658][ T7132] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.454786][ T7132] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 152.578861][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 152.763333][ T7154] netlink: 64 bytes leftover after parsing attributes in process `syz.4.327'. [ 152.806744][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 152.869440][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 152.994693][ T7166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.030916][ T7171] macvlan2: entered promiscuous mode [ 153.038064][ T7171] macvlan2: entered allmulticast mode [ 153.417700][ T7205] netlink: 'syz.4.341': attribute type 21 has an invalid length. [ 153.439418][ T7205] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.448098][ T7205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.456467][ T7205] IPv6: NLM_F_CREATE should be set when creating new route [ 153.457125][ T7187] nbd0: detected capacity change from 0 to 63 [ 153.464492][ T7205] IPv6: NLM_F_CREATE should be set when creating new route [ 153.477924][ T7205] IPv6: NLM_F_CREATE should be set when creating new route [ 153.500070][ T5842] block nbd0: Receive control failed (result -32) [ 153.501772][ T5848] block nbd0: Receive control failed (result -32) [ 153.514954][ T6997] block nbd0: Send control failed (result -32) [ 153.535829][ T6997] block nbd0: Request send failed, requeueing [ 153.571898][ T6997] block nbd0: Dead connection, failed to find a fallback [ 153.583159][ T11] block nbd0: Dead connection, failed to find a fallback [ 153.590777][ T11] block nbd0: shutting down sockets [ 153.598945][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.610848][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.619151][ T6997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.629255][ T6997] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.637820][ T6997] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.651957][ T6997] Buffer I/O error on dev nbd0, logical block 2, async page read [ 153.660038][ T6997] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.670434][ T6997] Buffer I/O error on dev nbd0, logical block 3, async page read [ 153.678938][ T6997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.688190][ T6997] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.700545][ T6997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.712333][ T6997] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.720318][ T6997] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.729416][ T6997] Buffer I/O error on dev nbd0, logical block 2, async page read [ 153.737500][ T6997] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.750748][ T6997] Buffer I/O error on dev nbd0, logical block 3, async page read [ 153.767353][ T6997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.827295][ T6997] Buffer I/O error on dev nbd0, logical block 0, async page read [ 153.877578][ T6997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.934195][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 153.941401][ T6997] Buffer I/O error on dev nbd0, logical block 1, async page read [ 153.964706][ T7225] syzkaller0: entered promiscuous mode [ 153.996335][ T7225] syzkaller0: entered allmulticast mode [ 154.018643][ T6997] ldm_validate_partition_table(): Disk read failed. [ 154.050022][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 154.054938][ T6997] Dev nbd0: unable to read RDB block 0 [ 154.080649][ T6997] nbd0: unable to read partition table [ 154.126338][ T6997] ldm_validate_partition_table(): Disk read failed. [ 154.154108][ T7238] xt_TCPMSS: Only works on TCP SYN packets [ 154.162993][ T6997] Dev nbd0: unable to read RDB block 0 [ 154.174312][ T6997] nbd0: unable to read partition table [ 154.319572][ T7246] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 154.408110][ T7246] netlink: 'syz.0.352': attribute type 1 has an invalid length. [ 154.434114][ T7252] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 154.720879][ T7264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.041242][ T7284] bond4: option min_links: invalid value (18446744073709551614) [ 155.049723][ T7284] bond4: option min_links: allowed values 0 - 2147483647 [ 155.059365][ T7284] bond4 (unregistering): Released all slaves [ 155.621654][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.374'. [ 155.633280][ T7317] netlink: 'syz.3.374': attribute type 8 has an invalid length. [ 155.650502][ T7317] bond0: entered promiscuous mode [ 155.655652][ T7317] bond_slave_0: entered promiscuous mode [ 155.662569][ T7317] bond_slave_1: entered promiscuous mode [ 155.669972][ T7317] gretap0: entered promiscuous mode [ 155.676152][ T7317] debugfs: 'hsr0' already exists in 'hsr' [ 155.681928][ T7317] Cannot create hsr debugfs directory [ 155.687840][ T7317] hsr0: entered promiscuous mode [ 155.927482][ T7328] vlan2: entered promiscuous mode [ 155.932535][ T7328] bridge0: entered promiscuous mode [ 156.002881][ T7329] bridge2: port 1(vlan2) entered blocking state [ 156.013356][ T7329] bridge2: port 1(vlan2) entered disabled state [ 156.020434][ T7329] vlan2: entered allmulticast mode [ 156.026795][ T7329] bridge2: entered allmulticast mode [ 156.071005][ T7329] vlan2: left allmulticast mode [ 156.103786][ T7329] bridge2: left allmulticast mode [ 156.191086][ T7331] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 156.424165][ T7344] netlink: 'syz.4.382': attribute type 4 has an invalid length. [ 156.482464][ T7344] xt_hashlimit: size too large, truncated to 1048576 [ 156.539100][ T7352] : renamed from vxcan1 (while UP) [ 156.562155][ T7354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.892768][ T7375] __nla_validate_parse: 7 callbacks suppressed [ 156.892784][ T7375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.391'. [ 156.949667][ T7373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.391'. [ 156.953331][ T7377] delete_channel: no stack [ 157.218110][ T7393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.483972][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 157.622442][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 157.952772][ T7431] tipc: Started in network mode [ 157.976501][ T7431] tipc: Node identity ac14140f, cluster identity 4711 [ 158.021140][ T7431] tipc: New replicast peer: 172.20.20.187 [ 158.058090][ T7431] tipc: Enabled bearer , priority 10 [ 158.120513][ T7443] macvtap1: entered promiscuous mode [ 158.136321][ T7443] macvtap1: entered allmulticast mode [ 158.146490][ T7443] : entered allmulticast mode [ 158.194154][ T7442] macvtap2: entered promiscuous mode [ 158.208260][ T7442] macvtap2: entered allmulticast mode [ 158.319544][ T7436] macvtap2: entered promiscuous mode [ 158.364765][ T7436] macvtap2: entered allmulticast mode [ 158.549035][ T7470] syzkaller0: entered promiscuous mode [ 158.575653][ T7470] syzkaller0: entered allmulticast mode [ 158.724817][ T7488] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 158.785302][ T7491] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 158.830010][ T7488] team0: Port device dummy0 added [ 158.958319][ T7491] team0: Port device dummy0 removed [ 158.970223][ T7491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.054182][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 159.075595][ T807] tipc: Node number set to 2886997007 [ 159.108480][ T7498] netlink: 'syz.1.421': attribute type 10 has an invalid length. [ 159.153906][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.173485][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 159.209189][ T7498] bridge_slave_1: left allmulticast mode [ 159.229449][ T7498] bridge_slave_1: left promiscuous mode [ 159.246931][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.281672][ T7498] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 159.293389][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 159.314360][ T7516] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 159.342037][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 159.359991][ T7516] team0: Device ipvlan1 failed to register rx_handler [ 159.448038][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 159.478164][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 159.561217][ T7531] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 159.655669][ T7531] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 159.723707][ T7541] netlink: 'syz.3.433': attribute type 6 has an invalid length. [ 159.754974][ T7537] sctp: [Deprecated]: syz.1.431 (pid 7537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.754974][ T7537] Use struct sctp_sack_info instead [ 159.777892][ T7545] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 160.037622][ T7553] bond3: (slave geneve3): making interface the new active one [ 160.071917][ T7553] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 160.121876][ T7556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.199514][ T6673] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 160.292046][ T6673] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 160.338175][ T6673] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 160.386551][ T6673] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 160.444322][ T7589] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 160.492345][ T7589] team0: Device vxcan1 is of different type [ 160.549814][ T7594] openvswitch: netlink: Missing key (keys=40, expected=80) [ 160.552764][ T7593] netlink: 'syz.4.442': attribute type 16 has an invalid length. [ 160.588394][ T7594] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 160.694398][ T7593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.748028][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.777013][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.854321][ T7609] sit0: entered promiscuous mode [ 160.998440][ T7616] bond2: option xmit_hash_policy: invalid value (64) [ 161.024448][ T7616] bond2 (unregistering): Released all slaves [ 161.493296][ T7652] openvswitch: netlink: IP tunnel dst address not specified [ 161.994513][ T7679] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.000907][ T7679] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.087146][ T7682] __nla_validate_parse: 67 callbacks suppressed [ 162.087162][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 162.248601][ T7688] bond1: entered promiscuous mode [ 162.282778][ T7688] bond1: entered allmulticast mode [ 162.297538][ T7696] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 162.343532][ T7696] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 162.389758][ T7696] netlink: 204 bytes leftover after parsing attributes in process `syz.1.465'. [ 162.532086][ T7705] netlink: 232 bytes leftover after parsing attributes in process `syz.4.467'. [ 162.590214][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 162.704605][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'. [ 162.910387][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 162.992663][ T7732] netlink: 144 bytes leftover after parsing attributes in process `syz.1.472'. [ 163.275090][ T7732] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.287812][ T7732] bond4: (slave bond5): Enslaving as an active interface with an up link [ 163.448967][ T7745] syzkaller0: entered promiscuous mode [ 163.480822][ T7745] syzkaller0: entered allmulticast mode [ 163.511622][ T7764] netlink: 'syz.1.480': attribute type 11 has an invalid length. [ 163.558539][ T29] audit: type=1107 audit(1777155547.596:2): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ϖf6 «۴FԜF)%Ejy|6 :`2"4MJQ KE [⢽vtYDS$Y[N-$, priority 24 [ 165.660669][ T7818] netlink: 152 bytes leftover after parsing attributes in process `syz.1.496'. [ 165.704767][ T7818] .`: renamed from bond0 (while UP) [ 165.728806][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 166.099554][ T7845] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 166.109550][ T7845] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 166.543101][ T7869] --map-set only usable from mangle table [ 166.607214][ T7871] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.851882][ T5912] tipc: Node number set to 10005162 [ 167.411562][ T7922] syzkaller0: entered promiscuous mode [ 167.427151][ T7922] syzkaller0: entered allmulticast mode [ 167.453479][ T7920] __nla_validate_parse: 6 callbacks suppressed [ 167.453496][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 167.510764][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 167.653246][ T7941] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 167.801297][ T7941] veth5: entered promiscuous mode [ 167.811632][ T7941] veth5: entered allmulticast mode [ 167.939192][ T7958] netlink: 'syz.1.532': attribute type 8 has an invalid length. [ 167.941795][ T7956] netlink: 164 bytes leftover after parsing attributes in process `syz.0.533'. [ 168.195344][ T7976] netlink: 240 bytes leftover after parsing attributes in process `syz.0.536'. [ 168.356545][ T7983] tipc: Enabled bearer , priority 0 [ 168.389901][ T7983] syzkaller0: entered promiscuous mode [ 168.400220][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.416340][ T7983] syzkaller0: entered allmulticast mode [ 168.428654][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.464370][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'. [ 168.472373][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.482660][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.492360][ T778] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.503784][ T778] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.531167][ T7992] bridge2: entered promiscuous mode [ 168.545831][ T7992] bridge2: entered allmulticast mode [ 168.562837][ T778] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.645428][ T7996] tipc: Resetting bearer [ 168.660446][ T778] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.675283][ T7981] tipc: Resetting bearer [ 168.692933][ T7981] tipc: Disabling bearer [ 168.793798][ T7999] syzkaller0: entered promiscuous mode [ 168.807953][ T7999] syzkaller0: entered allmulticast mode [ 168.979499][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 169.314575][ T8032] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 169.329441][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.339966][ T8032] bridge_slave_1: left allmulticast mode [ 169.345659][ T8032] bridge_slave_1: left promiscuous mode [ 169.353471][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.546640][ T8045] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 169.746671][ T8045] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 169.966094][ T8065] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 170.143031][ T8065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.306293][ T8085] : renamed from hsr0 (while UP) [ 170.552166][ T8098] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 170.604645][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.645207][ T8098] bridge_slave_1: left allmulticast mode [ 170.688622][ T8098] bridge_slave_1: left promiscuous mode [ 170.713217][ T8108] openvswitch: netlink: Flow key attr not present in new flow. [ 170.727977][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.947654][ T8120] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 171.014290][ T8120] bond4: entered promiscuous mode [ 171.029272][ T8120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.296557][ T8120] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 171.317952][ T8120] bond5 (unregistering): Released all slaves [ 171.346445][ T5507] veth1_macvtap: left promiscuous mode [ 171.798926][ T8164] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 171.826349][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.849833][ T8164] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 171.868915][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.907387][ T8166] tipc: Started in network mode [ 171.912910][ T8164] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 171.922908][ T8166] tipc: Node identity , cluster identity 4711 [ 171.931813][ T8166] tipc: Failed to set node id, please configure manually [ 171.943059][ T8166] tipc: Enabling of bearer rejected, failed to enable media [ 171.949948][ T8176] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 171.952312][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.999948][ T8164] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 172.043126][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.058674][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.109075][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.149687][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.180324][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.212529][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.239922][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.265438][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.299455][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.329946][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.378401][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.412052][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.436241][ T8197] syzkaller0: entered promiscuous mode [ 172.443915][ T8197] syzkaller0: entered allmulticast mode [ 172.451462][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.498808][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.607810][ T8164] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.770476][ T8220] __nla_validate_parse: 4 callbacks suppressed [ 172.770492][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 172.786746][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 173.171701][ T8246] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 173.208555][ T8246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.337818][ T8250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'. [ 173.472982][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 173.744888][ T8276] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'. [ 173.770532][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 173.801184][ T8273] delete_channel: no stack [ 174.423802][ T8314] validate_nla: 15 callbacks suppressed [ 174.423819][ T8314] netlink: 'syz.3.616': attribute type 3 has an invalid length. [ 174.467620][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.616'. [ 174.484762][ T8318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.618'. [ 174.544732][ T8318] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.598025][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 174.869410][ T8332] ip6erspan0: entered allmulticast mode [ 175.363406][ T8352] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 175.378721][ T8355] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 175.383735][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 175.555127][ T8352] chnl_net:caif_netlink_parms(): no params data found [ 175.599817][ T8363] syzkaller0: entered promiscuous mode [ 175.610078][ T8363] syzkaller0: entered allmulticast mode [ 175.683903][ T8358] delete_channel: no stack [ 175.970607][ T5848] block nbd1: Receive control failed (result -1) [ 176.042442][ T8384] [ 176.044817][ T8384] ====================================================== [ 176.051840][ T8384] WARNING: possible circular locking dependency detected [ 176.058875][ T8384] syzkaller #0 Not tainted [ 176.063383][ T8384] ------------------------------------------------------ [ 176.070401][ T8384] syz.1.639/8384 is trying to acquire lock: [ 176.076294][ T8384] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 176.085474][ T8384] [ 176.085474][ T8384] but task is already holding lock: [ 176.092844][ T8384] ffff88805589a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 176.102359][ T8384] [ 176.102359][ T8384] which lock already depends on the new lock. [ 176.102359][ T8384] [ 176.112766][ T8384] [ 176.112766][ T8384] the existing dependency chain (in reverse order) is: [ 176.121784][ T8384] [ 176.121784][ T8384] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 176.129360][ T8384] __might_fault+0xcb/0x130 [ 176.134390][ T8384] _copy_from_user+0x28/0xb0 [ 176.139498][ T8384] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 176.146001][ T8384] ip_generic_getfrag+0x149/0x2d0 [ 176.151540][ T8384] __ip6_append_data+0x3902/0x3e90 [ 176.157163][ T8384] ip6_append_data+0x10f/0x280 [ 176.162435][ T8384] rawv6_sendmsg+0x12d3/0x18e0 [ 176.167713][ T8384] ____sys_sendmsg+0x80a/0x9f0 [ 176.172987][ T8384] ___sys_sendmsg+0x2a5/0x360 [ 176.178175][ T8384] __x64_sys_sendmsg+0x1bd/0x2a0 [ 176.183631][ T8384] do_syscall_64+0x15f/0xf80 [ 176.188766][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.195178][ T8384] [ 176.195178][ T8384] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 176.202914][ T8384] lock_sock_nested+0x41/0x100 [ 176.208204][ T8384] inet_shutdown+0x6a/0x390 [ 176.213223][ T8384] nbd_mark_nsock_dead+0x2e9/0x560 [ 176.218851][ T8384] recv_work+0x1c2e/0x1d40 [ 176.223782][ T8384] process_scheduled_works+0xb5d/0x1860 [ 176.229845][ T8384] worker_thread+0xa53/0xfc0 [ 176.234950][ T8384] kthread+0x388/0x470 [ 176.239529][ T8384] ret_from_fork+0x514/0xb70 [ 176.244633][ T8384] ret_from_fork_asm+0x1a/0x30 [ 176.249908][ T8384] [ 176.249908][ T8384] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 176.257542][ T8384] __mutex_lock+0x1a3/0x1550 [ 176.262651][ T8384] nbd_queue_rq+0x37b/0x1100 [ 176.267754][ T8384] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 176.273809][ T8384] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 176.280648][ T8384] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 176.287139][ T8384] blk_mq_run_hw_queue+0x348/0x4f0 [ 176.292762][ T8384] blk_mq_dispatch_list+0xd16/0xe10 [ 176.298469][ T8384] blk_mq_flush_plug_list+0x48d/0x570 [ 176.304354][ T8384] __blk_flush_plug+0x3ed/0x4d0 [ 176.309715][ T8384] __submit_bio+0x28d/0x580 [ 176.314732][ T8384] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 176.320875][ T8384] block_read_full_folio+0x599/0x830 [ 176.326678][ T8384] filemap_read_folio+0x137/0x3b0 [ 176.332215][ T8384] do_read_cache_folio+0x358/0x590 [ 176.337840][ T8384] read_part_sector+0xb6/0x2b0 [ 176.343116][ T8384] adfspart_check_ICS+0xb1/0x960 [ 176.348566][ T8384] bdev_disk_changed+0x817/0x1770 [ 176.354109][ T8384] blkdev_get_whole+0x380/0x510 [ 176.359473][ T8384] bdev_open+0x31e/0xd30 [ 176.364228][ T8384] blkdev_open+0x470/0x610 [ 176.369157][ T8384] do_dentry_open+0x785/0x14e0 [ 176.374439][ T8384] vfs_open+0x3b/0x340 [ 176.379021][ T8384] path_openat+0x2e08/0x3860 [ 176.384131][ T8384] do_file_open+0x23e/0x4a0 [ 176.389147][ T8384] do_sys_openat2+0x113/0x200 [ 176.394333][ T8384] __x64_sys_openat+0x138/0x170 [ 176.399690][ T8384] do_syscall_64+0x15f/0xf80 [ 176.404799][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.411205][ T8384] [ 176.411205][ T8384] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 176.418411][ T8384] __mutex_lock+0x1a3/0x1550 [ 176.423517][ T8384] nbd_queue_rq+0xc6/0x1100 [ 176.428530][ T8384] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 176.434594][ T8384] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 176.441431][ T8384] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 176.447922][ T8384] blk_mq_run_hw_queue+0x348/0x4f0 [ 176.453539][ T8384] blk_mq_dispatch_list+0xd16/0xe10 [ 176.459248][ T8384] blk_mq_flush_plug_list+0x48d/0x570 [ 176.465130][ T8384] __blk_flush_plug+0x3ed/0x4d0 [ 176.470490][ T8384] __submit_bio+0x28d/0x580 [ 176.475505][ T8384] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 176.481655][ T8384] block_read_full_folio+0x599/0x830 [ 176.487473][ T8384] filemap_read_folio+0x137/0x3b0 [ 176.493020][ T8384] do_read_cache_folio+0x358/0x590 [ 176.498653][ T8384] read_part_sector+0xb6/0x2b0 [ 176.503932][ T8384] adfspart_check_ICS+0xb1/0x960 [ 176.509391][ T8384] bdev_disk_changed+0x817/0x1770 [ 176.514931][ T8384] blkdev_get_whole+0x380/0x510 [ 176.520300][ T8384] bdev_open+0x31e/0xd30 [ 176.525053][ T8384] blkdev_open+0x470/0x610 [ 176.529985][ T8384] do_dentry_open+0x785/0x14e0 [ 176.535269][ T8384] vfs_open+0x3b/0x340 [ 176.539846][ T8384] path_openat+0x2e08/0x3860 [ 176.544948][ T8384] do_file_open+0x23e/0x4a0 [ 176.549959][ T8384] do_sys_openat2+0x113/0x200 [ 176.555142][ T8384] __x64_sys_openat+0x138/0x170 [ 176.560499][ T8384] do_syscall_64+0x15f/0xf80 [ 176.565602][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.572006][ T8384] [ 176.572006][ T8384] -> #3 (set->srcu){.+.+}-{0:0}: [ 176.579124][ T8384] __synchronize_srcu+0xca/0x300 [ 176.584580][ T8384] elevator_switch+0x1e8/0x7a0 [ 176.589853][ T8384] elevator_change+0x2cc/0x450 [ 176.595131][ T8384] elevator_set_default+0x36c/0x430 [ 176.600839][ T8384] blk_register_queue+0x3e9/0x4e0 [ 176.606383][ T8384] __add_disk+0x677/0xd50 [ 176.611242][ T8384] add_disk_fwnode+0xfb/0x480 [ 176.616449][ T8384] nbd_dev_add+0x72c/0xb50 [ 176.621388][ T8384] nbd_init+0x168/0x1f0 [ 176.626065][ T8384] do_one_initcall+0x250/0x870 [ 176.631345][ T8384] do_initcall_level+0x104/0x190 [ 176.636798][ T8384] do_initcalls+0x59/0xa0 [ 176.641652][ T8384] kernel_init_freeable+0x2a6/0x3e0 [ 176.647365][ T8384] kernel_init+0x1d/0x1d0 [ 176.652203][ T8384] ret_from_fork+0x514/0xb70 [ 176.657309][ T8384] ret_from_fork_asm+0x1a/0x30 [ 176.662580][ T8384] [ 176.662580][ T8384] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 176.670387][ T8384] __mutex_lock+0x1a3/0x1550 [ 176.675493][ T8384] elevator_change+0x1b3/0x450 [ 176.680766][ T8384] elevator_set_none+0xb5/0x140 [ 176.686130][ T8384] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 176.692452][ T8384] nbd_start_device+0x17f/0xb10 [ 176.697816][ T8384] nbd_genl_connect+0x165b/0x1cf0 [ 176.703355][ T8384] genl_family_rcv_msg_doit+0x22a/0x330 [ 176.709417][ T8384] genl_rcv_msg+0x61c/0x7a0 [ 176.714431][ T8384] netlink_rcv_skb+0x232/0x4b0 [ 176.719702][ T8384] genl_rcv+0x28/0x40 [ 176.724196][ T8384] netlink_unicast+0x75c/0x8e0 [ 176.729474][ T8384] netlink_sendmsg+0x813/0xb40 [ 176.734746][ T8384] ____sys_sendmsg+0x972/0x9f0 [ 176.740017][ T8384] ___sys_sendmsg+0x2a5/0x360 [ 176.745202][ T8384] __x64_sys_sendmsg+0x1bd/0x2a0 [ 176.750648][ T8384] do_syscall_64+0x15f/0xf80 [ 176.755754][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.762155][ T8384] [ 176.762155][ T8384] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 176.770749][ T8384] blk_alloc_queue+0x546/0x680 [ 176.776025][ T8384] __blk_mq_alloc_disk+0x197/0x390 [ 176.781649][ T8384] nbd_dev_add+0x499/0xb50 [ 176.786577][ T8384] nbd_init+0x168/0x1f0 [ 176.791248][ T8384] do_one_initcall+0x250/0x870 [ 176.796524][ T8384] do_initcall_level+0x104/0x190 [ 176.801973][ T8384] do_initcalls+0x59/0xa0 [ 176.806812][ T8384] kernel_init_freeable+0x2a6/0x3e0 [ 176.812522][ T8384] kernel_init+0x1d/0x1d0 [ 176.817365][ T8384] ret_from_fork+0x514/0xb70 [ 176.822477][ T8384] ret_from_fork_asm+0x1a/0x30 [ 176.827753][ T8384] [ 176.827753][ T8384] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 176.834953][ T8384] __lock_acquire+0x15a5/0x2cf0 [ 176.840321][ T8384] lock_acquire+0x106/0x350 [ 176.845344][ T8384] fs_reclaim_acquire+0x71/0x100 [ 176.850796][ T8384] prepare_alloc_pages+0x152/0x650 [ 176.856419][ T8384] __alloc_frozen_pages_noprof+0x12f/0x380 [ 176.862739][ T8384] alloc_pages_mpol+0x235/0x490 [ 176.868110][ T8384] alloc_pages_noprof+0xac/0x2a0 [ 176.873562][ T8384] pte_alloc_one+0x22/0x370 [ 176.878571][ T8384] __pte_alloc+0x25/0x1a0 [ 176.883414][ T8384] do_pte_missing+0x2cd2/0x33f0 [ 176.888776][ T8384] handle_mm_fault+0x1bd7/0x3170 [ 176.894223][ T8384] do_user_addr_fault+0x75b/0x1340 [ 176.899848][ T8384] exc_page_fault+0x6a/0xc0 [ 176.904866][ T8384] asm_exc_page_fault+0x26/0x30 [ 176.910222][ T8384] fault_in_readable+0x8e/0x130 [ 176.915592][ T8384] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 176.921821][ T8384] generic_perform_write+0x7af/0x8f0 [ 176.927629][ T8384] shmem_file_write_iter+0xf8/0x120 [ 176.933356][ T8384] vfs_write+0x61d/0xb90 [ 176.938122][ T8384] ksys_write+0x150/0x270 [ 176.942972][ T8384] do_syscall_64+0x15f/0xf80 [ 176.948085][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.954511][ T8384] [ 176.954511][ T8384] other info that might help us debug this: [ 176.954511][ T8384] [ 176.964736][ T8384] Chain exists of: [ 176.964736][ T8384] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 176.964736][ T8384] [ 176.977343][ T8384] Possible unsafe locking scenario: [ 176.977343][ T8384] [ 176.984781][ T8384] CPU0 CPU1 [ 176.990134][ T8384] ---- ---- [ 176.995481][ T8384] rlock(&mm->mmap_lock); [ 176.999887][ T8384] lock(sk_lock-AF_INET6); [ 177.006896][ T8384] lock(&mm->mmap_lock); [ 177.013735][ T8384] lock(fs_reclaim); [ 177.017713][ T8384] [ 177.017713][ T8384] *** DEADLOCK *** [ 177.017713][ T8384] [ 177.025847][ T8384] 4 locks held by syz.1.639/8384: [ 177.030856][ T8384] #0: ffff88807ffe1b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 177.039905][ T8384] #1: ffff88807bf4c410 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 177.048793][ T8384] #2: ffff888057499aa0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 177.059925][ T8384] #3: ffff88805589a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 177.069836][ T8384] [ 177.069836][ T8384] stack backtrace: [ 177.075730][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.1.639 Not tainted syzkaller #0 PREEMPT(full) [ 177.075749][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.075766][ T8384] Call Trace: [ 177.075773][ T8384] [ 177.075781][ T8384] dump_stack_lvl+0xe8/0x150 [ 177.075807][ T8384] print_circular_bug+0x2e1/0x300 [ 177.075827][ T8384] check_noncircular+0x12e/0x150 [ 177.075847][ T8384] __lock_acquire+0x15a5/0x2cf0 [ 177.075873][ T8384] ? __lock_acquire+0x6b5/0x2cf0 [ 177.075897][ T8384] ? stack_depot_save_flags+0x33/0x810 [ 177.075914][ T8384] ? prepare_alloc_pages+0x152/0x650 [ 177.075933][ T8384] lock_acquire+0x106/0x350 [ 177.075955][ T8384] ? prepare_alloc_pages+0x152/0x650 [ 177.075977][ T8384] ? percpu_ref_get_many+0x19/0x140 [ 177.075997][ T8384] ? lock_acquire+0x106/0x350 [ 177.076019][ T8384] fs_reclaim_acquire+0x71/0x100 [ 177.076038][ T8384] ? prepare_alloc_pages+0x152/0x650 [ 177.076056][ T8384] prepare_alloc_pages+0x152/0x650 [ 177.076078][ T8384] __alloc_frozen_pages_noprof+0x12f/0x380 [ 177.076101][ T8384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.076123][ T8384] ? __pfx_policy_nodemask+0x10/0x10 [ 177.076144][ T8384] ? __lock_acquire+0x6b5/0x2cf0 [ 177.076168][ T8384] alloc_pages_mpol+0x235/0x490 [ 177.076190][ T8384] alloc_pages_noprof+0xac/0x2a0 [ 177.076211][ T8384] pte_alloc_one+0x22/0x370 [ 177.076228][ T8384] __pte_alloc+0x25/0x1a0 [ 177.076247][ T8384] ? bsearch+0x95/0xc0 [ 177.076264][ T8384] ? __pfx_cmp_ex_search+0x10/0x10 [ 177.076288][ T8384] do_pte_missing+0x2cd2/0x33f0 [ 177.076319][ T8384] handle_mm_fault+0x1bd7/0x3170 [ 177.076339][ T8384] ? handle_mm_fault+0xee/0x3170 [ 177.076356][ T8384] ? __pfx_handle_mm_fault+0x10/0x10 [ 177.076377][ T8384] ? lock_mm_and_find_vma+0xa7/0x340 [ 177.076396][ T8384] do_user_addr_fault+0x75b/0x1340 [ 177.076424][ T8384] exc_page_fault+0x6a/0xc0 [ 177.076445][ T8384] asm_exc_page_fault+0x26/0x30 [ 177.076460][ T8384] RIP: 0010:fault_in_readable+0x8e/0x130 [ 177.076486][ T8384] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 10 f1 b0 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 177.076499][ T8384] RSP: 0018:ffffc90003497aa8 EFLAGS: 00050202 [ 177.076513][ T8384] RAX: ffffffff8214e201 RBX: 0000000000001000 RCX: ffff88806e60bd80 [ 177.076525][ T8384] RDX: 0000000000000002 RSI: 0000200000200000 RDI: 0000200000201000 [ 177.076535][ T8384] RBP: dffffc0000000001 R08: ffff88806e60bd80 R09: 0000000000000002 [ 177.076546][ T8384] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 177.076555][ T8384] R13: 0000200000200000 R14: 0000200000200000 R15: 0000200000201000 [ 177.076569][ T8384] ? fault_in_readable+0x41/0x130 [ 177.076594][ T8384] ? fault_in_readable+0x80/0x130 [ 177.076618][ T8384] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 177.076634][ T8384] generic_perform_write+0x7af/0x8f0 [ 177.076659][ T8384] ? __pfx_generic_perform_write+0x10/0x10 [ 177.076678][ T8384] ? down_write+0x16d/0x200 [ 177.076693][ T8384] ? file_update_time_flags+0x3b3/0x4a0 [ 177.076713][ T8384] shmem_file_write_iter+0xf8/0x120 [ 177.076731][ T8384] vfs_write+0x61d/0xb90 [ 177.076752][ T8384] ? __pfx_vfs_write+0x10/0x10 [ 177.076774][ T8384] ? __fget_files+0x2a/0x420 [ 177.076791][ T8384] ksys_write+0x150/0x270 [ 177.076811][ T8384] ? __pfx_ksys_write+0x10/0x10 [ 177.076831][ T8384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.076846][ T8384] do_syscall_64+0x15f/0xf80 [ 177.076867][ T8384] ? trace_irq_disable+0x3b/0x140 [ 177.076887][ T8384] ? clear_bhb_loop+0x40/0x90 [ 177.076903][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.076918][ T8384] RIP: 0033:0x7f2bed79cdd9 [ 177.076936][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.076948][ T8384] RSP: 002b:00007f2bee5a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.076962][ T8384] RAX: ffffffffffffffda RBX: 00007f2beda16090 RCX: 00007f2bed79cdd9 [ 177.076973][ T8384] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000005 [ 177.076983][ T8384] RBP: 00007f2bed832d69 R08: 0000000000000000 R09: 0000000000000000 [ 177.076992][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.077002][ T8384] R13: 00007f2beda16128 R14: 00007f2beda16090 R15: 00007ffd80f2b478 [ 177.077019][ T8384] [ 177.704893][ T8401] syzkaller0: entered promiscuous mode [ 177.765640][ T8401] syzkaller0: entered allmulticast mode