last executing test programs: 5.184170655s ago: executing program 2 (id=1257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 5.051653444s ago: executing program 2 (id=1259): r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd7"], &(0x7f00000005c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x64000600) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010a0102000000000000000002000000446ca7ad6f59cf6e60189f76211d1996304ffe36981baa2ac6064d4a5e8acbf2ea6b6f22d37703f61467560a0aa916b4797742e002deb788855e35b389d109a8156496dcaed7da246a6e1c7adcc970191ecb316ddf606cc319e6f21943624f3f429f60dd008bbf8b6ecf948000bfdd67308892cb005f9c99f874d916f30ea85b4d81a9dd2de6b92e961cf9c4774e0257a0fdea331b7e428e903db43264"], 0x14}}, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000000000000000aa00000000000000000000000000007b03e8bd750167666622c98b4d000186009078002e000899090000325900000000000000000000000000006295aae33a0e599de816698e33f9891b0eb8ce0ba6802260c9a460258ed9609d20ca87056456edea9855fd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 3.963673546s ago: executing program 4 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x2d, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "3b13a9eae166186cbe2b46d20caa49f65b9de2115cb7981530"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)=@newtfilter={0x48c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x460, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08b, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x83, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x6, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0x8a955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x999, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x5, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x800, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0x3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x6, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.62028613s ago: executing program 4 (id=1278): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001040)={0x2c, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@empty}]}, 0x2c}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2.922942534s ago: executing program 2 (id=1284): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x5, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x5], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000a00), 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f0000000080)}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="b80000001440c69ca26edcda0200000c000000000000004dc48c274c475dc02d5868a8179d69720314e82f68e0e74a45ea8576fa54db037f87ae3ddd6d2447baefe5839cca2b429793353b6f8678398fe4ea016b687de4426bc7f63852f61922c128029f40665fa2c81905b2a5349ed881a0d6133efb78bf2132d8c567808ef80b66962156a18229abaed420aa9889f936e5dfe32c0eabde21c492b5c283efd68a0dcd16b46e5378d61e2f16fe00a3a8fe22a8e67fa8a20fe42f52f57487349544a0370602e00c000000000000"], 0xb8}], 0x1, 0x40800) readv(r7, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r8], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.887952506s ago: executing program 0 (id=1285): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xecdf, 0xfffc, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3508, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x4050) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r6, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000180)="19", 0x1}], 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x2) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r10}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r13, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x64, r14, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb089}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$inet6(0xa, 0x3, 0x1) 2.712889475s ago: executing program 1 (id=1287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000087cd000000000000000000f0850000002200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000700000009500"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e09f21b5b1547effffff00180f26", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x28, 0x5, 0x1) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) r6 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) pread64(r10, &(0x7f0000002840)=""/4096, 0x1000, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.043625851s ago: executing program 0 (id=1289): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff77}}, 0x24004084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = epoll_create1(0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0xc0000008}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r10, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.02216488s ago: executing program 1 (id=1290): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004810}, 0xc054) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c400000000408000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.979925576s ago: executing program 2 (id=1291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newchain={0x98, 0x64, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {0xfff3, 0x2}, {0x1a, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'rose0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x8bd}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xe}}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffb}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0x81}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x9}}, @TCA_RATE={0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x488d0}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x5003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2000000) 1.847333441s ago: executing program 0 (id=1292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0xa) 1.844077964s ago: executing program 1 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000e70900010073797a31000000000c0010400000000000000005140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000840)='\x00\xb5\xe2d\xde\xbcX\xd5o\xa90\x10\xe0\xd0\x86C(>\xd8U\xc2\x7f\xd2I\xf95\x00\xde\x05\x02\xbb*Xk\x95J\x13J\xa1\'\xea\xdaN\xc6\x1e\xe1\fY\xd9MR\xef\xf6y\xd8eMpux~\xa6\xb5\xdd\x8d\x96\xa2\xa9\xbf%\x1d\x80\xfdL\xc1pt\xd8=2\xf1A\x98%\xb5\x16\xe4\b\x9b\xea\xb0JX\xfd\xe3\x9f\xb4\x97X\x91\xac\xbc~\x8e\x99\xa9\bq\x04\xe9\xe1C@\xfdN\nS\x15\xe0|\xa4\xbf\xee_Xz\x10^f\x84p\x96=B\xf7e!\xf6t\xabHbw\xc7N(N.\x8d\x94\xf7\xddC&\x82D{\xb4R\x91Q\xe6\xf2\xfdD\xf4\xd5\xfe\x8b\xfd\x86\x8a\xedA[m\xa3\nn\xac\x04\x8e\"@x\xee\x86\xc1\f\x8c\xe1\xc3\x8d\xc5\xff\x03\xcdg7%\xb3B\xdc\f\x1d\xe7\x03\xbb\xd1O\xe8\xabd~.\xee\xf6Ct0v\xfe\xa9\xda\x1a\xe3', 0x0, &(0x7f0000000600)={@_ha_fsid={[0x9, 0xbd22]}, {0x2, 0xffff, 0x8, 0x6ff}}, 0x100cc3, &(0x7f0000000640), &(0x7f0000000680)=0x2}) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000"], 0x0, 0xbc8e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt(r6, 0x1, 0x45, &(0x7f00000000c0)=""/159, &(0x7f0000000280)=0x9f) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005e80)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f00000002c0)="8625812c3117a595cc8b2f91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc380cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4f8316c2a232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b008000003997889d197ee8bc4ab9a5c69628751008577fcf400000000000000000000000000000000000000000fcffffff00000000fe2e833565fb695519fc16658f3ae493df8443abf47847177aa6f38afc7966ad6554d2c5ac50bde9bdc6adeb20962201aa8f4bed755585342934d973189612e15df20f8c250d8fb80564ecd05ebdd5aa77e11073e3e92af77cfc507fce0e68c2005f90e59d68eb45de229ceaff723cb3668313abe628c521f30673cccee762b47fb343f8d535e2276fded0a8a489079ec6d2", 0x165}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c", 0x2e7}], 0x4}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r7, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, 0x0, 0x1000f) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)) 1.612095756s ago: executing program 3 (id=1294): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'virt_wifi0\x00', {}, 0x1}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x0, &(0x7f0000001080)}, &(0x7f0000000080)=0x10) 1.61127517s ago: executing program 0 (id=1295): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x200}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(r3, 0xda90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/84, 0x54, 0x0, &(0x7f0000000200)=""/113, 0x71}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) accept$inet(r3, &(0x7f0000000000), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'macvlan0\x00', @ifru_settings={0x42, 0x9, @te1=&(0x7f0000000440)={0x8, 0x3, 0x7, 0x9a2}}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000040)={0x8, 'macvtap0\x00', {'veth0_to_hsr\x00'}, 0x9}) ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000)) 1.516569851s ago: executing program 2 (id=1296): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x4071}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x840) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000001010200000000000000000a008005000100"/36], 0x24}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c01000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffcdc8fffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a0"], 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000140)={0x4, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r10, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e80080002000300000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1.41584249s ago: executing program 3 (id=1297): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@align=0x7c, {0x52c, 0x3, 0x0, 0x2}}, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x6a95}, {[0x60, 0x4, 0x4, 0x3]}, 0x6, 0x9a, &(0x7f0000000180)=""/154}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f0000000300)=""/216}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@align=0x7c, {0x52c, 0x3, 0x0, 0x2}}, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x6a95}, {[0x60, 0x4, 0x4, 0x3]}, 0x6, 0x9a, &(0x7f0000000180)=""/154}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f0000000300)=""/216}, 0x94) (async) 1.414987315s ago: executing program 1 (id=1298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000140)={0x8, 0x80000001, 0x5, 0x0, 0x7, 0x6, 0x0, &(0x7f00000000c0)=[{0x15, 0xfe, 0x9}, {0x9, 0x101, 0x6}, {0x4, 0x0, 0x8}, {0x18, 0x1ff, 0x7894}, {0x9, 0x1ff, 0x5}, {0x2, 0x0, 0xfffffc00}]}) r1 = socket$kcm(0x29, 0xd, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000001c0)=0x8, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c800) sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="6768612c06bc1a926c5f8791b52644743167181677277173328d8c2cc9468c7c5e", 0x21}, {&(0x7f0000000340)="fcc87bb3153365b4e0000b49f1847d1a21703aa98db58893122e64d23401f92acf93a3a25c15a3ae48c4d95f13d2bb29ca5751eac3a20e603cfa72765a7f741a3ccabf333c5eb18c5a03fbc1f99cd3fe82", 0x51}], 0x2, &(0x7f0000000400)="df04286cbc676719eb33fd74693559bcb5cdcaece5f01413d607abe5959d6290fc527fd874315918c4955ed941c16eee02c474fb49c6e29df93231fb38d9b95c8bddd259efd89bcfaf944f245abd9b5a3d5a4e26d2a6b67dcd9a849ec89dc3b40f10db31431df6903f034e0aa578e0a66e41fe78d260aaa78cd1d9bdf3c00d7c6a91598f4db4604848d548d074be327027d6bdb85796764fee4f28da7fe61066e69d801ceaeb2b430e5841b6982429b0228426491b1414e8c30534fa2662e95ae071f3064955b952f324e0a60d0e87420b295fa144151b8de274", 0xda, 0x8000}, 0x4040810) r4 = accept4$llc(r2, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x10, 0x0) getpeername$llc(r4, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000600)=0x10) r5 = accept4(r4, &(0x7f0000000640)=@can={0x1d, 0x0}, &(0x7f00000006c0)=0x80, 0x400) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x3ff, 0x20}, &(0x7f0000000740)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000780)={r7, 0x2, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xc, "48b48bb8b7f60acb93fff6e8"}, &(0x7f0000000800)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0xff, @remote, 0x2}}}, &(0x7f0000000900)=0x84) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2000003, 0x40010, r1, 0x4184a000) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="7038446d8ec7b7e128a9e49818ff314cb92c", 0x12}, {&(0x7f0000001980)="5f5816004d57b53d1ca88ba3b837d8fb36f71ae414401ae28e1abc346b5142e8818d7a5f91a7116edf43f50b06e96a445f9e4fa9f175f935aeb575806695e1d7ebcadeeedf00fe46f87f6d156337b38d9f", 0x51}, {&(0x7f0000001a00)="6c1f62f1f7b727a2d96f700d61611ad382e02bd0ff4b2edbba35a570c54e65e9b0245916d33a756015e7f67a15941ad131022d69e5b508af9018dbfca52b10d9f1e710a69340a9752c6e57f743c54f70d2e4abe612eb2b09ef58cd0c7965bce839a12b4f1608cf176ce7ea20862bf184014cb504f82602a8daf491a8f6d919b18d77fe05b9a309aeee53b9e98fc7ccb7cc9230f718ebf46125a34193ab0fce7877591aef2c277bac38f4489f66238c792588f84487ee", 0xb6}, {&(0x7f0000001ac0)="5a7825712171bbda6c3c3f2446f0109bcd00deb3d79cd98dbd2381db8ad4d35dbe31c61223bc3faf7dbcffbc390d420bebc20259353d332aad6dfbd475a92fe6947a2a2b813c67adca55281315191c96e0f198eb14b02529a290dfe5ed7f5593d62405a8ba63ee2a04d8d4cd46a52068e470b781ea9c7a52b1415e3a33100c44618c16d44acce314111ad5fb95a30b2b69db7ad8f970735d515d8fad54cd5a3093860b35a5280b3511c929fd274351b96c6b123d35722f4a8b4767310a1f48f554625cbdfa312b41043986066efc8a92142c3f85847ff8a59ecb56", 0xdb}, {&(0x7f0000001bc0)="eac50ed0d2e643d703b557ff287550a8e799009ce89aba380d2d1053ea07b77dabba09598d4c3531951362802747df421c3f548e47b0e1eafb0ae92cff018bdd1970cb7795c3f8f93ae87606329d5e17ba7e6865ea35436e00625f797c26cea94586787a8aba3a5ee718c2c56c2d212ed58a69e5d983418289be620771d19eb9d2536fdc289005f9c56644841ef9a221eba7d5bea6922319f5963b73b817c351ac09d229cf56d0938df04be7f0", 0xad}], 0x6}}, {{&(0x7f0000001d00)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000001d40)="92bf435446d5f6a6caa0a1e76d5078aaec60e1c8742c02fd875edd3160a21e2253a3a21aa2a76b342febce77f1d8cb632d6e6d1f3c0e1e8da36e11d16b965e71dfb6455f9796b7da581c05139736b4aae7613e1214a059983f670d154e56a372af596069f3d6cfea93a52ae0b93dba33e1c966784d4a881c10d1fc8420ca93787309efe5a20b39cb6c2ab4075d8fafc6cd186e1f1e91bf3c5ec0fc11f904bbe6597c4ea5a4a27be23acf17e1ad46b4847011074d5bd8920a2f028f57fbf4fc5df5faa12bb8c1ae559f544e8fff2dde868289c560a8cd757faad89cd1", 0xdc}, {&(0x7f0000001e40)="c872533b2ff125055c97ccd582049404bd3b5d46bb65bde09a0b1b5063f91d1ae676393b6a286d8541e73477e1907736d97f239e2841c62a8a7defa54aa2d03fa3afc434af0e1a4c6be2f7165e1bfd1d71d49502dd4db3b3b095bc02a2c2bdbbe07447", 0x63}, {&(0x7f0000001ec0)="e0194af67fe8eacadb09bbc33d45f2b364f0e86dde283bb9c042e9bbb18b3c3957f21304ab794a4bc085edfef7c09174121fc43ef502e8daea68fb371b4f6de74ad51b313c108209a0c238163e5fdb274ff5fed93cfc9b4a3493651dcc41e370c779593dfaa896cc3212e9f6ad67565d224e36ec935d6416dfdcc7e6f0384e2d9df4d15ebe493f39e6f0074621faa3b795da1f2017ea1187f967c6fd89bc63bec088f4e80fc2d214384fc528eccf62fe9a6b8cd5", 0xb4}, {&(0x7f0000001f80)="bd637c1c8000c974dc94936a04f1f5d4a47ba6d9497dab0d09e240d9b1c35c07e6893c9c1e044298cb63b2d1603c95386dbcc6d6de227c4c7360c6553e0cc66d2fae8b0ebcbb85168d012a54d6ce34e355fb689ff3cc5997d25fe65c29ecfbaffb7ab89c7b06918cc8aa0bba880fc6958c326b2e499c7900683c557971e1dcdaed69e3d891a1116339e0474faf0d6d", 0x8f}, {&(0x7f0000002040)="4e966aa53b8c7b06d87889420e7b186711a2ef5c9ef771df2a4e1bdf4f94d2fedf7ac75cde5583c95fb8c14a10f6ec70a5c24256175b2d2d0ce1db177416a2d012bd914d698699b5ba05a35b436a09cc5e631035079caef161464ad51e47a037c034df6ba9daf57dfde7b4e421bcd7d01ea94177917404797da65cecf404d671e7ec2d874e254c6f9ec36d9348f1c8a1d89bd3eba963ceb837df2eff535c35c410bf26e364ea", 0xa6}, {&(0x7f0000002100)="5caafc0d5e87d084382919516e7279bd5e22138fcb02336cc66b0377ebd46e9c367027312e006fe2ded92f37820558a1ce90a0ce8b27315437bf192fd253f33488a92e5a6866cbd51af37e4c881ab4a73770883ff7d70adab86e947f5f16ec90dd0cb2b030b07c86c2ddad0eef6c9550cef8722cd9562223d5df344f525b62c7972d431a095514e79a2b529818ac76dc63633b955bb7715da3b903e88c6d4cf24bd7ddff4e010bcc4ad9e1ba50d16ed0eb41b3dd4d0acc0575a270112feca4f03b824771697c339dde01204e19a16ed73ae15c7bedeee9ba1556a9cdef9653b06939ba", 0xe3}, {&(0x7f0000002200)="b239cddc66d67bc34140fd81b7d382d7b9a81fbdcd8e60f8a8d857f71810db559d8b0e48e24722abee34cb6c6dce2297d696ad24f97b5009dd06927178a24c2e7e50edc63577537f67d8a02766fbd6aaa6482b5c843c406445315292eda8b41564cd723c01b2fa3605c494c53f67c8242ca2b33c70cabfe9e10ae54437f56fa662189774f4aa0d60404167ab4195052c191b7a8f3745e14f53f27abbf32227540fbe9edb70c117fc671c50a7f3d9a63bc0423137a553005401ef4e44401582c59a4aef45ca66216cb59ba25945d1bff450a136ef146d3657a9e65a2e502ff6b41c6ef4", 0xe3}], 0x7, &(0x7f0000002380)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x88}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe06}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3d9}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x62, 0x4, 0x0, 0xcb, 0x0, [@mcast1, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xed}}], 0x110}}], 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000002540)=0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000002580)={0x8, 'ip_vti0\x00', {'vlan0\x00'}, 0xb}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000025c0)={r2}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000002600)={r7, @in6={{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, &(0x7f00000026c0)=0x84) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x7c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:hwdata_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20400d0}, 0x48800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002840), 0x400201, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000002880)={'veth1_virt_wifi\x00', @local}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f00000028c0)={0x1, {{0xa, 0x4e22, 0x8727, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}]}, 0x110) r12 = accept$packet(r9, 0x0, &(0x7f0000002a00)) poll(&(0x7f0000002a80)=[{r9, 0x100}, {r5, 0x20}, {0xffffffffffffffff, 0x6000}, {r9, 0x41c0}, {r12, 0x400}, {0xffffffffffffffff, 0x100}], 0x6, 0xc2e) 1.281070285s ago: executing program 2 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='-\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x9]}, {0x0, 0x1, 0x9, 0x1}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x40, 0x33, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x80, 0x0, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x2b, 0x4, 0x7f, 0x19, @mcast1, @loopback, 0x1, 0x1, 0x0, 0xd3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@private0, 0x0}, &(0x7f0000000500)=0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r11, 0x1, 0x6, &(0x7f0000000100)=""/79, &(0x7f0000000180)=0x4f) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @empty}, &(0x7f0000000580)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', r12, 0x1, 0x8010, 0xe95b, 0x1, {{0x1e, 0x4, 0x2, 0x39, 0x78, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xa0, 0x1, 0x0, [{@loopback, 0x9}, {@private=0xa010102, 0xc}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1000}, {@rand_addr=0x64010100, 0x7}, {@broadcast, 0x556f}, {@rand_addr=0x64010102, 0x9}]}, @timestamp={0x44, 0x8, 0xe9, 0x0, 0xd, [0x6]}, @timestamp={0x44, 0x18, 0xd2, 0x0, 0x3, [0x8001, 0x0, 0xd0c, 0x8, 0xfffffffb]}, @ssrr={0x89, 0x7, 0x81, [@multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000c80)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="200028bd7000ffdbdf2517000000180001801400020074756e6c30000000000000000000000014000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="500001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d367265670000000000000000001400020076657468315f6d616376746170000000440001800800030003000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="1400020077673000000000000000000000000000140002006361696630000000000000000000000070000180080003000200000014000200677265746170300000000000000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="00e50000150debd4c2c9ad012843cd9affb45ce695e96b6593e06c6e09f264e1e5b561953067cc42ab2fa9cbf1edd7a3ca78975c5e7d8198da9a143d5810c31fff0fbae36270a9b527f5707f20fe663517187b398812410c492f6b8dcf7411931f4990d9aae9df710d69c7de2d711d887840485ec7bd3b6c7a5e7e880b9284e3f419b9793b854ae269aace9f0cea2d6cecf2a40f14e6e2f6717f9cd9afa4b4be14d17b0e916af7b0e94b39", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0800030001000000140002006d6163766c616e310000000000000000"], 0x144}, 0x1, 0x0, 0x0, 0x4000044}, 0x58001) 1.241349171s ago: executing program 3 (id=1300): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800c2}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x400, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x14, 0x0, &(0x7f0000000000)="f68ded77286c53e27a617e52862477de6a050000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="852000000500000018210000", @ANYRES32, @ANYBLOB="00000000ff0f00001833000003000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="f1ffffff0000c99d2d7b91ba12ab0b2c60bc45de0000b703000000000000e1a4e1c10b667026b700000000000000d07ca43b884af9c9141f6a581ab73209000000a0f8023e576de05a14dcec678a67c87cae31cb2e27c169744c971eff6f9fac07147fb454ba4c5e7cdabcd4fbfc4878a16c69febc2186b35194217f1e2603646ca7f4023aaf8d8e505f7c0823a12757fea30e9abc"], &(0x7f0000000840)='syzkaller\x00', 0xc, 0xfd, &(0x7f0000000880)=""/253, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x5, 0x4, 0x8, 0x10}, 0x10, 0x0, r8, 0x3, &(0x7f0000000a80)=[0x1, 0x1, 0xffffffffffffffff, r9], &(0x7f0000000ac0)=[{0x1, 0x3, 0x9, 0x1}, {0x2, 0x3, 0x3, 0x9}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x10000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 787.484956ms ago: executing program 4 (id=1301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) (async) unshare(0x26020480) r2 = socket(0x1, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) write$cgroup_int(r1, &(0x7f0000000000), 0x12) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004885}, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x1000000000000000, 0x1, 0x1}}, 0x40) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) write$cgroup_int(r1, &(0x7f0000000000)=0x12, 0x12) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000640)={r7, 0x2b, 0x4, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000640)={r7, 0x2b, 0x4, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendto(r10, &(0x7f00000005c0)="cb224c4be1e8", 0x6, 0x2e20703484cac22, 0x0, 0x0) sendfile(r6, r0, 0x0, 0xb) 736.277026ms ago: executing program 3 (id=1302): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b5c176104c34f1e4ba00010000000c00018008000400ee"], 0x20}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)={0x70, r5, 0x800, 0xfffffffc, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a37037e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0xc, 0xfffffffd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7272a33a}]}]}]}, 0x70}}, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @mangle={0x0, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @empty, 0x4, 0x1}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x9, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x41b) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0xf3c, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r11) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r12, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @multicast}) 534.457799ms ago: executing program 4 (id=1303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='devices.list\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000680)={r0, &(0x7f0000000580)='-\\+-\x00', 0x200, &(0x7f00000005c0)={@align=0x51a, {0x5, 0x101, 0x9965, 0x7}}, 0x4f34, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x7f}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='pids.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x34, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0x3, 0x4, 0x3, 0xc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ldst={0x7, 0x2, 0x1, 0x5, 0x4, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0x81, &(0x7f00000004c0)=""/129, 0x40f00, 0x11, '\x00', r6, @fallback=0x35, r7, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xc, 0xff9, 0x9}, 0x10, 0x0, r8, 0x1, &(0x7f0000000840)=[r9], &(0x7f0000000880)=[{0x2, 0x1, 0x8, 0xc}], 0x10, 0x10}, 0x94) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r13, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r15 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r15, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 436.351815ms ago: executing program 1 (id=1304): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e23, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) socket$inet(0x2, 0x6, 0x2) unshare(0x2c020400) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x200, 0x7ff, 0xa054, 0x81, 0x3, 0x9, 0x8, {0x0, @in6={{0xa, 0x4e22, 0xfffffffd, @private1, 0x406}}, 0x2, 0x9, 0x5, 0x0, 0x401}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000500)={r2, 0x4, 0x8000, 0xc, 0x9, 0x6, 0x9, 0x6, {r3, @in6={{0xa, 0x4e20, 0x80000001, @loopback, 0x8}}, 0x5, 0x2, 0x4, 0x8, 0x6}}, &(0x7f00000005c0)=0xb0) unshare(0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000000000000000000000000001000000000000fffd0a0080203b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000300000000f9ffffffde91000000000000080000008400050064010101000000000000000000000000000004d33c00007f0a000000000000000000000200ad0003000000010000000900000020010000000000000000000000000000000004d53c0000000a00000000000000000000000000000000000000053500000301f9000900000203000000ffff"], 0x1ac}}, 0x0) r5 = socket(0xa, 0x3, 0x3) bind$alg(r5, &(0x7f0000000180)={0xa, 'hash\x00', 0x2, 0x0, 'streebog512-generic\x00'}, 0x58) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'bridge0\x00', {0x4}, 0x9}) writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)='\f\'', 0x2}], 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000100), 0x4) 434.847557ms ago: executing program 0 (id=1305): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) (async) close(0x4) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2, @local, @mcast1, 0x8, 0xb8a, 0xfffa, 0x500, 0x5, 0x40380080, r5}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) unshare(0x8040480) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000)=0x87, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r7, 0x0) (async) ppoll(&(0x7f0000000000)=[{r7, 0x205}], 0x1, 0x0, 0x0, 0x0) (async) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r9, 0x113, 0x4, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x6, 0x200}) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) r11 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r11], 0x14) 315.562352ms ago: executing program 3 (id=1306): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c7ae0b7ebbbe1722847bbe0189a69b8db69bbfc489f90ca7e6d657c3d4a07ba3924c37a3d860625785d00caaed32a4d837c3933fef2da2cb8c6684c2d531ab05002ff2714b1001d8e52d119e3df053945b657b3d6b94cc74b95771f60dbd93e7c693dc772fb6d503aa27345723d8b19c5c8aa20176a805609bfaa483a08fbc93ecbafc43f1cbbb22306bb3886fdba91d6674d0060d1f33e570ba7606568f66ce5e1fff2569b9c3e3d56f7561ed4b", 0xae}], 0x1, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x3cde}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48}], 0x1, 0xc1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000001c0)=""/148, &(0x7f0000000280)=0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000300)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000d00)={{0xffffffffffffffff, &(0x7f0000000340)='vxcan1\x00', 0x418080, &(0x7f0000000380)={@_ha_fsid={[0x10, 0x8]}, {0x3c82, 0x7, 0x1, 0x10}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xb3}, 0x9, &(0x7f0000000bc0)=[{0x1, 0x1, &(0x7f0000000440)='vxcan1\x00', &(0x7f0000000480)="9abeac03aa6e1338b0a6830a", 0xc, 0x10}, {0x2, 0x80000001, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="14721e6a0bc50e59a88d6edd41aa8d36ffc36fcd14e5ee8da09f624832034cd41970f220d641167aeff4b2d6be9553374a5361cea7603d3adbf61f9797eb1198b9df2f12a48b22e90b5be05e77941a65ead7e1563c3da5f3ce4960af612aafb30c40e897f070166050e72681e7b8c3794962afa025ac44ccc3949b9210580fadcb9d67aa41c5d49c221f3aa81eeb28487bb053d899e295df44bf5c6aa3149bb82e3bd6a7eafa", 0xa6, 0x50}, {0x1, 0x10000, &(0x7f00000005c0)='vxcan1\x00', &(0x7f0000000600)="328784", 0x3, 0xa}, {0x3, 0x0, &(0x7f0000000640)='vxcan1\x00', &(0x7f0000000680)="ea764a8b11405e0fe950a34573f8c41eefe6df3277a0d6e93046efa1ff346b183c5b589a3b42ffadbff0111e6105f0a0b9f5bef9c759fa14a4d15fa9fcccbda2b34cdfa9be03550270a56f6865e8bd8f8f7749b03d10759aef191b90827929a6bfb54e19676c4b963ca5d797aa206b5c71f162e2af5bab60760cf1de00749fe18f365116260491519ba4326e8766302f06d26fa3fb34bfcd157c1f48904377af18d1940433b0f904dd67d18e094574e7c6cbacad299cb174c5d730153708900189ca6f5acd0021075a3c663b2dc7ff07ae6591a5de2e2231a5fd8a9eef055f3e9749aa9c78bf560d9a22", 0xea, 0x22}, {0x1, 0x280000, &(0x7f0000000780)='^)\x00', &(0x7f00000007c0)="1033fc5dce2e6c082ed434dc2c226116a4be40bceac508f6c1025f00826aa3be838b6406b1483843857f44027be14742b36afaeb372b2b1c1c274877c293c04cbeea385bb9a695ae4e0a8bac6871683a204cf2722d66ac61055c02c09263445adb434c5273822cdb813ff5bc89893a30b2007cec5035dd7adcfc28f0090439cf544e9b6b377363505c4a3605b4a430b4e4d635bb5c7fa02126a9b0ba7624b47fec3ab59cc78ecb10e678f5416d8cf02474febc9fa2ff5416d86f38cf13a70d55244fc42f9df267e3df07adffc0cf6b67099d91eae0d440ef46", 0xd9, 0x20}, {0x1, 0x7, &(0x7f00000008c0)='vxcan1\x00', &(0x7f0000000900)="e14483eba82c324cc8bf6dcebff2c59bbdbdba60322868736a5a4f0d414bc2cccc8bb802b744b4489815fc6a43af19cfade5e2c328a75838831938ea0fa2349a8360db6b146d363331f03468ae5a004808a17f13cfc7", 0x56, 0x2a}, {0xadfcebf2e9f8be9, 0x100, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="cb0b785bb9de66c0eb364c56924137d4a2977b948a4a7c4381be8cbe", 0x1c, 0x20}, {0x1, 0x910, &(0x7f0000000a00)='vxcan1\x00', &(0x7f0000000a40)="eb1da90b2ffe4a6829d926af2f06093a5ab615d6234c3c1d78eb0f186ad6e6c0301114ce9b7dbd2ec56e4d815f00e0618c03c895fb0ba9dd0bfe704578bb1f937b741e1a46025039cf7f829d34f62eb291126b0f9a7825f71a10da125eea51367b0c9486786f7586d9176793823ca207db4960527abb3c923ca6339a6ba0ef386f32", 0x82, 0x10}, {0x2, 0x401, &(0x7f0000000b00)='vxcan1\x00', &(0x7f0000000b40)="e110971cabcfd555f8fdcf1688c0b246483ee258d034ba3fac5ad96d758e082548d662487dec844322e04998ff5d5709e75a0c32e7ff11a45c791a50c6cf2bcb45d3175facbfe02db648ed6c8f00781e22abb03f421794a138570d3b3a1716ae83f5c9f6cf4407781ef7190379fd953cbc99ad090d0afa814c8615ab6a67f5", 0x7f, 0x20}]}) write$rfkill(r4, &(0x7f0000000d80)={0x49, 0x8, 0x3}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xb4, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff8001}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e07c87a488286e3d6e633fb8df5ea550"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x79}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8b08da44608a410"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ee0743310770b22001e09baacb27c5ca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="71e7311d070a8374635ad081a35cd9af"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a13ce39b4ee44b2f249832794fa74d4a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5081bf772dd340d1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ba00584173d4a339"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4dd687bee9077ccf9ce401f6b6dab78e"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000f80)={0x6, 0x9, 0x40}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000fc0)={0x0, 0x9d, "d7a1cfd5d96efe26fd7e5cd1ac6226884fedd90a135c6069e1fa1466dd02d735c72937eb76fe97cea7d8613dbcf00173ae0d1036620769949301a784d3bee96add760e8d430f5fe61f1b7c81c8f438c8444618fc3b3d17905dfee72bae77cb7310a15871131be32e6665456f9d83f124d751aa607a435c26896584fb777c5079b2d1acabb1b471477ca0ee8494b3d00924f889fd06a70757cd952142bc"}, &(0x7f0000001080)=0xa5) syz_genetlink_get_family_id$SEG6(&(0x7f00000010c0), 0xffffffffffffffff) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001100)={{0x0, 0x2, 0xffff, 0x3, 0x7, 0x2, 0x8, 0xfff, 0x288, 0x80, 0x9722, 0x3, 0x3, 0x7, 0x8c}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000011c0)={{r8, 0x5, 0x1ff, 0x1, 0x8, 0x2, 0x10001, 0x3, 0xe, 0xfffffe00, 0x3, 0xfffffffffffffffd, 0x10001, 0x80000000, 0x1}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002240)={{r4, 0xffffffffffffffff}, &(0x7f00000021c0), &(0x7f0000002200)='%pS \x00'}, 0x20) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000002280)={0x1, 0x100, @start={0x0, 0x1, "841f63173d24517c29dabb741a45ea66c21c4ac9acbb9d6473c416d14a7048cb75249e50f4befa2012a827441f91feaa909943284269ef9eea50b23959899f4a26beaf60a590fb724e84dd3e7b531dd296b9d51d60456473652bb7f9d278caaad34f5903a49e0aa0291074c5b68cb0000ce5e9f8b12b1760fc2169957241564d59945a40a00252434d8749e7911b9d0dac49fcca65785d6c7e3d751e236984f6fac4bd23efdab0e0270a097220f9099711612ce1b2fdaec0e0538bb4db85ff8ad49212f3735272f1a513a39647485918d8bcf68e9f71fc05f44d7992321acb69072811f463db1fbb7c93a14cff4f6b1a3785696843b7125ea4d450eade93b4044e230af23a7e78fb26bced4dec5f514d38e4068233baa61a7161a3ffbb324125a4d9ada8c894e64bdc3f372673a3e15be7585204b53a2e97a403cdff95caf178eeecbfcd8dc764661b3bc9640b053450fe98062c01931490261f8d02360451247a9e11a2b38188201a84552661034323215e79a4bc1b963f96ac5294db2fff413ab1b4ee8c7f95c4b55ccb189991b680c6618948002fb5873c3fd3786d3238073b7c5f61baafabe2fa32c06c29570f01102c4c6f2c818090da32c13de1ad324c46b91707ab6a5905a828ef464c3fd71814784f144e00c442ac405bae04613ca35e36cd055c4e7ec0fc2734569e89e09db0df1ff2cd58026e13ccac77bf501f0cd4a7851b7ea2c583ea73bd2f95cffbad2ca6736eb9be9cb701e56266d02bc90f1cc8051aae8c4ccd0cb4a7e4c111dd09ceb7427461a50da3b761144ea617dcd0f6a8c3a9d958ee0174e0d4507d3711abee4d2596c1b62f37e98ab11b28142eb97062b04351530f3d6be293a747216b1341c568be5e50e6fbe43156a096a9cfb847bfae6e62b73ca8e7bef07125d9da90db7ed9f7587c1e8014689625a138dcdd3f75c12ed8fba2040c1a7e4ecc8b05cfc01099c0a71e23110eb22c93e4f401e2506a30f10d3722aaa04ef877ca91ae3f3130b2c832c2cb552612bd6288a38c31ad6fb9ef16a04411c9f528edc9a26fe8ec5b00327db9bbfcfe724557c02380da616d020ecc7e392a791d3ecc71c9e7306d018838192c62a5d6752899b59459d0403f99e6c02bb042cba47ba9af2a44a1cc1357a48bab92411b8546d9ff8c7ae532dfaba65080618a3658ad149d123113565f100660ebb693d6c4cbb3e4313b60cef840601439b155f3d7d79d7b7a62669e77e4e3fdf76e809f0ee24fd988460fedee6d3052459cc33a1c58c9447804b7109ac464a9914ee0acb5be863c1652c97d9a4c67bebce239bbdecca22ad689db7545a1c3c2ed8cc9239a1cb5531daf806ed2b24c422f3f3d9564d88d9627172341ca0eed0ca476b957f2e2d3a7c9d3e8f0e51f3e48c78681b1f12a57f43f23529236b7b91fcc2880519d6d951f02a9aa64", "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"}, [0x775b77b3, 0xcf, 0xc44, 0x0, 0x0, 0x2, 0xff, 0x7f, 0x4, 0xa1, 0xec, 0x6, 0x7, 0x10000, 0x4, 0x0, 0xc, 0x7, 0x3, 0x804d, 0xfffffffffffffff9, 0x6b68000000000000, 0x1, 0x0, 0x9, 0xa, 0x2, 0x80000000, 0x7, 0x0, 0x9cd3, 0x3, 0xd, 0xffffffffffffffff, 0x64, 0x7fffffffffffffff, 0x2, 0x0, 0x4, 0x5, 0x7, 0x1ff, 0x6, 0x4, 0x3, 0x6, 0x7fffffff, 0x852, 0x8, 0x10, 0xfffffffffffffffe, 0x200, 0x9, 0x27, 0xa1, 0x6, 0x0, 0x7, 0x2, 0xfffffffffffffff7, 0x4, 0x10001, 0x7fffffffffffffff, 0x5]}) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000002cc0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000002d00)={r6, 0x978}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002d40)={r4, r4, 0x20, 0x0, @void}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000002dc0)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x373a, @empty, 0x5}, @in6={0xa, 0x4e21, 0x85a, @mcast1, 0x80000001}, @in6={0xa, 0x4e22, 0x1, @local, 0x8}], 0x64) accept4$llc(r4, &(0x7f0000002e40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002e80)=0x10, 0x0) sendto$packet(r4, &(0x7f0000002ec0)="87b4dbb625575e70cbce671dd7f1101f6fed59f4dc1aaf669623d61df370d07a12b379036b6b7637ba914616b5f53efa61acff3bf25307964e228dad338aa365c02ae860f3220fc882918764f09f8e3f933f24f73851f9200da8f02fb96ba894a5c40c3608ac03b4699808097076188ee69c7bb3924b08d770e28caea286dd18a55f2d1f6186f28402d1d79ed6371e16c52b22761ca236121520bf6a7c6ab71970fafee04e3bd6930718c14c24c40b7d867f5b61ceb3bfc2a00fc42a1308b22be376d6e2fe2beb79366fa6226919048edfef18aec93a6af79cc0021937a6c363d70029caec195c", 0xe7, 0x8030, &(0x7f0000002fc0)={0x11, 0x7, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f0000003000)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000003040)={0x6, 'wlan0\x00', {0x401}, 0x1}) 203.210261ms ago: executing program 0 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x2, 0x2) r2 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x38, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12) sendmsg$NL80211_CMD_GET_REG(r12, 0x0, 0x20004804) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x45b, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) 160.608109ms ago: executing program 4 (id=1308): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000000c0)=@delchain={0x5e8, 0x65, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x1}, {0x5, 0x8}, {0x3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @filter_kind_options=@f_basic={{0xa}, {0x598, 0x2, [@TCA_BASIC_EMATCHES={0x1b0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x52}, {0xfffffff8, 0x5, 0x8, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1c9, 0x3, 0x9}, {0x4, 0x35c1, 0x9, 0x1ff}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xed71, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0xf048a05f1293850}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0x108, 0x3, 0x0, 0x0, {{0xf0c0, 0x4, 0xad57}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR='5', @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="94", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="b43a48fceb6d041d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="937c522003f4c127", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x36, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f3a4618a82ba", @TCF_META_TYPE_VAR="7d3ddf5ed0dc4e66cb0c", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e93fd1c46673", @TCF_META_TYPE_VAR="de26f7443e68e7a0"]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="4aa1b9cf3887", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="79a66c20fc1beb33", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d605d2bb23"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x6a, 0x2}, {0xe26b, 0xb, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x10, 0x1}, {0x4, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5bf7, 0xa1, 0x2}, {0x9, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="bbfc6583ad90690b83aa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ca9adb05", @TCF_META_TYPE_VAR="e894", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b5c6f52d462ffc43c5"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x8}, {0x6, 0x7fffffff, 0xe08, 0xb}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}]}, @TCA_BASIC_ACT={0x3e4, 0x3, [@m_xt={0x3e0, 0x15, 0x0, 0x0, {{0x7}, {0x38c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x5c, 0x6, {0x8, 'nat\x00', 0xc, 0x400, "a06c6e09e9f722304d8e8c54e66ee4f903f182088ba71eed30ff006c9fab918f5d2e5d8295eff3b3adb2011b0ca09571be07"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0xfff, 'nat\x00', 0x3, 0x6, "b7f83b86e449c1a20da710d6d16fdf94cfa287f49a348d979aa1458abb0d077531d1392d950a295d172e252029e325639999a11c1e903309ebca1e4734a3863653fb34790453ff0edd63c306fc897d79ef1313396ac7852c3c89034cef69a217259f8261036671e6d102d0b2d28bdde1394e239c77741aeb323da9e2194f1cc9a6e1eac4eb3492ae4d7897205b7962b0c51c4e42e55467190d00d3897201d316ec5099a580f3cd9ad3a469694de2e891a2682ba7a680066996b502ac7501b4"}}, @TCA_IPT_TARG={0x107, 0x6, {0x0, 'nat\x00', 0x5, 0x6, "771e5c01aebbb1e2cc58c435d1bb9043812ba1dda19de1fabf81a3a5a07284804d556b7116e863204015d79e06036ed070d9b4c246d48d6c9e29906e15f05aecab5f43391c90abc414b085f32ad3d8111734d7ef09598fde986333a5f9ada4a37734bda65da9d0a7060d5bd120adf7067c9f33e06865b3a9a996c67a47c48a367bdc25596e52a701dd5b4697dc3734eb7996e6fb3091b0e63d5489f2905593a06bf809cd004debef38f2afbb1ff110ec0be5a5b09ceec04bb0329caf2ad4df88d1df606730ff12162dacb1200560da7ae3436f2c83635dd3fd506970c2"}}, @TCA_IPT_TARG={0xe7, 0x6, {0x1000, 'mangle\x00', 0x82, 0xe, "88aa0f69869ea3d525c78d5e24a3969fd08cfb467c52023294ec5f7ecb702654b4059912265a2df7e2faae99f777cec2b5e7497d011b382e1fa5d7bb52977548b22e293bc11b354d02104622cb2fccaf9cecb71dc2fb5f3fe6ae50c542a837c9b144b08560ca7f69a0746235719f488392451634c0054d3a15363cf79039312634ebf74bb3a53278e263ba008a7f86a2581878ba39ffbdc5bc5f26e6fb7bfab8d8aecb252cabdabce013ca7492cb32f671f8619067c226cccd0102332a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x2e, 0x6, "75d9b988b8df93e4d522e67ecf1302d53360760d63d51d29352f9af473edb34d0af559c0ec601fecb90b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xed, 0x9}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000000000000800040001000000", 0x24) 96.279508ms ago: executing program 3 (id=1309): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910490000000000c3000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) close(0x4) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/pid\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@multicast2, @in=@remote, 0xffff, 0x3ffe, 0x4e21, 0x8001, 0x0, 0x20}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7efffffe}, {0x0, 0x0, 0x4}, {0x3, 0x0, 0x2}, 0x70bd29, 0x3500, 0xa, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}}}]}, 0x170}}, 0x24008800) mmap(&(0x7f00007f4000/0x4000)=nil, 0x4000, 0x2000009, 0xc3072, 0xffffffffffffffff, 0x19a9a000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4d9402000000000014001680100001800c00030001800000394200e407001b0000080000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) unshare(0x6a040000) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x7d, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@getnexthop={0x30, 0x6a, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x30}}, 0x80) 22.986354ms ago: executing program 1 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4, 0xfffffffffffffffd, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) sendto$l2tp6(r1, &(0x7f0000000200)="39d6ef68ac6ddb2619346d8d9338c3127a829bfea68780e278b29b661146d8e9da8bd97ddd8d958b33680c7d30e1610fac314904479bcde7da27331e", 0x3c, 0x20000880, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socketpair(0x2b, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250400000028000180140002006970766c616e3100000000000000000008000300000000000800030003000000040001806c000180080003000300000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="140002007465616d300000000000000000000000080003000000000008000100", @ANYRES32, @ANYBLOB="1400020070696d72", @ANYRES32, @ANYBLOB="1400020069703665727370616e30000000000000080003000100000014000200677265746170300000000000000000001400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0], 0x10c}, 0x1, 0x0, 0x0, 0x4040140}, 0xc0) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 0s ago: executing program 4 (id=1311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 71.563974][ T5611] cgroup: Unknown subsys name 'net' [ 71.737544][ T5611] cgroup: Unknown subsys name 'cpuset' [ 71.746195][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.109034][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.211735][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.235569][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.244215][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.254109][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.274252][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.283671][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.291189][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.297252][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.306142][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.311744][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.315535][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.323924][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.330317][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.336253][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.342508][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.350429][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.356822][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.363851][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.377265][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.385029][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.388773][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.400258][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.408293][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.409208][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.430448][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.015967][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.023205][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030669][ T5625] bridge_slave_0: entered allmulticast mode [ 77.041838][ T5625] bridge_slave_0: entered promiscuous mode [ 77.074080][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.081178][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.088414][ T5625] bridge_slave_1: entered allmulticast mode [ 77.095387][ T5625] bridge_slave_1: entered promiscuous mode [ 77.213683][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.220890][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.228175][ T5623] bridge_slave_0: entered allmulticast mode [ 77.235751][ T5623] bridge_slave_0: entered promiscuous mode [ 77.246388][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.260680][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.267897][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.275090][ T5637] bridge_slave_0: entered allmulticast mode [ 77.281927][ T5637] bridge_slave_0: entered promiscuous mode [ 77.289284][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.297251][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.304550][ T5624] bridge_slave_0: entered allmulticast mode [ 77.311493][ T5624] bridge_slave_0: entered promiscuous mode [ 77.318869][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.326431][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.333924][ T5623] bridge_slave_1: entered allmulticast mode [ 77.340799][ T5623] bridge_slave_1: entered promiscuous mode [ 77.350246][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.364930][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.372036][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.379680][ T5637] bridge_slave_1: entered allmulticast mode [ 77.386868][ T5637] bridge_slave_1: entered promiscuous mode [ 77.394696][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.401818][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.409381][ T5624] bridge_slave_1: entered allmulticast mode [ 77.417183][ T5631] Bluetooth: hci0: command tx timeout [ 77.418628][ T5624] bridge_slave_1: entered promiscuous mode [ 77.493836][ T5628] Bluetooth: hci4: command tx timeout [ 77.500928][ T5635] Bluetooth: hci3: command tx timeout [ 77.500938][ T5643] Bluetooth: hci1: command tx timeout [ 77.513065][ T5631] Bluetooth: hci2: command tx timeout [ 77.526629][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.537977][ T5625] team0: Port device team_slave_0 added [ 77.555620][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.567793][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.583672][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.594444][ T5625] team0: Port device team_slave_1 added [ 77.600246][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.607526][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.614821][ T5626] bridge_slave_0: entered allmulticast mode [ 77.621707][ T5626] bridge_slave_0: entered promiscuous mode [ 77.631620][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.652026][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.679540][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.686746][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.694010][ T5626] bridge_slave_1: entered allmulticast mode [ 77.700909][ T5626] bridge_slave_1: entered promiscuous mode [ 77.754577][ T5637] team0: Port device team_slave_0 added [ 77.771222][ T5623] team0: Port device team_slave_0 added [ 77.777847][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.785035][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.811009][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.835350][ T5637] team0: Port device team_slave_1 added [ 77.843071][ T5624] team0: Port device team_slave_0 added [ 77.850800][ T5623] team0: Port device team_slave_1 added [ 77.857169][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.864313][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.890243][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.905362][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.935789][ T5624] team0: Port device team_slave_1 added [ 77.988619][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.999557][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.006566][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.032850][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.051855][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.059116][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.085492][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.098196][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.105212][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.131649][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.160247][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.167498][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.193555][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.205023][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.211963][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.238107][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.251042][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.258063][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.283970][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.321008][ T5626] team0: Port device team_slave_0 added [ 78.357875][ T5625] hsr_slave_0: entered promiscuous mode [ 78.364830][ T5625] hsr_slave_1: entered promiscuous mode [ 78.375500][ T5626] team0: Port device team_slave_1 added [ 78.396413][ T5623] hsr_slave_0: entered promiscuous mode [ 78.402813][ T5623] hsr_slave_1: entered promiscuous mode [ 78.409228][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 78.415342][ T5623] Cannot create hsr debugfs directory [ 78.502450][ T5624] hsr_slave_0: entered promiscuous mode [ 78.509193][ T5624] hsr_slave_1: entered promiscuous mode [ 78.515531][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 78.521275][ T5624] Cannot create hsr debugfs directory [ 78.538733][ T5637] hsr_slave_0: entered promiscuous mode [ 78.545287][ T5637] hsr_slave_1: entered promiscuous mode [ 78.551447][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 78.557502][ T5637] Cannot create hsr debugfs directory [ 78.564203][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.571256][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.597613][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.610799][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.617820][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.643982][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.862702][ T5626] hsr_slave_0: entered promiscuous mode [ 78.869026][ T5626] hsr_slave_1: entered promiscuous mode [ 78.875295][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 78.881023][ T5626] Cannot create hsr debugfs directory [ 79.201341][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.214754][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.223220][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.233234][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.248528][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.259206][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.276134][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.287936][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.354098][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.364305][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.372370][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.381970][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.390198][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.400316][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.408584][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.418504][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.493720][ T5631] Bluetooth: hci0: command tx timeout [ 79.526071][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.535983][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.554186][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.564675][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.572439][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.580643][ T5631] Bluetooth: hci1: command tx timeout [ 79.586192][ T5628] Bluetooth: hci2: command tx timeout [ 79.586233][ T5628] Bluetooth: hci4: command tx timeout [ 79.586255][ T5628] Bluetooth: hci3: command tx timeout [ 79.606478][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.626774][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.639116][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.724432][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.738205][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.751485][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.767517][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.776763][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.786006][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.796967][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.807546][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.818554][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.888323][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.930252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.938167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.949143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.956268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.986661][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.998731][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.008127][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.017450][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.026062][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.036002][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.054812][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.064471][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.100277][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.182649][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.205930][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.262152][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.270781][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.300729][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.308130][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.322777][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.344229][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.378282][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.385489][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.412168][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.419367][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.460175][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.483607][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.491003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.530687][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.538203][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.661681][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.767707][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.813071][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.820289][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.868486][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.875791][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.910790][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.169260][ T5625] veth0_vlan: entered promiscuous mode [ 81.239815][ T5625] veth1_vlan: entered promiscuous mode [ 81.380167][ T5625] veth0_macvtap: entered promiscuous mode [ 81.416843][ T5625] veth1_macvtap: entered promiscuous mode [ 81.507004][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.552031][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.577864][ T5631] Bluetooth: hci0: command tx timeout [ 81.651554][ T3281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.663242][ T5631] Bluetooth: hci3: command tx timeout [ 81.676308][ T5631] Bluetooth: hci4: command tx timeout [ 81.681772][ T5635] Bluetooth: hci2: command tx timeout [ 81.687948][ T5631] Bluetooth: hci1: command tx timeout [ 81.718376][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.786780][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.831062][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.882327][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.899925][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.977109][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.202005][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.218962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.231555][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.281678][ T3281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.291514][ T3281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.310431][ T5623] veth0_vlan: entered promiscuous mode [ 82.336392][ T5637] veth0_vlan: entered promiscuous mode [ 82.374517][ T5623] veth1_vlan: entered promiscuous mode [ 82.407977][ T5637] veth1_vlan: entered promiscuous mode [ 82.437548][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.458222][ T5626] veth0_vlan: entered promiscuous mode [ 82.551701][ T5626] veth1_vlan: entered promiscuous mode [ 82.575952][ T5623] veth0_macvtap: entered promiscuous mode [ 82.598087][ T5824] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 82.600269][ T5624] veth0_vlan: entered promiscuous mode [ 82.623559][ T5637] veth0_macvtap: entered promiscuous mode [ 82.658413][ T5623] veth1_macvtap: entered promiscuous mode [ 82.688928][ T5637] veth1_macvtap: entered promiscuous mode [ 82.716295][ T5624] veth1_vlan: entered promiscuous mode [ 82.800822][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.822867][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.844970][ T5626] veth0_macvtap: entered promiscuous mode [ 82.858323][ T5626] veth1_macvtap: entered promiscuous mode [ 82.871934][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.886258][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.934010][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.954925][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.965257][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.976220][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.988112][ T5624] veth0_macvtap: entered promiscuous mode [ 83.018141][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.035604][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052708][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.061910][ T5624] veth1_macvtap: entered promiscuous mode [ 83.071951][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.082302][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.102203][ T5835] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 83.111152][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 83.121390][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 83.130681][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 83.131796][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.154850][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.164077][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230706][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244974][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.259846][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.266648][ T5837] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10'. [ 83.279191][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.288549][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355191][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.380944][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387875][ T5839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'. [ 83.399830][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425179][ T5839] ip6gre1: entered promiscuous mode [ 83.430489][ T5839] ip6gre1: entered allmulticast mode [ 83.500170][ T456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.510857][ T456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.571234][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.600291][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.607293][ T5842] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 83.618530][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.634498][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.653505][ T5631] Bluetooth: hci0: command tx timeout [ 83.699663][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.716440][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.736465][ T5631] Bluetooth: hci1: command tx timeout [ 83.736698][ T5628] Bluetooth: hci2: command tx timeout [ 83.741923][ T5631] Bluetooth: hci4: command tx timeout [ 83.741943][ T5631] Bluetooth: hci3: command tx timeout [ 83.835956][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.853733][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.882682][ T5807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.899808][ T5807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.975505][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.999479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.050866][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.070507][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.289368][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.405864][ T5850] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 84.448304][ T5850] batadv_slave_1: entered promiscuous mode [ 84.477485][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 84.504002][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 84.519405][ T5849] batadv_slave_1: left promiscuous mode [ 85.237153][ T5886] Zero length message leads to an empty skb [ 85.746795][ T5741] hsr0: entered promiscuous mode [ 85.756517][ T5906] netlink: 188 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.771298][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.985277][ T5922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.244804][ T5928] Bluetooth: MGMT ver 1.23 [ 86.624539][ T42] cfg80211: failed to load regulatory.db [ 86.963065][ T5949] netlink: 'syz.4.40': attribute type 13 has an invalid length. [ 86.983507][ T5949] netlink: 'syz.4.40': attribute type 17 has an invalid length. [ 87.065592][ T5960] netlink: 'syz.0.43': attribute type 11 has an invalid length. [ 87.667533][ T5972] gretap0: entered promiscuous mode [ 87.687638][ T5972] vlan2: entered promiscuous mode [ 87.938528][ T5981] warning: `syz.2.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.354430][ T5993] netlink: 'syz.2.49': attribute type 11 has an invalid length. [ 88.444476][ T5990] __nla_validate_parse: 5 callbacks suppressed [ 88.444496][ T5990] netlink: 100 bytes leftover after parsing attributes in process `syz.2.49'. [ 88.540216][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.51'. [ 88.718659][ T6001] IPVS: Scheduler module ip_vs_ªª not found [ 88.756767][ T6008] syz_tun: entered allmulticast mode [ 88.794422][ T6008] netlink: 244 bytes leftover after parsing attributes in process `syz.0.56'. [ 88.843074][ T6007] syz_tun: left allmulticast mode [ 88.901191][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 89.146978][ T6016] bond1: option lacp_active: invalid value (8) [ 89.159550][ T6029] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 89.221544][ T6030] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 89.232770][ T6016] bond1 (unregistering): Released all slaves [ 89.271521][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 89.471819][ T6029] tipc: Started in network mode [ 89.479425][ T6029] tipc: Node identity 523b095b60f3, cluster identity 4711 [ 89.490915][ T6029] tipc: Enabled bearer , priority 0 [ 89.545718][ T6026] syzkaller0: entered promiscuous mode [ 89.551314][ T6026] syzkaller0: entered allmulticast mode [ 89.612552][ T6025] tipc: Resetting bearer [ 89.627779][ T6025] tipc: Disabling bearer [ 89.709890][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.777982][ T6054] netlink: 288 bytes leftover after parsing attributes in process `syz.3.66'. [ 90.040831][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 90.171444][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 90.196244][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 90.252919][ T6079] netlink: 'syz.3.72': attribute type 83 has an invalid length. [ 90.366258][ T6084] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 90.381634][ T6084] netlink: 'syz.4.74': attribute type 2 has an invalid length. [ 90.407301][ T6084] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 90.685130][ T6098] veth0_to_bridge: entered promiscuous mode [ 90.698953][ T6098] macvtap1: entered allmulticast mode [ 90.719701][ T6098] veth0_to_bridge: entered allmulticast mode [ 90.745174][ T6098] veth0_to_bridge: left allmulticast mode [ 90.759405][ T6098] veth0_to_bridge: left promiscuous mode [ 90.854995][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.872287][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.895128][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.912514][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.166653][ T6128] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 91.217530][ T6133] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 91.333785][ T6128] team0: Failed to send options change via netlink (err -105) [ 91.363383][ T6128] team0: Port device dummy0 added [ 91.378763][ T6133] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 91.435830][ T6133] team0: Failed to send options change via netlink (err -105) [ 91.450002][ T6133] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 91.469741][ T6133] team0: Port device dummy0 removed [ 91.498474][ T6133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.961619][ T6172] Cannot find add_set index 0 as target [ 92.025630][ T6178] netlink: 'syz.2.93': attribute type 16 has an invalid length. [ 92.278069][ T6190] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 93.326730][ T5814] IPVS: starting estimator thread 0... [ 93.433473][ T6240] IPVS: using max 35 ests per chain, 84000 per kthread [ 94.188830][ T6247] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 94.204763][ T6253] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 94.226781][ T6253] nbd: must specify a size in bytes for the device [ 94.412858][ T6257] __nla_validate_parse: 10 callbacks suppressed [ 94.412873][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 94.439152][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.115'. [ 94.460550][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 94.470679][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 94.570349][ T6261] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 94.603833][ T6261] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 94.657804][ T6261] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 94.701332][ T6261] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.729364][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 94.751028][ T6261] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.754394][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 94.799789][ T6273] l2tp_ppp: sess 2/0: no socket in recv [ 94.895449][ T6272] syzkaller0: entered promiscuous mode [ 94.901047][ T6272] syzkaller0: entered allmulticast mode [ 94.933134][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 94.949639][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 94.965021][ T6282] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 95.028233][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.4.121'. [ 96.435944][ T6297] bridge1: entered promiscuous mode [ 96.448655][ T6296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.124'. [ 96.452127][ T6297] bridge1: entered allmulticast mode [ 97.207795][ T6338] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 97.857179][ T6361] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20004 [ 97.897948][ T6363] batman_adv: batadv0: Adding interface: ipvlan0 [ 97.915292][ T6363] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.982849][ T6363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.995227][ T6363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.007578][ T6363] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 98.011230][ T6377] raw_sendmsg: syz.1.146 forgot to set AF_INET. Fix it! [ 98.219444][ T6392] x_tables: duplicate underflow at hook 1 [ 98.501929][ T29] audit: type=1800 audit(1779079378.235:2): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.153" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 98.513289][ T6410] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 98.525698][ T6406] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 98.548489][ T6406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 98.559206][ T6406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 98.570245][ T6410] bond1 (unregistering): Released all slaves [ 98.723818][ T6419] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 98.831310][ T6429] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 98.896551][ T6419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.941777][ T6422] bond1: (slave dummy0): making interface the new active one [ 98.976105][ T6422] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 99.021925][ T6429] dummy0: entered promiscuous mode [ 99.037108][ T6429] bond1: (slave dummy0): Releasing active interface [ 99.658918][ T6431] syz.1.158 (6431) used greatest stack depth: 17944 bytes left [ 100.156628][ T6494] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 100.220438][ T6496] __nla_validate_parse: 6 callbacks suppressed [ 100.220456][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.173'. [ 100.231043][ T6494] netlink: 280 bytes leftover after parsing attributes in process `syz.3.168'. [ 100.508734][ T6496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.651414][ T6504] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.820849][ T6529] Unsupported ieee802154 address type: 0 [ 100.842109][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.4.180'. [ 100.900062][ T6532] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 100.938872][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 101.050260][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.159715][ T6547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.181'. [ 101.642356][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 101.872297][ T6565] bond1: entered promiscuous mode [ 101.927754][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.965638][ T6556] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.053768][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 102.138172][ T6568] syzkaller0: entered promiscuous mode [ 102.170039][ T6568] syzkaller0: entered allmulticast mode [ 102.208620][ T6599] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.188'. [ 102.245681][ T6579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.262615][ T6579] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 102.292304][ T6579] bond1: (slave sit1): Error -95 calling set_mac_address [ 104.332561][ T6645] tipc: Started in network mode [ 104.338409][ T6645] tipc: Node identity 2a9df67b2934, cluster identity 4711 [ 104.349199][ T6645] tipc: Enabled bearer , priority 0 [ 104.360735][ T6645] netlink: 528 bytes leftover after parsing attributes in process `syz.2.190'. [ 104.383540][ T6648] netlink: 332 bytes leftover after parsing attributes in process `syz.4.194'. [ 104.384806][ T6645] syzkaller0: entered promiscuous mode [ 104.400659][ T6645] syzkaller0: entered allmulticast mode [ 104.407933][ T6653] Illegal XDP return value 38 on prog (id 54) dev N/A, expect packet loss! [ 104.433524][ T6648] netlink: 'syz.4.194': attribute type 9 has an invalid length. [ 104.472903][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.4.194'. [ 104.606389][ T6645] tipc: Resetting bearer [ 104.679770][ T6640] tipc: Resetting bearer [ 104.749663][ T6640] tipc: Disabling bearer [ 104.789601][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.410023][ T6711] __nla_validate_parse: 2 callbacks suppressed [ 105.410043][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 105.486054][ T6711] syzkaller0: entered promiscuous mode [ 105.503697][ T6711] syzkaller0: entered allmulticast mode [ 105.918892][ T5741] IPVS: starting estimator thread 0... [ 106.025309][ T6735] IPVS: using max 37 ests per chain, 88800 per kthread [ 106.529750][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 106.753268][ T6779] tipc: Started in network mode [ 106.775471][ T6779] tipc: Node identity ac14140f, cluster identity 4711 [ 106.804037][ T6779] tipc: Enabling of bearer rejected, failed to enable media [ 106.837114][ T6780] tipc: Enabling of bearer rejected, failed to enable media [ 106.886722][ T6780] netlink: 10 bytes leftover after parsing attributes in process `syz.3.219'. [ 106.997789][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.221'. [ 107.228045][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 107.314748][ T6806] ipvlan1: entered promiscuous mode [ 107.371602][ T6806] ipvlan1: left promiscuous mode [ 107.762975][ T6840] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 108.053727][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.066677][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.116372][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.132751][ T6855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.148665][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.752060][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 108.833893][ T6909] syzkaller0: entered promiscuous mode [ 108.893945][ T6909] syzkaller0: entered allmulticast mode [ 108.916760][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 108.940487][ T6911] netlink: 56 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.222455][ T6923] netlink: 64 bytes leftover after parsing attributes in process `syz.1.255'. [ 109.267585][ T6923] syzkaller1: entered promiscuous mode [ 109.279137][ T6923] syzkaller1: entered allmulticast mode [ 110.207635][ T6960] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.445672][ T6966] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 110.578274][ T6974] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.616667][ T6974] bond2: (slave lo): Enslaving as an active interface with an up link [ 110.629076][ T6974] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 110.783257][ T6979] bridge0: port 3(vlan2) entered blocking state [ 110.794196][ T6979] bridge0: port 3(vlan2) entered disabled state [ 110.818844][ T6979] vlan2: entered allmulticast mode [ 110.844078][ T6979] bridge0: entered allmulticast mode [ 110.860264][ T6979] vlan2: left allmulticast mode [ 110.867529][ T6979] bridge0: left allmulticast mode [ 110.896342][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.074589][ T6998] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 111.128096][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 111.159116][ T7004] unsupported nla_type 216 [ 111.268513][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 111.310770][ T7009] trusted_key: syz.2.276 sent an empty control message without MSG_MORE. [ 111.342693][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 111.522246][ T7018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.278'. [ 111.539333][ T7021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.570595][ T7021] bond4 (unregistering): Released all slaves [ 111.584893][ T7028] netlink: 'syz.4.280': attribute type 21 has an invalid length. [ 111.605859][ T7028] netlink: 156 bytes leftover after parsing attributes in process `syz.4.280'. [ 111.862456][ T7035] FAULT_INJECTION: forcing a failure. [ 111.862456][ T7035] name failslab, interval 1, probability 0, space 0, times 1 [ 111.900005][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.4.282 Not tainted syzkaller #0 PREEMPT(full) [ 111.900027][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.900043][ T7035] Call Trace: [ 111.900053][ T7035] [ 111.900060][ T7035] dump_stack_lvl+0xe8/0x150 [ 111.900089][ T7035] should_fail_ex+0x412/0x560 [ 111.900113][ T7035] should_failslab+0xa8/0x100 [ 111.900137][ T7035] __kmalloc_noprof+0xe8/0x760 [ 111.900158][ T7035] ? bpf_test_init+0x9f/0x150 [ 111.900179][ T7035] bpf_test_init+0x9f/0x150 [ 111.900198][ T7035] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 111.900232][ T7035] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 111.900253][ T7035] ? __fget_files+0x2a/0x420 [ 111.900276][ T7035] ? __fget_files+0x2a/0x420 [ 111.900292][ T7035] ? __fget_files+0x3a0/0x420 [ 111.900307][ T7035] ? __fget_files+0x2a/0x420 [ 111.900328][ T7035] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 111.900345][ T7035] bpf_prog_test_run+0x2c7/0x340 [ 111.900362][ T7035] __sys_bpf+0x643/0x950 [ 111.900383][ T7035] ? __pfx___sys_bpf+0x10/0x10 [ 111.900417][ T7035] ? ksys_write+0x242/0x270 [ 111.900440][ T7035] ? __pfx_ksys_write+0x10/0x10 [ 111.900461][ T7035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.900475][ T7035] __x64_sys_bpf+0x7c/0x90 [ 111.900494][ T7035] do_syscall_64+0x15f/0xf80 [ 111.900514][ T7035] ? trace_irq_disable+0x3b/0x140 [ 111.900532][ T7035] ? clear_bhb_loop+0x40/0x90 [ 111.900550][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.900565][ T7035] RIP: 0033:0x7f58f9d9ce59 [ 111.900586][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.900597][ T7035] RSP: 002b:00007f58fac9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.900613][ T7035] RAX: ffffffffffffffda RBX: 00007f58fa015fa0 RCX: 00007f58f9d9ce59 [ 111.900623][ T7035] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 111.900631][ T7035] RBP: 00007f58fac9e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.900640][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.900648][ T7035] R13: 00007f58fa016038 R14: 00007f58fa015fa0 R15: 00007ffe099a68d8 [ 111.900675][ T7035] [ 112.469530][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 112.571523][ T7054] SET target dimension over the limit! [ 112.765806][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 112.982843][ T7076] FAULT_INJECTION: forcing a failure. [ 112.982843][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.004378][ T7076] CPU: 0 UID: 0 PID: 7076 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(full) [ 113.004414][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.004423][ T7076] Call Trace: [ 113.004429][ T7076] [ 113.004436][ T7076] dump_stack_lvl+0xe8/0x150 [ 113.004467][ T7076] should_fail_ex+0x412/0x560 [ 113.004491][ T7076] _copy_from_user+0x2d/0xb0 [ 113.004512][ T7076] bpf_test_init+0xd8/0x150 [ 113.004532][ T7076] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 113.004561][ T7076] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 113.004581][ T7076] ? __fget_files+0x2a/0x420 [ 113.004599][ T7076] ? __fget_files+0x2a/0x420 [ 113.004625][ T7076] ? __fget_files+0x3a0/0x420 [ 113.004640][ T7076] ? __fget_files+0x2a/0x420 [ 113.004662][ T7076] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 113.004680][ T7076] bpf_prog_test_run+0x2c7/0x340 [ 113.004699][ T7076] __sys_bpf+0x643/0x950 [ 113.004722][ T7076] ? __pfx___sys_bpf+0x10/0x10 [ 113.004758][ T7076] ? ksys_write+0x242/0x270 [ 113.004780][ T7076] ? __pfx_ksys_write+0x10/0x10 [ 113.004804][ T7076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.004821][ T7076] __x64_sys_bpf+0x7c/0x90 [ 113.004843][ T7076] do_syscall_64+0x15f/0xf80 [ 113.004864][ T7076] ? trace_irq_disable+0x3b/0x140 [ 113.004885][ T7076] ? clear_bhb_loop+0x40/0x90 [ 113.004904][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.004918][ T7076] RIP: 0033:0x7fdabbf9ce59 [ 113.004944][ T7076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.004964][ T7076] RSP: 002b:00007fdabcdaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.004984][ T7076] RAX: ffffffffffffffda RBX: 00007fdabc215fa0 RCX: 00007fdabbf9ce59 [ 113.004994][ T7076] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 113.005004][ T7076] RBP: 00007fdabcdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 113.005013][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.005021][ T7076] R13: 00007fdabc216038 R14: 00007fdabc215fa0 R15: 00007ffcd2a53ca8 [ 113.005048][ T7076] [ 113.385488][ T7084] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.298'. [ 113.419258][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 113.502794][ T7093] netlink: 'syz.1.299': attribute type 9 has an invalid length. [ 114.294528][ T7146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.581203][ T7163] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 114.581968][ T7162] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 114.733041][ T7162] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 115.159743][ T7183] bond1: entered promiscuous mode [ 115.165037][ T7183] bond1: entered allmulticast mode [ 115.172853][ T7193] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 115.340557][ T7202] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 115.520270][ T7211] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.534619][ T7211] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 115.819880][ T7217] syzkaller1: entered promiscuous mode [ 115.834977][ T7217] syzkaller1: entered allmulticast mode [ 115.993236][ T7235] __nla_validate_parse: 9 callbacks suppressed [ 115.993252][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.270179][ T7247] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 116.344742][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 116.371048][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 116.555537][ T7256] netlink: 'syz.1.335': attribute type 49 has an invalid length. [ 116.577689][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 116.670632][ T7259] lo speed is unknown, defaulting to 1000 [ 116.699132][ T7259] lo speed is unknown, defaulting to 1000 [ 116.716123][ T7259] lo speed is unknown, defaulting to 1000 [ 116.784930][ T7259] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.853844][ T7259] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.927531][ T7259] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.998735][ T7259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.043212][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 117.146900][ T7290] netlink: 'syz.0.342': attribute type 1 has an invalid length. [ 117.167637][ T7259] lo speed is unknown, defaulting to 1000 [ 117.176856][ T7290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.342'. [ 117.188928][ T7259] lo speed is unknown, defaulting to 1000 [ 117.195276][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 117.212932][ T7293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 117.216766][ T7259] lo speed is unknown, defaulting to 1000 [ 117.244342][ T7259] lo speed is unknown, defaulting to 1000 [ 117.255878][ T7259] lo speed is unknown, defaulting to 1000 [ 117.526643][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.810073][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 117.985972][ T7335] netlink: 'syz.2.356': attribute type 8 has an invalid length. [ 118.133814][ T7337] sctp: [Deprecated]: syz.4.357 (pid 7337) Use of int in maxseg socket option. [ 118.133814][ T7337] Use struct sctp_assoc_value instead [ 118.598133][ T7361] lo speed is unknown, defaulting to 1000 [ 118.682136][ T7373] netlink: 'syz.4.367': attribute type 14 has an invalid length. [ 118.689983][ T7370] FAULT_INJECTION: forcing a failure. [ 118.689983][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.708131][ T7373] netlink: 'syz.4.367': attribute type 13 has an invalid length. [ 118.716116][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.3.366 Not tainted syzkaller #0 PREEMPT(full) [ 118.716138][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.716147][ T7370] Call Trace: [ 118.716154][ T7370] [ 118.716166][ T7370] dump_stack_lvl+0xe8/0x150 [ 118.716191][ T7370] should_fail_ex+0x412/0x560 [ 118.716216][ T7370] _copy_to_user+0x31/0xb0 [ 118.716241][ T7370] bpf_test_finish+0x53c/0x6b0 [ 118.716367][ T7370] ? __pfx____migrate_enable+0x10/0x10 [ 118.716388][ T7370] ? __pfx_bpf_test_finish+0x10/0x10 [ 118.716429][ T7370] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 118.716458][ T7370] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 118.716477][ T7370] ? __fget_files+0x2a/0x420 [ 118.716501][ T7370] ? __fget_files+0x2a/0x420 [ 118.716522][ T7370] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 118.716539][ T7370] bpf_prog_test_run+0x2c7/0x340 [ 118.716559][ T7370] __sys_bpf+0x643/0x950 [ 118.716583][ T7370] ? __pfx___sys_bpf+0x10/0x10 [ 118.716618][ T7370] ? ksys_write+0x242/0x270 [ 118.716641][ T7370] ? __pfx_ksys_write+0x10/0x10 [ 118.716663][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.716679][ T7370] __x64_sys_bpf+0x7c/0x90 [ 118.716700][ T7370] do_syscall_64+0x15f/0xf80 [ 118.716748][ T7370] ? trace_irq_disable+0x3b/0x140 [ 118.716770][ T7370] ? clear_bhb_loop+0x40/0x90 [ 118.716789][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.716804][ T7370] RIP: 0033:0x7fe45699ce59 [ 118.716819][ T7370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.716832][ T7370] RSP: 002b:00007fe45784a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.716849][ T7370] RAX: ffffffffffffffda RBX: 00007fe456c15fa0 RCX: 00007fe45699ce59 [ 118.716859][ T7370] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 118.716869][ T7370] RBP: 00007fe45784a090 R08: 0000000000000000 R09: 0000000000000000 [ 118.716900][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.716909][ T7370] R13: 00007fe456c16038 R14: 00007fe456c15fa0 R15: 00007ffc32a39348 [ 118.716936][ T7370] [ 119.038631][ T7373] netlink: 'syz.4.367': attribute type 14 has an invalid length. [ 119.062216][ T993] IPVS: starting estimator thread 0... [ 119.073064][ T7373] netlink: 'syz.4.367': attribute type 13 has an invalid length. [ 119.116566][ T7373] netlink: 'syz.4.367': attribute type 14 has an invalid length. [ 119.118868][ T7379] syzkaller0: entered promiscuous mode [ 119.124841][ T7373] netlink: 'syz.4.367': attribute type 13 has an invalid length. [ 119.129857][ T7379] syzkaller0: entered allmulticast mode [ 119.144414][ T7373] netlink: 'syz.4.367': attribute type 14 has an invalid length. [ 119.153199][ T7373] netlink: 'syz.4.367': attribute type 13 has an invalid length. [ 119.183598][ T7381] IPVS: using max 34 ests per chain, 81600 per kthread [ 119.354634][ T7385] openvswitch: netlink: IP tunnel dst address not specified [ 119.440831][ T7387] hsr_slave_0 (unregistering): left promiscuous mode [ 119.549027][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.572841][ T7397] bond2: (slave veth0_to_bond): making interface the new active one [ 119.604869][ T7397] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 119.651784][ T7394] bond2: entered promiscuous mode [ 119.658389][ T7394] veth0_to_bond: entered promiscuous mode [ 119.664852][ T7394] bond2: entered allmulticast mode [ 119.670218][ T7394] veth0_to_bond: entered allmulticast mode [ 120.028216][ T7423] geneve2: entered promiscuous mode [ 120.299215][ T7433] openvswitch: netlink: Message has 3 unknown bytes. [ 120.364375][ T7433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 120.861068][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.870588][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.042614][ T7496] IPVS: starting estimator thread 0... [ 121.145289][ T7497] IPVS: using max 31 ests per chain, 74400 per kthread [ 121.454962][ T76] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.491055][ T76] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.547873][ T76] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.587324][ T76] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.740836][ T7535] __nla_validate_parse: 81 callbacks suppressed [ 121.740860][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 121.775776][ T7529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.912439][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.401'. [ 121.996362][ T7535] bond3: (slave batadv1): Opening slave failed [ 122.049102][ T7540] tap0: tun_chr_ioctl cmd 1074025677 [ 122.063661][ T7540] tap0: linktype set to 773 [ 122.074243][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 122.086266][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.132778][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.160045][ T7551] Cannot find del_set index 1 as target [ 122.176273][ T7551] validate_nla: 63 callbacks suppressed [ 122.176289][ T7551] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 122.196666][ T7551] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 122.214564][ T7551] netlink: 'syz.2.403': attribute type 3 has an invalid length. [ 122.484717][ T7567] netlink: 312 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.771661][ T7577] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 122.810694][ T7577] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 122.854483][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 122.871147][ T7583] can: request_module (can-proto-0) failed. [ 122.917358][ T7584] can: request_module (can-proto-0) failed. [ 122.994604][ T7581] bond5: option primary_reselect: invalid value (133) [ 123.006826][ T7581] bond5 (unregistering): Released all slaves [ 123.132190][ T7594] vlan0: entered promiscuous mode [ 123.146201][ T7594] bridge0: entered promiscuous mode [ 123.212765][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 123.289720][ T7608] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 123.437023][ T7608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.548755][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 123.571828][ T7619] bond5: (slave veth3): Enslaving as an active interface with a down link [ 123.674913][ T7608] bond5: (slave bridge2): Enslaving as an active interface with a down link [ 123.702284][ T7626] batadv_slave_0: entered promiscuous mode [ 123.747333][ T7623] batadv_slave_0: left promiscuous mode [ 123.940536][ T7639] lo speed is unknown, defaulting to 1000 [ 124.339042][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'. [ 124.711393][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.719106][ T7652] bridge0: port 1(1¾x9ÿ) entered disabled state [ 125.017102][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.079307][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.586178][ T7693] erspan0: entered promiscuous mode [ 125.605629][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.650641][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.717550][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 125.738663][ T7714] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 125.761212][ T7712] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 125.770404][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.826472][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'. [ 125.985345][ T7714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.993012][ T7690] lo speed is unknown, defaulting to 1000 [ 126.009650][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.026915][ T7712] bond6: entered promiscuous mode [ 126.033515][ T7712] bond6: entered allmulticast mode [ 126.480962][ T7750] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 127.413938][ T7753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.478105][ T7753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.586284][ T7797] __nla_validate_parse: 160 callbacks suppressed [ 127.586300][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 127.849601][ T7753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.863810][ T7810] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 127.885402][ T7753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.060176][ T7810] bond2: entered promiscuous mode [ 128.091866][ T7810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.153206][ T7811] vlan3: entered allmulticast mode [ 128.175505][ T7811] bond2: entered allmulticast mode [ 128.288639][ T7819] bond2: (slave bridge3): making interface the new active one [ 128.310001][ T7819] bridge3: entered promiscuous mode [ 128.327335][ T7819] bridge3: entered allmulticast mode [ 128.344732][ T7819] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 128.467582][ T7753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.522721][ T7753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.692271][ T7844] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 128.693468][ T7753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.728187][ T7753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.865114][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 128.989306][ T7848] bridge3: port 1(veth5) entered blocking state [ 129.027937][ T7848] bridge3: port 1(veth5) entered disabled state [ 129.051749][ T7848] veth5: entered allmulticast mode [ 129.082337][ T7848] veth5: entered promiscuous mode [ 129.118955][ T7856] bridge0: port 3(veth0_to_bond) entered blocking state [ 129.126712][ T7856] bridge0: port 3(veth0_to_bond) entered disabled state [ 129.134310][ T7856] veth0_to_bond: entered allmulticast mode [ 129.141367][ T7856] veth0_to_bond: entered promiscuous mode [ 129.160483][ T7860] bridge3: port 2(veth7) entered blocking state [ 129.167023][ T7860] bridge3: port 2(veth7) entered disabled state [ 129.173580][ T7860] veth7: entered allmulticast mode [ 129.180064][ T7860] veth7: entered promiscuous mode [ 129.195297][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.207302][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.246985][ T3281] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.255768][ T3281] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.386541][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 129.428854][ T456] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.435701][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 129.446736][ T456] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.456335][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 129.478676][ T7876] netlink: 324 bytes leftover after parsing attributes in process `syz.0.472'. [ 129.592407][ T456] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.615171][ T456] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.644944][ T456] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.674745][ T456] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.769857][ T7873] lo speed is unknown, defaulting to 1000 [ 129.882821][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.477'. [ 130.051738][ T7894] bond1: option tlb_dynamic_lb: invalid value (5) [ 130.086653][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 130.150725][ T7894] bond1 (unregistering): Released all slaves [ 130.237343][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 130.269653][ T7908] netlink: 312 bytes leftover after parsing attributes in process `syz.0.478'. [ 130.807078][ T7931] netlink: 'syz.3.485': attribute type 12 has an invalid length. [ 131.663179][ T7954] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 132.111809][ T7979] xt_hashlimit: size too large, truncated to 1048576 [ 132.182854][ T7980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 132.252808][ T7985] veth1_macvtap: left promiscuous mode [ 132.465419][ T7997] syzkaller0: entered promiscuous mode [ 132.471148][ T7997] syzkaller0: entered allmulticast mode [ 132.491728][ T7997] tc action pedit offset must be on 32 bit boundaries [ 132.516073][ T7997] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 132.560995][ T5628] block nbd0: Receive control failed (result -1) [ 132.670101][ T8001] bond7: option lacp_active: invalid value (8) [ 132.680261][ T8001] bond7 (unregistering): Released all slaves [ 132.711817][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878171][ T8013] netlink: 'syz.3.509': attribute type 62 has an invalid length. [ 132.990795][ T8020] Bluetooth: MGMT ver 1.23 [ 133.371761][ T8032] syzkaller0: entered promiscuous mode [ 133.383488][ T8032] syzkaller0: entered allmulticast mode [ 133.543676][ T29] audit: type=1800 audit(1779079413.275:3): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="memory.events" dev="tmpfs" ino=500 res=0 errno=0 [ 133.650130][ T8034] __nla_validate_parse: 10 callbacks suppressed [ 133.650148][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 133.719243][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 133.739790][ T8044] netlink: 'syz.0.517': attribute type 11 has an invalid length. [ 133.812987][ T8041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.864487][ T8042] bond3 (unregistering): Released all slaves [ 134.104198][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 134.122362][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 134.379143][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 134.468106][ T8081] netlink: 112 bytes leftover after parsing attributes in process `syz.2.527'. [ 134.510350][ T8085] netlink: 152 bytes leftover after parsing attributes in process `syz.4.528'. [ 134.583958][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 135.035551][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 135.091650][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 155.621247][ T8177] syzkaller1: entered promiscuous mode [ 155.697629][ T8172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.983284][ T8194] __nla_validate_parse: 3 callbacks suppressed [ 155.983305][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 156.086855][ T8199] xt_hashlimit: overflow, try lower: 281474976710656/6 [ 156.234291][ T8207] netlink: 'syz.3.558': attribute type 3 has an invalid length. [ 156.645728][ T8227] netlink: 104 bytes leftover after parsing attributes in process `syz.3.562'. [ 156.788884][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 156.837104][ T8240] netlink: 148 bytes leftover after parsing attributes in process `syz.3.562'. [ 157.985511][ T8284] netlink: 68 bytes leftover after parsing attributes in process `syz.4.576'. [ 158.010187][ T8283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.576'. [ 158.390971][ T29] audit: type=1804 audit(1779079438.125:4): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.580" name="/newroot/128/cgroup.controllers" dev="tmpfs" ino=675 res=1 errno=0 [ 158.466302][ T29] audit: type=1800 audit(1779079438.125:5): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.580" name="cgroup.controllers" dev="tmpfs" ino=675 res=0 errno=0 [ 158.612607][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.580'. [ 158.665287][ T8313] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.801585][ T8304] lo speed is unknown, defaulting to 1000 [ 158.825063][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 159.059072][ T8329] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 159.085237][ T8329] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 159.361182][ T8340] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 159.380890][ T8340] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 159.396492][ T8340] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 159.471535][ T8337] lo speed is unknown, defaulting to 1000 [ 159.514533][ T8344] vlan1: entered promiscuous mode [ 159.626258][ T8354] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 159.636674][ T8350] vxcan2: entered allmulticast mode [ 159.735349][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.837607][ T8358] netlink: 'syz.1.596': attribute type 12 has an invalid length. [ 160.337777][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 160.338914][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 160.400801][ T8377] block nbd1: Unsupported socket: should be TCP or UNIX. [ 160.600384][ T29] audit: type=1804 audit(1779079440.335:6): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.605" name="/newroot/131/cgroup.controllers" dev="tmpfs" ino=686 res=1 errno=0 [ 160.663455][ T29] audit: type=1800 audit(1779079440.335:7): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="cgroup.controllers" dev="tmpfs" ino=686 res=0 errno=0 [ 160.799804][ T8393] sch_fq: defrate 8 ignored. [ 161.118614][ T8410] __nla_validate_parse: 1 callbacks suppressed [ 161.118631][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 161.494113][ T8437] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.803915][ T8441] ip6gre1: left promiscuous mode [ 161.822519][ T8441] ip6gre1: left allmulticast mode [ 161.832417][ T8441] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 161.925637][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'. [ 162.157343][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.626'. [ 162.527705][ T8489] netlink: zone id is out of range [ 162.552003][ T8489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.632'. [ 162.665398][ T8496] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.635'. [ 162.762622][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.784880][ T8145] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 162.807083][ T8145] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 162.818026][ T7505] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 162.896524][ T8513] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 162.942995][ T8512] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.954915][ T8512] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 163.069803][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 163.210693][ T8513] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 163.237528][ T8513] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 163.295140][ T7505] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 163.341876][ T8521] vlan0: entered promiscuous mode [ 163.349947][ T8521] gretap0: entered promiscuous mode [ 163.460912][ T8517] lo speed is unknown, defaulting to 1000 [ 163.575085][ T7505] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 163.715769][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.961083][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.983779][ T8558] TCP: TCP_TX_DELAY enabled [ 163.991452][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.077712][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.319987][ T8584] netlink: 'syz.4.657': attribute type 10 has an invalid length. [ 164.358989][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.657'. [ 164.397196][ T8584] dummy0: entered promiscuous mode [ 164.420313][ T8593] netlink: 68 bytes leftover after parsing attributes in process `syz.2.659'. [ 164.426715][ T8584] dummy0: entered allmulticast mode [ 164.449889][ T8584] bridge0: port 3(dummy0) entered blocking state [ 164.469897][ T8584] bridge0: port 3(dummy0) entered disabled state [ 164.483797][ T8591] tipc: Started in network mode [ 164.490180][ T8591] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 164.500216][ T8591] tipc: Enabling of bearer rejected, failed to enable media [ 165.099610][ T8629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.114400][ T8636] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 165.129186][ T8634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.138009][ T8634] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 165.149096][ T8634] bond4: (slave vti0): Error -95 calling set_mac_address [ 165.179136][ T8636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.192676][ T8629] dummy0: left allmulticast mode [ 165.202672][ T8629] dummy0: left promiscuous mode [ 165.209604][ T8629] bridge0: port 3(dummy0) entered disabled state [ 165.218951][ T8629] bond4: (slave dummy0): Error -99 calling set_mac_address [ 165.310326][ T8639] veth7: entered allmulticast mode [ 165.504451][ T8639] bond4 (unregistering): Released all slaves [ 166.000548][ T8675] lo speed is unknown, defaulting to 1000 [ 166.028906][ T8679] netlink: 'syz.0.682': attribute type 8 has an invalid length. [ 166.786159][ T8703] __nla_validate_parse: 3 callbacks suppressed [ 166.786175][ T8703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.688'. [ 166.830450][ T8703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.688'. [ 166.957015][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.964773][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.173673][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 167.189233][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.494855][ T8717] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 167.519218][ T8717] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 167.677731][ T8144] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.724287][ T8144] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.771761][ T8144] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.796519][ T8144] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.848874][ T8144] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.872964][ T8144] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.886835][ T8144] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.897043][ T8144] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.951923][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 167.996392][ T8759] netlink: 'syz.2.702': attribute type 7 has an invalid length. [ 168.013124][ T8759] netlink: 209684 bytes leftover after parsing attributes in process `syz.2.702'. [ 168.088276][ T8761] netlink: 'syz.4.703': attribute type 29 has an invalid length. [ 168.113462][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 168.133153][ T8764] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 168.218981][ T8766] lo speed is unknown, defaulting to 1000 [ 168.273122][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 168.346117][ T8777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.708'. [ 168.385494][ T8777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.397315][ T8777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.411470][ T8777] bond0 (unregistering): Released all slaves [ 168.443693][ T8778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.708'. [ 168.501131][ T8777] netlink: 324 bytes leftover after parsing attributes in process `syz.4.708'. [ 168.535154][ T8780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.709'. [ 169.188556][ T8820] netlink: 'syz.0.715': attribute type 12 has an invalid length. [ 169.356999][ T8801] lo speed is unknown, defaulting to 1000 [ 169.512508][ T8831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.140449][ T8875] ipt_REJECT: TCP_RESET invalid for non-tcp [ 170.181778][ T8878] syzkaller1: entered promiscuous mode [ 170.192528][ T8878] syzkaller1: entered allmulticast mode [ 171.348696][ T8931] lo speed is unknown, defaulting to 1000 [ 173.063053][ T8880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.076086][ T8918] netlink: 'syz.1.737': attribute type 2 has an invalid length. [ 173.087651][ T8918] netlink: 'syz.1.737': attribute type 2 has an invalid length. [ 173.349578][ T8944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.421678][ T8960] __nla_validate_parse: 9 callbacks suppressed [ 173.421694][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 173.436908][ T8943] lo speed is unknown, defaulting to 1000 [ 173.473246][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 173.487461][ T112] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.558761][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.749'. [ 173.580723][ T112] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.589979][ T112] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.664667][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 173.688099][ T112] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.750000][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 173.775659][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 173.802974][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 174.154178][ T8998] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 174.303078][ T9011] netlink: 260 bytes leftover after parsing attributes in process `syz.4.757'. [ 174.320117][ T29] audit: type=1800 audit(1779079454.055:8): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.755" name="memory.events" dev="tmpfs" ino=748 res=0 errno=0 [ 174.454009][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'. [ 174.510215][ T9029] pim6reg: entered allmulticast mode [ 174.538844][ T9029] pim6reg: left allmulticast mode [ 174.991888][ T9041] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 175.132036][ T9052] hashlimit_mt_check_common: 1 callbacks suppressed [ 175.132052][ T9052] xt_hashlimit: size too large, truncated to 1048576 [ 175.280772][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 175.449225][ T9030] ipvlan1: entered promiscuous mode [ 175.779142][ T9081] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 175.890695][ T9087] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 176.172233][ T9109] sctp: [Deprecated]: syz.1.775 (pid 9109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.172233][ T9109] Use struct sctp_sack_info instead [ 176.567876][ T9127] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.685653][ T9139] bridge6: entered promiscuous mode [ 176.708762][ T9139] bridge6: entered allmulticast mode [ 176.753291][ T9139] team0: Port device bridge6 added [ 176.836302][ T9139] syzkaller0: entered promiscuous mode [ 176.846741][ T9139] syzkaller0: entered allmulticast mode [ 177.161029][ T9161] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 177.238742][ T9166] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:8188 [ 177.273170][ T9161] veth5: entered allmulticast mode [ 177.298784][ T9170] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 177.332854][ T9170] bond6: entered promiscuous mode [ 177.350889][ T9170] bond6: entered allmulticast mode [ 177.363204][ T9170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.420580][ T9172] macvlan3: entered promiscuous mode [ 177.456992][ T9172] macvlan3: entered allmulticast mode [ 177.497489][ T9172] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 177.959792][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.009522][ T9204] batman_adv: batadv0: Removing interface: ipvlan0 [ 178.036688][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.285873][ T9217] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 178.288218][ T9207] lo speed is unknown, defaulting to 1000 [ 178.432882][ T9232] __nla_validate_parse: 16 callbacks suppressed [ 178.432899][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.804'. [ 178.453611][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 178.542001][ T9231] bond8: invalid ARP target 0.0.0.0 specified for addition [ 178.557468][ T9231] bond8: option arp_ip_target: invalid value (0) [ 178.576108][ T9231] bond8 (unregistering): Released all slaves [ 178.851550][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 178.894540][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 179.070463][ T9263] openvswitch: netlink: Message has 35 unknown bytes. [ 179.144516][ T9267] x_tables: duplicate underflow at hook 1 [ 179.308450][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.342568][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.352245][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.402681][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.429493][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.818'. [ 179.454121][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 179.484882][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 179.557783][ T9292] netlink: 'syz.3.821': attribute type 11 has an invalid length. [ 179.931859][ T9311] netlink: 'syz.3.825': attribute type 49 has an invalid length. [ 179.941743][ T9311] netlink: 'syz.3.825': attribute type 34 has an invalid length. [ 180.257132][ T9324] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 180.271427][ T9323] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 180.446151][ T9328] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 180.551258][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.617437][ T9328] syzkaller0: entered promiscuous mode [ 180.657816][ T9328] syzkaller0: entered allmulticast mode [ 180.778150][ T9352] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 180.788965][ T9337] syzkaller0: entered promiscuous mode [ 180.794786][ T9337] syzkaller0: entered allmulticast mode [ 180.815475][ T9328] bond0: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 180.828522][ T9337] IPVS: ip_vs_add_dest(): server weight less than zero [ 180.838227][ T9337] IPVS: rr: FWM 3 0x00000003 - no destination available [ 180.856394][ T112] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.003792][ T112] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.699253][ T9390] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 182.717845][ T9388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.776500][ T9390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.858927][ T9390] bond4: (slave ip6gretap1): making interface the new active one [ 182.868431][ T9390] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.917902][ T9405] bridge_slave_0: left allmulticast mode [ 182.926585][ T9405] bridge_slave_0: left promiscuous mode [ 182.934439][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.952004][ T9405] bridge_slave_1: left allmulticast mode [ 182.969393][ T9405] bridge_slave_1: left promiscuous mode [ 182.984704][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.002346][ T9405] bond0: (slave bond_slave_0): Releasing backup interface [ 183.012133][ T9405] bond0: (slave bond_slave_1): Releasing backup interface [ 183.027087][ T9405] team0: Port device team_slave_0 removed [ 183.047811][ T9405] team0: Port device team_slave_1 removed [ 183.063912][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.082099][ T9405] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.408338][ T9430] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 183.422742][ T9432] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 183.480835][ T9432] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.491997][ T9432] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 183.523916][ T9430] __nla_validate_parse: 8 callbacks suppressed [ 183.523931][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.858'. [ 183.601057][ T9444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.861'. [ 183.622296][ T9437] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.632998][ T9437] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 183.667053][ T9430] bond1: (slave bridge4): Enslaving as an active interface with a down link [ 183.998530][ T9457] hmac(sha2: entered promiscuous mode [ 184.024185][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 184.053994][ T9461] 8021q: VLANs not supported on vxcan0 [ 184.098566][ T9459] netlink: 84 bytes leftover after parsing attributes in process `syz.2.868'. [ 184.121414][ T9459] netlink: 84 bytes leftover after parsing attributes in process `syz.2.868'. [ 184.146657][ T9459] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 184.199749][ T9465] lo speed is unknown, defaulting to 1000 [ 184.256876][ T9468] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 184.284230][ T9468] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 184.372530][ T9474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.382575][ T9474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.852773][ T9501] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 184.899172][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 184.955931][ T9501] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.101278][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 185.145274][ T9519] x_tables: duplicate underflow at hook 4 [ 185.176956][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 185.510956][ T9525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.736803][ T9536] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 185.745536][ T9538] dvmrp0: entered allmulticast mode [ 185.808668][ T8141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.848893][ T8141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.894644][ T9541] veth0_to_bond: left allmulticast mode [ 185.906012][ T9541] veth0_to_bond: left promiscuous mode [ 185.918425][ T9541] bridge0: port 3(veth0_to_bond) entered disabled state [ 186.022623][ T8141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.045797][ T8141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.508398][ T9592] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 186.608715][ T9601] Bluetooth: MGMT ver 1.23 [ 186.626133][ T9592] bond8: entered promiscuous mode [ 186.631933][ T9592] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.681761][ T9605] tipc: Started in network mode [ 186.707527][ T9605] tipc: Node identity 02836e37d9a8, cluster identity 4711 [ 186.730013][ T9605] tipc: Enabled bearer , priority 0 [ 186.787063][ T9605] tipc: Disabling bearer [ 187.053978][ T9628] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 187.071631][ T9629] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 187.166094][ T9626] lo speed is unknown, defaulting to 1000 [ 187.602208][ T9653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.658165][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.195776][ T9683] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 188.261555][ T9683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.675079][ T9700] gtp1: entered promiscuous mode [ 188.685349][ T9700] gtp1: entered allmulticast mode [ 188.876612][ T9701] lo speed is unknown, defaulting to 1000 [ 189.116188][ T9728] __nla_validate_parse: 7 callbacks suppressed [ 189.116208][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 189.228668][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 189.261698][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 189.275904][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 189.704403][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 189.787934][ T9751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.848272][ T9751] sock: sock_set_timeout: `syz.2.940' (pid 9751) tries to set negative timeout [ 189.852012][ T9749] bond6: entered promiscuous mode [ 189.866276][ T9749] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.199127][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 190.256606][ T8144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.277259][ T8144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.379823][ T9781] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20000 [ 190.709501][ T9787] bond6: left promiscuous mode [ 190.717762][ T9787] bond6: left allmulticast mode [ 190.776399][ T9787] bridge6: left promiscuous mode [ 190.783529][ T9787] bridge6: left allmulticast mode [ 190.800958][ T9787] bond8: left promiscuous mode [ 191.010467][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 191.230300][ T9805] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 191.279770][ T9810] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 191.418997][ T9819] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 191.658789][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 191.855893][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 192.055372][ T29] audit: type=1800 audit(1779079471.795:9): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.957" name="memory.events" dev="tmpfs" ino=1078 res=0 errno=0 [ 192.396924][ T7679] IPVS: starting estimator thread 0... [ 192.407839][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.436063][ T9865] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 192.448828][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.484468][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.523677][ T9862] IPVS: using max 33 ests per chain, 79200 per kthread [ 192.651321][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.706396][ T9857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.720108][ T9872] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 192.740002][ T9857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.764298][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 192.800634][ T9857] veth1_vlan: left promiscuous mode [ 192.816675][ T9857] veth0_vlan: left promiscuous mode [ 192.833261][ T9857] veth0_vlan: entered promiscuous mode [ 192.850563][ T9857] veth1_vlan: entered promiscuous mode [ 192.894359][ T9857] veth0_macvtap: left promiscuous mode [ 192.916756][ T9857] veth0_macvtap: entered promiscuous mode [ 192.941079][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.974396][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.995402][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.018373][ T9857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.037846][ T9857] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 193.059478][ T9857] bridge1: left promiscuous mode [ 193.079018][ T9857] bond1: left promiscuous mode [ 193.093871][ T9857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.114112][ T9857] bond2: left promiscuous mode [ 193.131556][ T9857] bridge3: left promiscuous mode [ 193.144158][ T9857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.177949][ T9857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.197704][ T9857] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 193.236394][ T9857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.256267][ T9857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.278583][ T9857] bond6: left promiscuous mode [ 193.289133][ T9857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.319441][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.326738][ T8144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.374169][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.381434][ T8144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.552270][ T9865] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 193.866789][ T8145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.928059][ T9885] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.966074][ T9885] gretap1: entered allmulticast mode [ 194.007730][ T8145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.037157][ T8145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.078666][ T8145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.136727][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271150][ T9892] lo speed is unknown, defaulting to 1000 [ 195.646888][ T9917] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 195.687061][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 197.628393][ T9911] tipc: Invalid UDP bearer configuration [ 197.628457][ T9911] tipc: Enabling of bearer rejected, failed to enable media [ 200.717667][ T9926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.729479][ T9938] netlink: 256 bytes leftover after parsing attributes in process `syz.4.985'. [ 200.956488][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 200.970151][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 200.990540][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.994'. [ 201.057388][ T9979] netlink: 'syz.1.991': attribute type 9 has an invalid length. [ 201.335615][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.335709][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 201.344266][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.620571][ T9970] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.630577][ T9970] block nbd1: shutting down sockets [ 202.098659][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 202.291193][T10010] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 202.360476][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 202.370575][T10011] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 202.433496][T10018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 202.511037][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 202.688714][T10032] ip6gre1: entered promiscuous mode [ 202.694837][T10032] ip6gre1: entered allmulticast mode [ 202.813299][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 202.935412][T10045] gtp1: entered promiscuous mode [ 202.940427][T10045] gtp1: entered allmulticast mode [ 202.965702][T10041] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 202.972156][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 202.998350][T10041] tipc: Enabled bearer , priority 0 [ 203.007394][T10056] xt_hashlimit: max too large, truncated to 1048576 [ 203.017003][T10056] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.045233][T10054] lo speed is unknown, defaulting to 1000 [ 203.259202][T10062] wg0 speed is unknown, defaulting to 1000 [ 203.265818][T10059] tipc: Enabling of bearer rejected, already enabled [ 203.304852][T10062] wg0 speed is unknown, defaulting to 1000 [ 203.320230][T10062] wg0 speed is unknown, defaulting to 1000 [ 203.766861][T10079] ip6gre1: entered promiscuous mode [ 203.781890][T10079] ip6gre1: entered allmulticast mode [ 204.117132][ T7679] tipc: Node number set to 2886997007 [ 204.213759][ T7679] wg0 speed is unknown, defaulting to 1000 [ 204.223509][T10062] infiniband syz0: set down [ 204.237215][T10062] infiniband syz0: added wg0 [ 204.296006][T10062] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 204.342345][T10062] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 204.371016][T10062] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 204.524795][T10062] RDS/IB: syz0: added [ 204.545410][T10062] smc: adding ib device syz0 with port count 1 [ 204.571279][T10062] smc: ib device syz0 port 1 has no pnetid [ 204.643465][ T7510] wg0 speed is unknown, defaulting to 1000 [ 204.666783][T10062] wg0 speed is unknown, defaulting to 1000 [ 205.119706][T10116] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 205.180559][T10116] bond0: (slave dummy0): Releasing backup interface [ 205.221702][T10116] team0: Port device dummy0 added [ 205.440859][T10062] wg0 speed is unknown, defaulting to 1000 [ 205.572528][T10142] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 205.688497][T10150] bond10: entered promiscuous mode [ 205.719252][T10150] bond10: entered allmulticast mode [ 205.730958][T10150] 8021q: adding VLAN 0 to HW filter on device bond10 [ 205.807069][T10142] bridge7: entered promiscuous mode [ 205.832447][T10142] bridge7: entered allmulticast mode [ 205.851795][T10142] bond10: (slave bridge7): Enslaving as a backup interface with an up link [ 205.904486][ T8144] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.941622][T10150] bridge8: entered promiscuous mode [ 205.952187][T10150] bridge8: entered allmulticast mode [ 205.971460][T10150] bond10: (slave bridge8): Enslaving as a backup interface with a down link [ 206.043667][ T8144] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 206.082246][T10062] wg0 speed is unknown, defaulting to 1000 [ 206.285558][T10170] __nla_validate_parse: 5 callbacks suppressed [ 206.285573][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 206.426931][T10062] wg0 speed is unknown, defaulting to 1000 [ 206.654240][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 206.667529][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 206.806929][ T5635] block nbd2: Receive control failed (result -32) [ 206.807354][ T5628] block nbd1: Receive control failed (result -32) [ 206.877325][T10197] vlan0: entered promiscuous mode [ 207.166703][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 207.221635][T10225] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 207.243021][T10217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.271487][T10217] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.300548][T10217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.322189][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.331027][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.341326][ T8141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.350201][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.351272][T10231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1057'. [ 207.373996][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.384367][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.430171][T10217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.444514][T10217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.449297][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 207.469561][T10217] veth1_vlan: left promiscuous mode [ 207.476536][T10217] veth0_vlan: left promiscuous mode [ 207.482361][T10217] veth0_vlan: entered promiscuous mode [ 207.490567][T10217] veth1_vlan: entered promiscuous mode [ 207.501354][T10217] veth1_macvtap: left promiscuous mode [ 207.508495][T10217] veth0_macvtap: left promiscuous mode [ 207.515101][T10217] veth0_macvtap: entered promiscuous mode [ 207.522067][T10217] veth1_macvtap: entered promiscuous mode [ 207.536741][T10217] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 207.563945][T10062] wg0 speed is unknown, defaulting to 1000 [ 207.688348][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.709391][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.854833][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.879698][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.890162][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.004685][T10251] netlink: 'syz.3.1064': attribute type 30 has an invalid length. [ 208.165392][ T8144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.408782][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.437425][T10270] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 208.534684][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.623022][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 208.631400][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 208.653490][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 208.762375][T10294] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 208.764064][T10295] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 208.796294][T10294] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1076'. [ 208.898197][T10295] netlink: 'syz.1.1076': attribute type 4 has an invalid length. [ 208.939684][T10295] netlink: 'syz.1.1076': attribute type 5 has an invalid length. [ 208.958869][T10294] netlink: 'syz.1.1076': attribute type 4 has an invalid length. [ 208.983979][T10294] netlink: 'syz.1.1076': attribute type 5 has an invalid length. [ 209.041314][T10306] syzkaller0: entered promiscuous mode [ 209.070096][T10306] syzkaller0: entered allmulticast mode [ 209.176317][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.225403][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.932142][T10358] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 209.955069][T10358] dummy0: entered allmulticast mode [ 209.965815][T10358] bridge0: port 3(dummy0) entered blocking state [ 209.973023][T10358] bridge0: port 3(dummy0) entered disabled state [ 210.018045][T10358] bridge0: port 3(dummy0) entered blocking state [ 210.024729][T10358] bridge0: port 3(dummy0) entered forwarding state [ 210.079711][T10358] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 210.108678][T10358] tipc: Enabled bearer , priority 10 [ 210.353054][T10373] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 210.453042][T10373] bond7: entered promiscuous mode [ 210.461939][T10373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 211.000110][T10415] netlink: 'syz.3.1104': attribute type 29 has an invalid length. [ 211.224167][ T7510] tipc: Node number set to 3677056567 [ 211.399725][T10429] dvmrp0: entered allmulticast mode [ 211.412008][T10429] __nla_validate_parse: 10 callbacks suppressed [ 211.412028][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'. [ 212.454761][ T8145] net_ratelimit: 1 callbacks suppressed [ 212.454779][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.598334][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 212.616476][ T8145] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.616558][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 212.625505][ T8145] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.642187][ T8145] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.650966][ T8145] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.697379][ T8141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.706708][ T8144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.715337][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.723478][ T8145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.732034][ T8139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.335049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.677461][T10398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.174059][T10470] validate_nla: 3 callbacks suppressed [ 214.174074][T10470] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 214.181629][T10472] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1123'. [ 214.244369][T10472] netlink: 'syz.4.1123': attribute type 2 has an invalid length. [ 214.262602][T10472] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 214.305615][T10474] bond8: (slave geneve3): making interface the new active one [ 214.325171][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 214.348307][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1121'. [ 214.371213][T10474] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 214.382988][ T8144] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.394304][ T8144] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.432630][T10482] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 214.455169][T10470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.462671][T10478] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1121'. [ 214.491941][ T8144] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.510889][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 214.511311][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1121'. [ 214.593281][ T8144] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.941313][T10506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 214.987417][T10508] xt_l2tp: unknown flags: 51 [ 215.131035][T10520] netlink: 'syz.2.1134': attribute type 7 has an invalid length. [ 215.146224][T10520] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1134'. [ 215.303155][T10522] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 215.322327][T10522] syzkaller1: linktype set to 1 [ 215.330776][T10525] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 215.680723][T10548] ip6erspan1: entered allmulticast mode [ 215.701814][T10549] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 215.759604][T10549] team0: Port device dummy0 added [ 215.792959][T10552] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 215.926749][T10552] team0: Port device dummy0 removed [ 216.312161][T10584] netlink: 'syz.1.1152': attribute type 21 has an invalid length. [ 216.595405][T10594] IPVS: length: 124 != 24 [ 216.999163][T10617] __nla_validate_parse: 3 callbacks suppressed [ 216.999180][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 217.271632][T10634] netlink: 'syz.4.1171': attribute type 4 has an invalid length. [ 217.348478][T10634] netlink: 'syz.4.1171': attribute type 4 has an invalid length. [ 217.415296][T10645] bond5: option lacp_active: invalid value (254) [ 217.426123][T10645] bond5 (unregistering): Released all slaves [ 217.539867][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 217.937013][T10672] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 218.267459][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 218.338139][T10689] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.338665][T10686] sctp: [Deprecated]: syz.2.1185 (pid 10686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.338665][T10686] Use struct sctp_sack_info instead [ 218.364532][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.364557][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.378207][T10689] netlink: 'syz.3.1186': attribute type 11 has an invalid length. [ 218.418608][T10689] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.512238][T10694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.521012][T10694] IPv6: NLM_F_CREATE should be set when creating new route [ 218.537623][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.889185][T10714] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1193'. [ 219.175496][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 219.551642][T10739] lo speed is unknown, defaulting to 1000 [ 219.648049][T10739] wg0 speed is unknown, defaulting to 1000 [ 219.720867][T10768] validate_nla: 2 callbacks suppressed [ 219.720883][T10768] netlink: 'syz.2.1206': attribute type 4 has an invalid length. [ 219.805075][T10768] netlink: 'syz.2.1206': attribute type 8 has an invalid length. [ 219.855778][T10764] netlink: 'syz.2.1206': attribute type 4 has an invalid length. [ 219.884055][T10764] netlink: 'syz.2.1206': attribute type 8 has an invalid length. [ 220.160345][T10791] netlink: 'syz.2.1215': attribute type 4 has an invalid length. [ 220.359895][T10799] bond11: entered promiscuous mode [ 220.368344][T10799] 8021q: adding VLAN 0 to HW filter on device bond11 [ 220.419240][T10803] bridge10: entered promiscuous mode [ 220.431688][T10803] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 222.134627][T10899] __nla_validate_parse: 76 callbacks suppressed [ 222.134643][T10899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1246'. [ 222.367786][T10911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.378259][T10911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.408593][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'. [ 222.414339][T10911] netlink: 'syz.3.1249': attribute type 5 has an invalid length. [ 222.422366][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.428835][T10911] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.443171][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.447885][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.465925][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 222.495894][T10914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.514383][T10914] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 222.715997][T10936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1257'. [ 223.052780][T10947] lo speed is unknown, defaulting to 1000 [ 223.107185][T10947] wg0 speed is unknown, defaulting to 1000 [ 224.258394][T11011] netlink: 'syz.0.1277': attribute type 7 has an invalid length. [ 224.287536][T11011] netlink: 'syz.0.1277': attribute type 7 has an invalid length. [ 224.567465][T11004] nbd3: detected capacity change from 0 to 63 [ 224.617042][T11015] lo speed is unknown, defaulting to 1000 [ 224.644352][ T5628] block nbd3: Receive control failed (result -104) [ 224.651700][ T5635] block nbd3: Receive control failed (result -32) [ 224.720064][T11015] wg0 speed is unknown, defaulting to 1000 [ 224.882570][T11033] netlink: 'syz.3.1283': attribute type 11 has an invalid length. [ 224.926769][T11033] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 225.195568][T11046] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 225.221841][T11045] SET target dimension over the limit! [ 225.351094][T11046] bond8: entered promiscuous mode [ 225.376686][T11046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.436887][T11052] bond8: entered allmulticast mode [ 225.597632][T11041] bond8: (slave bridge4): making interface the new active one [ 225.618238][T11041] bridge4: entered promiscuous mode [ 225.632002][T11041] bridge4: entered allmulticast mode [ 225.666281][T11041] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 226.165727][T11082] ipip0: entered promiscuous mode [ 226.510475][ T8139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.549130][ T8139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.588870][ T8139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.631576][ T8139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.846765][T11115] lo speed is unknown, defaulting to 1000 [ 226.875683][T11115] wg0 speed is unknown, defaulting to 1000 [ 227.918060][T11165] netlink: 'syz.3.1309': attribute type 32 has an invalid length. [ 227.960005][T11165] netlink: 'syz.3.1309': attribute type 27 has an invalid length. [ 228.008711][T11169] syzkaller0: entered promiscuous mode [ 228.024431][T11169] syzkaller0: entered allmulticast mode [ 228.129421][T11172] [ 228.131780][T11172] ====================================================== [ 228.138791][T11172] WARNING: possible circular locking dependency detected [ 228.145818][T11172] syzkaller #0 Not tainted [ 228.150224][T11172] ------------------------------------------------------ [ 228.157236][T11172] syz.4.1311/11172 is trying to acquire lock: [ 228.163296][T11172] ffffffff8f0ad188 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 228.172969][T11172] [ 228.172969][T11172] but task is already holding lock: [ 228.180330][T11172] ffff88807b4245e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 228.189652][T11172] [ 228.189652][T11172] which lock already depends on the new lock. [ 228.189652][T11172] [ 228.200052][T11172] [ 228.200052][T11172] the existing dependency chain (in reverse order) is: [ 228.209060][T11172] [ 228.209060][T11172] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 228.216803][T11172] lock_sock_nested+0x41/0x100 [ 228.222270][T11172] inet_shutdown+0x6a/0x390 [ 228.227301][T11172] nbd_mark_nsock_dead+0x2e9/0x560 [ 228.232931][T11172] recv_work+0x1c2e/0x1d40 [ 228.237854][T11172] process_scheduled_works+0xb5d/0x1860 [ 228.243902][T11172] worker_thread+0xa53/0xfc0 [ 228.248996][T11172] kthread+0x389/0x470 [ 228.253571][T11172] ret_from_fork+0x514/0xb70 [ 228.258674][T11172] ret_from_fork_asm+0x1a/0x30 [ 228.263943][T11172] [ 228.263943][T11172] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 228.271570][T11172] __mutex_lock+0x1a3/0x1550 [ 228.276662][T11172] nbd_queue_rq+0x37b/0x1100 [ 228.281753][T11172] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 228.287804][T11172] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 228.294645][T11172] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 228.301133][T11172] blk_mq_run_hw_queue+0x348/0x4f0 [ 228.306749][T11172] blk_mq_dispatch_list+0xd16/0xe10 [ 228.312453][T11172] blk_mq_flush_plug_list+0x48d/0x570 [ 228.318332][T11172] __blk_flush_plug+0x3ed/0x4d0 [ 228.323696][T11172] __submit_bio+0x28d/0x580 [ 228.328705][T11172] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 228.334844][T11172] block_read_full_folio+0x599/0x830 [ 228.340632][T11172] filemap_read_folio+0x137/0x3b0 [ 228.346160][T11172] do_read_cache_folio+0x358/0x590 [ 228.351777][T11172] read_part_sector+0xb6/0x2b0 [ 228.357048][T11172] adfspart_check_ICS+0xb1/0x960 [ 228.362493][T11172] bdev_disk_changed+0x817/0x1770 [ 228.368028][T11172] blkdev_get_whole+0x380/0x510 [ 228.373391][T11172] bdev_open+0x31e/0xd30 [ 228.378156][T11172] blkdev_open+0x470/0x610 [ 228.383071][T11172] do_dentry_open+0x785/0x14e0 [ 228.388339][T11172] vfs_open+0x3b/0x340 [ 228.392926][T11172] path_openat+0x2e08/0x3860 [ 228.398025][T11172] do_file_open+0x23e/0x4a0 [ 228.403036][T11172] do_sys_openat2+0x113/0x200 [ 228.408215][T11172] __x64_sys_openat+0x138/0x170 [ 228.413569][T11172] do_syscall_64+0x15f/0xf80 [ 228.418679][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.425078][T11172] [ 228.425078][T11172] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 228.432272][T11172] __mutex_lock+0x1a3/0x1550 [ 228.437371][T11172] nbd_queue_rq+0xc6/0x1100 [ 228.442375][T11172] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 228.448426][T11172] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 228.455260][T11172] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 228.461749][T11172] blk_mq_run_hw_queue+0x348/0x4f0 [ 228.467366][T11172] blk_mq_dispatch_list+0xd16/0xe10 [ 228.473070][T11172] blk_mq_flush_plug_list+0x48d/0x570 [ 228.478947][T11172] __blk_flush_plug+0x3ed/0x4d0 [ 228.484304][T11172] __submit_bio+0x28d/0x580 [ 228.489311][T11172] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 228.495451][T11172] block_read_full_folio+0x599/0x830 [ 228.501237][T11172] filemap_read_folio+0x137/0x3b0 [ 228.506765][T11172] do_read_cache_folio+0x358/0x590 [ 228.512379][T11172] read_part_sector+0xb6/0x2b0 [ 228.517648][T11172] adfspart_check_ICS+0xb1/0x960 [ 228.523092][T11172] bdev_disk_changed+0x817/0x1770 [ 228.528621][T11172] blkdev_get_whole+0x380/0x510 [ 228.533978][T11172] bdev_open+0x31e/0xd30 [ 228.538730][T11172] blkdev_open+0x470/0x610 [ 228.543648][T11172] do_dentry_open+0x785/0x14e0 [ 228.548920][T11172] vfs_open+0x3b/0x340 [ 228.553490][T11172] path_openat+0x2e08/0x3860 [ 228.558595][T11172] do_file_open+0x23e/0x4a0 [ 228.563603][T11172] do_sys_openat2+0x113/0x200 [ 228.568794][T11172] __x64_sys_openat+0x138/0x170 [ 228.574148][T11172] do_syscall_64+0x15f/0xf80 [ 228.579247][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.585640][T11172] [ 228.585640][T11172] -> #5 (set->srcu){.+.+}-{0:0}: [ 228.592743][T11172] __synchronize_srcu+0xca/0x300 [ 228.598180][T11172] elevator_switch+0x1e8/0x7a0 [ 228.603452][T11172] elevator_change+0x2cc/0x450 [ 228.608734][T11172] elevator_set_default+0x36c/0x430 [ 228.614438][T11172] blk_register_queue+0x3e9/0x4e0 [ 228.619967][T11172] __add_disk+0x677/0xd50 [ 228.624800][T11172] add_disk_fwnode+0xfb/0x480 [ 228.629984][T11172] nbd_dev_add+0x72c/0xb50 [ 228.634899][T11172] nbd_init+0x168/0x1f0 [ 228.639559][T11172] do_one_initcall+0x250/0x870 [ 228.644824][T11172] do_initcall_level+0x104/0x190 [ 228.650279][T11172] do_initcalls+0x59/0xa0 [ 228.655112][T11172] kernel_init_freeable+0x2a6/0x3e0 [ 228.660815][T11172] kernel_init+0x1d/0x1d0 [ 228.665646][T11172] ret_from_fork+0x514/0xb70 [ 228.670739][T11172] ret_from_fork_asm+0x1a/0x30 [ 228.676007][T11172] [ 228.676007][T11172] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 228.683807][T11172] __mutex_lock+0x1a3/0x1550 [ 228.688902][T11172] elevator_change+0x1b3/0x450 [ 228.694171][T11172] elevator_set_none+0xb5/0x140 [ 228.699529][T11172] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 228.705845][T11172] nbd_start_device+0x17f/0xb10 [ 228.711201][T11172] nbd_genl_connect+0x165b/0x1cf0 [ 228.716730][T11172] genl_family_rcv_msg_doit+0x22a/0x330 [ 228.722778][T11172] genl_rcv_msg+0x61c/0x7a0 [ 228.727789][T11172] netlink_rcv_skb+0x232/0x4b0 [ 228.733054][T11172] genl_rcv+0x28/0x40 [ 228.737540][T11172] netlink_unicast+0x75c/0x8e0 [ 228.742812][T11172] netlink_sendmsg+0x813/0xb40 [ 228.748081][T11172] ____sys_sendmsg+0x972/0x9f0 [ 228.753346][T11172] ___sys_sendmsg+0x2a5/0x360 [ 228.758529][T11172] __x64_sys_sendmsg+0x1bd/0x2a0 [ 228.763968][T11172] do_syscall_64+0x15f/0xf80 [ 228.769065][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.775463][T11172] [ 228.775463][T11172] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 228.784049][T11172] blk_alloc_queue+0x546/0x680 [ 228.789318][T11172] __blk_mq_alloc_disk+0x197/0x390 [ 228.794933][T11172] nbd_dev_add+0x499/0xb50 [ 228.799856][T11172] nbd_init+0x168/0x1f0 [ 228.804510][T11172] do_one_initcall+0x250/0x870 [ 228.809778][T11172] do_initcall_level+0x104/0x190 [ 228.815221][T11172] do_initcalls+0x59/0xa0 [ 228.820054][T11172] kernel_init_freeable+0x2a6/0x3e0 [ 228.825751][T11172] kernel_init+0x1d/0x1d0 [ 228.830585][T11172] ret_from_fork+0x514/0xb70 [ 228.835679][T11172] ret_from_fork_asm+0x1a/0x30 [ 228.840944][T11172] [ 228.840944][T11172] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 228.848134][T11172] fs_reclaim_acquire+0x71/0x100 [ 228.853585][T11172] __kmalloc_cache_noprof+0x40/0x660 [ 228.859388][T11172] cryptomgr_notify+0x85/0x930 [ 228.864657][T11172] notifier_call_chain+0x1ad/0x3d0 [ 228.870283][T11172] blocking_notifier_call_chain+0x6a/0x90 [ 228.876506][T11172] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 228.882293][T11172] crypto_alloc_tfm_node+0x13e/0x3f0 [ 228.888082][T11172] crypto_alloc_sync_skcipher+0x39/0xd0 [ 228.894136][T11172] rxkad_init+0x20/0xe0 [ 228.898797][T11172] rxrpc_init_security+0x72/0x120 [ 228.904322][T11172] af_rxrpc_init+0x13d/0x2e0 [ 228.909411][T11172] do_one_initcall+0x250/0x870 [ 228.914677][T11172] do_initcall_level+0x104/0x190 [ 228.920122][T11172] do_initcalls+0x59/0xa0 [ 228.924959][T11172] kernel_init_freeable+0x2a6/0x3e0 [ 228.930661][T11172] kernel_init+0x1d/0x1d0 [ 228.935495][T11172] ret_from_fork+0x514/0xb70 [ 228.940586][T11172] ret_from_fork_asm+0x1a/0x30 [ 228.945851][T11172] [ 228.945851][T11172] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 228.953908][T11172] down_read+0x47/0x2e0 [ 228.958566][T11172] blocking_notifier_call_chain+0x54/0x90 [ 228.964790][T11172] __crypto_register_alg+0x32b/0x3c0 [ 228.970581][T11172] crypto_register_alg+0x447/0x810 [ 228.976193][T11172] do_one_initcall+0x250/0x870 [ 228.981458][T11172] do_initcall_level+0x104/0x190 [ 228.986898][T11172] do_initcalls+0x59/0xa0 [ 228.991731][T11172] kernel_init_freeable+0x2a6/0x3e0 [ 228.997434][T11172] kernel_init+0x1d/0x1d0 [ 229.002270][T11172] ret_from_fork+0x514/0xb70 [ 229.007365][T11172] ret_from_fork_asm+0x1a/0x30 [ 229.012632][T11172] [ 229.012632][T11172] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 229.020168][T11172] __lock_acquire+0x15a5/0x2cf0 [ 229.025521][T11172] lock_acquire+0x106/0x350 [ 229.030539][T11172] down_write+0x96/0x200 [ 229.035281][T11172] crypto_alg_mod_lookup+0x211/0x5f0 [ 229.041069][T11172] crypto_alloc_tfm_node+0x13e/0x3f0 [ 229.046855][T11172] tls_set_sw_offload+0xa33/0x1780 [ 229.052732][T11172] tls_setsockopt+0xef2/0x15c0 [ 229.058001][T11172] do_sock_setsockopt+0x17c/0x1b0 [ 229.063534][T11172] __x64_sys_setsockopt+0x13d/0x1b0 [ 229.069250][T11172] do_syscall_64+0x15f/0xf80 [ 229.074357][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.080753][T11172] [ 229.080753][T11172] other info that might help us debug this: [ 229.080753][T11172] [ 229.090960][T11172] Chain exists of: [ 229.090960][T11172] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 229.090960][T11172] [ 229.103976][T11172] Possible unsafe locking scenario: [ 229.103976][T11172] [ 229.111406][T11172] CPU0 CPU1 [ 229.116752][T11172] ---- ---- [ 229.122100][T11172] lock(sk_lock-AF_INET6); [ 229.126583][T11172] lock(&nsock->tx_lock); [ 229.133501][T11172] lock(sk_lock-AF_INET6); [ 229.140517][T11172] lock(crypto_alg_sem); [ 229.144829][T11172] [ 229.144829][T11172] *** DEADLOCK *** [ 229.144829][T11172] [ 229.152951][T11172] 1 lock held by syz.4.1311/11172: [ 229.158040][T11172] #0: ffff88807b4245e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 229.167772][T11172] [ 229.167772][T11172] stack backtrace: [ 229.173648][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.4.1311 Not tainted syzkaller #0 PREEMPT(full) [ 229.173668][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.173679][T11172] Call Trace: [ 229.173685][T11172] [ 229.173692][T11172] dump_stack_lvl+0xe8/0x150 [ 229.173712][T11172] print_circular_bug+0x2e1/0x300 [ 229.173735][T11172] check_noncircular+0x12e/0x150 [ 229.173757][T11172] __lock_acquire+0x15a5/0x2cf0 [ 229.173784][T11172] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 229.173802][T11172] lock_acquire+0x106/0x350 [ 229.173817][T11172] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 229.173840][T11172] down_write+0x96/0x200 [ 229.173855][T11172] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 229.173871][T11172] ? __pfx_down_write+0x10/0x10 [ 229.173887][T11172] ? crypto_larval_alloc+0x1bf/0x290 [ 229.173901][T11172] crypto_alg_mod_lookup+0x211/0x5f0 [ 229.173914][T11172] crypto_alloc_tfm_node+0x13e/0x3f0 [ 229.173928][T11172] ? timer_init_key+0x161/0x2c0 [ 229.173946][T11172] tls_set_sw_offload+0xa33/0x1780 [ 229.173968][T11172] tls_setsockopt+0xef2/0x15c0 [ 229.173983][T11172] ? __pfx_tls_setsockopt+0x10/0x10 [ 229.173999][T11172] ? __fget_files+0x2a/0x420 [ 229.174012][T11172] ? aa_sock_opt_perm+0xff/0x1a0 [ 229.174027][T11172] ? sock_common_setsockopt+0x36/0xc0 [ 229.174042][T11172] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 229.174056][T11172] do_sock_setsockopt+0x17c/0x1b0 [ 229.174074][T11172] __x64_sys_setsockopt+0x13d/0x1b0 [ 229.174091][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.174103][T11172] do_syscall_64+0x15f/0xf80 [ 229.174119][T11172] ? trace_irq_disable+0x3b/0x140 [ 229.174135][T11172] ? clear_bhb_loop+0x40/0x90 [ 229.174147][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.174159][T11172] RIP: 0033:0x7f58f9d9ce59 [ 229.174172][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.174182][T11172] RSP: 002b:00007f58fac9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.174195][T11172] RAX: ffffffffffffffda RBX: 00007f58fa015fa0 RCX: 00007f58f9d9ce59 [ 229.174204][T11172] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 229.174211][T11172] RBP: 00007f58f9e32d6f R08: 0000000000000038 R09: 0000000000000000 [ 229.174219][T11172] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 229.174226][T11172] R13: 00007f58fa016038 R14: 00007f58fa015fa0 R15: 00007ffe099a68d8 [ 229.174240][T11172] [ 229.505439][T11165] lo speed is unknown, defaulting to 1000 [ 229.511836][T11165] wg0 speed is unknown, defaulting to 1000