last executing test programs: 18.880649084s ago: executing program 3 (id=5713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0xd, 0x28012, r1, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r1, 0x1000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000500)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f00000005c0)={0x0, 0x48}, 0x2, 0x0, 0x0, 0x24040040}, 0x3000c091) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17.923472946s ago: executing program 3 (id=5719): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000140)=0x3, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f00000005c0)=""/85, 0x503, 0x4000000, 0x0, 0x1, 0x0, &(0x7f0000000300)='V', 0x2}, 0x50) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (rerun: 64) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000015c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bind$can_raw(0xffffffffffffffff, &(0x7f0000000180), 0x10) close(0x4) 16.878395052s ago: executing program 3 (id=5725): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0xf) (async) listen(r1, 0xf) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000340)=0x1c, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES64=r2], 0x268}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES64=r2], 0x268}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind(r2, &(0x7f0000000100)=@nfc_llcp={0x27, r3, 0x1, 0x4, 0xd7, 0x2, "c8b77541fe1b45215e68151a147dd8e81fcf60399faa7a0f10d31ba676618ba7889ed69a9b9ddbb570e73d7c092dc547f69676adc5af8f7e39fe9007ce9ad1", 0x28}, 0x80) 16.765845672s ago: executing program 3 (id=5726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000010000304000000000000000000000000891588a9e32663e9adf25b8e40068c8ec28786970518e85fe912ffaebc3ed1b7d37de0d9b18a4a8e", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESHEX=r6, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x4881) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r9, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="5673e930713c1cb1aa2f"]) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105", 0x13}], 0x1}, 0x40080) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x5}, 0x20) accept4(r1, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffff8110a10000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYRES8=r0], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001002dbd7000fbdbdd2500000000", @ANYRES32=0x0, @ANYBLOB="1c430100a1a201001400030076657468305f746f5f6261746164760008001a8004000a80"], 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r13, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000002c0)) r14 = socket(0x10, 0x3, 0x0) write(r14, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e31429fd3000175e63fb8d38a870000000000000100000000", 0xfc) 12.793286557s ago: executing program 3 (id=5731): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x23, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb00, 0x46951}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) 11.35407835s ago: executing program 3 (id=5738): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @mcast2}, 0x1c) 9.926491277s ago: executing program 1 (id=5743): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, r2, 0xf03, 0x70bd2a, 0x0, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000000010000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff7402000008000000182200001786ccc10900000000000000208b2d18eeb7b0fb97d3bf8531da2e0fad025ca533786b8d3fe9debd4ca7b57a936e1d2a92e24f077a54c69e2bcd9d1426af9c1605e02a3e169bdcf1ae8598f212b30a8513fa049d9bc687c92bbcf5a17b7b8cc32b766f6e6a6853cdc9ba624f7479b67d69a6b5c69268a345b0d2d62a804fd04dbd02df1fcb7c617fb625632d6614b4eaba1a34ec7ba50eb013a2e5b52a06c4fcbe604fbe6e9e7e79aab88090704ce31d0400eb629f714475c67fabdee1aaaf2b0ff47c9c5a02a367ef726ae5f710b5d4a487ffc15b08385127e74060884d2ea9351f6b8ea8299fa36582ddfcc1a2fb630bc57701", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000081000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r7, &(0x7f00000000c0)='[f<.l_', 0x6, 0x20040000, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x3, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}}, 0x80) 9.587438459s ago: executing program 1 (id=5747): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}}, 0x20008000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r4, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bind$packet(r8, &(0x7f00000003c0)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @random="38bb015489e4"}, 0x14) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 9.162410543s ago: executing program 1 (id=5749): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f00000000c0)={0x1a98, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_CSA_IES={0x1510, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7f, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x6, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x3, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x7, 0x4a, 0x40, 0x8e, 0x8, 0x2, 0x8001, 0x7, 0x4, 0x7]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x6a7, 0x91, "6381adeb19bf8d7c466e558bab1d8147d813bd171a65801cd2682ee69a321b462de780ba7ccbb86524defb7e27e0deff16116b8c4731ea51baeb0cdc19a5041b7dd78bb2cf875abe1236a8b2c263ecf362e8cf34d1e618fab00aec9b27b943f92f163898ad48983d3fbc04bc45a89edb371fd1d2ba73821109885d37f8ca78267612983eb0e7599ecb3b37c7ac10d5f496d91d6b316656f2f8f65829c1dd6aaa5c2ad51a0405f37ab6d4e00afe8ff1bbcca51d3cfeaee2a1ad14107ab98b332ba50006d12d6b9a8e018f0e86e990795ee7a521fc225c628a18c8a0d1467aea91673bae9cb0af163565d9cb3fefa9f3000a016486ac1af0089347a2637ad830eaac7f9ebebad5dcb8735ffc1d0ef262c3abfed8f2bdd86653b34f75a8bd67efa5d1a839e781df91fbd7f15b08cacdc338549e1b364421fc5a1079ffa62a63646c09adeace3448ac0b679e76bc4340c80f8a8fa1175590dff50a481963d095fb62ec75f896dc053fc97755290bbb8625bd7f7175b6eadd3c410f7bf15adc3424c7fe44b8d621b9f3c8688d3e10a8ed3a1c8b8378a565910d0206b29486ca2641d7cc8e5147ba275acd927b011e9f709c4383cf611af36d850dbe74f70cec724f0b9ad18b1b1870878cbf6495c8bc3b8c78286054cba5190cb99bcb470cacd1b5d071502121b5360d4260ce312886ba47dafa461b262fa6fef6ca901934b21430e7d4b7e80cb4d59b3732365b58a3de12b459203ee76e410dea89b6e96d18a26abb812a3e567450bb0cb9598e96cb5a84e52171f26a947e2fac406493b29f67429da3ebe75dba482cb5c32f65731eca508383bd9a852522556208d332c2715bd42c91377bbbd6e20c256460d3c58151ddd476a98c12fc5d221131a53cc33ed6cd53a5002bf281a243601f0afa183bbb333ad96ad100080b0badb3746a57b5ac08b8f31636472dbf501f38ae6557eab719a3c09cc3222ed3210bd77f1728d8e369cb5abc670e628cabc5c9c3313db48a4d872a6ba4468e9a8190151d9c8d933461028bc09e04b2ffb7d7f4d392f41d81c64ca98ebb52870c290638b9f7f205f165a404cf601f2b2320b5caaa9a18c3a3cffc8df2f3e7ba9776494c43b014e4d60ab8b55ff16c5209d00e7a983cd2fd91015161a32660b3d7dad3d5592ad411b5ecec20cf0da219aab495850ba4835b92684d9e08729477aa50c0fc6692e04c4fb4fc03217b545b01dbc8c205f140b5d31f7f2a692a39933d35c075d909902c71f6ae7caf910ef18e58f9038dae0691010e21f1c03670137efc53da1fb1247c9f273ce8c3380648b417734b2a31ae987ebb9348952e8bd70cb55a68521235ede61a0518b833a0286d9c9861008bd2affda0e93dcf7251eb9ecdba41ba1d0d71d9524ccce342c5008262ea1e542e447acd51ed8603660496c001be8a895a5d1a5e5993dafad6767ae2d9bb823ad89763a235e87365ea548db130df2ac2b7878a13ae6ace180e0b58422336ade20c6c4f714f32190a2b96855ec26bdac2a4e8a4b36272a282c4dc96c0193ba20681b18e598fe6323bf53d4818a07e259f3f57978b7a3d048714276913e283f657bf36be5f030d1d4209ea9668ec657fab7209e31f8fa0a968c09e894f4aef190370d4ebb156171f6f1a258c213a995e973f4d6ed39eb20dd81df1b83f33c0824093d0efcc23aafa82495d289e161f477deca20a6daa4dcbc350056ee43219bb3b179386caba90afa5cb2ffd4a7fce3e9dc4c9a87c5146e968c2f4f42effedc53bd359c9a5142bb69de34ad10c2f155f88abe4f083864503bd4b93c4e6e03a6cefe04414340219309e1d04499ceeb13b9963b07acc6d8fa5db744ce03876f9a35bff6c11d89ad9d6725e9ca5dad239544a6f9fa1b173dbf3b70fde963d36b73e6cb6c26a6bff0b015ed54be8bfc752f499f987a3f4fd94b6925b216069cd6b29c0b702fa6788082ff76ecfbee05c2fc6a76ca30dc918b96d0eae5bf3667766febc7e709be471f043cfc9747563231f4844d7828ad89d76e72d1133d041b6bfa4031a9be0d6203cba806d959b090030261520e01fa3c926cc75d6a45f0467d92538bea17629ecd4b7f5fce443a4a4a7f3c4cc43057d79374040b3bdbd5644825ceda356cab79d420720d9d672f082d90c766050f8f0e1fceeefa32cffe87f7b4090374462ac17ceda324823a07941488c7e24ce2b2e3a1bd1633e4671e5354fb2c66c12ad1bb5aa5f172d5febaef2b7b4c1697145632566bc18385e1e08c4f18d828eea6df39efade59bca59e97fbc04098c9d120c3ffda06d7d44f2ec17b498ccd305c29d9dd71faa0e6e8d29049f82de0474215a9d156213d03c711e1160a11d214bb145dfb31c399a534bab5d25129a3a52324fd57137307ac"}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@ibss={0x6, 0x2, 0xd}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf9, 0x5, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb6, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x6b, 0x80, [@fast_bss_trans={0x37, 0x65, {0x7, 0x1, "99b8f55b9599a65a6640def8efa2199b", "686aaa1b25119216a6b0041aa0464f1c1c9bdc7e374dccca1608c6f92c3341b2", "912b37b707d292fd84a312aa98e6bfe9c19c933b91f0b473ec778f148fff619f", [{0x4, 0x11, "17598fdb04a063096a4e1e247a39667f6d"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@supported_rates={0x1, 0x1, [{0x3, 0x1}]}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x6b7, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x220, 0xf, [@fast_bss_trans={0x37, 0x11b, {0x20, 0x9, "a5c61cea13bafa0965dd5b74d9fcf73d", "cf16585ee3aef03e1fe19f9473968c208738d96241c16f51f9a1284d727dae36", "0b3cbcfed8b5d204fbcd249ab1e46c54cf30f6bba03b7ed5b5679d60edc819da", [{0x4, 0x19, "898fed6fc9895a3d27204da970c6549e0d47cd9e6232026c59"}, {0x4, 0x5, "01bb7077b3"}, {0x2, 0x18, "9f99a4b7141d3da5420f90cfd9a3f21cfe437f18803a2298"}, {0x2, 0x20, "e5284e0099abfb6ec1837e3a66af79eb25889dc791dca2dfae0073a6ccb146e3"}, {0x4, 0x18, "4110ecde78c81c89b30beaf8fe38e21b43db9784aed3e717"}, {0x3, 0x1b, "7c5a9967f6dbd444abfd39287ea88f9fff1aa1fbc8941f4c3c33de"}, {0x3, 0x3, ';3b'}, {0x2, 0x11, "8c8e96afc7da47c96325843451824171d6"}, {0x3, 0x1a, "bb88b9c9190584b3e055b37af43ea6f355ad90df4fb5c9ee4b6a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0xa9, 0x6, 0x363, 0xb}}, @prep={0x83, 0x1f, {{}, 0x98, 0x4, @broadcast, 0x1020, @void, 0xf, 0x9, @device_a, 0xfffffff9}}, @fast_bss_trans={0x37, 0xcc, {0x6, 0x4, "359f1b7beee2c6e44ee9e37ed41f0593", "6401836207413a404e6f6f566fa8d9f929937a935050d4d04cf9f5fa272eaa11", "a74efbab8c3b8a0d32c7ca5472a5344f83854d624c50135812bbcf4d352dcd7f", [{0x1, 0x1c, "85af035ffb3ea6dc9ba20d564fb5a222f5fd85ad05058af106e17f1c"}, {0x1, 0x1d, "88ce639b9e0b233404115ac123ef090df4a2c5231218eb2d103f471c3d"}, {0x4, 0x14, "42b4d27fe2df28ba51aab736b091c26c05eec2fd"}, {0x3, 0x25, "545d91b31728f6a85012af0df2d06a20938a199020452f4d68754aa845df490df6fbef12a8"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2d, 0x80, [@chsw_timing={0x68, 0x4, {0x100, 0x56}}, @challenge={0x10, 0x1, 0x21}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xab, 0x8}}, @mic={0x8c, 0x18, {0xb34, "9d7e6c502ae0", @long="ed27dd766fb7bb8aadeb929ab23c4ce7"}}]}, @NL80211_ATTR_PROBE_RESP={0x47b, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x14, 0x9, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x9]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x69}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x548, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1e, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x46, 0x64}}, @dsss={0x3, 0x1, 0xb6}, @mesh_chsw={0x76, 0x6, {0x0, 0x80, 0x1e, 0x100}}, @ssid={0x0, 0x7, @random="3419d9a86ebd1c"}]}, @NL80211_ATTR_BEACON_TAIL={0xb7, 0xf, [@dsss={0x3, 0x1, 0x994217796d02fd2}, @mic={0x8c, 0x10, {0x5a5, "74973d01abb2", @short="1904015721cd8d50"}}, @peer_mgmt={0x75, 0x14, {0x0, 0xc, @void, @void, @val="acc9d0a4bd49fe7dc279e1f6d1b0a6f4"}}, @preq={0x82, 0x72, {{0x0, 0x0, 0x1}, 0x3, 0xe, 0x2, @device_a, 0x8, @void, 0x40, 0x6, 0x8, [{{0x1}, @device_a, 0xa1}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x8000}, {{0x0, 0x0, 0x1}, @device_a, 0x7fffffff}, {{}, @broadcast, 0xffffffff}, {{0x1}, @device_a, 0x3f}, {{}, @device_b, 0x2}]}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x24, 0x2, "23f3917804edfef44e6a069c9bcd72a2b52d70deca79e362a8ec8c0180a1c9ed"}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "05c9255ba7b6d6d79d8563578518a6c7d772bc95e8a376226262069915b70668da2b0730f06284fd91496181b48f838c5bf16bfe3085b4e165e924f0b6bd61367728a115bd2d41741dc58a3fac4ec6d30a0fc81791b79847e4340bcf3a956b40c6af5b86e0e5e1849b02d301009cbac242b95e65d697aa384c4cbe953aa38eadc8ebae9889a07c9c1fdb656a3e3fbbb68d40e8c75f4a3d16ac6baf2c30c2432569396e37f40a7a76228bcfef42d665ef8ad5d307eaf0ab57b2149a0c2417312f680c32a713ff9e3157acccada1ffd93a5b7765360ec70f1cc7d2fdfde0"}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x283, 0x91, "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"}, @NL80211_ATTR_IE={0xdc, 0x2a, [@preq={0x82, 0x7d, {{0x0, 0x1}, 0x7, 0x81, 0x1, @broadcast, 0x6, @void, 0x1, 0x0, 0x9, [{{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x200}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x2e, @val="2ded228760b7767bf347e6ca1d697c78"}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x0, 0x4, 0x0, 0x1c0}, 0x300, 0x6, 0x7}}, @chsw_timing={0x68, 0x4, {0xb4, 0x4}}, @dsss={0x3, 0x1, 0xe}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x4, 0x0, {0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x9, 0x5}}]}]]}]}, 0x1a98}, 0x1, 0x0, 0x0, 0x4a0c5}, 0x8000) (async) r2 = socket(0xf, 0x800, 0x3) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) (async, rerun: 64) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x1, 0x4) (rerun: 64) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001d00)='io.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000001d40)={0x7, 0x80, 0x7ff, 0x8, 0x2}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x185}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x88800) (async) connect$inet6(r2, &(0x7f0000001e80)={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001fc0)={0xffffffffffffffff, &(0x7f0000001ec0)='&\x00', 0x8000, &(0x7f0000001f00)={@align=0x4, {0x6, 0xac, 0x7, 0xffffffffcba29c06}}, 0x2, &(0x7f0000001f40)={@_ha_fsid}, &(0x7f0000001f80)=0x3}) (rerun: 32) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000002000), &(0x7f0000002040)=0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), r4) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x4c, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004005}, 0x801) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000002200)=0x1, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000002740)={&(0x7f0000002240)=0x1, 0xffffffff, &(0x7f0000002280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002700)}) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000002780), 0x4) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002800)={0x14c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x205e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1c}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002a00)={'wg1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x5) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wpan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40c0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002c00), r8) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x2c, r11, 0x308, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'wg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004084) connect$l2tp(r4, &(0x7f0000002d00)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002d40)=r4, 0x4) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000002d80)=@base={0x20, 0x5, 0x10, 0x1, 0x22c3, r4, 0x1, '\x00', r7, r4, 0x5, 0x2}, 0x50) 8.620005943s ago: executing program 1 (id=5752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r1, 0xfffff789) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) socketpair(0xc, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r3, &(0x7f0000000f00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000980)="158c1224e5332ad6b25ba9bc490f3acf50b80fb860e1bf9420cdda6ff54a7b6caa0fe4bb0400000000000000126f24cf2e993cd948897b9b0000000000a783c5c1aea3829260f0e9c976568eab90e79fc72b4df8e3b5808ca245e37fff8702f3d1881ed71b1ffcaa0994a55f5268a5a65ae5", 0x72}, {&(0x7f0000000540)="b22a009daee528123227f5d68340c16e379f201e545dfc418bb56b8549a5f66d118394c80f276881e97586becc3ba8ca593d3a9ed3c28369d6f482b1c3851a1d5e086a698c0cf743da17f492ea875a9e6121ee825e74139b62c05d1f1da36dba3435e369495276a0786925308d9ebc54476084084d8846fe937131c8f4ba93301ae81ed0613d9148d4be11506b145fe9716e7c", 0x93}, {&(0x7f0000000680)="501942c133453676a4cd16f89636ebc1f04c2b6733dc3901e3e08d8bd2cc5d9096c2160d2f5da3e24a6904712f74643c425a9206fbb4675c39063389a4da2539b693b7110ce52e2dffd1bafa0e9e47793c65cc52194947b60bd420ed1a9c", 0x5e}, {&(0x7f0000000700)="7db405ed74974131ed54ac13b5b036efab463f8204de641585905b8c9d33c5f8f52fa3dd216c2af6ae71f0a92d9d351e31463bcc68c62c3c2c6294c03a567c4603f8e0b95fa777727e3ab080160c0be6b2a3a859cf9dfefd04b136e354719dd482d3971ec90ffa145adbf985c57830aa5d", 0x71}, {&(0x7f0000000840)="06825f6ebfde55b3dc10c5cb168bc079d87430e3d2dc12e6edabf04047588249f755554ccf39d9af3873b4f753436cefa004cd61caeae0dd4b0a314d0073ffe9cc947f1cca8a2555cd9b0e82a7ddbb1da32dfb172ca18e639db1f1fc5f0143429bca6f625714ffcd2810679704b4a2f547380266557caf53ec", 0x79}], 0x5, &(0x7f0000001700)=[@hopopts={{0x160, 0x29, 0x36, {0x88, 0x28, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x48, {0x3, 0x10, 0xd, 0x5, [0x34, 0x10000, 0x2, 0x6, 0x6, 0xc677, 0x8001, 0x1]}}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xea}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0xd1, "6a175044a548c0fb2d23f5257892b02eb2d4913a9ab006aac86da10ad0694bf9fc18d92274723612cb0fc3ab79cd7f42721ec3037947b48b127f46141cfa3c0f17b1b9af2e59173cdb340d7c6f73abd7a4433c456af8d16b38fed9275f6bc3ecd8633bc01dcdafc0d11f0670023950006d8e9f2011aefb1002ecaa42ea505f8d2597b026f7f090d0330c37555e9f7c3f32cf2e65a1b06cc2c6f3605b97ecd7c4f9b8934b8e120aaef4625ec7c00168f1897ad23001ce717e2479b2580a5c1259a5138c2d195a6dccef820e85cb921e7d85"}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0x3}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x8, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xf}]}}}], 0x1b0}}, {{&(0x7f0000000b00)={0xa, 0x4e24, 0x3, @empty, 0x4}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000b40)="d456e332bf9328ef632e2472e92efff960e520c78734518eff7e3101593afd220bba5007563390dfa987e9dacc017fda3ca229b50e41a5b971df33d6f0e8a52f1403ac753f497c3f95447226be879b34ec902ebdc596e1fdbf95aad20c7a7325e1baf9b4d919edcb6889020ed43bb947bd719edc6c6b7b2d3a3ad7a166dec117a6b3499e64eb283abb8adb60db25bd2c71741242a0673f49131a2b618da22ed956ef6b42e35cf5f4d8b166f72ebd62d6b7a145c2c5988e8609", 0xb9}, {&(0x7f0000000c00)="dde38b8b8e465615e0b3a8ac2d9cc8a7ae7037fda0bc43c57e2a785cb00f8b4d7de722a61d4aad32e86aa6b88235f4813317bb5f8407a2ba9e7337b270e5afdac2a6286af828e53172c942b2230b6e9069fe8aea0004f365cb1653e914ced1a59b033956a67c7b7f70d46e0223c8d35edefb640fc58b2ce464f2dee1b80aad1a80c548e75ce5ac1812c881a4da18a2e51789cfe07664f8ce207aa6bdf070ec6f38633b6c9f04e173630d56dc2ae38bcf4a9e2ba2d7b64c344f891f9793d62b0dde3d87b343d64bc150dea18ef84afd831b335e038ac4764c18aca0b34d3ad1f07dd561cd44232dc270fa7e7b244728a8d0004d057e992b", 0xf7}, {&(0x7f0000000d00)="2e612cd78b8d569a814faf1bdd05e092484f57289e31f916348bf81de577278fafb9af19470a92fecfc423386d6abd6fba4990bc46e1ab1d6462d9ec7913d498d6687e759650191fee7f583c9aed48b07de6a7d343769bc30f19f373fa1633413ac0d79dbec79bc510e38f1491207f26831fd996dc56702e21b6dbc8fd4e2173b4aeaf6df984c4c0d018c54230d82f56459a407699014af97a895d7cd63043d34e12bb44061ba32e43a4365997b862496a0aec14e3d69e375c9b52bfcb68a7b59c555b5ce5e40947c0375c27bda367df68c91e7db0f70e5e18c355", 0xdb}, {&(0x7f0000000e00)="03f697126e2c20ed6bc06373073739b69594eb36f8bf618f78180a4e5d72e1f25851f83e11ce19342244252fc0774e05c99aa697eb2fe55fc90fe13ec14df749705cbf83892fc90410ba2eda3f41bc4a624fc96a438b7922304f", 0x5a}], 0x4, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x2cde}}], 0x18}}], 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001100)) syz_emit_ethernet(0x116, &(0x7f0000000f80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@llc={0x6, 0xdc, 'U ', "ce4b6709b67fef515ca8736373b143ae48f98586721e2ad570192e1844a82abf62cfb6327ed8bdb97fd9d78d0318cd3e3c3d16b8c01e2ebbc3e06e5786c2890c229645c121d3cc9731bd564574a802859e22849a712b101138773aa1dad700055a313c52dba7e52f99f3b385a9523fe54400ae2e23219c9e63d24de6fde50cab9d8ee8313a6e173cc49d51c324140d0f482812ebb8cd87b2e4386fbeb89fb68ed4f6030317a5147cf7f7911c706466f8eb084f77dd158c63efd4d0df74547df4dc389f2bb986a671c35e8ecca5c2fea2dff2cf278eae1d99c4378eb247ba46c1b06a79959c81a4aad76b0697e7e90d3d977f054013f175458f77a1f5"}}}}}, &(0x7f00000010c0)={0x1, 0x2, [0x5d9, 0x6f9, 0x621, 0xc41]}) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x20048040) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f00000018c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0xf4, 0x9, 0x1, 0x6599, 0xfffffffb, 0xd43b, 0x7ff, 0xd, 0xa, 0x8, 0x1, 0x100, 0xa, 0x4, 0x1, 0x1, 0x8, 0x8, 0xcb, 0xfff, 0xc, 0x7, 0xb85, 0x226, 0x7, 0x7, 0x9, 0x7, 0x5, 0x4, 0x7c, 0x5, 0x9, 0x80, 0x2, 0x2, 0x8, 0x9, 0xfffffffc, 0x5, 0x0, 0xd, 0x7, 0x0, 0x0, 0x6, 0x5, 0x8, 0x1, 0x9, 0x3, 0x4e6, 0xffffffff, 0xffffff01, 0x6, 0x7, 0x6, 0x6, 0x800, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x6, 0xb1e9, 0x10, 0x2, 0x0, 0xd, 0x8, 0x1, 0x2b5, 0x4, 0x6, 0x1, 0x2, 0x10000, 0x8, 0xa3c, 0x7, 0x8, 0xe00b, 0x8, 0xa26, 0x1ff, 0x9, 0x80, 0x33e, 0x7, 0xad, 0x7, 0x1e, 0x7, 0x29, 0x6, 0xb1, 0x9, 0x10001, 0x0, 0x7, 0x2, 0x9, 0x2, 0x9, 0x7, 0x0, 0x6, 0x6, 0x6, 0x9, 0x6, 0x4, 0x7, 0x80000000, 0x7fff, 0xffff, 0x2, 0x5, 0x4, 0x5, 0x0, 0x5, 0x7ff, 0x8001, 0x6, 0x4fb], "a9858b4d0f809566935a4d5408"}}) 7.269971268s ago: executing program 1 (id=5755): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b633", 0x38}, {0x0}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x1148}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x12, 0xd0c, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x200, 0x70b526, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0xfffffffffffffe7c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 3.970657217s ago: executing program 1 (id=5756): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000017c0)={0xe8, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc3, 0xfc, "d5e46b7866057f4ff1c65fd11eb7a51bbc27f09b30efc363d379bf0ae1408c1ad0770624e3f6229b3c4768edc08e7f1b219986bed733f2fa3c1fd610e54452095474291e8bc5d8039a6a0d1e7a2314ab69816d61c1fbe8b1ae612f3e22d3374158f587a1b218dfdd9c896748dcc2fed86cf9ccaa50691c1d35784e3cf02729ee4726e28581b84361004cbc855f050a3d56575b15d8256d8f1306315170ebbb00f6e998ed8992dd0b6b4a3886e5baf03bb0c2f9f3bca6d8112fdc19b73d55a3"}]]}, 0xe8}, 0x1, 0x0, 0x0, 0x4010040}, 0x40c0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$inet(r3, &(0x7f0000001780)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001440)="e0493c58c997175285222812342fb21733fc8e14dfbbebc0ec7c17b5937ea44760c78cb368548d963a7ad4d68541ffe44d4a1cceb1b0432de1c9b09e830d37b7c98822a50c6cac434a10eea47650385a0ad3bb360c5aff61fd114357d652fadb72d24b384e503f114db77f611a3ef5f6f780caae314393d3404bb1b79c0f519dc8c7e8d6e47343bc", 0x88}, {&(0x7f0000001500)="2ac41b9dffee9ec54c0d4746b8174b4cf7d2bcb4e542200f25a5bace6ff3c2934593784c1b9c7927a7117ac107d5076d24c79e1c00b900c9bfc932820384b4762b96322694925041c78b868a6889c84558367e2bf55efb7ce764cc13459d7383a69b8db67b53bbe36ba81e8877b2ccc7f40cbc6883155b67ad66d4385eb7c9053c7fedd0e74bc3f99b69dac5194e264fd23c54db70adfa6ab99e9bd44257f3f53943520f5f1c36a228c8a053d076f4f35c588df94960cc68c7fa30554540a2c0a571124fa5870a09e2a8b85b1d64089b47540cb0", 0xd4}, {&(0x7f0000001600)}, {&(0x7f0000001640)="2cd31268668e1be277766b6647d4cb497aaac97e32ce32293a3d7abb34e9b9c9f19859640ce67435a9f773c50ca1f582fbd8c3489ce2a44e46a84423a78f2f68e6dfb0ba8096a7d1cede97d0e5e7280e2ba370aa8d2de7ed8e893779b2ce0828b11fb95986b9480a78105d85b82e92ee943251e7d632cefbed9af418", 0x7c}], 0x4, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3.915231045s ago: executing program 0 (id=5757): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4008000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003800128009000100766c616e000000002800028006000100010000001c0003800c00010002000000060000000c0001000c0000000400000008000500", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6092c01f00442f00fe8000000000000000000000000000bbfe8800000000000000000000000000012421880b0000000000000057000086dd080088be00000000100000000100000000000000080021eb00000000200000000200000000000000000000000800655800000000"], 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4008000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003800128009000100766c616e000000002800028006000100010000001c0003800c00010002000000060000000c0001000c0000000400000008000500", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6092c01f00442f00fe8000000000000000000000000000bbfe8800000000000000000000000000012421880b0000000000000057000086dd080088be00000000100000000100000000000000080021eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async) 3.912639882s ago: executing program 2 (id=5758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="100a000000000200140003006970367449531220dcda3fd006aeef6e6c300083c1cce100000000cdc8e93226474bfbc3af2c7b4b5be80012800b000107697036"], 0x58}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4, 0xa}, {0xc}, {0x0, 0x8, {0x2, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r5, &(0x7f0000000500), 0xff, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000640)={0x0, 0xff}, 0x8) ioctl$int_out(r5, 0x5462, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009a000000958000000000000090213a41e358482ba84b8b767871c9fe256b8a66e13112e639c47bbce41cc64e5ccc57d6186e7174c656fc3860cb9428438231fd3ef6ddb9c2aa115af7a9c17e8bbe9f28f83355fcf77af663bba22507b510d799c0bea5e6c36a6c069e8efe02cf707dc81a1cb91c11f03b99a4dd329eac4b92cfc4cb180098344728350b1801da"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000480)) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70007f00df250200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) sendmsg$NFC_CMD_DEV_UP(r9, 0x0, 0x4008054) write$nci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) write$nci(r6, &(0x7f0000000300)=ANY=[], 0x14) write$nci(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="5001", @ANYRES8=r9, @ANYRES64=r7], 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.702855823s ago: executing program 4 (id=5759): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x4, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.466508836s ago: executing program 2 (id=5760): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c800) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x2000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x22002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}}, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x81, 0x8, 0x3, 0x3, 0x9, 0xc6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="659b3dfa008000000000000000afdd"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x400000, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x2b, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48223}, 0x0) 3.093080427s ago: executing program 4 (id=5761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xf}, {0x1, 0xfff1}, {0xf, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x3f, 0x4}}]}, 0x34}}, 0xc840) r5 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f00000001c0)) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x3, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 3.013425675s ago: executing program 0 (id=5762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x99572000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x92277000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.706498541s ago: executing program 0 (id=5763): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40040) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000380)={0x27, r2, 0xffffffffffffffff, 0x7, 0x74, 0x2, "1c31e4e9375d6c5a298f22f802aae58fdedbf4d4942546cecf8e3bb17394c5e5535947569242231d160f8c1c150d8175342eafc1c2089ed3f9566bd84ca5f4", 0x31}, 0x60, &(0x7f0000000fc0)=[{&(0x7f00000004c0)="5ecb6f37bee05354914b424c06418766104c89053526666aafeadc4614735793dd639dce30c3fcd53986d0fc6a15fd6408f4315aefa8d0b063342ad33fa089b5dd7cb3155ead9d46d3aaffbb695c0275e8b24e59268006a4f40ef1117297036218c4daadb7a4ee4720de264184e12216c310489644af5757778cc346b916b6580d9818157d296e932f5a32f93a46a7df82a65d0a43e89dbb476b9f1f525fa4e76216c27ebeaf4e20af871615cd21f9a506c843640342a56a97163f21071514932079f0f280f549bd50f04064ac89e663d9631931b99e02d8745b614ae5c426229d5782b8b3753278", 0xe8}, {&(0x7f00000007c0)="613fe444966a5b4c07a5ce08d40876ea591555bdd072393796b417c49678904d660f90076767ff5a9e267ee1f883e89b8b949a5e057813b4fd394468a34189db33550f29039f256f3eb1fde93591aaaacd95966bf7b6129ae3622c311de167e2ca477b162678ccd425ea1fa72c96b995b1c3e439aeffa5c3e04d3a275da137bf99de078007b7828e19912845068dae4cade9913e31b13b2d03de7a7644d934213f933528eef9d3fdc78330ef9f5eff2329968b6e62e724afb18cd81716e1b890d4ee1bde19f76cbfa4a39151737426690a81d48dfa60f2cda8d6067a3bbf5e", 0xdf}, {&(0x7f00000008c0)="3de07df67a13801bcecc7a8d2f76380f64daf901e8393f978b68148f02cca84da163e215d21f0f5821b6453e4a9957332b738f579a8aaebb2abd346a8009d573cc54d7667e8271b7d149a97fafeeb9c139202a5f69a93f2d04", 0x59}, {&(0x7f0000000940)="170de15963289ab7eca77ae38c9eb0fad4ccfe516b1eb620b433f0b3e52b99f754b249a08fecd6d002b78ff00404eb0313931a1ab76475f1e70492063e743877d8059bf24b4a4afa89abf806b3a4d6487d7ed30d369b5e6b5551bfdc8efd7f8d5eabb6c3e6f54625e3951dabae2ad979030761e01dea066bace85c742176c34a5dbb8c8599005615367ed632937c0b24d2c9036bf17ef7ddd119774892d971529b68eeeba4ea500ba98812582d5ef2c882a4a8270f96ee160e8f91aa8a61fbd5c028b17eb6435da05ef37d2834", 0xcd}, {&(0x7f0000000a40)="2e211f08f188c6f8d750ddbea64266cd555f67782cd179589afe8df06095544aa9a210ea885f755057700267018e9999c0149a43a79cfa8d789b62de30ddce322f62f3a58086c6f239a45bef15047ff0da350ce3950289126cbcd8bfbcba340fe2aec89e5d5f5f0f08996ca6b49b7c7b5179a3aa211ecb754c862a10e737f8", 0x7f}, {&(0x7f0000000ac0)="99365051c35daf87e43d6e56e66023b1d3e3363a3a83da9302bcc6c48f29382b414c2edeab58c0c7f74addcc0b415cce4fddf74363d33fd2d37b1c4d0d7ce00f7e71bf4700fcd816cb1059f11d43e46ca80becf936796beaaba08e9867209e48517f29", 0x63}, {&(0x7f0000000b40)="39ac678ccf723726eac238dd50fe8fc214d613c19a29c0fbf8e9bf3ced182b8150107f55404b286810030f3be70b8032b87bf46f0f1ab68d365fe13b0527316b2643d5946b9c54b33abbfc4ecb0556ef63d88bd1347c1cc910f923ff1da19ee2c6b833ee47446cd0ffd7af9409639b991149fc7da55b43c98a316937562559239c1a77037cf025b518b72194", 0x8c}, {&(0x7f0000000c00)="dd9179513df05d1b2c690b3bdcca4c7e351e8cb32f6bbe040f2ef3bdfd5feb08af05296a70db1f51ba2c22023e02ed5aeeb6cb47e8e85fbce4db81cbd03904aeae104fb7fc4fc8cf1fd576e807416c354bd7d2d912f054c5e6827c01c9bb094289a7d11c7eb52f399bc1b779dfa64a648bca2bc73a9e0d26c5cb550c377470fb7f21575715b6a9ec3b2e4ba255c8566a3cab704b34385d741eb6856f583d442d61ff264213d24c6ffb32136f01badee8514c30c38748816c51f5244b86255633daf4389b02f2", 0xc6}, {&(0x7f0000000e40)="57e2e20be4ba1b657ff58215333051dcf2c278d9437a42fdd643e06835f7c49bf21fe0a11dcf5c73eaee07a3bf0c289929f1aa9509d07ef4222a0bd898d03ace5729a2aaf369851e4d94e053cc89f7db41034ee279c4d9f7d1806ae40c3af0347221993e8425dd4253611880755a102bf0380598408b00c7ab8f8a03a21c6e9e92a32028309814b6487cf66c97cc43219978200a260de181d102e3c149e874d74a1cb3521b7e67f2108b0e8bd59b8f5d4c959bb019e0ce3e1fcde78efe2d365ef10ca13a1620c8bc4619a134e1c2ea48097d299a992b2a", 0xd7}, {&(0x7f0000000f40)="ec678245da552d35f62fa03d400677ca379b04f08f5467db1e5bfaf057543cf8d05220b0a10b9a46a4755cc1e26d875bc46b7529844f9990c0320a737c2f3b93b61c3ff32b4ac5b1fe65f26efc920d559921b35d5fd59e015bc7ac9d0214eede5d17bd75995ff80a2cb0bd3a3ba437f7be7774ed83758a53776eaf4a59e9", 0x7e}], 0xa, &(0x7f0000001080)=ANY=[@ANYBLOB="280000000000000008010000af000000a79fb0046fb128790bf00c21b6a6309abae6cab3a2a120be"], 0x28, 0x1}, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100001800130700000000fcdbdf2520012000000000000000000000000001ac1414bb000000f8ffffff0000000000000000004e2200020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ff9d73cf840affffffffffff7f000000000000000000000000000000000000000000000000000000002dbd7000003500000a00000050000000000000001c00040002004e244e200000fe80000000000000000000"], 0x10c}}, 0x400d1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x400) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) unshare(0x20040600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a700000008"], &(0x7f0000000100)='GPL\x00', 0xf}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) poll(&(0x7f00000000c0)=[{r9, 0x8088}], 0x1, 0x3) close(r7) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0xfdef) 2.311956093s ago: executing program 2 (id=5764): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000100)}, 0x801) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @mcast2, @mcast2, 0x3, 0x2, 0x81, 0x400, 0x2000, 0x80000, r1}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1ff, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000480)={@remote, r4}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) r5 = accept$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000540)=0x1c) bind$inet6(r5, &(0x7f0000000580)={0xa, 0x4e21, 0xcab, @empty, 0x2}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0x200}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000840}, 0x4000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000740)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='dummy0\x00', 0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000007c0)={0x2, [0x0, 0x33b3]}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000800)={0x0, 0x9, 0x2, [0xfe01, 0x800]}, &(0x7f0000000840)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000880)={0xfffd, 0x8001, 0x4, 0x8000, r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0xa, 0xfffffffe}, {0xb, 0x2}, {0xe, 0x3}, {0xd, 0x800}, {0x9, 0x8}, {0x0, 0x1}, {0xd, 0x7}, {0x2, 0x8}, {0xd, 0x3}]}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x4, [{0x3, 0x4, 0x80000000}, {0x7, 0x3, 0x3}, {0x9, 0x4, 0x4}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000a40)=""/129, 0xb7, 0x81, 0x1, 0xc, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x7, 0x0}, 0x8) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0xffffffffffffffff, 0xfff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0x5, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000900)='GPL\x00', 0xd83, 0x20, &(0x7f0000000940)=""/32, 0x40f00, 0x55, '\x00', 0x0, @fallback=0x2, r9, 0x8, &(0x7f0000000b40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x5, 0xa00000}, 0x10, r10, r6, 0x0, &(0x7f0000000cc0)=[r11, 0x1, r12, 0xffffffffffffffff], 0x0, 0x10, 0x22a2fca9}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) 2.012986217s ago: executing program 4 (id=5765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a000000000000001b0a800000ff030006000007001401000000"], 0x30}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000800) ioctl(r0, 0x3, &(0x7f0000000280)="b16a263a60f8525f0facdc019c19b1535c5f52f2722646eda09b2c04f7e43dec7c68be3ddd79cbb0a29210f6c094074888a8be2b9e5e434fab049c99d5e0ced4238ed2383c1141b17c4860de2b9d3c031980b7c07383daa444fb94e1da274d8b8c277d4196dbe67cb00bebb86ab55797631e92491dd0b5e941fde4e58fbb3a6bb78ee9b6d39c0e6bac6768152b2cfd45d6874424a9b1a7cbd8f636d2b6ab8b2a530691645cedbd72bd4672dc854dd9682836f692bee74f765fbd96156973849778f7a523b6576426020ce05b89f11c537aa67d58454021140b1af480398ca9") sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001a0007002ab5700000100000fc020000000000000000000000000000ac14141b000000000000000000000000000300004e220000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b001300000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00008500000006000000c500020001000000bf91000000000000b702000003000000850000002a000000b70000000005000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.706112783s ago: executing program 0 (id=5766): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead34", 0x52}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x43}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x9]}, {0xfc01, 0x3, 0xb59, 0x10000}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}}, 0x40040d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085000000a400000095", @ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) getsockname$packet(r3, &(0x7f0000000080), &(0x7f0000000180)=0x14) 1.507611763s ago: executing program 2 (id=5767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x7, 0x84) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)={0x70, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, "", [@generic="0a2c6b30dd7d6db158b2404c8f3bace2ec756ee8a6a24fea7dfba5edbfd8c1b36d16705848dbda667d6584ffc0dc26f3c78df51acc2b15bd64d95b0a8ad474824fc9d0896230fa625c1d6a64c342847db764b9", @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x3ffe}]}, 0x70}], 0x10000000000000da, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x1, 0xc5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'team_slave_0\x00', 0x1000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x7800, 0xe3a, 0x5, {{0x3c, 0x4, 0x3, 0x8, 0xf0, 0x66, 0x0, 0xab, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @timestamp_addr={0x44, 0x34, 0x54, 0x1, 0x6, [{@rand_addr=0x64010101}, {@local, 0x4}, {@broadcast, 0x200}, {@multicast1, 0x1}, {@multicast2, 0x3}, {@remote, 0x7f}]}, @timestamp_addr={0x44, 0x3c, 0x47, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x10}, {@local, 0x1}, {@multicast2, 0x3}, {@private=0xa010101, 0x2}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x912}]}, @timestamp_addr={0x44, 0x4c, 0xd0, 0x1, 0x7, [{@multicast2, 0x4}, {@remote, 0xfffffff9}, {@private=0xa010100, 0x1}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@remote, 0x4}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x24ac}]}, @timestamp_prespec={0x44, 0xc, 0x1b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x0, 0xa, "30b0eecf0fa85e79"}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@mcast2, r3}, 0x14) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 1.325457224s ago: executing program 4 (id=5768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xb6, 0x2}) (async) unshare(0xa020480) (async) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="0704", 0x2) (async) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) 1.213235012s ago: executing program 0 (id=5769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x290, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1c0, 0x378, 0x378, 0x1c0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xab9, 0x0, '\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0x1c0}, {0x28}}}}, 0x2f0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 910.456641ms ago: executing program 4 (id=5770): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r2, @ANYBLOB="20001d801c00008005000b0000000000060005000e00000005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (rerun: 32) 756.115048ms ago: executing program 2 (id=5771): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="be306de9f17f9940377640252e56883be7f8157769790ffa6a08bf099fbe04c58f0d822e873c94eb3852389f85ea72d40667489f3e24f4f304d2a6dac8ee3a29fd4bd261abd0d83d0e16f5934129702028a39576653a1f8cd54354df8ced24df08a297291eb27461dd3f99f76289433eb7a6c71b2323350da5fd2f4e3843961956168c2952e8d9b54673376913f41ca57c11ccc31723a88d96c7afe4456839d97ff5a81f", 0xa4}, {&(0x7f0000000140)="789ab755f027ac4ecf316f72f1a7e945f5dc7dd2dc9863c42e46505854edf899af152075b90efa2f18dfc888f297457b6f3a20d075aeb4d7dc0103aae357a810f9263d8612f26249d0a9d76272eaaae36ef44a3a2c56a61b4daf8a883cde370f06cd15d523857e63f97ef760c6591e02c8e44f901033eef27eca246b5da770507595628b1c29afb10adbb9355e140563475f61a7da1e3349b47c4fdf262dbdacb4ae78", 0xa3}], 0x2}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x76d1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlinkprop={0x30, 0x6c, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}}, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0xd, 0x81, 0x7, 0x1, @empty, @loopback, 0x700, 0x10, 0x4e, 0x1}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x7f}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x7f, 0x0}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000f00)={{0xffffffffffffffff, &(0x7f00000007c0)='\xff\xff\xff\xff\xff\xff', 0x880, &(0x7f0000000800)={@align=0x80, {0x9472, 0x3, 0x94, 0x7fffffff}}, 0x3, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x6}, 0x7, &(0x7f0000000e00)=[{0x2, 0x9666, &(0x7f00000008c0)='nl80211\x00', &(0x7f0000000900)="182abba79c546572cc8b82bbaebc7aea6b034d8b3c5bd40a841c42c34dba67e6654fd48cbd6485a5b0cd6f53cf77994cfe563a6979c4e9c3c1304812dd4c2e2cbaf0366db35a8be6e86e56af2fac547b02252d545e64806c0c035de62eb32d5abf270571359b141b165cf270c84740fb45cd0af1871a6af2d6c7992f6b000e74f8895de960f12a4798afbf6005c1089f626dc2b8d743fb81119c8c40b2ab6259ebec615b433207ab00eab3a08af6785a966e7fefba8952b7f84c878ea175f92a6f0164bc0c48758f6b73ad0934820ac544bec38d2e6a13f24720c2413aa70b4a63daf9cb6d8ad1afb9660f4fc9a8294ea7ede806f5", 0xf5, 0x10}, {0x1, 0x5, &(0x7f0000000a00)='nl80211\x00', &(0x7f0000000a40)="46f4f5e4336d26965ac495da4ef42e684747b0423242dc8750652cfb49424ddb61b156a0c8a4d9d41dffe3eac6f10a7ae95e2e87461f05a987ef2d9a920a", 0x3e}, {0x2, 0xffff, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="4a41f36bdb09c46f6aa54d08f8f94a4c342c9f", 0x13, 0x2}, {0x3, 0x8, &(0x7f0000000b00)=']&\x05\x00', &(0x7f0000000b40)="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", 0xfa, 0x1a}, {0x2, 0x40b, &(0x7f0000000c40)='9@(!,\x00', &(0x7f0000000c80), 0x0, 0x30}, {0x3, 0x9, &(0x7f0000000cc0)='drbg_nopr_hmac_sha1\x00', &(0x7f0000000d00), 0x0, 0x20}, {0x2, 0x3, &(0x7f0000000d40)='!+\x90*\x87\x00', &(0x7f0000000d80)="33d0d453473fe15ef1c14a56147f1ba47d45d1902bb113def09934872d2509deeaf875a80134434d73e081f126293f02310480234369bac555bb3f965b07c8355376a669", 0x44, 0x20}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000f00)={{0xffffffffffffffff, &(0x7f00000007c0)='\xff\xff\xff\xff\xff\xff', 0x880, &(0x7f0000000800)={@align=0x80, {0x9472, 0x3, 0x94, 0x7fffffff}}, 0x3, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x6}, 0x7, &(0x7f0000000e00)=[{0x2, 0x9666, &(0x7f00000008c0)='nl80211\x00', &(0x7f0000000900)="182abba79c546572cc8b82bbaebc7aea6b034d8b3c5bd40a841c42c34dba67e6654fd48cbd6485a5b0cd6f53cf77994cfe563a6979c4e9c3c1304812dd4c2e2cbaf0366db35a8be6e86e56af2fac547b02252d545e64806c0c035de62eb32d5abf270571359b141b165cf270c84740fb45cd0af1871a6af2d6c7992f6b000e74f8895de960f12a4798afbf6005c1089f626dc2b8d743fb81119c8c40b2ab6259ebec615b433207ab00eab3a08af6785a966e7fefba8952b7f84c878ea175f92a6f0164bc0c48758f6b73ad0934820ac544bec38d2e6a13f24720c2413aa70b4a63daf9cb6d8ad1afb9660f4fc9a8294ea7ede806f5", 0xf5, 0x10}, {0x1, 0x5, &(0x7f0000000a00)='nl80211\x00', &(0x7f0000000a40)="46f4f5e4336d26965ac495da4ef42e684747b0423242dc8750652cfb49424ddb61b156a0c8a4d9d41dffe3eac6f10a7ae95e2e87461f05a987ef2d9a920a", 0x3e}, {0x2, 0xffff, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="4a41f36bdb09c46f6aa54d08f8f94a4c342c9f", 0x13, 0x2}, {0x3, 0x8, &(0x7f0000000b00)=']&\x05\x00', &(0x7f0000000b40)="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", 0xfa, 0x1a}, {0x2, 0x40b, &(0x7f0000000c40)='9@(!,\x00', &(0x7f0000000c80), 0x0, 0x30}, {0x3, 0x9, &(0x7f0000000cc0)='drbg_nopr_hmac_sha1\x00', &(0x7f0000000d00), 0x0, 0x20}, {0x2, 0x3, &(0x7f0000000d40)='!+\x90*\x87\x00', &(0x7f0000000d80)="33d0d453473fe15ef1c14a56147f1ba47d45d1902bb113def09934872d2509deeaf875a80134434d73e081f126293f02310480234369bac555bb3f965b07c8355376a669", 0x44, 0x20}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r2}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1e, 0x1, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0xc7}], &(0x7f0000000540)='GPL\x00', 0x6, 0x9b, &(0x7f0000000580)=""/155, 0x41100, 0x40, '\x00', r4, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xa, 0x24ef80bd, 0xfff}, 0x10, r5, r6, 0x2, &(0x7f0000001140)=[r7, 0xffffffffffffffff, r8, r9, 0x1, r2, 0x1, 0x1, r10], &(0x7f0000001180)=[{0x2, 0x3, 0xd, 0x3}, {0x1, 0x4, 0x4}], 0x10, 0x458}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0xfffffffe}}, 0x800, 0x4}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0xfffffffe}}, 0x800, 0x4}, 0x90) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000001340)={0xf, "2b4ea4232b69e690a543b9ec17fa3f586b293a55f25c66b68d26c6129acbe6b33189d9bf7f5019596bfa57801f8a33429e0ad507b2236a9b3becdc13b159f86aebe860cf2b4284d0262d276d93279555cdf69e5cbfcfe5877ef05ae37b79cf6e71e882bbdca2363ef4f3817dadf16d7b2018a10e1feae65c1e3f3356678280fe"}) (async) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000001340)={0xf, "2b4ea4232b69e690a543b9ec17fa3f586b293a55f25c66b68d26c6129acbe6b33189d9bf7f5019596bfa57801f8a33429e0ad507b2236a9b3becdc13b159f86aebe860cf2b4284d0262d276d93279555cdf69e5cbfcfe5877ef05ae37b79cf6e71e882bbdca2363ef4f3817dadf16d7b2018a10e1feae65c1e3f3356678280fe"}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000001f40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001480)={0xa6c, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x52}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x41, 0xfe, "84ccf526a05277e4255d6e67b3e8ad74b26db67eeec630028a46d20c20135b8742520ce0b63f2d648ea77ecf0b0b798886bdd061cddea5254dea53d1a0"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4a9, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe2, 0x80, [@fast_bss_trans={0x37, 0x68, {0x1, 0x2, "1c3bca73d44e4f77a504206f4cbcca98", "9fbe65331161389ce13a4cb827fee35b9500b706147c61ba3a7dccd3872fb2a4", "7e9e30ffcdf2fec3e647c876d9d75f65df6441bdcd3f50a2df3d6e76cb6d9f12", [{0x3, 0x10, "1d54711bf03d2caae7e2c4374119e1ec"}, {0x2, 0x2, "3417"}]}}, @chsw_timing={0x68, 0x4, {0x6, 0x2}}, @measure_req={0x26, 0x64, {0x3b, 0x0, 0xe, "4391b88509d58fab20ac69b5d853df3ac9f988cf6cb91299432ae8c5e280e8f203723810e74cd95ac8ce1d4e1e65fa1096061258af7d2f2ab5285e01449d735497254a596130e5c3c68dc9ea8a88bf0612766bc333d867a91bdf495bb44378d917"}}, @cf={0x4, 0x6, {0xfe, 0x49, 0x800, 0x5}}]}, @NL80211_ATTR_BEACON_TAIL={0xda, 0xf, [@perr={0x84, 0xd4, {0x6, 0xc, [{{0x0, 0x1}, @broadcast, 0x2ac, @value=@device_b, 0x28}, {{}, @device_a, 0x1, @void, 0x7}, {{}, @device_a, 0x7fffffff, @void, 0x3}, {{0x0, 0x1}, @broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x61, @value, 0x16}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x2f}, {{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0xe}, {{}, @device_a, 0x8, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_a, 0xffffffff, @value, 0x6}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x12b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0x6}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x3}}, 0xa4, @default, 0x38, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x2, 0x10, 0x0, 0xf61}}, @void, @void, @val={0x25, 0x3, {0x0, 0xaa, 0x42}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x60}}, @val={0x76, 0x6, {0x5, 0x32, 0xd, 0x3}}, [{0xdd, 0xca, "2909875783fcb796ed9691a23823f2a316f372e28606eb27d7982b524e588b53c08fe53ff183ccd224ebfcebfa457ca72443216e78363f089f17242875b833b288ab8d1120f63b8a22b5264c1684fd616251ee671d844142d4eb9b2912cf911612aaff806a24e71de69872234b667927b0f6810add255ac6f9646f92d1bfe0bfa627489fa70bd3d749bfa7a64261a2735bdb8ec80fd0d2453e031a41945b4e75f2fb9c110638020bc56a2107d0e856b5c34eb2fc6d6e33c10f2428b76f6f75f927ee6c7bbecc9be21fcf"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "4392c56b748798311d4c068220"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "e869d982d697cddc90ae3c043e23757ea3bc122f47d6c8f1596f8f4ac334e1efe9d3419f1bca8163c425c57e2cf37d0ae4b16229a58cdc05f5e1ddffcb81c17b11ddc7bf9dd4bcbeabc4c20289306d65628f344fcb21995ad2bc3822f945715014326e8c7fa9f6371c5084b3d759fb1d96366865ec9b6a04f0a26804d81ee2b90131f2a845b90bc2611de8ec6a4fa9f1747ab4cbb3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xae, 0x3, "ef6ff1881f309c13e9dd3cb471eb2241f456165a176b9fbf130b4c6c9c914d889d8f21ab6136c57485b3d371f9938a64dd8f8d4da6b386e52f4da702d3eec6f5490508053691c856b2ee0f6915d2d94abdf01ae56e43d793355e7ab41cf0331ef4f3e9d44638669fa3bcd2ce3b65619005fa421d992d65a1a41b736450053e95b80253ad599e236ca08e744ab6e483c9dbd03c9544e3fd0aa0de76ffb46b747d7642dafac82d5f564be9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7e, 0x2, "b5c2081daa824297352508c12bd84f1410d8e6988ffe4176437a19c088ac45a2bae4729ff3d3a806798e3a2fddf7d42c23fef68ed48ef693b95b77bba4e9a529098bd39708644eb5dd78d1a9412cbe479e9fc89f27030c03aaed11de69bf5e383b2a0e05b26da49eabec8168365053f5c2753a5863f199f2b0da"}]}, @NL80211_ATTR_BEACON_TAIL={0x2c, 0xf, [@ht={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0xfd, 0x2, 0x0, 0x81, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x47, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x6c, 0x3}}, @chsw_timing={0x68, 0x4, {0x8000}}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xa6c}, 0x1, 0x0, 0x0, 0x50}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001fc0)={0x1195, {{0xa, 0x4e24, 0xae1, @private0, 0x3}}, 0x1, 0x3, [{{0xa, 0x4e24, 0xf8, @remote, 0x2}}, {{0xa, 0x4e23, 0xff, @mcast2, 0x4}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x6bcd}}]}, 0x210) (async) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001fc0)={0x1195, {{0xa, 0x4e24, 0xae1, @private0, 0x3}}, 0x1, 0x3, [{{0xa, 0x4e24, 0xf8, @remote, 0x2}}, {{0xa, 0x4e23, 0xff, @mcast2, 0x4}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x6bcd}}]}, 0x210) write$nbd(r6, &(0x7f0000002200)={0x67446698, 0x1, 0x4, 0x4, 0x4, "3552e4e21321a0325bb693769b9cd22dba3f3973fb7b542e8cbd76dd375d748e1bd8ccdc58b45a3771734ebb647280f8682e4f74211800bf25ff7ac6379ec7f6d7def20103d2ccf9656e6c37ac9143443e936e8a27204caea86e2d76e5c7807b81672100833fd0f5dcc2b452b4d0f1dea3da307c2ff0c50a12994a5e36bf28d3185eb8cccb7c0251603a7003bf3f64bb2e7320acb1385ac7d8e6d536b88cb224745afaabb9523de53352e74e5d6e449d57566a6b20f4772190eefc3bec67b09fb2c0b38ae164bfd1640d5398e615c446138d4f02ce4fa3a944976af624083ebeb1fb2353766984023b3b3f14228d155a5ec0a804ed25365b6e83a351fc95f412603fcd49fe09e8a53043478988cf17d39ac6aba59d36a2815b514913e7a22c941efc5b5ac5d98010454c2105d7ba196d333356707f15b2c161fc4fa247077ec94e04667a80e63a440ccdba7caaa19d8912643f2692cc18b0b3914c17eff3de3ea51e598b64a1901af168b197019f9c21e1be1d1988ec76dee207222d908f9ff2c976572d088ac6bf454318e5d27f3d68a2acc1fc24792b8d3ace0b320a6e3a142caefa6282602c5d80d1545adc3945ece61d9150744424d1afa4257bd239a77b531ec353128085ced5b9ffb3a294a7bf436eb24af4a2c6b9cb2452793c1998f3c4045b14bca254e07802c1bc796b85c38b38b67e02870ee156d03d369d1bfbc69bc055c8e40651d6a2ccf839595a1bf67f4c80696aa869e9f41e3c4c70652246ea606bec43950d954ea689d1e96f02d4c2aefd8a866423215ea9942223f2e9369d9dc05ac9f544aabb15ea088662f630c62b85cef134ae30771f69be839711d3dbf647524733fe73674607e8b3c121987edf915506b9d01cd86845e9f4752db7f9ad9b75cee323e75230c2879f1188072019eb78450849ecbebf0950849a76144795adc4cef17290fba606b7c44db279a89b382282ce0ed5ccad4839225db5c754071d14904439019464f6da4bc4184a55839af343d78a986720173673cb68bf1dfb3b7ec6f7f426f33c2811b9a0d5c767e4b00c4c17692dc64d3879492c8ff91d85e470d03f6d42333d1e9aa5e1b8531d052c75bd5c28e2c59f07e5a109facdb633d762ce297acdf747b7226234ab35d43963393ce73f512cb99daed9272db3d0e50174f40b675f5c9ebdb7af394c48f646a2ad7fff51b22e5f67e69e7a75576f937483d7dad9de74bfa9f18d9b6aac9a869be488eab45ac5b15aef8ae0553f95d939572e86ca1669f96d1ca30de261eb501e1b8b80a484e3a2d30a8e1edbd60b87936c5f804d55b9793bb4f22123887887bb4090e6a2262148bef5aba28c589702269dc412e9003d7e4449d9bf7e97867121a50006231c08b7918669ebb6e2c0adb0a37d0a97cfdb8006eab6b1340b6cdef760f7f1842ef4ff6f327ff4b402756246336c7975eafe1ba815b38f197516afd658b4f5111ce658b8f1d44d5c0c71e0583ff5422afd9bc553aa7948c83d3c697dcc0594e246f24ac1f33bfa286f3a2f4e1fdb91c8b753ee7517195eebb9ec876404fb02ecbd2f9ad55bd2abffe7094b0f87b4d1d6f47e2799c041b970f4a4f0fddf2b41c4cefdb00c1956b0e1540d0573df7a967f02014e82435e8cb518ed9363bfbb52a828bffd1c910f8d4480feacabe810cf2b609aceaa596c844ea102905685a00db0c4752237bf4b03f5ff7ebfda03738f59096d293072b6cc3b0a3729582d56952fc168836739be0677784521e7ef8824ee764dca3e3198f1f2d7fbac26f6acc7f6558fe5d08a842cc67ca019a2c5516a8180d5fbb73380326d5d9dae85c8017b4f41974755cb7368566d7d34c4669deef6a681dc3204b5ed97b28f0cd39c1780db921db3fbc775e208e63977e744c3f9bbd6821a5b7b9310c28f53eb3b9a3745be8f058c67bf43a958093fd0f7354469441ffb4e357a3c8bfe1ced35c1cce3dcb49c93860c3aca3b8726287c52cb09a50fbc16b4d26e4e02e6b58e703fb0c7bae8acbc9ffd5c6b8c4085feef0757cb23b105c77db4cbca5bd53ac6a1592ae8628259c001b549d4e1dcbd3477132e5f7aeb25831e14c55ab6b090861aa463ed28e91fbbc718bb520c0cd0e3708087b421ac98bbd59f0b47a16762c9633c72702da8d21820d4cc4f74c8fe5e8f188576f91dafcecb99c2aba8b43f035c5a33acf390a3c894f062d50c8a055fc44b49daeb7c8cbfdc912e8af2ffdcde9edac56dc10bff5e13639cf06bcf586040af51a6ae50b612239db278a9ed74c531d8de354828b0d5f14ddb6f481237f1991ea814ac2fbdaaada21a4e5c1f6eb91528ac2b55852b78b43f09c7999770fd4675b70f0dda5061e73086829379c38fa6485760eceb0106d8a70e69767220e4dc901a418f713c9a31b616ba56452c0c62f3035ab7e0e19f9cd98776c943df85d6280efcbf56018159c2f60245d680ad31563f6f2449e9d68f386b753c0bbd95faf91ff96c2aeb6e3d0a77480824fa6346303cd95c4a6c95d766ae988b22660f744c4d419b8e43a0c37a41519d15ca8fb414b89327bd92d1068be4c6a1a832ffdd5fcdc206fdfdccf907a62f1016c12eb7f1a2df0aade40f27165035016b44fec58e63e95c3758c99c44fc8ee343cb0486375b189c04df9be3ad22de3f258e8e68f72949b7c8feab8c25cd0ddda5b0e67662202463eec704ff781683a5ca9ca37d7cc69b22fc0708abb8f5f65f4c267cd1e28c37eaa0f8035daea5688b79b33b77ea0c511bc26e1c62543a1f2b06c50c2077c760ff1e77c802f1fabf126084fc0498376c9ed7db2fd416161275e6311547a20bebb05be9878d938d328a6cfefcfffd5fe47ee05f9da9fe876e5bf2992dd4aac1d9e119e78a6b997604888d22e96a9efc5f8a6111ea4aa3310a6ec5e907689f34afc4f54e45560c4f232e5a4a41a3e274327f4d41b1e6cbe59b76312e4da4404df5ac25b8c5e5b559b33ce1f932af3fa5c48ba268baaf325df29d6434a83b38fe90922e4f799e69937056e1a15a1c0cad54354bd3aa34a659cb927e28eae89ba31dd95b91939beffbd998e2057432c03d0ba0f0aea4962e03098281a83b7d42e987a6215a1a6b48a861c5b7ac672b22893b87a1b21ca10f274f55ff3ee4135520547acc98606a3dc3823163f75f2ac98c7490bcc9246b1c4056de81199a25b1c38df2ca508f6fdedeb0a9e5e4778affb219c500bdd1b7131620ac4dfba445575e4bd080e63844b768fde07cd776bdefeb504b1db418408154cc49b59a85dd6ef8b3406c01adc3d11afb4e4d4bbf30779bf306c576a8074d0e94f9af087c97e252987b6823d1e9524122a634c72847c339ba209793f6d05dfd61d736444063eb18010ef73840215ecbe9140373a9f4887a991fd5cf12f4e0bb31852171566ed59fd512c81dd936196dfb73c57d0649b55ea91bd7288b9a421f0cf05a11bd66d59f47b98400d5bae6630574c7806ec9e02c45beffebf75e68d68ba490bc339e873b263f673c96c9c3ee6675e48da6db3d9ed81d79772585374ba128e24a6ec24bedef6258c1c99d81a0e5207b249616eb4ce58af9d2fc4864d43efcd062b55a16369cb9be031b7f5d7ba19a5f89728e51a97a0d3e9d488c7ed69403a588f7ee8450eb6fc2e6b60a3a41672cceb19f1d15da978b1c9bd5c4d9e390e17f6393623b624c4ff04c033b947f9900f8ac087af6c7d178db05ccd070c09d1440619cd3089d1bd30722fe90466186effa1fafde5f4ba3631fe182e452693aaefe0bdc4829383e8e6e1a251e4303e98cd0621439e2071e22547904a51bb4e32ca213224696ab0aced49d0e40f4f55bede98cc0fc0c992be9223fb00818d8006aa970bba7c771be740e798a60f2d82d6d45ebd93f4cdc71721212713d238f81e59ece76427e5b7833ae0c13158011e4832d567c2eff578de010fc57f7a08a2367c9b6a1d90073f306e5133d44f1c59af6a9388ed7e352be3d6cdaa52aa6acd1a1d8439dc8afa62446a69e0786500108f7fb05b3c07af8e0a739e752d34a9120e84668d750e1a2cc61dbac0ab3a2898d75c5f6ed921454284c0cc1041752b52ce7fc9cf160d84297515e134984386ea019ebb61e8cbf59e83987206280e413ab3b8a7ffd1dd7138b0f64cda554ff4db788fabd3b54e41d3e04051622722dd7fd99944cfaf78c7b838746266356e63e5a17f4ca5ae68050cba261ca6d6b3d55cd913229efab140ea8232262600ed301ed04de5265442161909443206d6a1c245e4ede9c59aede22ef3990ec488baa1f024762a4182ca02876505b3aa655348c013e94ebbd52ce461012e1e5b63d5aa5ffeae7388082054531f3f2dc72a61a7d692bb2dcd615130a91257a02a469190d21b52e7f1fda6787c39dbecb243ed2f12aea4269c7ffae6a5b38680284d3732fb29b0ddc7ec39dc62dc633d7f46f88e0865dd87a5004c9b00ee65027406192f34f8b706f2b430a5250d6efa7a0c85bcc7146a2e3a5a3dcaac8ab203e2a9dc14c4079ed299d12f86f9ea7aa3a917e388f2f36eb8d1f77b6306c2e500952b7f2c6d7f5459dc7f1be5df35e8c13f6d31683539b79909e62839c24d3c4605bb3cdc345c8b1e2084ff6b771c705a447b2780eb0eb0fba9a8e7c60f0ffaf693fb06e06b02fb1f3d63cb6fd4543b39492643f8e4ba45a85ebaed7aaf64aed697a9a4b907aebca54e7c9ebfa30325191eece165a0fa85ba2df47f3c3ba3f6c7c3d657e47ebaf168c1b23f2857ca438ec3fc7f89af2bf84a5c19e35e0ba72a9d1e0a550b6755741bf98c7563b4b6b35bff9255e96967b52afb57f3691cd12d9711be63422d630956652345687ee7ac0f552e70e649428cf0d37dae92e99f675f62df0ca63c46d4c56a4209cbd5101927211742ee23586e2c4797eb5c5d07a53b5ed3408c505f52dd81f33ccde7c78f05520a46c1eaed49136fd9f3356af5272d6972f42b69d3e51981c5dbc6cd6abf327e040c678ffcf48ae00df6282c6d594aaf846002f96aaa84b0f7eabbb64f515d1dc6d886b9f457babea62b839858b6a16ea78a29aa5406fb46b6cffa34d58155ad5b8f01922ac14ba00fcd7931d5295b2a0c2d0035eedfac0e601a88457fe60dae75989dd96ca4c703bfa45e1be0c918077eae7fae155649cd162c6ac3016ac4f27153152f50942ff11660d664e2c51ebfd53cb5e817eb4d231bbc56785bfee4c1836649e4d890c6c7b663ee7ad697c645e6bf5301ac3a7eee89f61adcb57c1993500e2f44e07d61355528af7f6b904174585a4e17d426361871745e28b0451482475158e22dd707ddce9e4dac4cda031b7b398bca91e43bd7a07f2832d9efa129ff2fcb4fc4022f73bf9078418f6e91dc4a28c06f2ecf8e5c0f84e0129710f262830d62f668138c8c3c5ae17eab4fe6789ce345f61e4e2439da9c0ab97119e61ea00fcf5351fd00d17ef08237611b9700ea27c35e1d38f1d0af7b3485b23f7dc6418d080ef6ea8954f6361988307689f8a555f390c47bd22adf1f88b2572a123e4b778329f3bda4f4ba90dbdf71e8027e972a5ac3dc05e2ac8fd613e98a0bd3fba13aeda06dd20941a247e7fa7f13b2cb1967e4f4e631628906debbb8ce555bc2c5705e7f09e69698d1d7f1c1f7428a23f85b6574c90c66edaab8dd5632b79fd3ca41b3b5dd0f118e0bea912f565766d2e5998ecbeb843c2b23370d35485c3f218c5182de4792c7b9863368b7aa39427036956c1214897c617d8b65886aa68fb92f384c18cd4b0726476bd1f7b7d26fd5a31f6db24935a58"}, 0x1010) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000003240)) socket$inet6(0xa, 0x5, 0x2) close(r0) setsockopt$inet6_mreq(r9, 0x29, 0x23, &(0x7f0000003280)={@mcast2, r4}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x13337cc78ac581d1}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x70, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "23d4a5262ed2e4b18ea493f7e576cb24"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x25}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="01e33c3dc928e55ea5c8f75cec18a1d0ac128bc1ae8036d40203ef"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000003440)={0x2, 0x9, 0x2, 0x7, 0xa, 0x0, [{0x1ff, 0xa, 0x1000, '\x00', 0x400}, {0x8, 0xfffffffffffffff8, 0x7fffffff}, {0x4, 0x1000, 0x7}, {0x6, 0x5, 0xffff, '\x00', 0x2580}, {0x60000000000000, 0x3, 0x9, '\x00', 0x482}, {0x1, 0x9, 0x8000000000000001, '\x00', 0x100}, {0x6, 0x9, 0x80000000}, {0xffffffff80000001, 0x0, 0xa179, '\x00', 0x4}, {0x2, 0x54e6, 0x6, '\x00', 0x10a}, {0x3, 0x4, 0x27d5, '\x00', 0x1}]}) 473.310767ms ago: executing program 0 (id=5772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x8080) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x4) 39.082793ms ago: executing program 2 (id=5773): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xe, 0xe, 0x32, {0x4, 0x0, 0x382, 0x40, 0x8, 0x4}, {0x9, 0x1, 0x8, 0x9, 0xf5, 0x1d1}, 0x7, 0xb860, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xa17, 0xb34, 0xca5f, 0x1ce1, 0x8, 0xffff, 0xffffffff, 0x0, 0xffffffff, 0x6, 0x80000000, 0x7, 0x4000000, 0x5, 0x1, 0x0, 0x4, 0xb, 0x7fffffff, 0x2, 0xfffffe00, 0xfffffffa, 0x8, 0x5, 0x9, 0x8, 0x10, 0x6, 0x3, 0x7, 0x8, 0x6, 0x9, 0x3720, 0xffff0000, 0x7, 0xbe8c, 0xe, 0xa, 0x5, 0xa, 0x7, 0x7, 0x7, 0xb, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x400, 0x3, 0x2, 0x2, 0x0, 0x1, 0xec45, 0x8, 0x2, 0x401, 0x5, 0x0, 0x7, 0x18a, 0x2, 0x0, 0x7, 0x3ff, 0x9, 0x2, 0x7ff, 0x5e1f, 0x1, 0x10000, 0x6, 0x5, 0x4, 0xc7, 0x8, 0x0, 0x9, 0xff, 0xfffffffb, 0x9, 0x0, 0x2, 0x6, 0x101, 0x4, 0xe0c0, 0x9, 0xdc2e, 0x187, 0x68ce, 0x3, 0x3, 0x1, 0x2, 0x3, 0x2, 0x4, 0x8, 0x0, 0x5, 0x5, 0x7f, 0x5790, 0x38, 0x2, 0x9, 0x1, 0xfffffffb, 0x9, 0xe, 0xfffffffb, 0x6, 0x80000001, 0x86da, 0x7, 0x4, 0x1c, 0x4, 0xd, 0xb, 0xfffff7da, 0xfbda, 0x86c5, 0x473, 0x4, 0x80, 0x6, 0x7fffffff, 0xfffffff7, 0x7, 0x5, 0xe, 0xfff, 0xffffffff, 0x10001, 0x5, 0x9, 0x8, 0x80000000, 0x9, 0xffff253b, 0x6c9, 0x4, 0x3b3, 0x2, 0x4, 0x4, 0x2, 0x4, 0x88f4, 0x7, 0x3cc, 0x4, 0xf7, 0xf3f, 0x0, 0x1ff, 0x2, 0x2, 0x7, 0x9, 0x1, 0x5, 0x0, 0x40004, 0x759, 0x8, 0x101, 0x0, 0x94e4, 0x4, 0x9, 0x7, 0x6, 0x3, 0x1a, 0x0, 0x4, 0x3, 0x2, 0x6, 0x9, 0x247d, 0x5, 0x5, 0xca, 0x600, 0x9, 0x3ca, 0xd6a5, 0x3ff, 0x9, 0x8, 0x8, 0x3, 0x7fffffff, 0x5, 0x10000, 0x8, 0x101, 0x30, 0x815, 0x9, 0xfffffff7, 0x800, 0x4, 0x2, 0x6, 0x4, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x5, 0x8, 0xd, 0x7, 0x2, 0x4, 0xffffffff, 0x3, 0x8003, 0x8, 0x2, 0xffffff81, 0x8, 0x1, 0x9, 0x40, 0x2, 0xfffffffd, 0x9, 0x5, 0x6, 0x6, 0xa3f, 0x2, 0x7fffffff, 0x1, 0x0, 0x2, 0x7, 0x0, 0x1000, 0x0, 0x5, 0x739, 0x401, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0x1, 0x5, 0x40, 0x7, 0x7, 0x3, 0x5f, 0x3, 0x1, 0x6, 0x5, 0x3, 0x8001, 0x7, 0x5, 0x9, 0x88, 0x6, 0x3ff, 0x3ed, 0x4, 0x5, 0x401, 0x1, 0xc0000000, 0x2000, 0x2, 0x9, 0x5, 0x7, 0x5, 0x4, 0x1, 0x4, 0xf0, 0x1000, 0x3, 0x6, 0x0, 0x84ff, 0x30b2, 0x4c9d3c36, 0x7, 0x4, 0x0, 0x9, 0x6, 0x3, 0x1, 0x7fff, 0x4, 0x8001, 0x5, 0xd, 0x1ff, 0x7fffffff, 0x6, 0x5, 0xd, 0x2, 0x5, 0x5, 0x0, 0x491, 0xe9, 0x6, 0xfffffc3a, 0x7, 0x1, 0x9, 0x53, 0x4, 0x3, 0xb, 0x7, 0xbcb1, 0x4, 0x8, 0x24b, 0x7, 0x5, 0x11, 0xfff, 0x400, 0x6b, 0xffffffff, 0x5, 0x4, 0x1000, 0x4, 0x9, 0xf, 0x3, 0x7, 0xfff, 0x9, 0x5fe9, 0x2, 0x3, 0x0, 0x6, 0x80, 0x7, 0xcf, 0xfffffff9, 0x1, 0x32, 0xf6, 0x2, 0xe, 0x2, 0x8, 0x3, 0x1, 0x8000, 0xc3, 0x8, 0x5, 0x10001, 0xa0, 0xd2, 0x10001, 0x9, 0x80000001, 0x6, 0x5, 0x5, 0xca, 0xfffffff9, 0x9, 0x0, 0x6, 0xe2, 0x970, 0x3, 0x4, 0x401, 0x7, 0x401, 0x0, 0x1, 0x6, 0x7, 0x9, 0x7fffffff, 0xf, 0x4, 0x2, 0x8, 0x4, 0x5, 0x4, 0x4, 0x7, 0x5, 0xfffffff8, 0xee, 0x1, 0xd7, 0x1, 0x5, 0xb, 0xcfd3, 0xffff, 0x5, 0x6, 0x8, 0xfffffffe, 0x5, 0x7181, 0x3, 0x8, 0x7, 0x8, 0x8, 0x16a, 0x6, 0x8, 0xc, 0x679, 0x3, 0x6, 0x541, 0x8, 0x4, 0xf2be, 0x5a, 0x7, 0xf6, 0x8001, 0xfffffffc, 0x1, 0x0, 0x7, 0xd, 0xd077, 0x6, 0x40, 0x1000, 0xd, 0x0, 0x6, 0x1, 0x2, 0x0, 0x8, 0x1, 0x80, 0xd8, 0xc, 0x10, 0x8, 0x471, 0xffffffff, 0x3, 0x5, 0xe, 0x6, 0x6, 0x4, 0x5, 0x5, 0x4, 0x5, 0x8001, 0x80000000, 0xf, 0x3, 0x2, 0x8, 0x5, 0xb, 0x0, 0x2, 0x5, 0x3, 0x7, 0xfffffff8, 0x7, 0x8, 0x800, 0x6, 0x80, 0x33e5, 0xfff, 0x0, 0x7, 0x0, 0x9b, 0x3ff, 0xe, 0x80, 0x7, 0xfffffffe]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000009000000000000800800000000200000", @ANYRES32=0x1, @ANYBLOB="060000853a00"/22, @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000030000000100"/28], 0x50) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100009, 0x7, 0x4, 0x9, 0x400009, 0xfb, 0xfffffbfe, 0xd, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=5774): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x52}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='pids.current\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, 0x0, 0x20060000) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x2, 0x0, 0x10000, 0x5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000003, 0xc}, {@rand_addr=0x64010102, 0x4e24, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) kernel console output (not intermixed with test programs): mode [ 812.377276][T24931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.743822][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.743878][ T43] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 812.743938][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.743967][ T43] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 812.744007][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.744036][ T43] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 812.744076][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.744105][ T43] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 812.827910][T24969] tc_dump_action: action bad kind [ 812.879873][T24975] syzkaller0: entered promiscuous mode [ 812.880312][T24975] syzkaller0: entered allmulticast mode [ 812.970071][T24984] netlink: 'syz.1.4360': attribute type 1 has an invalid length. [ 813.227339][T24996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4362'. [ 813.325702][T25005] netlink: 'syz.1.4360': attribute type 1 has an invalid length. [ 813.544406][T24985] bond3: (slave geneve3): making interface the new active one [ 813.553506][T24985] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 813.673303][T12611] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 813.678428][ T50] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 813.678475][ T50] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 813.678509][ T50] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 814.030135][T25011] ipvlan2: entered allmulticast mode [ 814.038024][T25011] macvlan1: entered allmulticast mode [ 814.038085][T25011] veth1_vlan: entered allmulticast mode [ 814.057209][T25011] batman_adv: batadv0: Adding interface: ipvlan2 [ 814.065397][T25011] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.092954][T25011] batman_adv: batadv0: Interface activated: ipvlan2 [ 814.984545][T25046] syzkaller0: entered promiscuous mode [ 814.984587][T25046] syzkaller0: entered allmulticast mode [ 815.045057][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.045819][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.046316][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.046840][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.047895][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.050123][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.050614][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.051123][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.052733][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.054233][T25057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 815.373929][T25049] xt_CT: No such helper "netbios-ns" [ 815.427216][T25044] wg2 speed is unknown, defaulting to 1000 [ 815.463102][T25044] lo speed is unknown, defaulting to 1000 [ 815.638864][T25060] netlink: 536 bytes leftover after parsing attributes in process `syz.2.4374'. [ 815.886589][T25064] bridge0: port 1(vlan4) entered blocking state [ 815.886733][T25064] bridge0: port 1(vlan4) entered disabled state [ 815.886924][T25064] vlan4: entered allmulticast mode [ 815.886947][T25064] geneve0: entered allmulticast mode [ 816.637949][T25095] netlink: 'syz.0.4384': attribute type 8 has an invalid length. [ 817.174668][T25106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4386'. [ 817.300450][T25096] syzkaller0: entered promiscuous mode [ 817.300494][T25096] syzkaller0: entered allmulticast mode [ 818.054055][T25130] xt_REDIRECT: bad rangesize 26624. [ 818.284555][T25136] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4391'. [ 818.332279][T25138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4393'. [ 818.467257][T25141] netlink: 'syz.2.4392': attribute type 10 has an invalid length. [ 818.467301][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 818.614912][T25147] netlink: 'syz.1.4397': attribute type 1 has an invalid length. [ 818.614958][T25147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4397'. [ 818.851164][T25147] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 818.976342][T25150] netlink: 'syz.0.4395': attribute type 3 has an invalid length. [ 819.391545][T25170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'. [ 819.628475][T25175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4403'. [ 819.680905][T25175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4403'. [ 819.681319][T25175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4403'. [ 819.681650][T25175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4403'. [ 819.681993][T25175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4403'. [ 820.052872][ T31] audit: type=1804 audit(1788760471.477:13): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4406" name="/newroot/317/cgroup.controllers" dev="tmpfs" ino=1660 res=1 errno=0 [ 820.053163][ T31] audit: type=1800 audit(1788760471.477:14): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4406" name="cgroup.controllers" dev="tmpfs" ino=1660 res=0 errno=0 [ 820.121626][T25193] ip_tables: iptables: counters copy to user failed while replacing table [ 820.133685][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 30 seconds [ 820.134676][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 30 seconds [ 820.134708][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 30 seconds [ 820.134733][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 30 seconds [ 821.866353][T25243] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 822.688878][T25228] veth1_vlan: left allmulticast mode [ 822.810525][T25228] bond2: left promiscuous mode [ 822.830395][T25228] bond4: left allmulticast mode [ 822.852442][T25228] macvtap1: left promiscuous mode [ 822.867623][T25228] bond9: left allmulticast mode [ 822.888425][ T6488] wg2 speed is unknown, defaulting to 1000 [ 822.888467][ T6488] syz2: Port: 1 Link DOWN [ 822.924281][T12602] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.924559][T12602] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.924856][T12602] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.925102][T12602] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.925407][T12602] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.925434][T12602] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.925464][T12602] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.925487][T12602] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.410484][T25290] batman_adv: batadv0: Adding interface: wlan1 [ 823.410731][T25290] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.415681][T25290] batman_adv: batadv0: Interface activated: wlan1 [ 823.521696][T25299] __nla_validate_parse: 25 callbacks suppressed [ 823.521758][T25299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4432'. [ 823.603814][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'. [ 824.081303][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4435'. [ 824.315240][T25325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4437'. [ 824.591600][T25338] ip_tables: iptables: counters copy to user failed while replacing table [ 824.634456][T25338] Bluetooth: hci0: unsupported parameter 5135 [ 824.634694][T25338] Bluetooth: hci0: unsupported parameter 8192 [ 824.634710][T25338] Bluetooth: hci0: unsupported parameter 5135 [ 824.634722][T25338] Bluetooth: hci0: unsupported parameter 8192 [ 824.763799][T25344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4444'. [ 825.214698][T25359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4445'. [ 825.625873][T25377] netlink: 'syz.0.4452': attribute type 2 has an invalid length. [ 825.710563][T25380] netlink: 'syz.0.4452': attribute type 2 has an invalid length. [ 825.710810][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4452'. [ 825.793908][T25379] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4451'. [ 825.794638][T25379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4451'. [ 825.875747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.402474][T25375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 827.281558][T25345] syz0: Port: 1 Link DOWN [ 827.309301][T25385] ip6gretap1: entered allmulticast mode [ 827.333031][T25385] batman_adv: batadv0: Adding interface: ip6gretap1 [ 827.333439][T25385] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.343278][T25385] batman_adv: batadv0: Interface activated: ip6gretap1 [ 827.504440][T12602] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.504700][T12602] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.511364][T12602] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.511390][T12602] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.511454][T12602] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.511477][T12602] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.511509][T12602] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.511532][T12602] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.630355][T25401] syzkaller0: entered promiscuous mode [ 827.636754][T25401] syzkaller0: entered allmulticast mode [ 827.757712][T25394] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.4454'. [ 828.568403][T25430] __nla_validate_parse: 2 callbacks suppressed [ 828.568469][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 828.628227][T25433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 828.994056][T25428] netlink: 'syz.2.4463': attribute type 23 has an invalid length. [ 832.844298][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 833.230588][T25462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4471'. [ 833.240292][T25462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4471'. [ 833.521993][T25472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.564198][T25427] wg2 speed is unknown, defaulting to 1000 [ 833.567040][T25427] lo speed is unknown, defaulting to 1000 [ 833.914696][T25454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.938822][T25476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.529723][T25499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4482'. [ 834.578696][T25500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4482'. [ 834.671992][T25499] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4482'. [ 834.762770][ T5634] block nbd4: Receive control failed (result -32) [ 835.217230][T25514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4487'. [ 835.598039][T25526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4490'. [ 836.224027][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 836.224268][T25552] netlink: 'syz.1.4496': attribute type 30 has an invalid length. [ 836.224284][T25552] netlink: 'syz.1.4496': attribute type 29 has an invalid length. [ 836.224295][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4496'. [ 836.248419][T25555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4497'. [ 836.706609][T25574] netlink: 'syz.2.4503': attribute type 61 has an invalid length. [ 836.746590][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'. [ 836.826548][T25575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 836.852281][T25566] veth0_to_team: entered allmulticast mode [ 836.859013][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4503'. [ 838.654309][T25638] netlink: 'syz.1.4518': attribute type 1 has an invalid length. [ 839.959954][T25670] sctp: [Deprecated]: syz.1.4525 (pid 25670) Use of int in max_burst socket option. [ 839.959954][T25670] Use struct sctp_assoc_value instead [ 840.192047][T25675] __nla_validate_parse: 6 callbacks suppressed [ 840.199906][T25675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 840.810061][T25685] netlink: 'syz.3.4530': attribute type 12 has an invalid length. [ 840.823381][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4530'. [ 841.538770][T25705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.654357][T25703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4533'. [ 842.283914][T25715] netlink: 'syz.1.4536': attribute type 1 has an invalid length. [ 842.339749][T25715] tipc: Enabled bearer , priority 0 [ 842.350999][T25715] syzkaller0: entered promiscuous mode [ 842.351436][T25715] syzkaller0: entered allmulticast mode [ 842.541049][T25715] tipc: Resetting bearer [ 842.834513][T25715] tipc: Disabling bearer [ 842.896630][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4538'. [ 843.287957][T25742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4542'. [ 843.300668][T25742] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 843.332211][T25712] wg2 speed is unknown, defaulting to 1000 [ 843.343819][T25712] lo speed is unknown, defaulting to 1000 [ 843.404812][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 843.416819][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 843.684357][T25751] tipc: Enabling of bearer rejected, failed to enable media [ 844.336081][T25768] syzkaller0: entered promiscuous mode [ 844.336509][T25768] syzkaller0: entered allmulticast mode [ 844.416901][T25770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4551'. [ 844.417128][T25770] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 844.420278][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4551'. [ 844.445673][T25770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4551'. [ 844.459342][T25774] pimreg: entered allmulticast mode [ 844.462912][T25774] pimreg: left allmulticast mode [ 844.545049][T25777] netlink: 'syz.0.4551': attribute type 8 has an invalid length. [ 845.156130][T25796] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 845.292489][T25799] __nla_validate_parse: 4 callbacks suppressed [ 845.292544][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4559'. [ 845.292570][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4559'. [ 845.391179][T25802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4562'. [ 845.441796][T25799] netlink: 'syz.2.4559': attribute type 1 has an invalid length. [ 845.442046][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 845.950624][T25821] netlink: 'syz.1.4566': attribute type 16 has an invalid length. [ 845.950670][T25821] netlink: 'syz.1.4566': attribute type 17 has an invalid length. [ 846.046829][T25824] sctp: [Deprecated]: syz.3.4568 (pid 25824) Use of int in maxseg socket option. [ 846.046829][T25824] Use struct sctp_assoc_value instead [ 846.515128][T25832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.576180][T25843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 846.917958][T25859] netlink: 'syz.3.4578': attribute type 1 has an invalid length. [ 846.928552][ T200] IPVS: starting estimator thread 0... [ 847.023826][T25860] IPVS: using max 24 ests per chain, 57600 per kthread [ 847.340882][T25870] tap0: tun_chr_ioctl cmd 2148553947 [ 847.917029][T25885] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 847.926749][T25885] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 848.181050][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4586'. [ 848.270868][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'. [ 848.271659][ T50] IPVS: starting estimator thread 0... [ 848.287334][T25906] netlink: 'syz.2.4587': attribute type 9 has an invalid length. [ 848.363540][T25907] IPVS: using max 27 ests per chain, 64800 per kthread [ 849.972548][T25949] bond8: entered allmulticast mode [ 849.982655][T25949] netlink: 'syz.3.4597': attribute type 1 has an invalid length. [ 849.996639][T25949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4597'. [ 850.159923][T25954] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:21 [ 850.169132][T25954] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 850.198224][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 60 seconds [ 850.198491][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 60 seconds [ 850.198518][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 60 seconds [ 850.198543][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 60 seconds [ 850.941654][ T4981] udevd[4981]: worker [24404] /devices/virtual/block/nbd3 is taking a long time [ 851.733120][T25976] netlink: 'syz.1.4605': attribute type 2 has an invalid length. [ 851.733165][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 852.541809][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4614'. [ 852.735318][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4616'. [ 853.421533][T26034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 853.673859][T26042] FAULT_INJECTION: forcing a failure. [ 853.673859][T26042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.673977][T26042] CPU: 0 UID: 0 PID: 26042 Comm: syz.3.4621 Not tainted syzkaller #0 PREEMPT(full) [ 853.674002][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.674015][T26042] Call Trace: [ 853.674054][T26042] [ 853.674109][T26042] dump_stack_lvl+0xe8/0x150 [ 853.674262][T26042] should_fail_ex+0x410/0x560 [ 853.674404][T26042] _copy_from_iter+0x1d3/0x1660 [ 853.674470][T26042] ? __alloc_skb+0x27a/0x7a0 [ 853.674617][T26042] ? __alloc_skb+0x27a/0x7a0 [ 853.674649][T26042] ? __alloc_skb+0x27a/0x7a0 [ 853.674677][T26042] ? __pfx__copy_from_iter+0x10/0x10 [ 853.674705][T26042] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 853.674764][T26042] ? __alloc_skb+0x27a/0x7a0 [ 853.674790][T26042] ? __alloc_skb+0x27a/0x7a0 [ 853.674823][T26042] ? netlink_sendmsg+0x650/0xb40 [ 853.674891][T26042] ? skb_put+0x112/0x210 [ 853.674913][T26042] netlink_sendmsg+0x6c0/0xb40 [ 853.674948][T26042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.674981][T26042] ? apparmor_socket_sendmsg+0x98/0x360 [ 853.675064][T26042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.675087][T26042] sock_sendmsg_nosec+0x13a/0x180 [ 853.675143][T26042] ____sys_sendmsg+0x54e/0x850 [ 853.675171][T26042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.675203][T26042] ? import_iovec+0x73/0xa0 [ 853.675247][T26042] ___sys_sendmsg+0x2a5/0x360 [ 853.675268][T26042] ? __lock_acquire+0x6df/0x2e50 [ 853.675325][T26042] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.675385][T26042] ? __fget_files+0x2a/0x420 [ 853.675428][T26042] ? __fget_files+0x3a2/0x420 [ 853.675464][T26042] __x64_sys_sendmsg+0x1b1/0x290 [ 853.675490][T26042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.675535][T26042] do_syscall_64+0x166/0x520 [ 853.675625][T26042] ? trace_irq_disable+0x3b/0x140 [ 853.675663][T26042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.675703][T26042] ? clear_bhb_loop+0x70/0xc0 [ 853.675728][T26042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.675748][T26042] RIP: 0033:0x7f4f15f9e159 [ 853.675791][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.675808][T26042] RSP: 002b:00007f4f16ddd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.675853][T26042] RAX: ffffffffffffffda RBX: 00007f4f16225fa0 RCX: 00007f4f15f9e159 [ 853.675868][T26042] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 853.675882][T26042] RBP: 00007f4f16ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 853.675895][T26042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.675907][T26042] R13: 00007f4f16226038 R14: 00007f4f16225fa0 R15: 00007ffc1f77cfe8 [ 853.675940][T26042] [ 854.617900][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4626'. [ 854.650059][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4624'. [ 854.842340][T26073] syzkaller1: entered promiscuous mode [ 854.842382][T26073] syzkaller1: entered allmulticast mode [ 855.004805][T26088] openvswitch: netlink: Missing valid actions attribute. [ 855.014346][T26088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.193672][T26095] xt_hashlimit: size too large, truncated to 1048576 [ 855.239442][T26103] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 855.802614][T26117] netlink: 'syz.4.4637': attribute type 1 has an invalid length. [ 855.820398][T26119] netlink: 'syz.3.4635': attribute type 11 has an invalid length. [ 855.831249][T26119] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.4635'. [ 855.979070][T26117] 8021q: adding VLAN 0 to HW filter on device bond10 [ 856.382135][T26132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4640'. [ 856.483521][T26146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4643'. [ 856.512285][T26138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4642'. [ 856.619645][T26152] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 857.782099][T26163] netlink: 'syz.2.4647': attribute type 1 has an invalid length. [ 857.807517][T26163] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 857.874590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.334704][T26231] netlink: 'syz.4.4664': attribute type 1 has an invalid length. [ 859.345498][T26231] __nla_validate_parse: 1 callbacks suppressed [ 859.347883][T26231] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4664'. [ 859.384375][T26234] FAULT_INJECTION: forcing a failure. [ 859.384375][T26234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.384627][T26234] CPU: 1 UID: 0 PID: 26234 Comm: syz.0.4665 Not tainted syzkaller #0 PREEMPT(full) [ 859.384649][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.384661][T26234] Call Trace: [ 859.384669][T26234] [ 859.384678][T26234] dump_stack_lvl+0xe8/0x150 [ 859.384718][T26234] should_fail_ex+0x410/0x560 [ 859.384752][T26234] _copy_to_user+0x31/0xb0 [ 859.384832][T26234] simple_read_from_buffer+0xe1/0x170 [ 859.384862][T26234] proc_fail_nth_read+0x1bb/0x230 [ 859.384903][T26234] ? common_file_perm+0x20e/0x2b0 [ 859.384949][T26234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.384979][T26234] ? rw_verify_area+0x24a/0x4c0 [ 859.385012][T26234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.385038][T26234] vfs_read+0x213/0xa80 [ 859.385068][T26234] ? __pfx___mutex_lock+0x10/0x10 [ 859.385117][T26234] ? __pfx_vfs_read+0x10/0x10 [ 859.385144][T26234] ? __fget_files+0x2a/0x420 [ 859.385172][T26234] ? __fget_files+0x3a2/0x420 [ 859.385193][T26234] ? __fget_files+0x2a/0x420 [ 859.385229][T26234] ksys_read+0x150/0x270 [ 859.385263][T26234] ? __pfx_ksys_read+0x10/0x10 [ 859.385300][T26234] do_syscall_64+0x166/0x520 [ 859.385324][T26234] ? trace_irq_disable+0x3b/0x140 [ 859.385343][T26234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.385362][T26234] ? clear_bhb_loop+0x70/0xc0 [ 859.385385][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.385403][T26234] RIP: 0033:0x7fb12155e98e [ 859.385422][T26234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.385437][T26234] RSP: 002b:00007fb1224e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.385460][T26234] RAX: ffffffffffffffda RBX: 00007fb1224e36c0 RCX: 00007fb12155e98e [ 859.385473][T26234] RDX: 000000000000000f RSI: 00007fb1224e30a0 RDI: 0000000000000005 [ 859.385485][T26234] RBP: 00007fb1224e3090 R08: 0000000000000000 R09: 0000000000000000 [ 859.385497][T26234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.385508][T26234] R13: 00007fb121826038 R14: 00007fb121825fa0 R15: 00007ffc61d27ba8 [ 859.385539][T26234] [ 859.733880][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.735054][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.737914][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.738789][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.740663][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.741540][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.742416][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.751537][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 859.752447][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 860.337655][T26274] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 860.956220][T26291] ip6t_frag: unknown flags 4 [ 861.005053][T26283] veth7: entered allmulticast mode [ 861.040446][T26283] bond11: (slave veth7): Enslaving as an active interface with an up link [ 861.618255][T26315] ipvlan0: entered allmulticast mode [ 861.618296][T26315] virt_wifi0: entered allmulticast mode [ 861.631770][T26321] FAULT_INJECTION: forcing a failure. [ 861.631770][T26321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.633986][T26321] CPU: 1 UID: 0 PID: 26321 Comm: syz.0.4687 Not tainted syzkaller #0 PREEMPT(full) [ 861.634011][T26321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.634022][T26321] Call Trace: [ 861.634030][T26321] [ 861.634038][T26321] dump_stack_lvl+0xe8/0x150 [ 861.634070][T26321] should_fail_ex+0x410/0x560 [ 861.634103][T26321] _copy_from_iter+0x1d3/0x1660 [ 861.634131][T26321] ? __alloc_skb+0x27a/0x7a0 [ 861.634159][T26321] ? __alloc_skb+0x27a/0x7a0 [ 861.634186][T26321] ? __alloc_skb+0x27a/0x7a0 [ 861.634212][T26321] ? __pfx__copy_from_iter+0x10/0x10 [ 861.634237][T26321] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 861.634262][T26321] ? __alloc_skb+0x27a/0x7a0 [ 861.634293][T26321] ? __alloc_skb+0x27a/0x7a0 [ 861.634324][T26321] ? netlink_sendmsg+0x650/0xb40 [ 861.634347][T26321] ? skb_put+0x112/0x210 [ 861.634367][T26321] netlink_sendmsg+0x6c0/0xb40 [ 861.634398][T26321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.634428][T26321] ? apparmor_socket_sendmsg+0x18b/0x360 [ 861.634457][T26321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.634478][T26321] sock_sendmsg_nosec+0x13a/0x180 [ 861.634504][T26321] ____sys_sendmsg+0x54e/0x850 [ 861.634529][T26321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.634557][T26321] ? import_iovec+0x73/0xa0 [ 861.634580][T26321] ___sys_sendmsg+0x2a5/0x360 [ 861.634599][T26321] ? __lock_acquire+0x6df/0x2e50 [ 861.634621][T26321] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.634675][T26321] ? __fget_files+0x2a/0x420 [ 861.634697][T26321] ? __fget_files+0x3a2/0x420 [ 861.634729][T26321] __x64_sys_sendmsg+0x1b1/0x290 [ 861.634752][T26321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.634792][T26321] do_syscall_64+0x166/0x520 [ 861.634817][T26321] ? trace_irq_disable+0x3b/0x140 [ 861.634835][T26321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.634854][T26321] ? clear_bhb_loop+0x70/0xc0 [ 861.634876][T26321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.634894][T26321] RIP: 0033:0x7fb12159e159 [ 861.634913][T26321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.634928][T26321] RSP: 002b:00007fb1224e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.634950][T26321] RAX: ffffffffffffffda RBX: 00007fb121825fa0 RCX: 00007fb12159e159 [ 861.634964][T26321] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 861.634977][T26321] RBP: 00007fb1224e3090 R08: 0000000000000000 R09: 0000000000000000 [ 861.634989][T26321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.635000][T26321] R13: 00007fb121826038 R14: 00007fb121825fa0 R15: 00007ffc61d27ba8 [ 861.635029][T26321] [ 861.649548][T26315] batman_adv: batadv0: Adding interface: ipvlan0 [ 861.649569][T26315] batman_adv: batadv0: Interface activated: ipvlan0 [ 862.394264][T26324] syzkaller1: entered promiscuous mode [ 862.395708][T26324] syzkaller1: entered allmulticast mode [ 862.557704][T26324] syzkaller1: left promiscuous mode [ 862.558293][T26324] syzkaller1: left allmulticast mode [ 862.970746][T26359] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 863.346649][T26378] syzkaller0: entered promiscuous mode [ 863.352504][T26378] syzkaller0: entered allmulticast mode [ 863.374715][T26378] tipc: Enabled bearer , priority 0 [ 863.456956][T26385] netlink: 'syz.2.4699': attribute type 2 has an invalid length. [ 863.466191][T26384] netlink: 'syz.2.4699': attribute type 2 has an invalid length. [ 863.473258][T26386] macsec0: entered promiscuous mode [ 863.476595][T26386] macsec0: left promiscuous mode [ 863.516778][T26384] : entered promiscuous mode [ 863.835923][T26376] tipc: Resetting bearer [ 864.160881][T26376] tipc: Disabling bearer [ 864.443268][T26401] __nla_validate_parse: 97 callbacks suppressed [ 864.443320][T26401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4702'. [ 865.531727][T26426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4706'. [ 865.564406][T26421] syzkaller0: left promiscuous mode [ 865.564822][T26421] syzkaller0: left allmulticast mode [ 865.838938][T26435] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4709'. [ 865.971784][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 866.015749][T26438] veth0_to_team: left allmulticast mode [ 866.031150][T26438] hsr1: left promiscuous mode [ 866.036969][T26438] ip6tnl1: left allmulticast mode [ 866.058753][T26442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4713'. [ 866.071951][T26438] vlan3: left allmulticast mode [ 866.077290][T26438] bridge1: left allmulticast mode [ 866.187652][T26438] bond8: left allmulticast mode [ 866.201521][T26438] bond9: left promiscuous mode [ 866.206823][T26438] bond9: left allmulticast mode [ 866.212582][T26438] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 866.225252][T26438] ip6gretap1: left allmulticast mode [ 866.241380][T26438] veth7: left allmulticast mode [ 866.254006][ T50] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.256812][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.256853][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.256884][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.302925][T26447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4714'. [ 866.309966][T26448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4714'. [ 866.401014][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 866.883670][T26460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4717'. [ 866.883718][T26460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4717'. [ 868.847265][T26507] wg2 speed is unknown, defaulting to 1000 [ 868.857871][T26507] lo speed is unknown, defaulting to 1000 [ 869.159089][T26528] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 869.512127][T26536] __nla_validate_parse: 28 callbacks suppressed [ 869.532946][T26536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4733'. [ 871.008460][T26551] x_tables: duplicate underflow at hook 3 [ 871.038188][T26543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4736'. [ 871.038447][T26543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4736'. [ 871.217873][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4739'. [ 871.258550][T26551] syzkaller0: entered promiscuous mode [ 871.261546][T26551] syzkaller0: entered allmulticast mode [ 871.399228][T26551] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.4738'. [ 871.786713][T26574] netlink: 'syz.4.4741': attribute type 1 has an invalid length. [ 872.734542][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4742'. [ 872.734788][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4742'. [ 873.244567][T26587] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.244948][T26587] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.721359][T26587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.965140][T26587] v: left promiscuous mode [ 874.013399][T26587] veth1_vlan: left allmulticast mode [ 874.172497][T26587] batman_adv: batadv0: Interface deactivated: wlan1 [ 875.021222][T26587] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 875.066737][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4745'. [ 875.126008][T26608] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 875.175941][T26628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 875.192959][ T200] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.192995][ T200] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.194071][ T200] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.194100][ T200] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.194139][ T200] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.194164][ T200] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.194201][ T200] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.194226][ T200] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.413506][T26617] bridge0: left promiscuous mode [ 875.429888][T26617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.444703][T26617] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.535313][T26617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 875.555680][T26617] veth1_vlan: left promiscuous mode [ 875.566565][T26617] veth0_vlan: left promiscuous mode [ 875.574517][T26617] veth0_vlan: entered promiscuous mode [ 875.582725][T26617] veth1_vlan: entered promiscuous mode [ 875.590254][T26617] veth1_vlan: entered allmulticast mode [ 875.600669][T26617] veth1_macvtap: left promiscuous mode [ 875.608024][T26617] veth0_macvtap: left promiscuous mode [ 875.615725][T26617] veth0_macvtap: entered promiscuous mode [ 875.623464][T26617] veth1_macvtap: entered promiscuous mode [ 875.645053][T26617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 875.657685][T26617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.666788][T26617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 875.676775][T26617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 875.686932][T26617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 875.696015][T26617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 875.710766][T26617] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 875.726916][T26617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 875.735947][T26617] 8021q: adding VLAN 0 to HW filter on device bond8 [ 875.744868][T26617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 875.757977][T26617] 8021q: adding VLAN 0 to HW filter on device eth0 [ 875.767817][T26617] 8021q: adding VLAN 0 to HW filter on device eth1 [ 875.777139][T26617] 8021q: adding VLAN 0 to HW filter on device eth2 [ 875.787492][T26617] 8021q: adding VLAN 0 to HW filter on device eth3 [ 876.061130][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.061403][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.065324][T26621] netlink: 'syz.0.4747': attribute type 3 has an invalid length. [ 876.066128][T26621] netlink: 'syz.0.4747': attribute type 3 has an invalid length. [ 876.070473][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.070504][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.070541][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.070563][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.083073][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.083108][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.290044][T26650] netlink: 'syz.0.4752': attribute type 11 has an invalid length. [ 876.335383][T26628] .`: (slave bond_slave_1): Releasing backup interface [ 876.367607][ T5755] bridge0: entered promiscuous mode [ 876.618441][T26658] xt_connbytes: Forcing CT accounting to be enabled [ 876.668580][T25357] wg2 speed is unknown, defaulting to 1000 [ 876.668625][T25357] syz2: Port: 1 Link ACTIVE [ 876.802608][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 877.151962][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 877.152260][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 877.177092][ T6488] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 877.314236][ T5755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 877.457841][ T5755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 877.788174][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4759'. [ 877.890697][T26692] sit0: left promiscuous mode [ 878.399875][T26692] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 878.751207][T26692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 878.776857][T26692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 878.808705][T26692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 878.975776][T26692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 879.016187][T26692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 879.026730][T26723] netlink: 'syz.2.4766': attribute type 1 has an invalid length. [ 879.051386][T26719] tipc: Enabling of bearer rejected, already enabled [ 879.068654][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4766'. [ 879.338880][T26734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4766'. [ 879.406019][T26723] bond3: entered promiscuous mode [ 879.413367][T26723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.462808][T26734] bond3: entered allmulticast mode [ 879.610780][T26722] bond3: (slave bridge5): making interface the new active one [ 879.622006][T26722] bridge5: entered promiscuous mode [ 879.622276][T26722] bridge5: entered allmulticast mode [ 879.640089][T26722] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 880.025489][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4770'. [ 880.128144][T26745] batadv0: entered promiscuous mode [ 880.147411][T26745] macsec1: entered promiscuous mode [ 880.153200][T26745] macsec1: entered allmulticast mode [ 880.158646][T26745] batadv0: entered allmulticast mode [ 880.165493][T26745] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 880.174778][T26745] batadv0: left allmulticast mode [ 880.175017][T26745] batadv0: left promiscuous mode [ 880.232598][T26753] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 880.292243][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 90 seconds [ 880.292521][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 90 seconds [ 880.292549][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 90 seconds [ 880.292573][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 90 seconds [ 880.344739][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'. [ 880.415641][T26753] sock: sock_set_timeout: `syz.0.4775' (pid 26753) tries to set negative timeout [ 880.574273][T26773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.698852][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 880.736173][T26778] ovs-system: entered promiscuous mode [ 880.853426][T26780] FAULT_INJECTION: forcing a failure. [ 880.853426][T26780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.853679][T26780] CPU: 1 UID: 0 PID: 26780 Comm: syz.3.4780 Not tainted syzkaller #0 PREEMPT(full) [ 880.853703][T26780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.853714][T26780] Call Trace: [ 880.853722][T26780] [ 880.853731][T26780] dump_stack_lvl+0xe8/0x150 [ 880.853764][T26780] should_fail_ex+0x410/0x560 [ 880.853799][T26780] _copy_from_user+0x2d/0xb0 [ 880.853820][T26780] kstrtouint_from_user+0xd6/0x180 [ 880.853849][T26780] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 880.853884][T26780] ? lock_acquire+0x115/0x350 [ 880.853918][T26780] proc_fail_nth_write+0x8e/0x210 [ 880.853945][T26780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 880.853980][T26780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 880.854006][T26780] vfs_write+0x296/0xba0 [ 880.854041][T26780] ? __pfx_vfs_write+0x10/0x10 [ 880.854068][T26780] ? __fget_files+0x2a/0x420 [ 880.854096][T26780] ? __fget_files+0x3a2/0x420 [ 880.854118][T26780] ? __fget_files+0x2a/0x420 [ 880.854150][T26780] ksys_write+0x150/0x270 [ 880.854178][T26780] ? __pfx_ksys_write+0x10/0x10 [ 880.854215][T26780] do_syscall_64+0x166/0x520 [ 880.854240][T26780] ? trace_irq_disable+0x3b/0x140 [ 880.854258][T26780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.854276][T26780] ? clear_bhb_loop+0x70/0xc0 [ 880.854300][T26780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.854318][T26780] RIP: 0033:0x7f4f15f5e98e [ 880.854336][T26780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.854352][T26780] RSP: 002b:00007f4f16ddcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.854373][T26780] RAX: ffffffffffffffda RBX: 00007f4f16ddd6c0 RCX: 00007f4f15f5e98e [ 880.854387][T26780] RDX: 0000000000000001 RSI: 00007f4f16ddd0a0 RDI: 0000000000000004 [ 880.854400][T26780] RBP: 00007f4f16ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 880.854412][T26780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.854423][T26780] R13: 00007f4f16226038 R14: 00007f4f16225fa0 R15: 00007ffc1f77cfe8 [ 880.854455][T26780] [ 880.963506][T26753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.233118][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 881.514560][T26801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4785'. [ 881.679263][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 881.836794][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4786'. [ 882.299179][T26823] syzkaller0: entered promiscuous mode [ 882.299616][T26823] syzkaller0: entered allmulticast mode [ 882.390517][T26827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4790'. [ 882.390565][T26827] openvswitch: netlink: Flow key attr not present in new flow. [ 882.685706][T26819] netlink: 'syz.4.4788': attribute type 4 has an invalid length. [ 882.759558][T26845] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4793'. [ 883.009309][T26856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4795'. [ 883.021147][T26856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4795'. [ 883.054606][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4797'. [ 883.185296][ T31] audit: type=1800 audit(1788760534.617:15): pid=26865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4798" name="memory.events" dev="tmpfs" ino=1784 res=0 errno=0 [ 883.278560][T26870] netlink: 'syz.2.4799': attribute type 11 has an invalid length. [ 884.075943][T26821] wg2 speed is unknown, defaulting to 1000 [ 884.083159][T26821] lo speed is unknown, defaulting to 1000 [ 885.123912][T26916] syzkaller0: entered promiscuous mode [ 885.129905][T26916] syzkaller0: entered allmulticast mode [ 886.603963][T26879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.862581][T26936] __nla_validate_parse: 2 callbacks suppressed [ 886.862880][T26936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4811'. [ 886.863114][T26936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4811'. [ 887.036908][T26942] Bluetooth: MGMT ver 1.23 [ 887.246744][T26953] netlink: 'syz.2.4814': attribute type 1 has an invalid length. [ 887.487517][T26973] x_tables: duplicate underflow at hook 1 [ 887.599770][T26957] tipc: New replicast peer: 255.255.255.255 [ 887.600694][T26957] tipc: Enabled bearer , priority 10 [ 887.731778][T26953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 888.184438][T26989] netlink: 'syz.1.4817': attribute type 7 has an invalid length. [ 888.655272][T26954] bond4: entered allmulticast mode [ 888.675337][T26954] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4814'. [ 888.880448][T26994] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4818'. [ 888.943565][T26995] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4818'. [ 889.132882][ T6500] tipc: Node number set to 1494569365 [ 889.234483][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.735619][T27063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4832'. [ 890.780880][T27063] macvtap0: entered allmulticast mode [ 890.788181][T27063] dummy0: entered allmulticast mode [ 890.847956][T27067] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4832'. [ 890.848000][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4832'. [ 890.898183][T27063] dummy0: left allmulticast mode [ 891.009454][ T6289] tipc: Subscription rejected, illegal request [ 891.245178][T27059] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 891.245615][T27059] bridge6: entered allmulticast mode [ 891.357366][T27067] macvtap0: entered allmulticast mode [ 891.357629][T27067] dummy0: entered allmulticast mode [ 891.367920][T27067] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 891.418755][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'. [ 891.749179][T27067] dummy0: left allmulticast mode [ 892.037001][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4835'. [ 892.037235][T27088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4835'. [ 892.037255][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4835'. [ 892.037979][T27088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4835'. [ 892.037995][T27088] netlink: 'syz.0.4835': attribute type 6 has an invalid length. [ 892.283887][T27095] netlink: 'syz.2.4837': attribute type 13 has an invalid length. [ 893.301316][T27106] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 893.437593][T27115] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 893.943216][T27171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4846'. [ 894.525781][T27170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.526364][T27161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.559577][T27174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.023685][T27200] Cannot find add_set index 34 as target [ 895.446919][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'. [ 895.465795][T27221] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4857'. [ 895.798783][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4856'. [ 895.859353][T27215] hsr_slave_1 (unregistering): left promiscuous mode [ 896.265532][T27256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4863'. [ 896.476258][ T31] audit: type=1804 audit(1788760547.907:16): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4863" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2201 res=1 errno=0 [ 896.499362][ T31] audit: type=1800 audit(1788760547.907:17): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.499427][ T31] audit: type=1800 audit(1788760547.907:18): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.499472][ T31] audit: type=1804 audit(1788760547.907:19): pid=27261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4863" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2201 res=1 errno=0 [ 896.499514][ T31] audit: type=1800 audit(1788760547.907:20): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.532924][ T31] audit: type=1800 audit(1788760547.957:21): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.532982][ T31] audit: type=1800 audit(1788760547.957:22): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.565426][ T31] audit: type=1804 audit(1788760547.977:23): pid=27261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4863" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2201 res=1 errno=0 [ 896.602869][ T31] audit: type=1800 audit(1788760548.017:24): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.602924][ T31] audit: type=1800 audit(1788760548.017:25): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4863" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 896.880607][T27274] netlink: Invalid conntrack helper [ 896.887725][T27274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.888567][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 898.035190][T27306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4876'. [ 898.696337][T27328] netlink: 'syz.1.4883': attribute type 27 has an invalid length. [ 898.849490][T27334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4885'. [ 898.849542][T27334] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 899.837307][T27368] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4894'. [ 899.860283][T27367] dvmrp0: entered allmulticast mode [ 899.930374][T27367] dvmrp0: left allmulticast mode [ 900.191321][T27380] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 900.206635][T27380] x_tables: duplicate underflow at hook 2 [ 900.272256][T27382] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4899'. [ 900.784037][T27394] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4901'. [ 900.788345][T27400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4902'. [ 900.797124][T27394] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4901'. [ 901.128771][T27410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4903'. [ 901.387125][T27425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4907'. [ 901.509832][T27425] netlink: 'syz.2.4907': attribute type 1 has an invalid length. [ 901.509875][T27425] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4907'. [ 901.749636][T27444] netlink: 'syz.0.4908': attribute type 13 has an invalid length. [ 901.749702][T27444] netlink: 'syz.0.4908': attribute type 58 has an invalid length. [ 902.689783][T27474] xt_limit: Overflow, try lower: 268435456/134217728 [ 902.781977][T27477] ip_tables: iptables: counters copy to user failed while replacing table [ 903.365652][T27495] __nla_validate_parse: 1 callbacks suppressed [ 903.372509][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4918'. [ 903.460115][T27498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4919'. [ 904.010937][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4927'. [ 904.084588][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4927'. [ 904.211892][T27532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4929'. [ 904.447152][T27535] syzkaller0: entered promiscuous mode [ 904.456470][T27535] syzkaller0: entered allmulticast mode [ 904.593059][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 904.632445][T27539] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4930'. [ 905.259627][T27565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4936'. [ 905.323158][T27568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4936'. [ 905.514746][T27565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 905.561958][T27568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.586500][T27568] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 906.425710][T27601] xt_TPROXY: Can be used only with -p tcp or -p udp [ 906.976664][T27611] macsec1: entered allmulticast mode [ 906.982377][T27611] geneve1: entered allmulticast mode [ 906.999193][T27611] geneve1: left allmulticast mode [ 908.535462][T27654] netlink: 'syz.1.4954': attribute type 4 has an invalid length. [ 908.580307][T27659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4956'. [ 910.260125][T27659] netlink: 'syz.0.4956': attribute type 6 has an invalid length. [ 910.406777][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 120 seconds [ 910.407045][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 120 seconds [ 910.407073][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 120 seconds [ 910.407099][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 120 seconds [ 911.254222][T27684] netlink: 'syz.0.4961': attribute type 10 has an invalid length. [ 911.343399][T27652] wg2 speed is unknown, defaulting to 1000 [ 911.384395][T27652] lo speed is unknown, defaulting to 1000 [ 911.665245][T27694] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 911.831209][T27694] 8021q: adding VLAN 0 to HW filter on device bond11 [ 912.167004][T27708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4962'. [ 912.600735][T27694] bond11: (slave dummy0): making interface the new active one [ 912.615153][T27694] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 912.808143][ T6289] bond11: (slave dummy0): link status definitely down, disabling slave [ 912.878235][ T6289] bond11: now running without any active interface! [ 913.674543][T27744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4970'. [ 913.684818][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4970'. [ 914.025500][T27758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4973'. [ 914.541062][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4975'. [ 914.551090][T27770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.884496][T27783] block nbd5: shutting down sockets [ 915.108018][T27786] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4982'. [ 915.140556][T27786] team0: Port device dummy0 removed [ 915.413491][T27802] syzkaller0: entered promiscuous mode [ 915.413867][T27802] syzkaller0: entered allmulticast mode [ 915.422047][T27808] syzkaller0: Caught tx_queue_len zero misconfig [ 916.024253][T27831] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4991'. [ 916.055626][T27831] syzkaller1: entered promiscuous mode [ 916.062526][T27831] syzkaller1: entered allmulticast mode [ 916.438864][T27835] sctp: [Deprecated]: syz.0.4993 (pid 27835) Use of int in max_burst socket option deprecated. [ 916.438864][T27835] Use struct sctp_assoc_value instead [ 917.382219][T27867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5001'. [ 917.457826][T27869] x_tables: duplicate underflow at hook 2 [ 917.468532][T27869] netlink: 'syz.1.5002': attribute type 21 has an invalid length. [ 917.480268][T27869] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5002'. [ 917.482030][T27869] netlink: 'syz.1.5002': attribute type 5 has an invalid length. [ 917.482291][T27869] netlink: 'syz.1.5002': attribute type 6 has an invalid length. [ 917.482312][T27869] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5002'. [ 917.729654][T27852] macvlan0: entered promiscuous mode [ 918.384717][T27897] netlink: 'syz.4.5004': attribute type 1 has an invalid length. [ 918.700645][T27897] 8021q: adding VLAN 0 to HW filter on device bond12 [ 918.785117][T27854] wg2 speed is unknown, defaulting to 1000 [ 918.802946][T27854] lo speed is unknown, defaulting to 1000 [ 919.333005][T27931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5011'. [ 919.720846][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5013'. [ 919.721161][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5013'. [ 920.032221][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5013'. [ 920.301679][T27954] bridge6: entered promiscuous mode [ 920.307359][T27954] bridge6: entered allmulticast mode [ 920.452474][T27967] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5018'. [ 921.733915][T28004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5023'. [ 921.846419][T28006] ip_tables: iptables: counters copy to user failed while replacing table [ 921.943178][T28003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5023'. [ 922.650588][T28027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5028'. [ 922.835161][T28039] netlink: 'syz.4.5030': attribute type 6 has an invalid length. [ 922.835207][T28039] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.912726][T28039] netlink: 'syz.4.5030': attribute type 1 has an invalid length. [ 923.257056][T28049] netlink: 'syz.3.5032': attribute type 1 has an invalid length. [ 923.257101][T28049] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5032'. [ 923.340184][T28048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5033'. [ 923.437030][T28054] ipvlan2: entered allmulticast mode [ 923.437567][T28054] macvlan1: entered allmulticast mode [ 923.451911][T28054] batman_adv: batadv0: Adding interface: ipvlan2 [ 923.452149][T28054] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.452180][T28054] batman_adv: batadv0: Interface activated: ipvlan2 [ 923.562668][T28061] syzkaller0: entered promiscuous mode [ 923.562717][T28061] syzkaller0: entered allmulticast mode [ 924.551195][T28093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.590472][T28093] __nla_validate_parse: 1 callbacks suppressed [ 924.590511][T28093] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5042'. [ 925.387771][T28118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5049'. [ 925.795592][T28126] nbd: must specify an index to disconnect [ 925.964865][T28126] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5051'. [ 926.322061][T28151] netlink: 'syz.3.5057': attribute type 12 has an invalid length. [ 926.340157][T28151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 926.435931][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5059'. [ 926.630567][T28158] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5059'. [ 927.486239][T28175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5063'. [ 928.071336][T28178] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5063'. [ 929.131586][T28139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.496347][T28199] netlink: 'syz.0.5064': attribute type 1 has an invalid length. [ 929.496602][T28199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5064'. [ 929.591414][T28216] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5068'. [ 929.887567][T28220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5072'. [ 929.916152][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 929.916397][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5072'. [ 929.928165][T28220] netlink: 'syz.4.5072': attribute type 4 has an invalid length. [ 929.928188][T28220] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5072'. [ 929.996950][T28220] .`: renamed from bond0 [ 930.109870][T28232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5074'. [ 930.570703][T28247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5077'. [ 930.889607][T28257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5080'. [ 931.247183][T28268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5082'. [ 931.306118][T28270] netlink: 'syz.1.5084': attribute type 11 has an invalid length. [ 931.708303][T28276] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5085'. [ 932.022719][T28281] bridge_slave_0: left promiscuous mode [ 932.035221][T28281] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.068672][T28281] bridge_slave_1: left allmulticast mode [ 932.068718][T28281] bridge_slave_1: left promiscuous mode [ 932.068972][T28281] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.226676][T28281] bond0: (slave bond_slave_0): Releasing backup interface [ 932.255430][T28281] bond0: (slave bond_slave_1): Releasing backup interface [ 932.294981][T28281] team0: Port device team_slave_0 removed [ 932.317813][T28281] team0: Port device team_slave_1 removed [ 932.325482][T28281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 932.781891][T28314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 932.843599][T28315] syzkaller0: entered promiscuous mode [ 932.843642][T28315] syzkaller0: entered allmulticast mode [ 932.911944][T28310] xt_LOG: level 9 >= 8 [ 933.420806][T28312] syzkaller1: entered promiscuous mode [ 933.427288][T28312] syzkaller1: entered allmulticast mode [ 933.631930][T28337] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 933.929525][T28341] netlink: 'syz.0.5102': attribute type 4 has an invalid length. [ 934.298645][T28356] netlink: 'syz.2.5107': attribute type 1 has an invalid length. [ 934.487748][T28356] bond8: entered promiscuous mode [ 934.510395][T28356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 934.685796][T28362] bond8: (slave bridge7): making interface the new active one [ 934.694177][T28362] bridge7: entered promiscuous mode [ 934.701964][T28362] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 935.174566][T28378] __nla_validate_parse: 4 callbacks suppressed [ 935.182570][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5112'. [ 935.282597][T28380] tipc: Enabling of bearer rejected, failed to enable media [ 935.513074][T28391] tipc: Enabling of bearer rejected, failed to enable media [ 935.523488][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.523549][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.532312][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.532350][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.953080][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.188375][T28407] netlink: 'syz.0.5119': attribute type 1 has an invalid length. [ 936.289401][T28412] netlink: 'syz.1.5121': attribute type 15 has an invalid length. [ 936.305744][T28409] netlink: 'syz.4.5120': attribute type 2 has an invalid length. [ 936.305990][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5120'. [ 936.342351][T28415] netlink: 'syz.1.5121': attribute type 15 has an invalid length. [ 936.472584][T28420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5123'. [ 936.560846][T28422] netlink: 'syz.3.5125': attribute type 12 has an invalid length. [ 936.684091][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5123'. [ 936.993134][T24730] Bluetooth: hci4: command 0x0406 tx timeout [ 937.093359][T28444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5128'. [ 937.533210][T28452] IPv6: NLM_F_CREATE should be specified when creating new route [ 937.533332][T28452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.533362][T28452] IPv6: NLM_F_CREATE should be set when creating new route [ 937.533414][T28452] IPv6: NLM_F_CREATE should be set when creating new route [ 937.533445][T28452] IPv6: NLM_F_CREATE should be set when creating new route [ 937.865585][T28464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5135'. [ 938.188681][T28478] syzkaller0: entered promiscuous mode [ 938.188734][T28478] syzkaller0: entered allmulticast mode [ 938.450123][T28484] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5140'. [ 938.491926][T28484] macsec2: entered promiscuous mode [ 938.492168][T28484] hsr0: entered promiscuous mode [ 938.508200][T28484] hsr0: left promiscuous mode [ 938.648779][T28491] netlink: 'syz.4.5142': attribute type 1 has an invalid length. [ 938.700579][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5144'. [ 938.784614][T28491] bond0: entered promiscuous mode [ 938.790998][T28491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.850287][T28496] bond0: (slave bridge7): making interface the new active one [ 938.859648][T28496] bridge7: entered promiscuous mode [ 938.867379][T28496] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 938.951434][T28495] bond0: (slave bridge8): Enslaving as a backup interface with an up link [ 939.098566][T28512] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 939.099095][T28512] syzkaller1: linktype set to 773 [ 939.126782][T28515] ip6t_hbh: Not strict - not implemented [ 939.136380][T28515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5148'. [ 939.379414][T28523] sctp: [Deprecated]: syz.4.5151 (pid 28523) Use of int in max_burst socket option deprecated. [ 939.379414][T28523] Use struct sctp_assoc_value instead [ 939.607832][T28534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5153'. [ 940.433814][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 150 seconds [ 940.434078][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 150 seconds [ 940.434107][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 150 seconds [ 940.434132][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 150 seconds [ 942.677831][T28531] lo: MTU too low for tipc bearer [ 942.683637][T28531] tipc: Enabling of bearer rejected, failed to enable media [ 942.694131][T28549] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 942.695312][T28554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 942.731155][T28559] veth0_virt_wifi: entered allmulticast mode [ 943.419349][T28565] veth1_vlan: left allmulticast mode [ 943.608824][T28579] __nla_validate_parse: 1 callbacks suppressed [ 943.609073][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 943.610367][T28583] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 943.635717][T12600] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.635797][T12600] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.648280][ T6289] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.648316][ T6289] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.648406][ T6289] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.648430][ T6289] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.648464][ T6289] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.648486][ T6289] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.705077][T10103] wg2 speed is unknown, defaulting to 1000 [ 943.705103][T10103] syz2: Port: 1 Link DOWN [ 943.785987][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'. [ 944.048231][T28595] vti1: entered promiscuous mode [ 944.049915][T28595] vti1: entered allmulticast mode [ 944.227827][T28594] bond13 (unregistering): Released all slaves [ 944.642416][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.644650][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.644811][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.644973][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.645093][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.645210][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.645324][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.645445][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 944.851185][T28627] syzkaller0: entered promiscuous mode [ 944.860528][T28627] syzkaller0: entered allmulticast mode [ 945.569171][T28641] netlink: 'syz.2.5177': attribute type 21 has an invalid length. [ 945.569284][T28641] netlink: 'syz.2.5177': attribute type 5 has an invalid length. [ 946.012246][T28652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.501741][T28672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 947.258096][T28698] netlink: 'syz.2.5188': attribute type 1 has an invalid length. [ 947.538238][T28664] wg2 speed is unknown, defaulting to 1000 [ 947.629627][T28664] lo speed is unknown, defaulting to 1000 [ 948.525803][T28719] netlink: 'syz.4.5191': attribute type 3 has an invalid length. [ 948.964117][T28725] ip6gretap1: entered allmulticast mode [ 948.972248][T28732] siw: device registration error -23 [ 948.991536][T28725] batman_adv: batadv0: Adding interface: ip6gretap1 [ 948.991778][T28725] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 948.991808][T28725] batman_adv: batadv0: Interface activated: ip6gretap1 [ 949.089786][T28726] syzkaller0: entered promiscuous mode [ 949.090204][T28726] syzkaller0: entered allmulticast mode [ 949.955891][T28747] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 949.971423][T28747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.972437][T28747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 949.981060][T28753] __nla_validate_parse: 70 callbacks suppressed [ 949.981079][T28753] netlink: 844 bytes leftover after parsing attributes in process `syz.0.5201'. [ 949.981098][T28753] netlink: 844 bytes leftover after parsing attributes in process `syz.0.5201'. [ 950.037286][T28754] netlink: 'syz.0.5201': attribute type 1 has an invalid length. [ 950.586906][T28756] bond12: (slave gretap1): making interface the new active one [ 950.694151][T28756] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 950.877172][T28775] netlink: 'syz.2.5206': attribute type 10 has an invalid length. [ 951.134181][T28785] netlink: 'syz.0.5207': attribute type 4 has an invalid length. [ 951.135651][T28786] netlink: 'syz.0.5207': attribute type 4 has an invalid length. [ 951.511971][T28797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.512084][T28797] hsr0: entered promiscuous mode [ 951.769997][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5211'. [ 951.770059][T28799] block nbd5: Unsupported socket: should be TCP or UNIX. [ 951.790387][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5211'. [ 951.790433][T28801] block nbd5: Unsupported socket: should be TCP or UNIX. [ 951.861939][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'. [ 952.082734][T28802] team0: entered promiscuous mode [ 952.085564][T28802] team0: entered allmulticast mode [ 952.089387][T28802] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.089884][T28812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5214'. [ 952.103581][T28813] netlink: 'syz.2.5214': attribute type 8 has an invalid length. [ 952.103603][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5214'. [ 952.124080][T28764] wg2 speed is unknown, defaulting to 1000 [ 952.136710][T28764] lo speed is unknown, defaulting to 1000 [ 952.539484][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'. [ 952.539529][T28819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5215'. [ 952.554867][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'. [ 952.842545][T28829] ip_tables: iptables: counters copy to user failed while replacing table [ 952.948607][T28826] xt_CT: No such helper "netbios-ns" [ 953.325807][T28763] wg2 speed is unknown, defaulting to 1000 [ 953.337022][T28763] lo speed is unknown, defaulting to 1000 [ 953.842333][T28839] syzkaller0: entered promiscuous mode [ 953.849388][T28839] syzkaller0: entered allmulticast mode [ 954.130916][T28870] netlink: 'syz.1.5224': attribute type 6 has an invalid length. [ 958.095446][T28870] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 958.198256][T28883] __nla_validate_parse: 3 callbacks suppressed [ 958.204716][T28883] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5225'. [ 958.268772][T28886] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5225'. [ 958.279645][T28886] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5225'. [ 958.446116][T28875] syzkaller0: entered promiscuous mode [ 958.446159][T28875] syzkaller0: entered allmulticast mode [ 958.870583][T28899] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 962.658175][T25357] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 962.734246][T28889] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 962.993400][T28905] macvlan2: entered promiscuous mode [ 962.999035][T28905] vlan4: entered promiscuous mode [ 963.005176][T28905] gretap0: entered promiscuous mode [ 963.010552][T28914] netlink: 'syz.4.5234': attribute type 1 has an invalid length. [ 963.162387][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 963.171775][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5235'. [ 963.187008][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 963.196962][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5235'. [ 963.332243][T28914] 8021q: adding VLAN 0 to HW filter on device bond13 [ 964.329934][T28954] syzkaller0: entered promiscuous mode [ 964.330397][T28954] syzkaller0: entered allmulticast mode [ 964.438827][T28959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5245'. [ 964.448517][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5245'. [ 964.459780][T28959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5245'. [ 964.621549][T28964] syzkaller0: left promiscuous mode [ 964.621597][T28964] syzkaller0: left allmulticast mode [ 964.745249][T28959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5245'. [ 964.914261][T28970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5247'. [ 964.918122][T28970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5247'. [ 964.919335][T28970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 965.091751][T28979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5248'. [ 965.105240][T28974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5248'. [ 965.239053][T28985] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5251'. [ 965.360857][T28986] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 965.438996][T28996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5254'. [ 965.820987][T29010] syzkaller0: entered promiscuous mode [ 965.829010][T29010] syzkaller0: entered allmulticast mode [ 965.958810][T29012] xt_hl: Unknown Hop Limit match mode: 4 [ 966.399635][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 966.399692][ T31] audit: type=1804 audit(1788760617.827:57): pid=29027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5263" name="/newroot/444/memory.events" dev="tmpfs" ino=2307 res=1 errno=0 [ 966.399748][ T31] audit: type=1800 audit(1788760617.827:58): pid=29027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5263" name="memory.events" dev="tmpfs" ino=2307 res=0 errno=0 [ 966.747404][T29034] 8021q: adding VLAN 0 to HW filter on device bond13 [ 966.795148][T29038] macvlan3: entered promiscuous mode [ 966.802366][T29038] macvlan3: entered allmulticast mode [ 966.847714][T29044] pim6reg1: entered promiscuous mode [ 966.848164][T29044] pim6reg1: entered allmulticast mode [ 966.878971][T29048] Bluetooth: MGMT ver 1.23 [ 967.632046][T29063] syzkaller0: entered promiscuous mode [ 967.645911][T29063] syzkaller0: entered allmulticast mode [ 970.529644][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 180 seconds [ 970.529887][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 180 seconds [ 970.529916][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 180 seconds [ 970.529942][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 180 seconds [ 970.705463][ T4981] udevd[4981]: worker [24404] /devices/virtual/block/nbd3 timeout; kill it [ 970.705579][ T4981] udevd[4981]: seq 31334 '/devices/virtual/block/nbd3' killed [ 972.602139][T29112] netlink: Invalid conntrack timeout [ 972.608215][T29112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.842689][T29126] netlink: 'syz.1.5285': attribute type 1 has an invalid length. [ 973.170652][T29087] wg2 speed is unknown, defaulting to 1000 [ 973.185506][T29087] lo speed is unknown, defaulting to 1000 [ 973.653710][T29147] __nla_validate_parse: 4 callbacks suppressed [ 973.653976][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5289'. [ 973.688525][T29147] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5289'. [ 973.688779][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5289'. [ 973.773319][T29143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5290'. [ 973.843668][T29157] netlink: 'syz.3.5292': attribute type 13 has an invalid length. [ 973.856616][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 974.080885][T29164] netlink: ct family unspecified [ 974.088397][T29164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.369421][T29171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5296'. [ 974.369502][T29171] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 974.935555][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 974.948167][T29183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5298'. [ 975.362572][T29196] netlink: Failed to add GPL helper -22 [ 975.362644][T29196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.571182][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5303'. [ 975.573143][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5303'. [ 975.687295][T29209] xt_hashlimit: size too large, truncated to 1048576 [ 975.687334][T29209] xt_hashlimit: max too large, truncated to 1048576 [ 975.687567][T29209] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old? [ 975.750352][T29206] erspan0: entered promiscuous mode [ 975.768459][T29206] gretap0: entered promiscuous mode [ 975.773283][T29206] debugfs: 'hsr1' already exists in 'hsr' [ 975.773305][T29206] Cannot create hsr debugfs directory [ 975.773460][T29206] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 975.773478][T29206] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 976.382383][T29222] tipc: Enabled bearer , priority 0 [ 976.396246][T29222] syzkaller0: mtu less than device minimum [ 976.645200][T29228] macsec1: entered promiscuous mode [ 976.651593][T29228] hsr0: entered promiscuous mode [ 976.704190][T29228] hsr0: left promiscuous mode [ 976.788893][T29231] macsec1: entered promiscuous mode [ 976.795620][T29231] hsr0: entered promiscuous mode [ 976.809892][T29231] hsr0: left promiscuous mode [ 976.970649][T29240] syzkaller0: entered promiscuous mode [ 976.971099][T29240] syzkaller0: entered allmulticast mode [ 977.172310][T29249] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 977.532352][T29261] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 977.753881][T29273] syzkaller0: entered promiscuous mode [ 977.759507][T29273] syzkaller0: entered allmulticast mode [ 978.877637][T29307] FAULT_INJECTION: forcing a failure. [ 978.877637][T29307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.898888][T29307] CPU: 0 UID: 0 PID: 29307 Comm: syz.4.5328 Not tainted syzkaller #0 PREEMPT(full) [ 978.898920][T29307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.898934][T29307] Call Trace: [ 978.898944][T29307] [ 978.898955][T29307] dump_stack_lvl+0xe8/0x150 [ 978.898998][T29307] should_fail_ex+0x410/0x560 [ 978.899041][T29307] _copy_from_user+0x2d/0xb0 [ 978.899069][T29307] ___sys_sendmsg+0x1c6/0x360 [ 978.899096][T29307] ? __lock_acquire+0x6df/0x2e50 [ 978.899126][T29307] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.899198][T29307] ? __fget_files+0x2a/0x420 [ 978.899228][T29307] ? __fget_files+0x3a2/0x420 [ 978.899268][T29307] __x64_sys_sendmsg+0x1b1/0x290 [ 978.899295][T29307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.899344][T29307] do_syscall_64+0x166/0x520 [ 978.899379][T29307] ? trace_irq_disable+0x3b/0x140 [ 978.899403][T29307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.899427][T29307] ? clear_bhb_loop+0x70/0xc0 [ 978.899454][T29307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.899477][T29307] RIP: 0033:0x7faca339e159 [ 978.899500][T29307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.899519][T29307] RSP: 002b:00007faca4275028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.899545][T29307] RAX: ffffffffffffffda RBX: 00007faca3625fa0 RCX: 00007faca339e159 [ 978.899561][T29307] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 978.899576][T29307] RBP: 00007faca4275090 R08: 0000000000000000 R09: 0000000000000000 [ 978.899591][T29307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.899605][T29307] R13: 00007faca3626038 R14: 00007faca3625fa0 R15: 00007ffe919f10c8 [ 978.899642][T29307] [ 979.577427][T29344] __nla_validate_parse: 8 callbacks suppressed [ 979.577705][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5335'. [ 979.577741][T29344] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5335'. [ 979.601175][T29342] syzkaller0: Caught tx_queue_len zero misconfig [ 979.675470][T29342] syzkaller0: entered promiscuous mode [ 979.675888][T29342] syzkaller0: entered allmulticast mode [ 979.710088][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5334'. [ 979.731417][T29349] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5336'. [ 979.921633][T29350] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 980.263124][T29359] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 980.280402][T29359] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 980.297991][T29359] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 980.349441][T29359] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 981.002697][T29377] bridge0: left promiscuous mode [ 981.028450][T29377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.501062][T29377] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 981.561469][T25357] wg2 speed is unknown, defaulting to 1000 [ 981.561515][T25357] syz2: Port: 1 Link ACTIVE [ 981.620847][T29392] netlink: 'syz.3.5348': attribute type 3 has an invalid length. [ 981.656007][T29388] netlink: 'syz.4.5347': attribute type 13 has an invalid length. [ 981.811792][T29392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.824304][T29392] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.921399][T29392] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 982.006869][T10103] lo speed is unknown, defaulting to 1000 [ 982.006910][T10103] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 982.321374][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 982.767343][T29427] veth0_to_bridge: entered promiscuous mode [ 982.774964][T29427] macvtap1: entered allmulticast mode [ 982.782454][T29427] veth0_to_bridge: entered allmulticast mode [ 982.837865][T29427] veth0_to_bridge: left allmulticast mode [ 982.838676][T29427] veth0_to_bridge: left promiscuous mode [ 983.059153][T29436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5357'. [ 983.085067][T29440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5358'. [ 983.125459][T29436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5357'. [ 983.125780][T29436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5357'. [ 983.126079][T29436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5357'. [ 983.175477][T29436] netlink: 'syz.1.5357': attribute type 10 has an invalid length. [ 983.202227][T29435] netlink: 'syz.1.5357': attribute type 1 has an invalid length. [ 983.587093][T29448] xt_socket: unknown flags 0x4c [ 983.806145][T24570] udevd[24570]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 984.009672][T29457] netlink: 'syz.0.5365': attribute type 4 has an invalid length. [ 984.038145][T29457] x_tables: duplicate entry at hook 1 [ 984.205668][T29465] FAULT_INJECTION: forcing a failure. [ 984.205668][T29465] name failslab, interval 1, probability 0, space 0, times 0 [ 984.205919][T29465] CPU: 1 UID: 0 PID: 29465 Comm: syz.1.5362 Not tainted syzkaller #0 PREEMPT(full) [ 984.205944][T29465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 984.205955][T29465] Call Trace: [ 984.205964][T29465] [ 984.205973][T29465] dump_stack_lvl+0xe8/0x150 [ 984.206006][T29465] should_fail_ex+0x410/0x560 [ 984.206039][T29465] ? __alloc_skb+0x1db/0x7a0 [ 984.206068][T29465] should_failslab+0xa8/0x100 [ 984.206118][T29465] ? __alloc_skb+0x1db/0x7a0 [ 984.206142][T29465] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 984.206178][T29465] ? __alloc_skb+0x18d/0x7a0 [ 984.206204][T29465] ? __alloc_skb+0x1db/0x7a0 [ 984.206236][T29465] __alloc_skb+0x1db/0x7a0 [ 984.206267][T29465] alloc_skb_with_frags+0xc6/0x760 [ 984.206343][T29465] sock_alloc_send_pskb+0x878/0x990 [ 984.206375][T29465] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 984.206432][T29465] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 984.206469][T29465] ? dev_get_by_index+0x22/0x2d0 [ 984.206511][T29465] ? dev_get_by_index+0x22/0x2d0 [ 984.206540][T29465] packet_sendmsg+0x31bb/0x4f80 [ 984.206629][T29465] ? up_write+0x19d/0x4a0 [ 984.206664][T29465] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 984.206697][T29465] ? __pfx_process_measurement+0x10/0x10 [ 984.206771][T29465] ? lock_acquire+0x115/0x350 [ 984.206793][T29465] ? __lock_acquire+0x6df/0x2e50 [ 984.206822][T29465] ? __pfx_packet_sendmsg+0x10/0x10 [ 984.206845][T29465] ? aa_sk_perm+0x713/0x900 [ 984.206862][T29465] ? __lock_acquire+0x6df/0x2e50 [ 984.206886][T29465] ? lockdep_unlock+0x66/0xd0 [ 984.206911][T29465] ? __pfx_aa_sk_perm+0x10/0x10 [ 984.206933][T29465] ? aa_sock_msg_perm+0x144/0x210 [ 984.206959][T29465] ? apparmor_socket_sendmsg+0x98/0x360 [ 984.206988][T29465] ? __pfx_packet_sendmsg+0x10/0x10 [ 984.207012][T29465] sock_sendmsg_nosec+0x13a/0x180 [ 984.207040][T29465] ____sys_sendmsg+0x54e/0x850 [ 984.207066][T29465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.207096][T29465] ? import_iovec+0x73/0xa0 [ 984.207121][T29465] ___sys_sendmsg+0x2a5/0x360 [ 984.207140][T29465] ? __lock_acquire+0x6df/0x2e50 [ 984.207170][T29465] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.207225][T29465] ? __fget_files+0x2a/0x420 [ 984.207248][T29465] ? __fget_files+0x3a2/0x420 [ 984.207281][T29465] __x64_sys_sendmsg+0x1b1/0x290 [ 984.207305][T29465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 984.207346][T29465] do_syscall_64+0x166/0x520 [ 984.207373][T29465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.207392][T29465] ? clear_bhb_loop+0x70/0xc0 [ 984.207415][T29465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.207434][T29465] RIP: 0033:0x7f55a419e159 [ 984.207454][T29465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.207470][T29465] RSP: 002b:00007f55a5086028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.207492][T29465] RAX: ffffffffffffffda RBX: 00007f55a4425fa0 RCX: 00007f55a419e159 [ 984.207506][T29465] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 984.207519][T29465] RBP: 00007f55a5086090 R08: 0000000000000000 R09: 0000000000000000 [ 984.207531][T29465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.207543][T29465] R13: 00007f55a4426038 R14: 00007f55a4425fa0 R15: 00007fff22789b58 [ 984.207574][T29465] [ 985.115060][T29485] netlink: 'syz.2.5369': attribute type 23 has an invalid length. [ 985.115305][T29485] IPv6: NLM_F_CREATE should be specified when creating new route [ 985.147886][T29491] netlink: 'syz.3.5371': attribute type 2 has an invalid length. [ 985.156168][T29491] netlink: 'syz.3.5371': attribute type 2 has an invalid length. [ 985.192168][T29499] __nla_validate_parse: 5 callbacks suppressed [ 985.192226][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5369'. [ 985.256323][T29499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5369'. [ 985.438830][ T5634] block nbd5: Receive control failed (result -32) [ 985.448541][T24730] block nbd5: Receive control failed (result -32) [ 985.660097][T29511] team_slave_1: Caught tx_queue_len zero misconfig [ 985.776794][T29523] syz_tun: entered allmulticast mode [ 985.785131][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 985.807853][T29520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5375'. [ 985.808109][T29520] block nbd6: Unsupported socket: should be TCP or UNIX. [ 985.836107][T29523] dvmrp6: entered allmulticast mode [ 985.854483][T29522] syz_tun: left allmulticast mode [ 985.921882][T29527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5382'. [ 986.080292][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'. [ 986.147086][T29531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5381'. [ 986.192566][T29539] syzkaller0: entered promiscuous mode [ 986.193037][T29539] syzkaller0: entered allmulticast mode [ 986.416051][ T31] audit: type=1800 audit(1788760637.847:59): pid=29550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5387" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2124 res=0 errno=0 [ 986.608919][T29558] netlink: 'syz.4.5389': attribute type 2 has an invalid length. [ 986.608962][T29558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5389'. [ 987.418604][T29616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5396'. [ 987.611191][T29617] macvtap1: entered allmulticast mode [ 987.619276][T29617] veth0_to_bridge: entered allmulticast mode [ 987.637185][T29617] veth0_to_bridge: left allmulticast mode [ 987.979285][T29629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5398'. [ 988.185493][T29637] vxcan2: entered allmulticast mode [ 988.490483][T29635] syzkaller0: entered promiscuous mode [ 988.497296][T29635] syzkaller0: entered allmulticast mode [ 988.771294][T29657] ip6gre1: entered promiscuous mode [ 988.771766][T29657] ip6gre1: entered allmulticast mode [ 994.057855][T29715] Bluetooth: hci0: unsupported parameter 5135 [ 994.057898][T29715] Bluetooth: hci0: unsupported parameter 8192 [ 994.057931][T29715] Bluetooth: hci0: unsupported parameter 5135 [ 994.057949][T29715] Bluetooth: hci0: unsupported parameter 8192 [ 994.810232][T29738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 994.926171][T29742] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 994.946186][T29746] xt_check_match_common: 55 callbacks suppressed [ 994.952859][T29746] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 995.070955][T29751] netlink: 'syz.2.5428': attribute type 2 has an invalid length. [ 995.182988][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5428'. [ 995.491859][T29694] wg2 speed is unknown, defaulting to 1000 [ 995.503194][T29694] lo speed is unknown, defaulting to 1000 [ 995.846823][T29700] wg2 speed is unknown, defaulting to 1000 [ 995.856077][T29700] lo speed is unknown, defaulting to 1000 [ 996.159152][T29699] wg2 speed is unknown, defaulting to 1000 [ 996.167412][T29699] lo speed is unknown, defaulting to 1000 [ 998.394320][T29759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5429'. [ 998.846812][T29765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5430'. [ 999.680673][T29779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5435'. [ 1000.224077][T29789] bridge9: entered allmulticast mode [ 1000.297693][T29793] syzkaller0: left promiscuous mode [ 1000.297734][T29793] syzkaller0: left allmulticast mode [ 1000.654130][ T1978] block nbd3: Possible stuck request ffff888027315080: control (read@0,1024B). Runtime 210 seconds [ 1000.654401][ T1978] block nbd3: Possible stuck request ffff888027307000: control (read@1024,1024B). Runtime 210 seconds [ 1000.654439][ T1978] block nbd3: Possible stuck request ffff8880273071c0: control (read@2048,1024B). Runtime 210 seconds [ 1000.654464][ T1978] block nbd3: Possible stuck request ffff888027307380: control (read@3072,1024B). Runtime 210 seconds [ 1001.225843][T29809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1001.239127][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1001.792266][T29826] gre2: entered promiscuous mode [ 1001.792313][T29826] gre2: entered allmulticast mode [ 1002.358152][T29843] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5450'. [ 1002.388761][T29845] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5451'. [ 1002.735322][T29852] netlink: 'syz.4.5452': attribute type 4 has an invalid length. [ 1002.801939][T29847] netlink: 'syz.4.5452': attribute type 4 has an invalid length. [ 1002.823774][T29854] netlink: Conntrack attr has 1 unknown bytes [ 1002.830155][T29854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.892554][T29854] tipc: Enabled bearer , priority 0 [ 1002.904953][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5457'. [ 1002.916340][T29857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1002.925610][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1003.138040][T29865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1003.158251][T29864] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002 [ 1003.280997][T29868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5459'. [ 1003.667196][T29890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1004.252519][T29896] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1004.734571][T29901] netlink: 'syz.1.5468': attribute type 10 has an invalid length. [ 1005.185577][T29901] team0 (unregistering): Port device team_slave_0 removed [ 1005.208341][T29901] team0 (unregistering): Port device team_slave_1 removed [ 1005.229828][T29901] team0 (unregistering): Port device netdevsim1 removed [ 1005.263147][T29928] syzkaller0: entered promiscuous mode [ 1005.263193][T29928] syzkaller0: entered allmulticast mode [ 1005.605705][T29944] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1005.605762][T29944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.327474][T29966] __nla_validate_parse: 1 callbacks suppressed [ 1006.327724][T29966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5481'. [ 1006.446084][T29966] netlink: 'syz.0.5481': attribute type 16 has an invalid length. [ 1006.446129][T29966] netlink: 'syz.0.5481': attribute type 17 has an invalid length. [ 1006.570880][T29966] hsr0: left promiscuous mode [ 1006.585074][T29966] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1006.663407][T29968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1006.971293][T29993] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1007.241282][T30002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1007.915330][T30027] lo: Caught tx_queue_len zero misconfig [ 1007.982401][T30030] siw: device registration error -23 [ 1008.296308][T30034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1008.372575][T30032] syzkaller0: entered promiscuous mode [ 1008.381859][T30032] syzkaller0: entered allmulticast mode [ 1008.734111][T30043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.799020][T30053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1008.921033][T30055] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 1010.039766][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 1010.039822][T30089] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5511'. [ 1010.216538][T30089] xt_CT: No such helper "netbios-ns" [ 1010.313898][T30099] Bluetooth: hci0: unsupported parameter 5135 [ 1010.322105][T30099] Bluetooth: hci0: unsupported parameter 8192 [ 1010.328841][T30099] Bluetooth: hci0: unsupported parameter 5135 [ 1010.337408][T30099] Bluetooth: hci0: unsupported parameter 8192 [ 1010.751420][T30104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1011.114358][T30124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1011.320850][T30132] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1011.500139][T30141] macsec2: entered allmulticast mode [ 1011.500180][T30141] veth1_macvtap: entered allmulticast mode [ 1011.516356][T30141] veth1_macvtap: left allmulticast mode [ 1011.778925][T30152] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 1011.778970][T30152] __nla_validate_parse: 1 callbacks suppressed [ 1011.778998][T30152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5530'. [ 1011.938625][T30159] netlink: 712 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1011.948275][T30159] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1011.959444][T30159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1011.976430][T30159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1012.026253][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1012.044609][T30159] hsr_slave_0: left promiscuous mode [ 1012.851280][T30196] ip_tables: iptables: counters copy to user failed while replacing table [ 1012.998397][T30199] nbd: nbd3 already in use [ 1013.055951][T30213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5546'. [ 1013.059307][T30199] block nbd3: NBD_DISCONNECT [ 1013.059334][T30199] block nbd3: Send disconnect failed -32 [ 1013.059352][T30199] block nbd3: shutting down sockets [ 1013.078846][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.079055][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1013.079118][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.079189][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1013.079210][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.079276][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1013.079294][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.079361][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1013.079571][ T1978] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.079599][ T1978] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1013.080158][ T1978] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.080185][ T1978] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1013.080281][ T1978] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.080305][ T1978] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1013.080397][ T1978] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.080422][ T1978] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1013.080748][ T1978] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.080782][ T1978] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1013.080876][ T1978] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1013.080900][ T1978] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1013.083795][T24404] ldm_validate_partition_table(): Disk read failed. [ 1013.090530][T24404] Dev nbd3: unable to read RDB block 0 [ 1013.097211][T24404] nbd3: unable to read partition table [ 1013.290516][ T4981] udevd[4981]: worker [24404] terminated by signal 9 (Killed) [ 1013.290784][ T4981] udevd[4981]: worker [24404] failed while handling '/devices/virtual/block/nbd3' [ 1013.341435][T30215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5547'. [ 1013.386196][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075a4d800: rx timeout, send abort [ 1013.886272][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075a4d800: abort rx timeout. Force session deactivation [ 1014.050453][T30238] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5550'. [ 1014.060087][T30242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5550'. [ 1014.168996][T30215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.423520][T30248] tap0: tun_chr_ioctl cmd 2147767520 [ 1014.779034][T30254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.834814][T30253] sctp: [Deprecated]: syz.3.5553 (pid 30253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.834814][T30253] Use struct sctp_sack_info instead [ 1014.861841][T30253] x_tables: duplicate underflow at hook 2 [ 1014.888829][ T43] bond0: (slave bridge3): link status definitely down, disabling slave [ 1014.909495][ T43] bond0: now running without any active interface! [ 1014.939050][T30259] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1014.950208][T30259] debugfs: 'hsr1' already exists in 'hsr' [ 1014.956669][T30259] Cannot create hsr debugfs directory [ 1015.149182][T30269] vxcan1: entered allmulticast mode [ 1018.554974][T30296] team0: Port device team_slave_0 removed [ 1018.577501][T30297] syzkaller0: left promiscuous mode [ 1018.587398][T30297] syzkaller0: left allmulticast mode [ 1018.595849][T30299] syzkaller1: entered promiscuous mode [ 1018.601449][T30299] syzkaller1: entered allmulticast mode [ 1019.260778][T30346] __nla_validate_parse: 7 callbacks suppressed [ 1019.268109][T30346] netlink: 4300 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1020.010248][T30357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1020.146721][T30325] wg2 speed is unknown, defaulting to 1000 [ 1020.160359][T30325] lo speed is unknown, defaulting to 1000 [ 1020.189174][T30354] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1020.423980][T30365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5581'. [ 1020.631367][T30372] netlink: 'syz.3.5579': attribute type 1 has an invalid length. [ 1020.681015][T30381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5579'. [ 1020.713611][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1020.779070][T30374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1020.946135][T30375] veth9: entered promiscuous mode [ 1021.167672][T30384] veth11: entered promiscuous mode [ 1021.206675][T30393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5585'. [ 1021.382211][T30395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1021.596795][T30406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5588'. [ 1021.614083][T30406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'. [ 1021.897637][T30410] netlink: 'syz.3.5589': attribute type 2 has an invalid length. [ 1022.017555][T30410] netlink: 'syz.3.5589': attribute type 11 has an invalid length. [ 1022.104510][T30417] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1022.233574][T30422] netlink: 'syz.2.5594': attribute type 10 has an invalid length. [ 1022.682786][T30443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1022.692524][T30443] netlink: 'syz.1.5600': attribute type 7 has an invalid length. [ 1022.700536][T30443] netlink: 'syz.1.5600': attribute type 8 has an invalid length. [ 1022.708880][T30443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1023.740856][T30438] wg2 speed is unknown, defaulting to 1000 [ 1023.754605][T30438] lo speed is unknown, defaulting to 1000 [ 1025.390946][T30473] syzkaller1: entered promiscuous mode [ 1025.397454][T30473] syzkaller1: entered allmulticast mode [ 1026.423112][T30517] ipip2: entered promiscuous mode [ 1026.463670][T30519] netlink: 'syz.3.5619': attribute type 3 has an invalid length. [ 1026.487872][T30519] __nla_validate_parse: 1 callbacks suppressed [ 1026.489971][T30519] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1026.492927][T30526] netlink: 'syz.4.5620': attribute type 3 has an invalid length. [ 1026.600056][T30528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1026.941918][T30537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1026.972235][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5615'. [ 1027.579917][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1027.619596][T30512] wg2 speed is unknown, defaulting to 1000 [ 1027.631097][T30512] lo speed is unknown, defaulting to 1000 [ 1027.650241][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1028.111262][T30568] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5628'. [ 1029.384758][T30602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5637'. [ 1029.422758][T30604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1029.680551][T30611] syzkaller1: entered promiscuous mode [ 1029.680594][T30611] syzkaller1: entered allmulticast mode [ 1029.719746][T30613] netlink: 'syz.2.5640': attribute type 4 has an invalid length. [ 1029.791806][T30615] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1030.170146][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5643'. [ 1030.992471][T30626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.388405][T30652] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1031.524140][T30659] netlink: 'syz.2.5652': attribute type 3 has an invalid length. [ 1031.571382][T30656] netlink: 'syz.0.5651': attribute type 2 has an invalid length. [ 1032.801651][T30670] wg2 speed is unknown, defaulting to 1000 [ 1032.819887][T30670] lo speed is unknown, defaulting to 1000 [ 1033.272794][T30695] x_tables: duplicate underflow at hook 2 [ 1033.341917][T30698] syzkaller0: entered promiscuous mode [ 1033.341961][T30698] syzkaller0: entered allmulticast mode [ 1033.728466][T30705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5662'. [ 1034.761520][T30738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5670'. [ 1034.818530][T30739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1034.869825][T30739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1034.926570][T30736] can: request_module (can-proto-0) failed. [ 1034.963394][T30736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1035.375247][T30744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5672'. [ 1035.598773][T30742] netlink: 'syz.2.5671': attribute type 55 has an invalid length. [ 1036.010628][T30760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1036.096290][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1036.123843][T30760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1036.143716][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1036.795064][T30769] syzkaller0: entered promiscuous mode [ 1036.800836][T30769] syzkaller0: entered allmulticast mode [ 1036.861984][T30775] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1043.023462][T30825] openvswitch: netlink: IP tunnel TTL not specified. [ 1043.030484][T30825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.077369][T30825] __nla_validate_parse: 1 callbacks suppressed [ 1043.077632][T30825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1043.077802][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1043.173679][T30829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5696'. [ 1043.322479][T30778] wg2 speed is unknown, defaulting to 1000 [ 1043.333320][T30778] lo speed is unknown, defaulting to 1000 [ 1043.478983][T30832] syzkaller0: entered promiscuous mode [ 1043.479027][T30832] syzkaller0: entered allmulticast mode [ 1043.977396][T30856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1044.008245][T30858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5702'. [ 1044.603755][T30869] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5705'. [ 1044.603988][T30869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5705'. [ 1045.366562][T30892] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1045.436012][T30898] ip6tnl0: Caught tx_queue_len zero misconfig [ 1045.436268][T30898] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1045.937404][T30916] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1045.963908][T30916] syzkaller0: left promiscuous mode [ 1045.966422][T30916] syzkaller0: left allmulticast mode [ 1046.534409][T30923] syzkaller0: entered promiscuous mode [ 1046.540446][T30923] syzkaller0: entered allmulticast mode [ 1046.796968][T30943] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5718'. [ 1046.797173][T30943] netlink: 'syz.2.5718': attribute type 9 has an invalid length. [ 1046.797192][T30943] netlink: 'syz.2.5718': attribute type 1 has an invalid length. [ 1046.855465][T30929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1046.855513][T30929] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1046.959475][T30945] netlink: zone id is out of range [ 1046.967148][T30945] openvswitch: netlink: Flow actions attr not present in new flow. [ 1047.635900][T30965] netlink: 'syz.3.5726': attribute type 3 has an invalid length. [ 1051.143951][T30972] netlink: 'syz.2.5728': attribute type 1 has an invalid length. [ 1051.224063][T30974] __nla_validate_parse: 4 callbacks suppressed [ 1051.224117][T30974] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1051.505946][T30995] geneve1: entered promiscuous mode [ 1051.524182][T30994] syzkaller1: left promiscuous mode [ 1051.531278][T30994] syzkaller1: left allmulticast mode [ 1051.588683][T30994] syzkaller0: entered promiscuous mode [ 1051.588725][T30994] syzkaller0: entered allmulticast mode [ 1052.349175][T31009] netlink: 'syz.0.5735': attribute type 21 has an invalid length. [ 1052.359717][T31009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1052.370600][T31009] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 1052.602876][T31010] bridge6: left allmulticast mode [ 1052.888807][T31010] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1052.902757][T31010] ipvlan2: left allmulticast mode [ 1052.903526][T31010] macvlan1: left allmulticast mode [ 1052.983305][T31010] bond0: left promiscuous mode [ 1052.983567][T31010] bridge7: left promiscuous mode [ 1053.437504][T31010] ip6gre1: left promiscuous mode [ 1053.437937][T31010] ip6gre1: left allmulticast mode [ 1053.539300][T31010] bridge9: left allmulticast mode [ 1053.565444][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1053.576536][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1053.584998][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1053.599092][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1053.654505][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1053.817967][T31036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5740'. [ 1053.934863][T12602] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.934934][T12602] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.935003][T12602] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.935043][T12602] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.387363][T31052] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1054.473662][T31056] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1054.679699][T31063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1054.731378][ T31] audit: type=1804 audit(1788760706.157:60): pid=31063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5747" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2505 res=1 errno=0 [ 1054.757176][ T31] audit: type=1800 audit(1788760706.187:61): pid=31063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5747" name="cgroup.controllers" dev="tmpfs" ino=2505 res=0 errno=0 [ 1054.975636][T31067] x_tables: duplicate underflow at hook 2 [ 1055.491466][T31070] syzkaller0: entered promiscuous mode [ 1055.499023][T31070] syzkaller0: entered allmulticast mode [ 1055.793346][ T5634] Bluetooth: hci3: command tx timeout [ 1057.875976][ T5634] Bluetooth: hci3: command tx timeout [ 1059.960190][ T5634] Bluetooth: hci3: command tx timeout [ 1059.975963][T31030] wg2 speed is unknown, defaulting to 1000 [ 1059.976371][T31095] tipc: Enabling of bearer rejected, failed to enable media [ 1059.994641][T31030] lo speed is unknown, defaulting to 1000 [ 1060.314337][T31103] netlink: 'syz.0.5757': attribute type 1 has an invalid length. [ 1060.328069][T31100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1060.337628][T31100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1060.347120][T31100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1060.480458][T31103] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1060.503783][T31121] netlink: 'syz.0.5757': attribute type 1 has an invalid length. [ 1060.746465][T31115] vlan6: entered promiscuous mode [ 1060.751722][T31115] bridge0: entered promiscuous mode [ 1060.757918][T31115] vlan4: entered promiscuous mode [ 1060.765326][T31115] geneve0: entered promiscuous mode [ 1060.930938][T31121] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1061.975227][T31030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.985837][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.993953][T31030] bridge_slave_0: entered allmulticast mode [ 1062.010495][T31030] bridge_slave_0: entered promiscuous mode [ 1062.031672][T31030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.039700][ T5634] Bluetooth: hci3: command tx timeout [ 1062.046810][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.054352][T31030] bridge_slave_1: entered allmulticast mode [ 1062.069527][T31030] bridge_slave_1: entered promiscuous mode [ 1062.250527][T31171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1062.250641][T31171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.250672][T31171] IPv6: NLM_F_CREATE should be set when creating new route [ 1062.250710][T31171] IPv6: NLM_F_CREATE should be set when creating new route [ 1062.386174][T31030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.398973][T31030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.461025][T31030] team0: Port device team_slave_0 added [ 1062.470477][T31030] team0: Port device team_slave_1 added [ 1062.509343][T31030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.516953][T31030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.544611][T31030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.559067][T31030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.568035][T31030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.595548][T31030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.950108][T31030] hsr_slave_0: entered promiscuous mode [ 1062.967011][T31030] hsr_slave_1: entered promiscuous mode [ 1062.973482][T31030] debugfs: 'hsr0' already exists in 'hsr' [ 1062.973506][T31030] Cannot create hsr debugfs directory [ 1063.140345][T31194] netlink: 'syz.0.5769': attribute type 11 has an invalid length. [ 1063.745336][T31209] netlink: 'syz.0.5772': attribute type 1 has an invalid length. [ 1063.905737][T31209] bond16: entered promiscuous mode [ 1063.913316][T31209] bond16: entered allmulticast mode [ 1063.919088][T31209] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1064.044392][T31213] erspan1: entered allmulticast mode [ 1064.051390][T31213] bond16: (slave erspan1): making interface the new active one [ 1064.051448][T31213] erspan1: entered promiscuous mode [ 1064.081772][T31213] [ 1064.084158][T31213] ====================================================== [ 1064.091317][T31213] WARNING: possible circular locking dependency detected [ 1064.098528][T31213] syzkaller #0 Not tainted [ 1064.102969][T31213] ------------------------------------------------------ [ 1064.110064][T31213] syz.0.5772/31213 is trying to acquire lock: [ 1064.116327][T31213] ffff888043f19070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1064.125646][T31213] [ 1064.125646][T31213] but task is already holding lock: [ 1064.133123][T31213] ffff888033ddc158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1064.143091][T31213] [ 1064.143091][T31213] which lock already depends on the new lock. [ 1064.143091][T31213] [ 1064.153604][T31213] [ 1064.153604][T31213] the existing dependency chain (in reverse order) is: [ 1064.162691][T31213] [ 1064.162691][T31213] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 1064.171050][T31213] _raw_spin_lock+0x2e/0x40 [ 1064.176211][T31213] sch_direct_xmit+0x15f/0x4c0 [ 1064.181682][T31213] __dev_queue_xmit+0x177f/0x3820 [ 1064.187292][T31213] hsr_forward_skb+0x1701/0x2b70 [ 1064.192760][T31213] hsr_dev_xmit+0x242/0x360 [ 1064.197800][T31213] dev_hard_start_xmit+0x2cd/0x830 [ 1064.203519][T31213] __dev_queue_xmit+0x14c0/0x3820 [ 1064.209068][T31213] ip6_output+0x337/0x540 [ 1064.213996][T31213] NF_HOOK+0x177/0x4f0 [ 1064.218651][T31213] mld_sendpack+0x890/0xe10 [ 1064.223716][T31213] mld_ifc_work+0x842/0xd60 [ 1064.228768][T31213] process_scheduled_works+0xc3d/0x1630 [ 1064.234887][T31213] worker_thread+0xa47/0xfb0 [ 1064.240013][T31213] kthread+0x38b/0x480 [ 1064.244642][T31213] ret_from_fork+0x514/0xb70 [ 1064.249787][T31213] ret_from_fork_asm+0x1a/0x30 [ 1064.255083][T31213] [ 1064.255083][T31213] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1064.262908][T31213] __lock_acquire+0x15ff/0x2e50 [ 1064.268286][T31213] lock_acquire+0x115/0x350 [ 1064.273313][T31213] _raw_spin_lock_bh+0x36/0x50 [ 1064.278771][T31213] hsr_dev_xmit+0x237/0x360 [ 1064.283819][T31213] dev_hard_start_xmit+0x2cd/0x830 [ 1064.289543][T31213] __dev_queue_xmit+0x14c0/0x3820 [ 1064.295106][T31213] NF_HOOK+0x33a/0x3c0 [ 1064.299763][T31213] arp_xmit+0x16c/0x270 [ 1064.304442][T31213] arp_solicit+0xbdc/0xe40 [ 1064.309403][T31213] __neigh_event_send+0xf0c/0x1510 [ 1064.315140][T31213] neigh_resolve_output+0x1a1/0x720 [ 1064.320882][T31213] ip_finish_output2+0xc4b/0x10b0 [ 1064.326499][T31213] ip_output+0x29f/0x450 [ 1064.331282][T31213] iptunnel_xmit+0x626/0xd10 [ 1064.337062][T31213] ip_tunnel_xmit+0x195b/0x2040 [ 1064.342449][T31213] erspan_xmit+0xb6a/0x1620 [ 1064.347536][T31213] dev_hard_start_xmit+0x2cd/0x830 [ 1064.353174][T31213] sch_direct_xmit+0x257/0x4c0 [ 1064.358584][T31213] __dev_queue_xmit+0x177f/0x3820 [ 1064.364241][T31213] alb_send_lp_vid+0x348/0x550 [ 1064.369869][T31213] alb_send_learning_packets+0x12c/0x300 [ 1064.376207][T31213] alb_fasten_mac_swap+0x45d/0xf70 [ 1064.381868][T31213] bond_alb_handle_active_change+0xbc5/0xe50 [ 1064.388513][T31213] bond_change_active_slave+0x1098/0x36d0 [ 1064.394916][T31213] bond_select_active_slave+0x8a6/0xcd0 [ 1064.401169][T31213] bond_enslave+0x239c/0x3b10 [ 1064.406378][T31213] do_set_master+0x563/0x720 [ 1064.411653][T31213] rtnl_newlink_create+0x4c8/0x7b0 [ 1064.417476][T31213] rtnl_newlink+0x166d/0x1c30 [ 1064.422770][T31213] rtnetlink_rcv_msg+0x802/0xc00 [ 1064.428243][T31213] netlink_rcv_skb+0x226/0x4a0 [ 1064.433554][T31213] netlink_unicast+0x7bd/0x940 [ 1064.438841][T31213] netlink_sendmsg+0x813/0xb40 [ 1064.444128][T31213] sock_sendmsg_nosec+0x13a/0x180 [ 1064.449681][T31213] ____sys_sendmsg+0x54e/0x850 [ 1064.454966][T31213] ___sys_sendmsg+0x2a5/0x360 [ 1064.460166][T31213] __x64_sys_sendmsg+0x1b1/0x290 [ 1064.465626][T31213] do_syscall_64+0x166/0x520 [ 1064.470747][T31213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.477170][T31213] [ 1064.477170][T31213] other info that might help us debug this: [ 1064.477170][T31213] [ 1064.487395][T31213] Possible unsafe locking scenario: [ 1064.487395][T31213] [ 1064.495164][T31213] CPU0 CPU1 [ 1064.500728][T31213] ---- ---- [ 1064.506145][T31213] lock(&qdisc_xmit_lock_key#3); [ 1064.511199][T31213] lock(&hsr->seqnr_lock); [ 1064.518228][T31213] lock(&qdisc_xmit_lock_key#3); [ 1064.525969][T31213] lock(&hsr->seqnr_lock); [ 1064.530478][T31213] [ 1064.530478][T31213] *** DEADLOCK *** [ 1064.530478][T31213] [ 1064.538619][T31213] locks held by syz.0.5772/31213: 10, last CPU#0: [ 1064.545379][T31213] #0: ffffffff907b92e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1064.554989][T31213] #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1064.564152][T31213] #2: ffffffff8ed5c740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 1064.574091][T31213] #3: ffff8880256f3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 1064.586737][T31213] #4: ffff888033ddc158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1064.597208][T31213] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 1064.606273][T31213] #6: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 1064.616067][T31213] #7: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1064.624874][T31213] #8: ffffffff8ed5c740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 1064.634818][T31213] #9: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1064.643963][T31213] [ 1064.643963][T31213] stack backtrace: [ 1064.649860][T31213] CPU: 0 UID: 0 PID: 31213 Comm: syz.0.5772 Not tainted syzkaller #0 PREEMPT(full) [ 1064.659231][T31213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.669292][T31213] Call Trace: [ 1064.672583][T31213] [ 1064.675516][T31213] dump_stack_lvl+0xe8/0x150 [ 1064.680125][T31213] print_circular_bug+0x2e2/0x300 [ 1064.685277][T31213] check_noncircular+0x12f/0x150 [ 1064.690232][T31213] __lock_acquire+0x15ff/0x2e50 [ 1064.695260][T31213] ? __siphash_unaligned+0x28d/0x3e0 [ 1064.700632][T31213] ? skb_network_protocol+0x23d/0x400 [ 1064.706005][T31213] lock_acquire+0x115/0x350 [ 1064.710512][T31213] ? hsr_dev_xmit+0x237/0x360 [ 1064.715217][T31213] ? hsr_dev_xmit+0x237/0x360 [ 1064.720158][T31213] _raw_spin_lock_bh+0x36/0x50 [ 1064.724926][T31213] ? hsr_dev_xmit+0x237/0x360 [ 1064.729690][T31213] hsr_dev_xmit+0x237/0x360 [ 1064.734196][T31213] ? hsr_dev_xmit+0x2d/0x360 [ 1064.738787][T31213] dev_hard_start_xmit+0x2cd/0x830 [ 1064.743910][T31213] __dev_queue_xmit+0x14c0/0x3820 [ 1064.748942][T31213] ? __dev_queue_xmit+0x29b/0x3820 [ 1064.754317][T31213] ? __lock_acquire+0x6df/0x2e50 [ 1064.759255][T31213] ? arpt_do_table+0x25b/0x1f90 [ 1064.764147][T31213] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1064.769547][T31213] ? __pfx_arpt_do_table+0x10/0x10 [ 1064.774679][T31213] ? NF_HOOK+0xa2/0x3c0 [ 1064.778838][T31213] NF_HOOK+0x33a/0x3c0 [ 1064.782924][T31213] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1064.788250][T31213] ? NF_HOOK+0xa2/0x3c0 [ 1064.792423][T31213] ? __pfx_NF_HOOK+0x10/0x10 [ 1064.797025][T31213] ? lock_acquire+0x115/0x350 [ 1064.801714][T31213] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1064.807007][T31213] ? inet_addr_type_dev_table+0x25/0x190 [ 1064.812712][T31213] arp_xmit+0x16c/0x270 [ 1064.817089][T31213] ? arp_xmit+0x23/0x270 [ 1064.821338][T31213] arp_solicit+0xbdc/0xe40 [ 1064.825853][T31213] ? __pfx_arp_solicit+0x10/0x10 [ 1064.830901][T31213] ? __neigh_event_send+0xea4/0x1510 [ 1064.836202][T31213] ? __pfx_arp_solicit+0x10/0x10 [ 1064.841150][T31213] __neigh_event_send+0xf0c/0x1510 [ 1064.846279][T31213] neigh_resolve_output+0x1a1/0x720 [ 1064.851490][T31213] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1064.856536][T31213] ? ip_finish_output2+0x3de/0x10b0 [ 1064.861770][T31213] ip_finish_output2+0xc4b/0x10b0 [ 1064.866823][T31213] ? ip_skb_dst_mtu+0x811/0xa50 [ 1064.871692][T31213] ? ip_finish_output2+0x3de/0x10b0 [ 1064.877173][T31213] ? ip_finish_output+0x40b/0x530 [ 1064.882207][T31213] ip_output+0x29f/0x450 [ 1064.886455][T31213] ? ip_output+0x5a/0x450 [ 1064.890794][T31213] iptunnel_xmit+0x626/0xd10 [ 1064.895395][T31213] ip_tunnel_xmit+0x195b/0x2040 [ 1064.900257][T31213] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1064.905477][T31213] ? check_noncircular+0xdb/0x150 [ 1064.910528][T31213] ? __gre_xmit+0x106/0x1a0 [ 1064.915055][T31213] erspan_xmit+0xb6a/0x1620 [ 1064.919587][T31213] ? __pfx_erspan_xmit+0x10/0x10 [ 1064.924643][T31213] dev_hard_start_xmit+0x2cd/0x830 [ 1064.929768][T31213] sch_direct_xmit+0x257/0x4c0 [ 1064.934536][T31213] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1064.939843][T31213] ? do_set_master+0x4a0/0x720 [ 1064.944612][T31213] __dev_queue_xmit+0x177f/0x3820 [ 1064.949752][T31213] ? __dev_queue_xmit+0x29b/0x3820 [ 1064.955046][T31213] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1064.960460][T31213] ? __alloc_skb+0x27a/0x7a0 [ 1064.965069][T31213] ? rcu_is_watching+0x16/0xb0 [ 1064.969871][T31213] ? __alloc_skb+0x27a/0x7a0 [ 1064.974471][T31213] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1064.979853][T31213] ? __alloc_skb+0x27a/0x7a0 [ 1064.984455][T31213] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1064.990551][T31213] ? __alloc_skb+0x4d0/0x7a0 [ 1064.995237][T31213] ? alb_send_lp_vid+0x14e/0x550 [ 1065.000203][T31213] alb_send_lp_vid+0x348/0x550 [ 1065.004978][T31213] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1065.010271][T31213] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 1065.016172][T31213] alb_send_learning_packets+0x12c/0x300 [ 1065.021903][T31213] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1065.028070][T31213] ? alb_swap_mac_addr+0x230/0x340 [ 1065.033197][T31213] alb_fasten_mac_swap+0x45d/0xf70 [ 1065.038529][T31213] ? dev_addr_mod+0x1ba/0x350 [ 1065.043210][T31213] bond_alb_handle_active_change+0xbc5/0xe50 [ 1065.049200][T31213] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 1065.055796][T31213] ? __hw_addr_add_ex+0x182/0x520 [ 1065.060833][T31213] ? __local_bh_enable_ip+0xd6/0x140 [ 1065.066158][T31213] bond_change_active_slave+0x1098/0x36d0 [ 1065.071885][T31213] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1065.078491][T31213] ? smp_call_function_many_cond+0xfc7/0x1500 [ 1065.084634][T31213] ? smp_call_function_many_cond+0x11b2/0x1500 [ 1065.090895][T31213] ? __pfx_bond_change_active_slave+0x10/0x10 [ 1065.096980][T31213] ? __pfx_do_sync_core+0x10/0x10 [ 1065.102027][T31213] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1065.108361][T31213] ? bond_start_xmit+0x92/0x19e0 [ 1065.113325][T31213] ? __pfx___text_poke+0x10/0x10 [ 1065.118317][T31213] bond_select_active_slave+0x8a6/0xcd0 [ 1065.123899][T31213] ? __pfx_bond_select_active_slave+0x10/0x10 [ 1065.130012][T31213] bond_enslave+0x239c/0x3b10 [ 1065.134734][T31213] ? __pfx_bond_enslave+0x10/0x10 [ 1065.139806][T31213] ? __dev_notify_flags+0x3d4/0x510 [ 1065.145038][T31213] ? __pfx___dev_change_flags+0x10/0x10 [ 1065.150601][T31213] ? mutex_is_locked+0x17/0x50 [ 1065.155398][T31213] do_set_master+0x563/0x720 [ 1065.160004][T31213] rtnl_newlink_create+0x4c8/0x7b0 [ 1065.165296][T31213] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1065.170932][T31213] ? __pfx___mutex_lock+0x10/0x10 [ 1065.176145][T31213] ? ns_capable+0x89/0xe0 [ 1065.180492][T31213] rtnl_newlink+0x166d/0x1c30 [ 1065.185181][T31213] ? __pfx_rtnl_newlink+0x10/0x10 [ 1065.190215][T31213] ? do_syscall_64+0x166/0x520 [ 1065.194990][T31213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.201174][T31213] ? kasan_quarantine_put+0xbb/0x1f0 [ 1065.206476][T31213] ? lockdep_hardirqs_on+0x7b/0x110 [ 1065.211686][T31213] ? nlmon_xmit+0xb0/0x100 [ 1065.216204][T31213] ? kmem_cache_free+0x182/0x650 [ 1065.221181][T31213] ? __lock_acquire+0x6df/0x2e50 [ 1065.226162][T31213] ? __dev_queue_xmit+0x29b/0x3820 [ 1065.231304][T31213] ? __local_bh_enable_ip+0xd6/0x140 [ 1065.236610][T31213] ? lockdep_hardirqs_on+0x7b/0x110 [ 1065.241830][T31213] ? __dev_queue_xmit+0x29b/0x3820 [ 1065.246951][T31213] ? __local_bh_enable_ip+0xd6/0x140 [ 1065.252249][T31213] ? __dev_queue_xmit+0x29b/0x3820 [ 1065.257371][T31213] ? lock_acquire+0x115/0x350 [ 1065.262055][T31213] ? __pfx_rtnl_newlink+0x10/0x10 [ 1065.267091][T31213] rtnetlink_rcv_msg+0x802/0xc00 [ 1065.272044][T31213] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1065.277172][T31213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1065.282639][T31213] ? ref_tracker_free+0x689/0x830 [ 1065.287675][T31213] ? __pfx_ref_tracker_free+0x10/0x10 [ 1065.293054][T31213] netlink_rcv_skb+0x226/0x4a0 [ 1065.297823][T31213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1065.303724][T31213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1065.309037][T31213] ? netlink_deliver_tap+0x2e/0x1b0 [ 1065.314290][T31213] ? netlink_deliver_tap+0x2e/0x1b0 [ 1065.319519][T31213] netlink_unicast+0x7bd/0x940 [ 1065.324386][T31213] netlink_sendmsg+0x813/0xb40 [ 1065.329163][T31213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.334572][T31213] ? apparmor_socket_sendmsg+0x98/0x360 [ 1065.340146][T31213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.345438][T31213] sock_sendmsg_nosec+0x13a/0x180 [ 1065.350477][T31213] ____sys_sendmsg+0x54e/0x850 [ 1065.355249][T31213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1065.360541][T31213] ? import_iovec+0x73/0xa0 [ 1065.365056][T31213] ___sys_sendmsg+0x2a5/0x360 [ 1065.369737][T31213] ? __lock_acquire+0x6df/0x2e50 [ 1065.374681][T31213] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.379884][T31213] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1065.385623][T31213] ? __fget_files+0x2a/0x420 [ 1065.390408][T31213] ? __fget_files+0x3a2/0x420 [ 1065.395097][T31213] __x64_sys_sendmsg+0x1b1/0x290 [ 1065.400058][T31213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.405520][T31213] ? kfree+0x4d/0x650 [ 1065.409515][T31213] ? __pfx_kcov_ioctl+0x10/0x10 [ 1065.414401][T31213] do_syscall_64+0x166/0x520 [ 1065.419003][T31213] ? trace_irq_disable+0x3b/0x140 [ 1065.424034][T31213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.430196][T31213] ? clear_bhb_loop+0x70/0xc0 [ 1065.434877][T31213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.440786][T31213] RIP: 0033:0x7fb12159e159 [ 1065.445231][T31213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.464848][T31213] RSP: 002b:00007fb1224c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.473291][T31213] RAX: ffffffffffffffda RBX: 00007fb121826090 RCX: 00007fb12159e159 [ 1065.481282][T31213] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1065.489352][T31213] RBP: 00007fb121635024 R08: 0000000000000000 R09: 0000000000000000 [ 1065.497421][T31213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.505395][T31213] R13: 00007fb121826128 R14: 00007fb121826090 R15: 00007ffc61d27ba8 [ 1065.513377][T31213] [ 1065.547906][T31213] bond16: (slave erspan1): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1065.869047][T31213] syz.0.5772 (31213) used greatest stack depth: 16840 bytes left [ 1067.116855][T12600] bridge_slave_1: left allmulticast mode [ 1067.116896][T12600] bridge_slave_1: left promiscuous mode [ 1067.117064][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.138478][T12600] bridge_slave_0: left allmulticast mode [ 1067.144503][T12600] bridge_slave_0: left promiscuous mode [ 1067.150545][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.227324][T12600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.379291][T12600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.423649][T12600] bond0 (unregistering): Released all slaves [ 1067.839523][T12600] hsr_slave_0: left promiscuous mode [ 1067.849812][T12600] hsr_slave_1: left promiscuous mode [ 1067.874654][T12600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.882924][T12600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.190662][T12600] team0 (unregistering): Port device team_slave_1 removed [ 1068.208001][T12600] team0 (unregistering): Port device team_slave_0 removed