last executing test programs: 3.655876339s ago: executing program 4 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4010) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20004000) (async, rerun: 32) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) (rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x2, 0xffffff35, 0x6f, 0x9, 0xb, 0x7, 0x9}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x39, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 3.479660341s ago: executing program 4 (id=1043): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x11, 0x3, 0x10) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x1, r9, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="4bbf2c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000400000002000000030000003c080000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0400000003000000010000000500"/28], 0x50) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd8662", 0x23}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 2.600273274s ago: executing program 3 (id=1055): unshare(0x8040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x38, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@typed={0x4, 0x13a, 0x0, 0x0, @binary}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x2400000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x840) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r8, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4) 2.518712011s ago: executing program 4 (id=1056): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.25975492s ago: executing program 4 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) (async) pipe(&(0x7f00000001c0)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.133879655s ago: executing program 4 (id=1058): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25d7dbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x4, 0xf}, {0xe, 0xa}}}, 0x24}}, 0x4000000) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1a}}]}]}}}}}}}, 0x0) 2.040051169s ago: executing program 0 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6400feff020a010200000000000000000a000004140004800800024042189446080001400000000408000b4000000000340008800c0013400000000000af07ff0c00024000000000000000090c00024000000000000000030c0002407fffffffffffffff1400ddff1000010000000000000000000000000a"], 0x8c}}, 0x0) 1.890891423s ago: executing program 1 (id=1062): r0 = socket(0x22, 0x2, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x3, 0x8}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e00000010800020800000000000000800500010000000000240012800c00028005000100000000001400018008000100e000000108000200ac14142a08000740000000001c001080070003400000013308000240000000cd08000140000005ff"], 0x80}}, 0x0) 1.831974526s ago: executing program 0 (id=1063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) 1.703456982s ago: executing program 0 (id=1064): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{r0}, "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"}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20008094}, 0x20024040) 1.684372886s ago: executing program 3 (id=1065): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, 0x0) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r7, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 1.595857059s ago: executing program 1 (id=1066): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2f, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c100000010403000000000000000000030000040500010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6ba80e5", 0x6}], 0x1}}], 0x1, 0x8011) recvmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000040)="b74069aab46ca5", 0x7}], 0x3}, 0x0) shutdown(r1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) 1.543802365s ago: executing program 4 (id=1067): r0 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg(r2, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="565dc8851507bfe09bd2cbf2e14296419714a9b87403af03c63a745f0ec55fbacdeec11a47995a9f8aec163c57999fb90dd64012710b651df6b869e7", 0x3c}], 0x1}}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x10, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x4a00, r3, 0xffc3, 0x45041}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xbd}]}, 0x28}}, 0x4) 1.463679124s ago: executing program 1 (id=1069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x496900676220eac0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x10, 0x6361, 0x7, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x18000, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x8, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x7, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x5, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) 1.213615718s ago: executing program 3 (id=1071): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x8) (async) socket(0x10, 0x2, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}]}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24) sendmsg$802154_dgram(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000340)) unshare(0x6020400) (async) unshare(0x6020400) socket(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 1.127839969s ago: executing program 1 (id=1072): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="52163e", 0x3}, {&(0x7f00000007c0)="d491b48157db55af7fcad6a6760014ce3e74051b3e322d5dd220a72e93ed156a55309d680e308bb2a1896927548612df4ae85c4409456880e5970a67f865a53d356ac6eeb41221881d91152d199b6619779f4ee785a93550417b4cb46a277483b0c244218e17e1a5f7372feb15af05b832dce2a0b55674e0de5cddb4346b3ff89edd95d8e7f62acb32888bf09a90665c1a951ff0421ff9fabdbbcf589ca21821533df3bab441116a683b1e90da938a2b4df207482ec2fd2f37eab7d39091c6e9ff5095167a84502b1558bf2c432d8a0d9460c4dd0c", 0xd5}, {&(0x7f0000000580)="7226d59ddf5cb2dae19d2a7945637aa7e7cc23ba9cfb3b88785a562fd3b06b929f0000d02d87", 0x26}], 0x3, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20}], 0x1, 0x20044014) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/12, 0xc}], 0x1}, 0x63) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000044bb6003c0000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020d90c1af8ff00000000bfa100000500000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) sendfile(r8, r7, 0x0, 0xf03a0005) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x8, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0xfffff800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008040) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.08825158s ago: executing program 3 (id=1074): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001000)={0x0, 0x0, 0xc, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000007c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000c00)={r4, "bff4678338cdeac2bddd8f5f460de415"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001400)={0xe, 0x2, {0x1, @struct={0x101, 0x2}, r0, 0x8039, 0xad82, 0x7f, 0x100000000, 0x8, 0x2, @struct={0xa, 0xf}, 0x8f, 0xb03, [0x4, 0x3, 0x1, 0x9, 0xffff, 0x8]}, {0x800, @struct={0x3, 0xa4e}, 0x0, 0x4, 0x1, 0x100000001, 0x5, 0xfffffffffffffef8, 0x2, @usage=0x3, 0x2, 0x2, [0x9, 0xd0300000, 0x8, 0x0, 0xff, 0x1]}, {0x8000000000000001, @usage=0x8, r4, 0x10000000, 0x100000000000000, 0xb62f, 0x0, 0xe, 0x4, @struct={0xfffffff7, 0x8}, 0x2, 0x3, [0x100000001, 0x2, 0x2, 0x4, 0x71f6, 0x1ff]}, {0x3, 0x9, 0x8000000000000001}}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x2, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0xe, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 978.795768ms ago: executing program 3 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2b}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x233}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) recvmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/241, 0xf1}, 0x10000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r10, @ANYRESDEC=r6, @ANYRESDEC=r11, @ANYRES16=r7, @ANYRESDEC=r5, @ANYRESOCT=r5, @ANYBLOB="1ea43efe5b06f17cd6cf51340ef6df7dc66c92de8d93a69bae9803c4bbc3993d6a377488e0a6679a7cec72343048b907", @ANYRES16, @ANYRES64], 0x128}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}], 0x2c) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r13) pipe(0x0) 929.960435ms ago: executing program 1 (id=1077): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0x401, 0x55, @mcast2, @remote, 0x20, 0x8, 0xfffffffa, 0x4}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1}, 0x18) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000540)="a2a7b705d32b263d1bd50b4490cca6857e103b241b3f885ff542055883b8bf2d76b0160df47e9f40e032ff0381ef170c7af2d0cb9b5de79d632ba74274aafff978072e566b153e37fb33d5cce373f6a0392db698f20efdb51d91bf676c06c747e6186f7d3791f10d21bc5278ff9b5ff81f1fd3febaeeed7b360f87d71cf4d2803e9bb8eddf2cc1e224b4b63b0c46e3ac4b41cf0a13666384bd358e35260afd1dd030898c7518405af07bc5b0f438202d8abe7ec7723abfa967ca06765271faf0cabaccef3b98df36b177b89a56d02dd0538a1813", 0xd4}, {&(0x7f0000000000)="303736239f4629ef5af0", 0xa}, {&(0x7f0000000280)="02f47b0985bfbea931fd44aaba57f282c144abad533d2990df312e1a53d3d8b7aeb7b336d9b7ef895d791872dec974a900416232136f3bcc0886eacded9bb38a0db91e81bc5b3f4368714ac75f4f93f5b4bf42392e7c1a9b4c5080b76b5ab56e82ae4fa4cb3ea150660b6f2e30096fcfeff07332835113fdb4d9c97293a1e56a8da22eab454e86749084189fbd05d823939d72086d8d058b8ca7f1326f136f3087398f525b7694d94280bcc38f03", 0xae}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000100)="827ad3fad08c3807d210496b1fa240c78912ffe8844b67dc770a445a087032405c91a3c2e1e434d97bc90a10b29d", 0x2e}, {&(0x7f0000000180)="0e858df6e129e1728b68461f584bf4ee590915c8d39628b1f91345c760afde1f", 0x20}], 0x8, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @multicast1}}}], 0x58}, 0xbc039c04345e690a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000b0601080000000000000000060000020500010000"], 0x2c}}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 764.247013ms ago: executing program 0 (id=1080): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x56}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x56}, 0x28) (async) 704.35982ms ago: executing program 0 (id=1081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 591.746923ms ago: executing program 0 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d0b00400000000000b20980390000eaffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x448d1}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b80)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000740)={r5, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x2, 0xd, 0x4c9, 0xa, 0x7fffffff, 0x1ff, 0x6, 0x47, 0xffffffffffffff64, 0x7, 0x0, 0xfd, 0x4, 0x6, 0x9]}, &(0x7f0000000840)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r5, 0x7fff, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x4c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[@hopopts={0x6c, 0x5, '\x00', [@ra, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @loopback}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) 526.785961ms ago: executing program 2 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x10}}, 0x1c}}, 0x48804) (async) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r5 = socket(0x10, 0x803, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 414.645263ms ago: executing program 2 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x2, @remote}}]}, 0x38}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000440)={0x0, 0x1000, 0x1, [0x34, 0x10, 0xbc, 0x9, 0x2], [0xfffffffffffffffc, 0x7f83, 0xb97f, 0x1, 0x1, 0x5, 0x17, 0x5, 0xdf, 0x4bc1, 0x7, 0x3, 0x0, 0x1, 0x5, 0xe6, 0x101, 0x0, 0xffffffffffffff7f, 0x1, 0x4e, 0x3, 0x0, 0x8, 0x4f8c10750000, 0x8, 0x10, 0x7, 0x8, 0xba6, 0x4, 0x5, 0x3, 0x7, 0x5, 0x6, 0x7bfc428f, 0x5, 0xd, 0x51d0000000000, 0x1000, 0x0, 0x81, 0x10, 0x5, 0x3e22, 0x6, 0x80000001, 0xc, 0x7fffffffffffffff, 0x9, 0x10000000000, 0x8, 0x5, 0x5, 0x8, 0x0, 0x1, 0x4, 0x1, 0x28, 0xfff, 0x80000001, 0x8, 0xf, 0x10000, 0x7fff, 0x4, 0x2, 0x9126, 0x8, 0x4, 0x40, 0x0, 0x8, 0x7, 0x8065, 0x9de, 0x2, 0x4, 0x7, 0x3, 0x3, 0x6, 0x77b, 0x80, 0x81, 0x6, 0x2f8, 0x5, 0x4, 0x10, 0x0, 0x1, 0x271, 0xb, 0x8000, 0x7, 0x7ff, 0x8, 0x8, 0x5da8, 0x8, 0x9, 0x89, 0x9, 0x6, 0xfffffffffffffff8, 0x5, 0x80, 0x7, 0x4, 0x4, 0x1, 0x6, 0xfffffffffffffffb, 0x6, 0x8, 0xe8, 0xe, 0x3]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f40)={0x5, 0x4, {0x8000000000000000, @struct={0x4, 0xc}, 0x0, 0x6be281a9, 0x8, 0x6, 0x7, 0x7, 0xc0, @struct={0xd2, 0xf}, 0x2, 0x6, [0xfffffffffffffffc, 0x4, 0x8f34, 0x3, 0xfffffffffffffffd, 0xc]}, {0x5, @usage=0x6, 0x0, 0x5, 0x7, 0x8bba, 0xffffffffffffffa6, 0x6, 0x84, @usage=0x3, 0x8, 0x5, [0x0, 0x2, 0x2, 0x0, 0x7, 0x1]}, {0x130, @usage=0x8, 0x0, 0x8001, 0xbdc, 0x4, 0xffffffffffffeabf, 0x80000000, 0x4, @struct={0xc, 0x6}, 0x9, 0x5, [0x8, 0x9, 0x6, 0xb9, 0xffffffffffffffff, 0x7]}, {0x100, 0x1ff, 0xa}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001340)={0x10, 0x6, {0x4, @struct={0x826, 0x4}, r2, 0x3, 0x1, 0xffffffff, 0x100, 0x80, 0x4, @usage=0x1, 0x3, 0x6, [0xff, 0x7, 0x9, 0x100000000, 0x0, 0x2]}, {0x7, @struct={0x7, 0xfffffff9}, r3, 0x200, 0x4, 0x3, 0x0, 0x4, 0x90, @struct={0x9345, 0x2}, 0xffff, 0xfffffffe, [0xfffffffffffffffb, 0x1, 0x83, 0x3, 0x3, 0x81]}, {0xff, @struct={0xb2f, 0x5}, r4, 0x1, 0x6, 0x6, 0x0, 0x7, 0x2, @usage=0x3, 0x0, 0x7, [0x0, 0x40, 0x3b, 0x800, 0xfd, 0x7fffffff]}, {0x1, 0x10001, 0xa3}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x70}}, 0x0) 303.881032ms ago: executing program 2 (id=1085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7", 0x18}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e08017", 0x4}, {&(0x7f00000009c0)="c71924d7ea9b", 0x6}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_es_lookup_extent_exit\x00', r2, 0x0, 0x6721}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002"], 0x7c}}, 0x0) close(0x3) 301.25656ms ago: executing program 2 (id=1086): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x361482, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x84}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0xd, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x6}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xa}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000100)={0x90000011}) pwrite64(r0, &(0x7f0000000140)="7906", 0x2, 0x9) 241.6909ms ago: executing program 2 (id=1087): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)={0x90000011}) pwrite64(r0, &(0x7f0000000140)="7906", 0x2, 0x9) 132.788874ms ago: executing program 2 (id=1088): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r4, 0x401, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008051}, 0x1) write$nci(r2, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x1, 0x1, 0x3, 0x6, 0x7, 0x3, 0x7e, {0x5, 0x9, "30ea56ccf61cab1d"}, 0x3, 0x3e, 0x8, 0x4, 0x1, "eb"}}, 0x1a) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c001780080001800400", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d"], 0x60}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00410065727370616e00df9559d08a419db5d4c87b57e369ed00fe0002800400120006"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 68.940982ms ago: executing program 3 (id=1089): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202000000000000000000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x18, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8803) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@getsadinfo={0x115c, 0x23, 0x200, 0x70bd27, 0x25dfdbfd, 0x0, [@algo_auth_trunc={0x104c, 0x14, {{'hmac(sha256-avx2)\x00'}, 0x8000, 0x180, "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"}}, @etimer_thresh={0x8, 0xc, 0x1}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e23, 0x0, 0x4e23, 0x9, 0xa, 0x80, 0xa0, 0x26}, {@in6=@mcast2, 0x4d3, 0xff}, @in6=@mcast2, {0x8, 0xf, 0x100000001, 0x8, 0x6, 0x1, 0x3}, {0x100000000000000, 0x5, 0x4, 0x4}, {0x52d, 0x1, 0xd}, 0x70bd2a, 0x3506, 0xa, 0x4, 0x59, 0x10}}, @proto={0x5, 0x19, 0x85}, @extra_flags={0x8, 0x18, 0x1ff}]}, 0x115c}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ff", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) socket(0x29, 0x80805, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r7, &(0x7f0000005c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}], 0x1, 0x0) 0s ago: executing program 1 (id=1090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000004c0)=""/51) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='svcrdma_rq_post_err\x00', 0xffffffffffffffff, 0x0, 0x6827}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000340)) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1ffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000180)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. [ 72.070659][ T5851] cgroup: Unknown subsys name 'net' [ 72.220239][ T5851] cgroup: Unknown subsys name 'cpuset' [ 72.229183][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.606598][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.862467][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.876329][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.885847][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.894102][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.902081][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.906232][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.918170][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.933123][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.938018][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.941253][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.954766][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.955585][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.962818][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.978205][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.986335][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.068594][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.076741][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.086275][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.093972][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.095672][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.111024][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.112323][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.126547][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.135328][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.144923][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.517194][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.692981][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.726761][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.734039][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.741569][ T5863] bridge_slave_0: entered allmulticast mode [ 77.748842][ T5863] bridge_slave_0: entered promiscuous mode [ 77.807720][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.814875][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.822627][ T5863] bridge_slave_1: entered allmulticast mode [ 77.829840][ T5863] bridge_slave_1: entered promiscuous mode [ 78.004290][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.033053][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 78.053270][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.078715][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 78.113057][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 78.209862][ T5863] team0: Port device team_slave_0 added [ 78.218774][ T5863] team0: Port device team_slave_1 added [ 78.224860][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.232428][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.240001][ T5861] bridge_slave_0: entered allmulticast mode [ 78.247783][ T5861] bridge_slave_0: entered promiscuous mode [ 78.300422][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.307852][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.315029][ T5861] bridge_slave_1: entered allmulticast mode [ 78.322312][ T5861] bridge_slave_1: entered promiscuous mode [ 78.421651][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.430252][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.456641][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.471217][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.496491][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.503715][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.511240][ T5870] bridge_slave_0: entered allmulticast mode [ 78.518522][ T5870] bridge_slave_0: entered promiscuous mode [ 78.531800][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.538822][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.565194][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.578793][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.612147][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.619520][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.627082][ T5870] bridge_slave_1: entered allmulticast mode [ 78.634061][ T5870] bridge_slave_1: entered promiscuous mode [ 78.695344][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.703634][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.711260][ T5875] bridge_slave_0: entered allmulticast mode [ 78.719999][ T5875] bridge_slave_0: entered promiscuous mode [ 78.728173][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.736633][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.743836][ T5875] bridge_slave_1: entered allmulticast mode [ 78.752092][ T5875] bridge_slave_1: entered promiscuous mode [ 78.762674][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.776424][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.797951][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.805211][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.812725][ T5876] bridge_slave_0: entered allmulticast mode [ 78.819870][ T5876] bridge_slave_0: entered promiscuous mode [ 78.828607][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.835893][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.843045][ T5876] bridge_slave_1: entered allmulticast mode [ 78.850291][ T5876] bridge_slave_1: entered promiscuous mode [ 78.912987][ T5861] team0: Port device team_slave_0 added [ 78.936587][ T5865] Bluetooth: hci0: command tx timeout [ 78.962370][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.986950][ T5861] team0: Port device team_slave_1 added [ 78.995261][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.009563][ T5863] hsr_slave_0: entered promiscuous mode [ 79.016692][ T5865] Bluetooth: hci1: command tx timeout [ 79.020486][ T5863] hsr_slave_1: entered promiscuous mode [ 79.031107][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.041640][ T5870] team0: Port device team_slave_0 added [ 79.063090][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.096109][ T5865] Bluetooth: hci2: command tx timeout [ 79.121587][ T5870] team0: Port device team_slave_1 added [ 79.155304][ T5876] team0: Port device team_slave_0 added [ 79.164818][ T5876] team0: Port device team_slave_1 added [ 79.176654][ T5865] Bluetooth: hci3: command tx timeout [ 79.179493][ T51] Bluetooth: hci4: command tx timeout [ 79.205065][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.212342][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.239449][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.271447][ T5875] team0: Port device team_slave_0 added [ 79.292238][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.299555][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.326528][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.362920][ T5875] team0: Port device team_slave_1 added [ 79.381777][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.390766][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.417177][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.443923][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.452522][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.478648][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.492337][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.499795][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.525963][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.548419][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.555387][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.581662][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.653271][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.660840][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.687246][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.741046][ T5861] hsr_slave_0: entered promiscuous mode [ 79.748100][ T5861] hsr_slave_1: entered promiscuous mode [ 79.754233][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 79.760390][ T5861] Cannot create hsr debugfs directory [ 79.783230][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.790239][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.816355][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.903145][ T5870] hsr_slave_0: entered promiscuous mode [ 79.910199][ T5870] hsr_slave_1: entered promiscuous mode [ 79.916646][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 79.922371][ T5870] Cannot create hsr debugfs directory [ 80.004083][ T5876] hsr_slave_0: entered promiscuous mode [ 80.011897][ T5876] hsr_slave_1: entered promiscuous mode [ 80.018451][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 80.024191][ T5876] Cannot create hsr debugfs directory [ 80.055917][ T5875] hsr_slave_0: entered promiscuous mode [ 80.062490][ T5875] hsr_slave_1: entered promiscuous mode [ 80.068838][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 80.074574][ T5875] Cannot create hsr debugfs directory [ 80.459486][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.512982][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.553607][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.564917][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.648988][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.663373][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.687410][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.709996][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.762395][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.785070][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.806640][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.817557][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.939528][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.950958][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.962411][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.999109][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.017912][ T51] Bluetooth: hci0: command tx timeout [ 81.065063][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.080073][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.095985][ T51] Bluetooth: hci1: command tx timeout [ 81.114143][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.129112][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.155362][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.176107][ T51] Bluetooth: hci2: command tx timeout [ 81.212779][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.256286][ T51] Bluetooth: hci3: command tx timeout [ 81.256449][ T5865] Bluetooth: hci4: command tx timeout [ 81.270743][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.284499][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.305752][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.313036][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.343112][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.350243][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.376156][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.383348][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.407493][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.414748][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.429512][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.474566][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.514554][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.522014][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.573275][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.580460][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.610485][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.643855][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.699294][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.723267][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.792676][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.799906][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.824912][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.832127][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.873748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.880948][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.968964][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.976152][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.288939][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.545448][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.559703][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.612974][ T5861] veth0_vlan: entered promiscuous mode [ 82.671961][ T5861] veth1_vlan: entered promiscuous mode [ 82.785228][ T5876] veth0_vlan: entered promiscuous mode [ 82.828456][ T5863] veth0_vlan: entered promiscuous mode [ 82.839115][ T5861] veth0_macvtap: entered promiscuous mode [ 82.850002][ T5861] veth1_macvtap: entered promiscuous mode [ 82.880758][ T5876] veth1_vlan: entered promiscuous mode [ 82.891718][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.904666][ T5863] veth1_vlan: entered promiscuous mode [ 82.922619][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.944300][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.020908][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.080196][ T5876] veth0_macvtap: entered promiscuous mode [ 83.088488][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097810][ T5865] Bluetooth: hci0: command tx timeout [ 83.110009][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.128062][ T5863] veth0_macvtap: entered promiscuous mode [ 83.143774][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.176696][ T5865] Bluetooth: hci1: command tx timeout [ 83.178037][ T5863] veth1_macvtap: entered promiscuous mode [ 83.197660][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.231288][ T5876] veth1_macvtap: entered promiscuous mode [ 83.240383][ T5875] veth0_vlan: entered promiscuous mode [ 83.256182][ T5865] Bluetooth: hci2: command tx timeout [ 83.287002][ T5875] veth1_vlan: entered promiscuous mode [ 83.302462][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.318729][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.336655][ T5865] Bluetooth: hci3: command tx timeout [ 83.337263][ T51] Bluetooth: hci4: command tx timeout [ 83.390854][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.404540][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.451788][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.462155][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.474927][ T1003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.485518][ T1003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511973][ T1003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.521630][ T1003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.552975][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.562098][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.591612][ T3590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600628][ T3590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.611570][ T5870] veth0_vlan: entered promiscuous mode [ 83.621197][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.623390][ T5875] veth0_macvtap: entered promiscuous mode [ 83.629442][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.643104][ T5875] veth1_macvtap: entered promiscuous mode [ 83.659389][ T5870] veth1_vlan: entered promiscuous mode [ 83.717577][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.729860][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.780298][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.800390][ T1116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.854656][ T2980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.866670][ T2980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875418][ T2980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.962762][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.979252][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.002286][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.021396][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.023383][ T5870] veth0_macvtap: entered promiscuous mode [ 84.046515][ T5978] tipc: Started in network mode [ 84.051488][ T5978] tipc: Node identity c691ebe26ad9, cluster identity 4711 [ 84.059461][ T5978] tipc: Enabled bearer , priority 0 [ 84.073969][ T5978] syzkaller0: entered promiscuous mode [ 84.082638][ T5978] syzkaller0: entered allmulticast mode [ 84.091895][ T5870] veth1_macvtap: entered promiscuous mode [ 84.104200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.113879][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.182887][ T5978] tipc: Resetting bearer [ 84.204252][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.204341][ T5977] tipc: Resetting bearer [ 84.218533][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.234195][ T5977] tipc: Disabling bearer [ 84.253457][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.302080][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.333459][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.372192][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.407013][ T2996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.436411][ T2996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.513778][ T2996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527166][ T2996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.544261][ T5986] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 84.573906][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 84.590977][ T5983] syzkaller1: entered promiscuous mode [ 84.598503][ T5983] syzkaller1: entered allmulticast mode [ 84.607774][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631476][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.860627][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.918784][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.061893][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.090030][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.176031][ T51] Bluetooth: hci0: command tx timeout [ 85.261144][ T51] Bluetooth: hci1: command tx timeout [ 85.336257][ T51] Bluetooth: hci2: command tx timeout [ 85.417413][ T51] Bluetooth: hci4: command tx timeout [ 85.426608][ T51] Bluetooth: hci3: command tx timeout [ 86.378761][ T6024] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 86.779361][ T9] cfg80211: failed to load regulatory.db [ 87.850320][ T6047] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 87.885077][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20'. [ 87.894922][ T6046] Zero length message leads to an empty skb [ 89.260739][ T6059] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 89.290128][ T6059] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 89.648117][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.670925][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.703849][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 89.706608][ T6074] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 89.751361][ T6074] netlink: 236 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.803128][ T6074] netlink: 'syz.2.25': attribute type 13 has an invalid length. [ 89.824122][ T6074] netlink: 'syz.2.25': attribute type 17 has an invalid length. [ 89.845647][ T6072] gtp0: entered promiscuous mode [ 90.175988][ T6074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.611042][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.792050][ T6095] netlink: 'syz.1.33': attribute type 9 has an invalid length. [ 90.805420][ T6095] netlink: 'syz.1.33': attribute type 6 has an invalid length. [ 90.836617][ T6097] Bluetooth: MGMT ver 1.23 [ 91.014881][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 91.060757][ T6100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.081030][ T6103] syz_tun: entered allmulticast mode [ 91.093078][ T6104] dvmrp8: entered allmulticast mode [ 91.189088][ T6100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.220087][ T6104] syz_tun: left allmulticast mode [ 91.225420][ T6104] dvmrp8: left allmulticast mode [ 91.451976][ T6100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.641075][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.730746][ T6100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.948227][ T6131] FAULT_INJECTION: forcing a failure. [ 91.948227][ T6131] name failslab, interval 1, probability 0, space 0, times 1 [ 91.998413][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) [ 91.998436][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.998452][ T6131] Call Trace: [ 91.998459][ T6131] [ 91.998466][ T6131] dump_stack_lvl+0x189/0x250 [ 91.998495][ T6131] ? __pfx____ratelimit+0x10/0x10 [ 91.998513][ T6131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.998532][ T6131] ? __pfx__printk+0x10/0x10 [ 91.998558][ T6131] ? __pfx___might_resched+0x10/0x10 [ 91.998578][ T6131] should_fail_ex+0x414/0x560 [ 91.998604][ T6131] should_failslab+0xa8/0x100 [ 91.998628][ T6131] __kmalloc_noprof+0xcb/0x4f0 [ 91.998646][ T6131] ? sock_kmalloc+0xd6/0x160 [ 91.998669][ T6131] sock_kmalloc+0xd6/0x160 [ 91.998690][ T6131] af_alg_get_rsgl+0x236/0x810 [ 91.998725][ T6131] skcipher_recvmsg+0x3c0/0x11c0 [ 91.998746][ T6131] ? aa_sk_perm+0x81e/0x950 [ 91.998780][ T6131] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 91.998796][ T6131] ? __schedule+0x17ae/0x4cc0 [ 91.998818][ T6131] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 91.998834][ T6131] ? security_socket_recvmsg+0x7e/0x2e0 [ 91.998852][ T6131] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 91.998872][ T6131] sock_recvmsg+0x22c/0x270 [ 91.998898][ T6131] ____sys_recvmsg+0x1c9/0x460 [ 91.998916][ T6133] FAULT_INJECTION: forcing a failure. [ 91.998916][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.998926][ T6131] ? __pfx_____sys_recvmsg+0x10/0x10 [ 91.998957][ T6131] ? import_iovec+0x74/0xa0 [ 91.998975][ T6131] ___sys_recvmsg+0x1b5/0x510 [ 91.998996][ T6131] ? __pfx____sys_recvmsg+0x10/0x10 [ 91.999048][ T6131] ? __fget_files+0x3a0/0x420 [ 91.999075][ T6131] __x64_sys_recvmsg+0x198/0x260 [ 91.999095][ T6131] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 91.999123][ T6131] ? __pfx_ksys_write+0x10/0x10 [ 91.999141][ T6131] ? rcu_is_watching+0x15/0xb0 [ 91.999163][ T6131] ? do_syscall_64+0xbe/0x3b0 [ 91.999184][ T6131] do_syscall_64+0xfa/0x3b0 [ 91.999199][ T6131] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.999215][ T6131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.999231][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 91.999250][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.999265][ T6131] RIP: 0033:0x7f1af978ebe9 [ 91.999287][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.999300][ T6131] RSP: 002b:00007f1afa5eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 91.999321][ T6131] RAX: ffffffffffffffda RBX: 00007f1af99c5fa0 RCX: 00007f1af978ebe9 [ 91.999332][ T6131] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 91.999343][ T6131] RBP: 00007f1afa5eb090 R08: 0000000000000000 R09: 0000000000000000 [ 91.999352][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.999361][ T6131] R13: 00007f1af99c6038 R14: 00007f1af99c5fa0 R15: 00007ffe00cd8398 [ 91.999390][ T6131] [ 92.292062][ T1116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.346111][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 92.346137][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.346147][ T6133] Call Trace: [ 92.346153][ T6133] [ 92.346161][ T6133] dump_stack_lvl+0x189/0x250 [ 92.346184][ T6133] ? __pfx____ratelimit+0x10/0x10 [ 92.346202][ T6133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.346221][ T6133] ? __pfx__printk+0x10/0x10 [ 92.346242][ T6133] ? __might_fault+0xb0/0x130 [ 92.346275][ T6133] should_fail_ex+0x414/0x560 [ 92.346301][ T6133] _copy_from_iter+0x1de/0x1790 [ 92.346326][ T6133] ? rcu_is_watching+0x15/0xb0 [ 92.346347][ T6133] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 92.346365][ T6133] ? __pfx__copy_from_iter+0x10/0x10 [ 92.346385][ T6133] ? __build_skb_around+0x257/0x3e0 [ 92.346405][ T6133] ? netlink_sendmsg+0x642/0xb30 [ 92.346421][ T6133] ? skb_put+0x11b/0x210 [ 92.346441][ T6133] netlink_sendmsg+0x6b2/0xb30 [ 92.346468][ T6133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.346488][ T6133] ? aa_sock_msg_perm+0xf1/0x1d0 [ 92.346506][ T6133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.346521][ T6133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.346537][ T6133] __sock_sendmsg+0x21c/0x270 [ 92.346560][ T6133] ____sys_sendmsg+0x52d/0x830 [ 92.346582][ T6133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.346607][ T6133] ? import_iovec+0x74/0xa0 [ 92.346629][ T6133] ___sys_sendmsg+0x21f/0x2a0 [ 92.346649][ T6133] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.346709][ T6133] ? __might_fault+0xb0/0x130 [ 92.346733][ T6133] __sys_sendmmsg+0x227/0x430 [ 92.346758][ T6133] ? __pfx___sys_sendmmsg+0x10/0x10 [ 92.346773][ T6133] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 92.346818][ T6133] ? ksys_write+0x22a/0x250 [ 92.346850][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 92.346867][ T6133] ? rcu_is_watching+0x15/0xb0 [ 92.346891][ T6133] __x64_sys_sendmmsg+0xa0/0xc0 [ 92.346911][ T6133] do_syscall_64+0xfa/0x3b0 [ 92.346928][ T6133] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.346944][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.346960][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 92.346980][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.346996][ T6133] RIP: 0033:0x7f13bbf8ebe9 [ 92.347011][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.347024][ T6133] RSP: 002b:00007f13bcdd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 92.347041][ T6133] RAX: ffffffffffffffda RBX: 00007f13bc1c5fa0 RCX: 00007f13bbf8ebe9 [ 92.347057][ T6133] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000c [ 92.347067][ T6133] RBP: 00007f13bcdd3090 R08: 0000000000000000 R09: 0000000000000000 [ 92.347076][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.347085][ T6133] R13: 00007f13bc1c6038 R14: 00007f13bc1c5fa0 R15: 00007ffeb4028568 [ 92.347111][ T6133] [ 92.676999][ T3590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.687265][ T3590] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.725779][ T1116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.897803][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 92.939562][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 92.941346][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 92.996114][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 93.309007][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.599448][ T6179] FAULT_INJECTION: forcing a failure. [ 93.599448][ T6179] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 93.659828][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full) [ 93.659853][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.659862][ T6179] Call Trace: [ 93.659869][ T6179] [ 93.659877][ T6179] dump_stack_lvl+0x189/0x250 [ 93.659901][ T6179] ? __pfx____ratelimit+0x10/0x10 [ 93.659918][ T6179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.659938][ T6179] ? __pfx__printk+0x10/0x10 [ 93.659962][ T6179] ? fs_reclaim_acquire+0x7d/0x100 [ 93.659994][ T6179] should_fail_ex+0x414/0x560 [ 93.660022][ T6179] prepare_alloc_pages+0x213/0x610 [ 93.660047][ T6179] __alloc_frozen_pages_noprof+0x123/0x370 [ 93.660069][ T6179] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.660096][ T6179] ? policy_nodemask+0x27c/0x720 [ 93.660125][ T6179] alloc_pages_mpol+0x232/0x4a0 [ 93.660152][ T6179] vma_alloc_folio_noprof+0xe4/0x200 [ 93.660177][ T6179] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 93.660212][ T6179] folio_prealloc+0x30/0x180 [ 93.660236][ T6179] do_wp_page+0x1231/0x5800 [ 93.660280][ T6179] ? __pfx_do_wp_page+0x10/0x10 [ 93.660297][ T6179] ? do_raw_spin_lock+0x121/0x290 [ 93.660319][ T6179] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.660349][ T6179] __handle_mm_fault+0x1033/0x5440 [ 93.660387][ T6179] ? __pfx___handle_mm_fault+0x10/0x10 [ 93.660422][ T6179] ? follow_page_pte+0xd03/0x13e0 [ 93.660458][ T6179] handle_mm_fault+0x40a/0x8e0 [ 93.660490][ T6179] __get_user_pages+0x1699/0x2ce0 [ 93.660507][ T6179] ? __lock_acquire+0xab9/0xd20 [ 93.660567][ T6179] __gup_longterm_locked+0xde9/0x1660 [ 93.660601][ T6179] ? sanity_check_pinned_pages+0x1241/0x1300 [ 93.660630][ T6179] ? gup_fast_fallback+0x195f/0x2010 [ 93.660654][ T6179] gup_fast_fallback+0x1e6a/0x2010 [ 93.660709][ T6179] ? __pfx_gup_fast_fallback+0x10/0x10 [ 93.660727][ T6179] ? kasan_save_track+0x4f/0x80 [ 93.660745][ T6179] ? kasan_save_track+0x3e/0x80 [ 93.660761][ T6179] ? __kasan_kmalloc+0x93/0xb0 [ 93.660779][ T6179] ? sock_kmalloc+0xd6/0x160 [ 93.660796][ T6179] ? af_alg_get_rsgl+0x236/0x810 [ 93.660813][ T6179] ? skcipher_recvmsg+0x3c0/0x11c0 [ 93.660832][ T6179] ? ____sys_recvmsg+0x1c9/0x460 [ 93.660848][ T6179] ? ___sys_recvmsg+0x1b5/0x510 [ 93.660864][ T6179] ? __x64_sys_recvmsg+0x198/0x260 [ 93.660886][ T6179] ? pin_user_pages_fast+0x4d/0xb0 [ 93.660908][ T6179] iov_iter_extract_pages+0x35a/0x5e0 [ 93.660938][ T6179] extract_iter_to_sg+0xe46/0x24e0 [ 93.660972][ T6179] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 93.661000][ T6179] ? rcu_is_watching+0x15/0xb0 [ 93.661018][ T6179] ? trace_kmalloc+0x1f/0xd0 [ 93.661035][ T6179] ? __kmalloc_noprof+0x29b/0x4f0 [ 93.661062][ T6179] ? __asan_memset+0x22/0x50 [ 93.661082][ T6179] af_alg_get_rsgl+0x436/0x810 [ 93.661122][ T6179] skcipher_recvmsg+0x3c0/0x11c0 [ 93.661146][ T6179] ? aa_sk_perm+0x81e/0x950 [ 93.661181][ T6179] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 93.661205][ T6179] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 93.661221][ T6179] ? security_socket_recvmsg+0x7e/0x2e0 [ 93.661240][ T6179] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 93.661260][ T6179] sock_recvmsg+0x22c/0x270 [ 93.661285][ T6179] ____sys_recvmsg+0x1c9/0x460 [ 93.661311][ T6179] ? __pfx_____sys_recvmsg+0x10/0x10 [ 93.661342][ T6179] ? import_iovec+0x74/0xa0 [ 93.661361][ T6179] ___sys_recvmsg+0x1b5/0x510 [ 93.661384][ T6179] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.661426][ T6179] ? __fget_files+0x3a0/0x420 [ 93.661451][ T6179] __x64_sys_recvmsg+0x198/0x260 [ 93.661472][ T6179] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 93.661500][ T6179] ? __pfx_ksys_write+0x10/0x10 [ 93.661517][ T6179] ? rcu_is_watching+0x15/0xb0 [ 93.661537][ T6179] ? do_syscall_64+0xbe/0x3b0 [ 93.661557][ T6179] do_syscall_64+0xfa/0x3b0 [ 93.661571][ T6179] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.661586][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.661601][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 93.661628][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.661643][ T6179] RIP: 0033:0x7f1af978ebe9 [ 93.661658][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.661670][ T6179] RSP: 002b:00007f1afa5eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 93.661689][ T6179] RAX: ffffffffffffffda RBX: 00007f1af99c5fa0 RCX: 00007f1af978ebe9 [ 93.661700][ T6179] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 93.661708][ T6179] RBP: 00007f1afa5eb090 R08: 0000000000000000 R09: 0000000000000000 [ 93.661717][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.661724][ T6179] R13: 00007f1af99c6038 R14: 00007f1af99c5fa0 R15: 00007ffe00cd8398 [ 93.661751][ T6179] [ 94.411971][ T6193] FAULT_INJECTION: forcing a failure. [ 94.411971][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 94.473186][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(full) [ 94.473210][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.473220][ T6193] Call Trace: [ 94.473227][ T6193] [ 94.473234][ T6193] dump_stack_lvl+0x189/0x250 [ 94.473257][ T6193] ? __pfx____ratelimit+0x10/0x10 [ 94.473271][ T6193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.473286][ T6193] ? __pfx__printk+0x10/0x10 [ 94.473303][ T6193] ? __lock_acquire+0xab9/0xd20 [ 94.473331][ T6193] should_fail_ex+0x414/0x560 [ 94.473366][ T6193] should_failslab+0xa8/0x100 [ 94.473386][ T6193] kmem_cache_alloc_noprof+0x73/0x3c0 [ 94.473404][ T6193] ? skb_clone+0x212/0x3a0 [ 94.473425][ T6193] skb_clone+0x212/0x3a0 [ 94.473446][ T6193] __netlink_deliver_tap+0x404/0x850 [ 94.473473][ T6193] ? netlink_deliver_tap+0x2e/0x1b0 [ 94.473490][ T6193] netlink_deliver_tap+0x19c/0x1b0 [ 94.473513][ T6193] netlink_unicast+0x7fa/0x9e0 [ 94.473544][ T6193] ? __pfx_netlink_unicast+0x10/0x10 [ 94.473569][ T6193] ? netlink_sendmsg+0x642/0xb30 [ 94.473591][ T6193] ? skb_put+0x11b/0x210 [ 94.473612][ T6193] netlink_sendmsg+0x805/0xb30 [ 94.473636][ T6193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.473653][ T6193] ? aa_sock_msg_perm+0xf1/0x1d0 [ 94.473671][ T6193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.473687][ T6193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.473703][ T6193] __sock_sendmsg+0x21c/0x270 [ 94.473727][ T6193] ____sys_sendmsg+0x52d/0x830 [ 94.473750][ T6193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.473778][ T6193] ? import_iovec+0x74/0xa0 [ 94.473801][ T6193] ___sys_sendmsg+0x21f/0x2a0 [ 94.473821][ T6193] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.473882][ T6193] ? __might_fault+0xb0/0x130 [ 94.473907][ T6193] __sys_sendmmsg+0x227/0x430 [ 94.473930][ T6193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.473945][ T6193] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 94.473997][ T6193] ? ksys_write+0x22a/0x250 [ 94.474020][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 94.474037][ T6193] ? rcu_is_watching+0x15/0xb0 [ 94.474060][ T6193] __x64_sys_sendmmsg+0xa0/0xc0 [ 94.474080][ T6193] do_syscall_64+0xfa/0x3b0 [ 94.474097][ T6193] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.474113][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.474128][ T6193] ? clear_bhb_loop+0x60/0xb0 [ 94.474149][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.474165][ T6193] RIP: 0033:0x7f1af978ebe9 [ 94.474181][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.474194][ T6193] RSP: 002b:00007f1afa5eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.474211][ T6193] RAX: ffffffffffffffda RBX: 00007f1af99c5fa0 RCX: 00007f1af978ebe9 [ 94.474223][ T6193] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000c [ 94.474234][ T6193] RBP: 00007f1afa5eb090 R08: 0000000000000000 R09: 0000000000000000 [ 94.474245][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.474255][ T6193] R13: 00007f1af99c6038 R14: 00007f1af99c5fa0 R15: 00007ffe00cd8398 [ 94.474285][ T6193] [ 95.101363][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.109746][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.272872][ T6210] netlink: 'syz.2.66': attribute type 21 has an invalid length. [ 95.290320][ T6210] __nla_validate_parse: 3 callbacks suppressed [ 95.290337][ T6210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.66'. [ 95.348848][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 95.533304][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.572376][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.905432][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.954573][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.060857][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.069820][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.070683][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.183245][ T6253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.211049][ T6256] warning: `syz.4.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.328735][ T6267] tipc: Started in network mode [ 96.337981][ T6267] tipc: Node identity ac14142f, cluster identity 4711 [ 96.345239][ T6267] tipc: New replicast peer: 0.0.0.0 [ 96.352860][ T6267] tipc: Enabled bearer , priority 10 [ 96.477200][ T6273] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 96.614002][ T6280] veth0: entered promiscuous mode [ 96.651780][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 97.476121][ T5928] tipc: Node number set to 2886997039 [ 98.398302][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 98.838732][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.943678][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.730496][ T6407] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 99.766836][ T6407] macsec1: entered promiscuous mode [ 99.804022][ T6407] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 100.052714][ T6416] netlink: 188 bytes leftover after parsing attributes in process `syz.1.111'. [ 100.115471][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.4.112'. [ 100.304617][ T6426] netlink: 248 bytes leftover after parsing attributes in process `syz.2.113'. [ 100.798090][ T6443] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 101.009653][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 101.221074][ T6451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.341752][ T6457] netlink: 'syz.0.122': attribute type 12 has an invalid length. [ 101.389359][ T6457] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.122'. [ 101.478529][ T6451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.538501][ T6463] netlink: 'syz.0.122': attribute type 2 has an invalid length. [ 101.623031][ T6451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.805356][ T6451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.926589][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 101.992773][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 102.240653][ T6478] bridge0: port 3(vlan2) entered blocking state [ 102.278072][ T6478] bridge0: port 3(vlan2) entered disabled state [ 102.284551][ T6478] vlan2: entered allmulticast mode [ 102.295931][ T6478] bridge0: entered allmulticast mode [ 102.344588][ T6478] vlan2: left allmulticast mode [ 102.375339][ T6478] bridge0: left allmulticast mode [ 102.703766][ T6506] netlink: 256 bytes leftover after parsing attributes in process `syz.3.130'. [ 102.733629][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.766035][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.851685][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.931263][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.939450][ T6525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.986470][ T6525] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 104.486968][ T6525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.492909][ T6525] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 104.630046][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.139'. [ 104.687812][ T6525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.716470][ T6525] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 104.764413][ T6594] tipc: Enabled bearer , priority 0 [ 104.800087][ T6525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.814192][ T6525] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 104.840949][ T6596] syzkaller0: entered promiscuous mode [ 104.869742][ T6596] syzkaller0: entered allmulticast mode [ 104.936319][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.003974][ T6594] tipc: Resetting bearer [ 105.065929][ T6593] tipc: Resetting bearer [ 105.102909][ T6593] tipc: Disabling bearer [ 105.994465][ T6630] tipc: Started in network mode [ 106.018502][ T6630] tipc: Node identity 02b9c9bf3f25, cluster identity 4711 [ 106.041566][ T6630] tipc: Enabled bearer , priority 0 [ 106.106186][ T6633] syzkaller0: entered promiscuous mode [ 106.111693][ T6633] syzkaller0: entered allmulticast mode [ 106.178533][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.149'. [ 106.197810][ T6627] tipc: Resetting bearer [ 106.241229][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.149'. [ 106.254009][ T6627] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 106.378371][ T6627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.568704][ T6630] bond1: (slave veth1): Enslaving as an active interface with a down link [ 106.640793][ T6626] tipc: Resetting bearer [ 106.672241][ T6626] tipc: Disabling bearer [ 106.982000][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.155'. [ 107.114498][ T6677] lo speed is unknown, defaulting to 1000 [ 107.137989][ T6677] lo speed is unknown, defaulting to 1000 [ 107.186803][ T6677] lo speed is unknown, defaulting to 1000 [ 107.190231][ T6680] siw: device registration error -23 [ 107.219437][ T6677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.230924][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 107.243159][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 107.283213][ T6677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.430317][ T6677] lo speed is unknown, defaulting to 1000 [ 107.459940][ T6677] lo speed is unknown, defaulting to 1000 [ 107.481509][ T6677] lo speed is unknown, defaulting to 1000 [ 107.529465][ T6677] lo speed is unknown, defaulting to 1000 [ 107.538441][ T6677] lo speed is unknown, defaulting to 1000 [ 107.710658][ T6699] virt_wifi0: mtu less than device minimum [ 107.810665][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 107.892141][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 107.924407][ T6706] lo speed is unknown, defaulting to 1000 [ 107.925335][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.333071][ T6723] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 108.646538][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 108.724298][ T6730] lo speed is unknown, defaulting to 1000 [ 109.473657][ T6744] lo speed is unknown, defaulting to 1000 [ 109.567810][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 109.612003][ T6749] netlink: 'syz.2.179': attribute type 21 has an invalid length. [ 109.641804][ T6749] ipvlan2: entered promiscuous mode [ 109.654808][ T6749] bridge0: port 3(ipvlan2) entered blocking state [ 109.662377][ T6749] bridge0: port 3(ipvlan2) entered disabled state [ 109.675150][ T6749] ipvlan2: entered allmulticast mode [ 109.680982][ T6749] gretap0: entered allmulticast mode [ 109.701438][ T6749] ipvlan2: left allmulticast mode [ 109.710626][ T6749] gretap0: left allmulticast mode [ 110.113687][ T6784] netlink: 'syz.1.190': attribute type 9 has an invalid length. [ 110.714348][ T6803] lo speed is unknown, defaulting to 1000 [ 110.805978][ T6807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.376615][ T6838] lo speed is unknown, defaulting to 1000 [ 111.451509][ T6832] lo speed is unknown, defaulting to 1000 [ 112.136753][ T6857] netlink: 'syz.0.209': attribute type 7 has an invalid length. [ 112.289322][ T6847] __nla_validate_parse: 5 callbacks suppressed [ 112.289340][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'. [ 112.374278][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 112.621941][ T6866] lo speed is unknown, defaulting to 1000 [ 112.977476][ T6883] infiniband syz0: set active [ 112.983063][ T6883] infiniband syz0: added batadv_slave_0 [ 113.121767][ T6883] RDS/IB: syz0: added [ 113.126818][ T6883] smc: adding ib device syz0 with port count 1 [ 113.133414][ T6883] smc: ib device syz0 port 1 has pnetid [ 113.278431][ T6896] lo speed is unknown, defaulting to 1000 [ 113.569677][ T6921] netlink: 68 bytes leftover after parsing attributes in process `syz.3.223'. [ 115.424669][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'. [ 115.529233][ T6974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'. [ 115.540426][ T6974] tipc: Enabling of bearer rejected, media not registered [ 115.629303][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 115.884466][ T6992] syzkaller0: entered promiscuous mode [ 115.890608][ T6992] syzkaller0: entered allmulticast mode [ 115.913055][ T6992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.049593][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 116.174122][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 116.211326][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 116.343642][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 116.391216][ T7016] bridge0: port 3(vlan2) entered blocking state [ 116.408145][ T7016] bridge0: port 3(vlan2) entered disabled state [ 116.418396][ T7016] vlan2: entered allmulticast mode [ 116.423549][ T7016] bridge0: entered allmulticast mode [ 116.435592][ T7016] vlan2: left allmulticast mode [ 116.440946][ T7016] bridge0: left allmulticast mode [ 116.641110][ T5928] IPVS: starting estimator thread 0... [ 116.651748][ T7027] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.765869][ T7030] IPVS: using max 32 ests per chain, 76800 per kthread [ 116.851847][ T7037] tipc: Enabled bearer , priority 0 [ 116.863749][ T7037] syzkaller0: entered promiscuous mode [ 116.869646][ T7037] syzkaller0: entered allmulticast mode [ 116.914960][ T7037] tipc: Resetting bearer [ 116.927899][ T7036] tipc: Resetting bearer [ 116.948592][ T7036] tipc: Disabling bearer [ 117.110479][ T6910] lo speed is unknown, defaulting to 1000 [ 117.349155][ T7053] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.924769][ T7075] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 117.955929][ T7075] __nla_validate_parse: 4 callbacks suppressed [ 117.955947][ T7075] netlink: 140 bytes leftover after parsing attributes in process `syz.3.266'. [ 117.972939][ T7082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 117.987943][ T7075] netlink: 96 bytes leftover after parsing attributes in process `syz.3.266'. [ 117.991278][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 118.770409][ T7112] ip6tnl1: entered promiscuous mode [ 118.786379][ T7112] ip6tnl1: entered allmulticast mode [ 118.804913][ T7112] team0: Device ip6tnl1 is of different type [ 119.087240][ T7121] lo speed is unknown, defaulting to 1000 [ 119.687761][ T7140] netlink: 'syz.4.281': attribute type 29 has an invalid length. [ 119.783270][ T7159] vlan2: entered allmulticast mode [ 119.823384][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 120.231105][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.291'. [ 120.251074][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.291'. [ 120.264090][ T7175] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 120.492785][ T7188] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 120.594190][ T7187] lo speed is unknown, defaulting to 1000 [ 120.824023][ T7214] pim6reg: entered allmulticast mode [ 120.987223][ T7219] tipc: Enabled bearer , priority 0 [ 121.026127][ T7220] tipc: Resetting bearer [ 121.045264][ T7224] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 121.130596][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 121.165284][ T7220] tipc: Disabling bearer [ 121.230759][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.243429][ T7224] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 121.258989][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.278459][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 121.319515][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.351443][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.453350][ T7240] IPv6: Can't replace route, no match found [ 121.532336][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 121.620813][ T7248] vlan2: entered promiscuous mode [ 121.626845][ T7248] hsr0: entered promiscuous mode [ 123.132588][ T7247] lo speed is unknown, defaulting to 1000 [ 123.454251][ T7281] tipc: Started in network mode [ 123.459238][ T7281] tipc: Node identity 521b27587a3e, cluster identity 4711 [ 123.467961][ T7281] tipc: Enabled bearer , priority 0 [ 123.488859][ T7281] syzkaller0: entered promiscuous mode [ 123.496554][ T7281] syzkaller0: entered allmulticast mode [ 123.601777][ T7279] tipc: Resetting bearer [ 123.692815][ T7279] tipc: Disabling bearer [ 123.971108][ T7304] tipc: Enabled bearer , priority 0 [ 123.990259][ T7304] syzkaller0: entered promiscuous mode [ 123.998302][ T7304] syzkaller0: entered allmulticast mode [ 124.059988][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 124.176786][ T7309] tipc: Resetting bearer [ 124.456441][ T7302] tipc: Resetting bearer [ 124.527596][ T7302] tipc: Disabling bearer [ 124.540909][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 124.666940][ T7341] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 124.838598][ T7341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.887478][ T7348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.905043][ T7348] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 124.943207][ T7348] bond1: (slave vcan1): Error -95 calling set_mac_address [ 125.001041][ T7364] nbd: must specify at least one socket [ 125.043453][ T7341] gretap1: entered promiscuous mode [ 125.069814][ T7341] bond1: (slave gretap1): making interface the new active one [ 125.098575][ T7341] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.160547][ T7354] macvlan2: entered promiscuous mode [ 125.166112][ T7354] macvlan2: entered allmulticast mode [ 125.172350][ T7354] bond1: entered promiscuous mode [ 125.179900][ T7354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.194919][ T7354] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 125.210995][ T7354] bond1: left promiscuous mode [ 125.294208][ T7372] netlink: 80 bytes leftover after parsing attributes in process `syz.1.343'. [ 125.463672][ T7387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.347'. [ 125.473316][ T7374] syz.4.344 (7374) used greatest stack depth: 16920 bytes left [ 125.485119][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 125.643877][ T7398] can: request_module (can-proto-0) failed. [ 125.659605][ T7406] netlink: 'syz.2.345': attribute type 4 has an invalid length. [ 125.759990][ T7407] bridge0: port 3(veth0_to_team) entered blocking state [ 125.779155][ T7407] bridge0: port 3(veth0_to_team) entered disabled state [ 125.800440][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 125.812066][ T7407] veth0_to_team: entered allmulticast mode [ 125.838531][ T7407] veth0_to_team: entered promiscuous mode [ 125.844369][ T7383] netlink: 'syz.2.345': attribute type 4 has an invalid length. [ 125.847203][ T7407] bridge0: port 3(veth0_to_team) entered blocking state [ 125.860016][ T7407] bridge0: port 3(veth0_to_team) entered forwarding state [ 126.053504][ T7422] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 126.146356][ T7430] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.153814][ T7430] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.209590][ T7430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.334537][ T7431] lo speed is unknown, defaulting to 1000 [ 126.505176][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 126.519043][ T7452] lo speed is unknown, defaulting to 1000 [ 126.566390][ T7456] netlink: 64 bytes leftover after parsing attributes in process `syz.1.363'. [ 126.614732][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 126.704815][ T7462] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 126.824558][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 127.067335][ T7475] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.108713][ T7470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.251414][ T7470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.359959][ T7470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.422720][ T7490] bond0: entered promiscuous mode [ 127.428341][ T7490] bond_slave_0: entered promiscuous mode [ 127.435479][ T7490] bond_slave_1: entered promiscuous mode [ 127.447937][ T7490] batadv0: entered promiscuous mode [ 127.455107][ T7490] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 127.455323][ T7492] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 127.468948][ T7490] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 127.487615][ T7490] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 127.504758][ T7445] batadv0: entered promiscuous mode [ 127.525289][ T7445] macsec1: entered promiscuous mode [ 127.550022][ T7445] batadv0: left promiscuous mode [ 127.635413][ T7470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.693574][ T7495] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 127.705096][ T7495] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 127.723968][ T7495] bond2: (slave vcan1): making interface the new active one [ 127.733715][ T7495] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 127.750745][ T7497] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 127.778163][ T7497] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 127.801589][ T7499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.970298][ T7506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 128.024486][ T1116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.265587][ T1116] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.351997][ T1116] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.375113][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.676790][ T7527] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 128.700867][ T7531] netlink: 'syz.3.380': attribute type 13 has an invalid length. [ 128.709416][ T7531] netlink: 'syz.3.380': attribute type 17 has an invalid length. [ 128.851139][ T7533] bond2: (slave gretap2): making interface the new active one [ 128.861034][ T7533] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 128.979759][ T7531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.013087][ T10] lo speed is unknown, defaulting to 1000 [ 129.094292][ T7535] lo speed is unknown, defaulting to 1000 [ 129.166028][ T7525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.273508][ T7525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.397880][ T7558] __nla_validate_parse: 5 callbacks suppressed [ 129.397896][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.429523][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.480163][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.540335][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.551480][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.577449][ T7562] netlink: 'syz.2.387': attribute type 7 has an invalid length. [ 129.588309][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 129.693652][ T7562] : entered promiscuous mode [ 130.177886][ T30] audit: type=1800 audit(1756781389.460:2): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="memory.events" dev="tmpfs" ino=509 res=0 errno=0 [ 130.319790][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 130.359362][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 130.682069][ T7607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.398'. [ 130.972038][ T7612] lo speed is unknown, defaulting to 1000 [ 131.129144][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.400'. [ 131.724905][ T7647] syzkaller0: entered promiscuous mode [ 131.738372][ T7647] syzkaller0: entered allmulticast mode [ 131.822239][ T7651] netlink: 'syz.4.408': attribute type 3 has an invalid length. [ 131.925527][ T7649] lo speed is unknown, defaulting to 1000 [ 132.097841][ T7667] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 132.153355][ T7668] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 132.153679][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.235102][ T7667] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.318247][ T7668] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.449048][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.501878][ T7668] bond_slave_0: entered promiscuous mode [ 132.508505][ T7668] bond_slave_1: entered promiscuous mode [ 132.514448][ T7668] team_slave_0: entered promiscuous mode [ 132.520439][ T7668] team_slave_1: entered promiscuous mode [ 132.526231][ T7668] syz_tun: entered promiscuous mode [ 132.576181][ T7668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.587563][ T7668] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 132.868280][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876112][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.579636][ T7712] batadv1: entered promiscuous mode [ 133.586434][ T7712] batadv1: entered allmulticast mode [ 133.905629][ T7733] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 134.848553][ T7769] __nla_validate_parse: 12 callbacks suppressed [ 134.848572][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 135.162465][ T7787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.213307][ T7787] bridge_slave_0: left allmulticast mode [ 135.226569][ T7787] bridge_slave_0: left promiscuous mode [ 135.232748][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.251139][ T7787] bridge_slave_1: left allmulticast mode [ 135.272668][ T7787] bridge_slave_1: left promiscuous mode [ 135.292684][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.322766][ T7787] bond0: (slave bond_slave_0): Releasing backup interface [ 135.341697][ T7787] bond_slave_0: left promiscuous mode [ 135.364663][ T7787] bond0: (slave bond_slave_1): Releasing backup interface [ 135.383188][ T7787] bond_slave_1: left promiscuous mode [ 135.391219][ T7787] team0: Port device team_slave_0 removed [ 135.400093][ T7787] team0: Port device team_slave_1 removed [ 135.410011][ T7787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.422252][ T7787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.435255][ T7787] bond1: (slave gretap1): Releasing active interface [ 135.451278][ T7787] bond2: (slave gretap2): Releasing active interface [ 135.666722][ T7813] lo speed is unknown, defaulting to 1000 [ 136.137164][ T7837] lo speed is unknown, defaulting to 1000 [ 136.417542][ T7849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.438797][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.466'. [ 136.673482][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.697441][ T7856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.708432][ T7856] atomic_op ffff888075477998 conn xmit_atomic 0000000000000000 [ 136.829830][ T7859] syzkaller0: entered promiscuous mode [ 136.835479][ T7859] syzkaller0: entered allmulticast mode [ 137.595908][ T7870] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.473'. [ 137.719831][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 138.546856][ T7879] tipc: Started in network mode [ 138.562535][ T7879] tipc: Node identity fec6b8e0fa68, cluster identity 4711 [ 138.579235][ T7879] tipc: Enabled bearer , priority 0 [ 138.616838][ T7882] syzkaller0: entered promiscuous mode [ 138.622343][ T7882] syzkaller0: entered allmulticast mode [ 138.819194][ T7892] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 138.897049][ T7879] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 138.910210][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'. [ 138.929096][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.945563][ T7895] netlink: 5 bytes leftover after parsing attributes in process `syz.0.478'. [ 139.024339][ T6572] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 139.073951][ T7879] batadv0: entered promiscuous mode [ 139.083781][ T7879] batadv0: entered allmulticast mode [ 139.114979][ T7904] netlink: 136 bytes leftover after parsing attributes in process `syz.3.480'. [ 139.116645][ T7879] bridge0: port 4(batadv0) entered blocking state [ 139.164079][ T7879] bridge0: port 4(batadv0) entered disabled state [ 139.202769][ T7882] lo speed is unknown, defaulting to 1000 [ 139.208702][ T7907] !: renamed from dummy0 (while UP) [ 139.222767][ T7898] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 139.231117][ T7898] netlink: 232 bytes leftover after parsing attributes in process `syz.3.480'. [ 139.240544][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 139.479800][ T7913] lo speed is unknown, defaulting to 1000 [ 139.548060][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 139.557883][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 139.705885][ T5980] tipc: Node number set to 78559456 [ 139.777286][ T7892] tipc: Resetting bearer [ 139.854967][ T7892] tipc: Disabling bearer [ 140.561499][ T7949] lo speed is unknown, defaulting to 1000 [ 140.880900][ T7964] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 141.429967][ T7971] lo speed is unknown, defaulting to 1000 [ 141.893457][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 142.040569][ T7978] netlink: 248 bytes leftover after parsing attributes in process `syz.3.492'. [ 142.412338][ T7976] team0 (unregistering): Port device team_slave_0 removed [ 142.444489][ T7976] team0 (unregistering): Port device team_slave_1 removed [ 142.651382][ T12] bridge0: port 3(veth0_to_team) entered disabled state [ 142.742591][ T7988] netlink: 'syz.4.494': attribute type 25 has an invalid length. [ 142.750527][ T7988] netlink: 'syz.4.494': attribute type 7 has an invalid length. [ 142.952011][ T7996] netlink: 'syz.1.497': attribute type 5 has an invalid length. [ 143.065521][ T8000] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 143.132002][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 143.859996][ T8032] netlink: 'syz.0.505': attribute type 13 has an invalid length. [ 143.892489][ T8032] netlink: 'syz.0.505': attribute type 17 has an invalid length. [ 144.070491][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.080282][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.102667][ T8032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.239244][ T8038] netlink: 96 bytes leftover after parsing attributes in process `syz.2.506'. [ 144.437539][ T8034] lo speed is unknown, defaulting to 1000 [ 144.446052][ T8054] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 144.532670][ T8054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.600059][ T8059] bond2: (slave dummy0): making interface the new active one [ 144.614083][ T8059] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 144.691894][ T8062] netlink: 'syz.1.510': attribute type 11 has an invalid length. [ 144.804135][ T30] audit: type=1800 audit(1756781404.080:3): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=401 res=0 errno=0 [ 144.861930][ T30] audit: type=1804 audit(1756781404.110:4): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.511" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=401 res=1 errno=0 [ 145.060842][ T8079] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 145.098510][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 145.178296][ T8086] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 145.188069][ T8086] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 145.214286][ T8076] gretap1: entered allmulticast mode [ 145.263587][ T8090] tipc: Enabled bearer , priority 10 [ 145.440961][ T8090] lo speed is unknown, defaulting to 1000 [ 145.447111][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.552274][ T8095] veth1_macvtap: left promiscuous mode [ 145.562428][ T8095] macsec0: entered promiscuous mode [ 145.581807][ T8095] macsec0: entered allmulticast mode [ 145.627235][ T8094] lo speed is unknown, defaulting to 1000 [ 145.646924][ T8096] veth1_macvtap: entered promiscuous mode [ 145.665233][ T8096] veth1_macvtap: entered allmulticast mode [ 145.682678][ T8096] macsec0: left promiscuous mode [ 145.690737][ T8096] macsec0: left allmulticast mode [ 145.698445][ T8096] veth1_macvtap: left allmulticast mode [ 146.376077][ T6239] tipc: Node number set to 2890460130 [ 146.459858][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 146.526695][ T8124] batadv_slave_1: entered promiscuous mode [ 146.537784][ T8124] batadv_slave_1: left promiscuous mode [ 146.747095][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 147.336166][ T8146] lo speed is unknown, defaulting to 1000 [ 148.983972][ T8167] lo speed is unknown, defaulting to 1000 [ 149.491250][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 149.520812][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.547'. [ 149.634097][ T8189] lo speed is unknown, defaulting to 1000 [ 149.642337][ T8182] lo speed is unknown, defaulting to 1000 [ 149.832596][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 150.233895][ T8207] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 150.303024][ T8207] bond0: (slave wlan1): Opening slave failed [ 150.445426][ T8209] lo speed is unknown, defaulting to 1000 [ 150.918077][ T8220] smc: net device bond0 applied user defined pnetid SYZ2 [ 151.010920][ T8225] netlink: 'syz.2.558': attribute type 7 has an invalid length. [ 151.034277][ T8225] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 151.200241][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 151.377756][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.561'. [ 151.432269][ T8232] netlink: 'syz.2.561': attribute type 11 has an invalid length. [ 151.480359][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 151.502015][ T8232] Bluetooth: MGMT ver 1.23 [ 152.759019][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.787947][ T8257] netlink: 'syz.1.570': attribute type 3 has an invalid length. [ 152.808797][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 153.244343][ T8277] lo speed is unknown, defaulting to 1000 [ 153.747982][ T8300] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.776941][ T8300] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.881231][ T8300] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.906025][ T8300] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.950659][ T8308] netlink: 280 bytes leftover after parsing attributes in process `syz.3.586'. [ 154.032722][ T8308] netlink: 'syz.3.586': attribute type 7 has an invalid length. [ 154.043383][ T8300] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.058507][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 154.068827][ T8300] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.121846][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 154.132937][ T8300] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.148649][ T8300] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.207221][ T8313] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 154.237619][ T8313] gretap0: entered promiscuous mode [ 154.361984][ T77] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.385794][ T77] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.580781][ T77] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.599057][ T77] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.722837][ T8333] __nla_validate_parse: 2 callbacks suppressed [ 154.722855][ T8333] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.592'. [ 154.765499][ T3590] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.805774][ T3590] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.814677][ T3590] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.851943][ T3590] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.946018][ T8341] netlink: 'syz.2.593': attribute type 282 has an invalid length. [ 155.193017][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.405472][ T8372] !: renamed from dummy0 (while UP) [ 155.606484][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 155.623690][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.649082][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.674409][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.692224][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.969538][ T8408] tap0: tun_chr_ioctl cmd 2148553947 [ 156.041153][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 156.091283][ T8416] lo speed is unknown, defaulting to 1000 [ 156.131277][ T8424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.616'. [ 156.310192][ T8429] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.414554][ T8429] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.475567][ T8429] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.604007][ T8429] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.819930][ T3590] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.895367][ T2980] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.940482][ T2980] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.984065][ T2980] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.143216][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 157.179809][ T6233] IPVS: starting estimator thread 0... [ 157.227964][ T8453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.237240][ T8453] bond2: (slave bond3): Enslaving as an active interface with an up link [ 157.288722][ T8457] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.309201][ T8467] tipc: Enabling of bearer rejected, failed to enable media [ 157.365112][ T8469] netlink: 'syz.0.631': attribute type 3 has an invalid length. [ 157.380555][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 157.643651][ T8482] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 157.684707][ T8489] trusted_key: syz.1.636 sent an empty control message without MSG_MORE. [ 157.794855][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 157.919310][ T8499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 157.931096][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'. [ 158.152116][ T8506] ip6gre1: entered promiscuous mode [ 158.637050][ T8557] netlink: 'syz.1.645': attribute type 3 has an invalid length. [ 159.175528][ T8585] lo speed is unknown, defaulting to 1000 [ 159.254766][ T8592] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.262302][ T8592] team0: Device ipvlan2 is already an upper device of the team interface [ 159.326219][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.059557][ T8642] __nla_validate_parse: 9 callbacks suppressed [ 160.059576][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 160.087819][ T8646] pim6reg: entered allmulticast mode [ 160.122332][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.669'. [ 160.169944][ T8646] sctp: [Deprecated]: syz.0.669 (pid 8646) Use of int in max_burst socket option. [ 160.169944][ T8646] Use struct sctp_assoc_value instead [ 160.366633][ T8662] netlink: 26 bytes leftover after parsing attributes in process `syz.2.672'. [ 160.557691][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 160.582881][ T8668] tipc: Can't bind to reserved service type 2 [ 161.053102][ T8685] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.679'. [ 161.360732][ T8696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.683'. [ 161.389123][ T8696] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 161.411625][ T8696] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 161.428634][ T8696] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 161.458781][ T8696] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 161.479041][ T8703] Bluetooth: MGMT ver 1.23 [ 161.480203][ T8696] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 161.697830][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 161.706768][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 161.715644][ T8712] netlink: 'syz.4.685': attribute type 13 has an invalid length. [ 161.795841][ T8712] netlink: 'syz.4.685': attribute type 12 has an invalid length. [ 161.820943][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 161.832818][ T8717] tipc: Enabled bearer , priority 18 [ 161.871263][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 162.129757][ T6233] IPVS: starting estimator thread 0... [ 162.237301][ T8745] IPVS: using max 37 ests per chain, 88800 per kthread [ 162.345983][ T8758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.825773][ T6234] tipc: Node number set to 673523544 [ 163.768503][ T8837] tipc: Enabling of bearer rejected, failed to enable media [ 164.172778][ T8870] lo speed is unknown, defaulting to 1000 [ 164.272486][ T8880] validate_nla: 3 callbacks suppressed [ 164.272504][ T8880] netlink: 'syz.0.734': attribute type 2 has an invalid length. [ 164.325510][ T8884] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 164.375007][ T8880] netlink: 'syz.0.734': attribute type 2 has an invalid length. [ 164.624162][ T8899] netlink: 'syz.0.738': attribute type 13 has an invalid length. [ 164.641418][ T8899] netlink: 'syz.0.738': attribute type 17 has an invalid length. [ 164.653390][ T8895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.728779][ T8899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.830623][ T8896] lo speed is unknown, defaulting to 1000 [ 164.900330][ T8906] netlink: 'syz.1.741': attribute type 2 has an invalid length. [ 164.917516][ T8906] netlink: 'syz.1.741': attribute type 5 has an invalid length. [ 164.933148][ T8907] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 165.086972][ T8907] lo speed is unknown, defaulting to 1000 [ 165.215551][ T8912] __nla_validate_parse: 9 callbacks suppressed [ 165.215569][ T8912] netlink: 96 bytes leftover after parsing attributes in process `syz.1.743'. [ 165.234359][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 165.729443][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 165.832740][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 166.388213][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 166.492780][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'. [ 166.538679][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.754'. [ 166.555495][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 166.624343][ T8954] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 166.644738][ T8957] batman_adv: batadv0: Adding interface: dummy0 [ 166.651169][ T8957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.677360][ T8957] batman_adv: batadv0: Interface activated: dummy0 [ 166.719954][ T8964] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 166.739474][ T8957] batadv0: mtu less than device minimum [ 166.756921][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.769179][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.781111][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.793045][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.804731][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 166.804889][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.825458][ T8957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.848886][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 166.938763][ T8977] netlink: 'syz.3.761': attribute type 30 has an invalid length. [ 166.979227][ T8977] netlink: 'syz.3.761': attribute type 30 has an invalid length. [ 167.935010][ T9039] veth0_to_bond: entered allmulticast mode [ 167.935694][ T9035] ieee802154 phy0 wpan0: encryption failed: -90 [ 168.186377][ T9044] lo speed is unknown, defaulting to 1000 [ 168.192278][ T9044] lo speed is unknown, defaulting to 1000 [ 168.200032][ T9044] lo speed is unknown, defaulting to 1000 [ 168.218919][ T9044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.316744][ T9044] lo speed is unknown, defaulting to 1000 [ 168.325164][ T9044] lo speed is unknown, defaulting to 1000 [ 168.336141][ T9044] lo speed is unknown, defaulting to 1000 [ 168.343991][ T9044] lo speed is unknown, defaulting to 1000 [ 168.351865][ T9044] lo speed is unknown, defaulting to 1000 [ 168.722787][ T9062] tipc: Enabled bearer , priority 0 [ 168.735249][ T9063] syzkaller0: entered promiscuous mode [ 168.744379][ T9063] syzkaller0: entered allmulticast mode [ 168.897269][ T9063] tipc: Resetting bearer [ 169.007239][ T9063] tipc: Disabling bearer [ 169.046629][ T9073] bond3: entered promiscuous mode [ 169.051950][ T9073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.172917][ T9078] lo speed is unknown, defaulting to 1000 [ 169.736312][ T9107] IPVS: Scheduler module ip_vs_sip not found [ 169.913782][ T9111] lo speed is unknown, defaulting to 1000 [ 169.923724][ T9117] validate_nla: 2 callbacks suppressed [ 169.923741][ T9117] netlink: 'syz.0.795': attribute type 2 has an invalid length. [ 169.940140][ T9078] lo speed is unknown, defaulting to 1000 [ 169.946703][ T9117] netlink: 'syz.0.795': attribute type 5 has an invalid length. [ 170.071546][ T77] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.357868][ T77] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.383615][ T9131] __nla_validate_parse: 16 callbacks suppressed [ 170.383635][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 170.409328][ T77] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.431674][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 170.534184][ T77] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.649827][ T9111] lo speed is unknown, defaulting to 1000 [ 170.951117][ T9142] netlink: 324 bytes leftover after parsing attributes in process `syz.0.802'. [ 171.113547][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 171.334633][ T9152] netlink: 'syz.1.801': attribute type 12 has an invalid length. [ 171.527243][ T9157] lo speed is unknown, defaulting to 1000 [ 171.579151][ T9164] netlink: 'syz.4.807': attribute type 13 has an invalid length. [ 171.601351][ T9164] netlink: 'syz.4.807': attribute type 17 has an invalid length. [ 171.797645][ T9164] net_ratelimit: 13 callbacks suppressed [ 171.797657][ T9164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.948813][ T9170] lo speed is unknown, defaulting to 1000 [ 171.956056][ T9180] tipc: Enabled bearer , priority 0 [ 171.971906][ T9180] syzkaller0: entered promiscuous mode [ 171.990832][ T9180] syzkaller0: entered allmulticast mode [ 172.020724][ T9157] lo speed is unknown, defaulting to 1000 [ 172.073946][ T9180] tipc: Resetting bearer [ 172.128025][ T9178] tipc: Resetting bearer [ 172.202145][ T9178] tipc: Disabling bearer [ 172.302816][ T9170] lo speed is unknown, defaulting to 1000 [ 172.414591][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.422353][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.438367][ T9183] bond_slave_0: left promiscuous mode [ 172.443993][ T9183] bond_slave_1: left promiscuous mode [ 172.450667][ T9183] team_slave_0: left promiscuous mode [ 172.456396][ T9183] team_slave_1: left promiscuous mode [ 172.530419][ T9183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.550669][ T9183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.594861][ T9183] tipc: Resetting bearer [ 172.759299][ T9188] macvlan2: entered allmulticast mode [ 172.764904][ T9188] veth1_vlan: entered allmulticast mode [ 172.775144][ T9188] veth1_vlan: left allmulticast mode [ 172.814207][ T6586] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.823043][ T6586] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.831731][ T6586] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.848435][ T6586] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.925295][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 172.960872][ T9194] openvswitch: netlink: Flow key attr not present in new flow. [ 172.998809][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 173.071596][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 173.099931][ T9201] netlink: 216 bytes leftover after parsing attributes in process `syz.1.815'. [ 173.701283][ T9226] netlink: 'syz.0.822': attribute type 22 has an invalid length. [ 173.761273][ T9230] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 173.830954][ T9230] bond4: (slave bridge1): making interface the new active one [ 173.840545][ T9230] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 173.940463][ T9235] pim6reg1: entered promiscuous mode [ 173.964333][ T9239] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 173.966607][ T9235] pim6reg1: entered allmulticast mode [ 173.972382][ T9239] netlink: 17 bytes leftover after parsing attributes in process `syz.1.827'. [ 174.328595][ T9265] syzkaller0: entered promiscuous mode [ 174.342078][ T9265] syzkaller0: entered allmulticast mode [ 174.367663][ T9260] lo speed is unknown, defaulting to 1000 [ 174.368698][ T9265] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.835'. [ 174.409724][ T9263] lo speed is unknown, defaulting to 1000 [ 174.412927][ T9265] tipc: Enabled bearer , priority 0 [ 174.464918][ T9265] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.562477][ T9265] tipc: Resetting bearer [ 174.590244][ T9262] tipc: Resetting bearer [ 174.637702][ T9262] tipc: Disabling bearer [ 174.685913][ T9275] bridge_slave_1: left allmulticast mode [ 174.700520][ T9275] bridge_slave_1: left promiscuous mode [ 174.716313][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.757156][ T9275] bridge_slave_0: left promiscuous mode [ 174.776817][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.875768][ T9260] lo speed is unknown, defaulting to 1000 [ 175.092771][ T9285] netlink: 'syz.0.841': attribute type 7 has an invalid length. [ 175.268896][ T9285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.276318][ T9285] bridge1: port 1(bond4) entered blocking state [ 175.283023][ T9285] bridge1: port 1(bond4) entered disabled state [ 175.289611][ T9285] bond4: entered allmulticast mode [ 175.300657][ T9285] bridge1: port 1(bond4) entered blocking state [ 175.307871][ T9285] bridge1: port 1(bond4) entered forwarding state [ 175.414295][ T9298] __nla_validate_parse: 3 callbacks suppressed [ 175.414313][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 175.598050][ T9306] bond0: Unable to set down delay as MII monitoring is disabled [ 175.730260][ T9263] lo speed is unknown, defaulting to 1000 [ 175.806802][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 175.850244][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 175.873590][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 175.906494][ T9315] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 175.993703][ T9321] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 176.056009][ T9322] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 176.144449][ T6586] bridge1: port 1(bond4) entered disabled state [ 176.160754][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'. [ 176.341299][ T9324] bond4: (slave veth7): Enslaving as an active interface with a down link [ 176.358223][ T9325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.544900][ T9336] openvswitch: netlink: IP tunnel dst address not specified [ 176.606255][ T9339] tipc: Enabled bearer , priority 0 [ 176.613714][ T9340] syzkaller0: entered promiscuous mode [ 176.624688][ T9340] syzkaller0: entered allmulticast mode [ 176.701889][ T9339] tipc: Resetting bearer [ 176.721789][ T9338] tipc: Resetting bearer [ 176.785111][ T9338] tipc: Disabling bearer [ 176.820236][ T9359] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 176.828251][ T9359] netlink: 172 bytes leftover after parsing attributes in process `syz.4.860'. [ 177.571684][ T9394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.868'. [ 177.596534][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 177.949206][ T9400] bond_slave_0: entered promiscuous mode [ 177.955155][ T9400] bond_slave_1: entered promiscuous mode [ 177.984723][ T9400] vlan2: entered promiscuous mode [ 177.996033][ T9400] bond0: entered promiscuous mode [ 178.021014][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 178.060854][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 179.029994][ T9458] lo speed is unknown, defaulting to 1000 [ 179.063354][ T9460] bridge_slave_0: left allmulticast mode [ 179.123424][ T9460] bridge_slave_0: left promiscuous mode [ 179.146011][ T9462] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.153769][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.179906][ T9460] bridge_slave_1: left allmulticast mode [ 179.186081][ T9460] bridge_slave_1: left promiscuous mode [ 179.191911][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.203689][ T9460] bond0: (slave bond_slave_0): Releasing backup interface [ 179.220355][ T9460] bond0: (slave bond_slave_1): Releasing backup interface [ 179.234522][ T9460] team0: Port device team_slave_0 removed [ 179.244092][ T9460] team0: Port device team_slave_1 removed [ 179.259454][ T9460] bond2: (slave vcan1): Releasing backup interface [ 179.266554][ T9460] bond2: (slave vcan2): making interface the new active one [ 179.287789][ T9460] bond2: (slave vcan2): Releasing backup interface [ 179.298143][ T9460] bond4: (slave bridge1): Releasing active interface [ 179.481934][ T9476] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 179.603033][ T9458] lo speed is unknown, defaulting to 1000 [ 179.859539][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.883310][ T9492] lo speed is unknown, defaulting to 1000 [ 180.192710][ T9491] lo speed is unknown, defaulting to 1000 [ 180.632446][ T9492] lo speed is unknown, defaulting to 1000 [ 180.638801][ T9526] __nla_validate_parse: 6 callbacks suppressed [ 180.638818][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 180.675118][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 181.252570][ T9491] lo speed is unknown, defaulting to 1000 [ 181.449386][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.458718][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.501326][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.519822][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.885066][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 182.104399][ T9573] netlink: 'syz.2.918': attribute type 2 has an invalid length. [ 182.137837][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 182.160766][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 182.241287][ T9579] netlink: 'syz.0.919': attribute type 2 has an invalid length. [ 182.261561][ T9584] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.923'. [ 182.292527][ T9584] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 182.350066][ T9584] vlan2: entered allmulticast mode [ 182.355222][ T9584] veth1: entered allmulticast mode [ 182.463552][ T77] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.485424][ T77] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.507853][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.531116][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.794508][ T9619] tipc: Enabled bearer , priority 10 [ 183.247021][ T9635] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 183.502350][ T9641] lo speed is unknown, defaulting to 1000 [ 184.079304][ T9641] lo speed is unknown, defaulting to 1000 [ 184.096757][ T9657] openvswitch: netlink: Tunnel attr 209 out of range max 16 [ 184.251290][ T9656] can: request_module (can-proto-0) failed. [ 184.601982][ T9669] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 184.618871][ T9669] netlink: 'syz.0.950': attribute type 2 has an invalid length. [ 184.953134][ T9694] xt_socket: unknown flags 0x50 [ 184.954075][ T9691] IPv6: Can't replace route, no match found [ 185.038170][ T9696] FAULT_INJECTION: forcing a failure. [ 185.038170][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 185.085474][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.3.958 Not tainted syzkaller #0 PREEMPT(full) [ 185.085500][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.085510][ T9696] Call Trace: [ 185.085516][ T9696] [ 185.085523][ T9696] dump_stack_lvl+0x189/0x250 [ 185.085548][ T9696] ? __pfx____ratelimit+0x10/0x10 [ 185.085566][ T9696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.085584][ T9696] ? __pfx__printk+0x10/0x10 [ 185.085605][ T9696] ? __pfx___might_resched+0x10/0x10 [ 185.085621][ T9696] ? fs_reclaim_acquire+0x7d/0x100 [ 185.085651][ T9696] should_fail_ex+0x414/0x560 [ 185.085675][ T9696] should_failslab+0xa8/0x100 [ 185.085697][ T9696] __kmalloc_noprof+0xcb/0x4f0 [ 185.085716][ T9696] ? iovec_from_user+0x87/0x250 [ 185.085739][ T9696] iovec_from_user+0x87/0x250 [ 185.085762][ T9696] __import_iovec+0x163/0x7f0 [ 185.085791][ T9696] import_iovec+0x74/0xa0 [ 185.085814][ T9696] ___sys_sendmsg+0x1e7/0x2a0 [ 185.085845][ T9696] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.085900][ T9696] ? __fget_files+0x2a/0x420 [ 185.085914][ T9696] ? __fget_files+0x3a0/0x420 [ 185.085940][ T9696] __x64_sys_sendmsg+0x19b/0x260 [ 185.085961][ T9696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.085995][ T9696] ? __pfx_ksys_write+0x10/0x10 [ 185.086013][ T9696] ? rcu_is_watching+0x15/0xb0 [ 185.086035][ T9696] ? do_syscall_64+0xbe/0x3b0 [ 185.086057][ T9696] do_syscall_64+0xfa/0x3b0 [ 185.086072][ T9696] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.086088][ T9696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.086104][ T9696] ? clear_bhb_loop+0x60/0xb0 [ 185.086124][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.086140][ T9696] RIP: 0033:0x7f1af978ebe9 [ 185.086155][ T9696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.086169][ T9696] RSP: 002b:00007f1afa5eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.086187][ T9696] RAX: ffffffffffffffda RBX: 00007f1af99c5fa0 RCX: 00007f1af978ebe9 [ 185.086200][ T9696] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 185.086210][ T9696] RBP: 00007f1afa5eb090 R08: 0000000000000000 R09: 0000000000000000 [ 185.086221][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.086231][ T9696] R13: 00007f1af99c6038 R14: 00007f1af99c5fa0 R15: 00007ffe00cd8398 [ 185.086259][ T9696] [ 185.338865][ T9701] tipc: Enabled bearer , priority 0 [ 185.346849][ T9701] syzkaller0: entered promiscuous mode [ 185.352734][ T9701] syzkaller0: entered allmulticast mode [ 185.375985][ T9701] tipc: Resetting bearer [ 185.390133][ T9698] tipc: Resetting bearer [ 185.416294][ T9698] tipc: Disabling bearer [ 185.601234][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.936558][ T9734] lo speed is unknown, defaulting to 1000 [ 186.451103][ T9760] FAULT_INJECTION: forcing a failure. [ 186.451103][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 186.489627][ T9734] lo speed is unknown, defaulting to 1000 [ 186.532772][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.0.974 Not tainted syzkaller #0 PREEMPT(full) [ 186.532797][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.532806][ T9760] Call Trace: [ 186.532812][ T9760] [ 186.532820][ T9760] dump_stack_lvl+0x189/0x250 [ 186.532844][ T9760] ? __pfx____ratelimit+0x10/0x10 [ 186.532862][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.532881][ T9760] ? __pfx__printk+0x10/0x10 [ 186.532905][ T9760] ? __pfx___might_resched+0x10/0x10 [ 186.532939][ T9760] should_fail_ex+0x414/0x560 [ 186.532965][ T9760] should_failslab+0xa8/0x100 [ 186.532989][ T9760] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 186.533008][ T9760] ? __alloc_skb+0x112/0x2d0 [ 186.533022][ T9760] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 186.533046][ T9760] __alloc_skb+0x112/0x2d0 [ 186.533066][ T9760] pfkey_sendmsg+0x1dd/0x1090 [ 186.533082][ T9760] ? ___sys_sendmsg+0x1e7/0x2a0 [ 186.533098][ T9760] ? __x64_sys_sendmsg+0x19b/0x260 [ 186.533114][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.533133][ T9760] ? __pfx___might_resched+0x10/0x10 [ 186.533155][ T9760] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 186.533179][ T9760] ? aa_sk_perm+0x81e/0x950 [ 186.533205][ T9760] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.533224][ T9760] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 186.533247][ T9760] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.533264][ T9760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.533289][ T9760] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 186.533306][ T9760] __sock_sendmsg+0x21c/0x270 [ 186.533329][ T9760] ____sys_sendmsg+0x505/0x830 [ 186.533356][ T9760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.533378][ T9760] ? import_iovec+0x74/0xa0 [ 186.533399][ T9760] ___sys_sendmsg+0x21f/0x2a0 [ 186.533420][ T9760] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.533472][ T9760] ? __fget_files+0x2a/0x420 [ 186.533486][ T9760] ? __fget_files+0x3a0/0x420 [ 186.533510][ T9760] __x64_sys_sendmsg+0x19b/0x260 [ 186.533531][ T9760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.533559][ T9760] ? __pfx_ksys_write+0x10/0x10 [ 186.533577][ T9760] ? rcu_is_watching+0x15/0xb0 [ 186.533598][ T9760] ? do_syscall_64+0xbe/0x3b0 [ 186.533620][ T9760] do_syscall_64+0xfa/0x3b0 [ 186.533635][ T9760] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.533651][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.533667][ T9760] ? clear_bhb_loop+0x60/0xb0 [ 186.533687][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.533708][ T9760] RIP: 0033:0x7f2afbf8ebe9 [ 186.533724][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.533741][ T9760] RSP: 002b:00007f2afcd7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.533759][ T9760] RAX: ffffffffffffffda RBX: 00007f2afc1c5fa0 RCX: 00007f2afbf8ebe9 [ 186.533772][ T9760] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 186.533782][ T9760] RBP: 00007f2afcd7c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.533792][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.533802][ T9760] R13: 00007f2afc1c6038 R14: 00007f2afc1c5fa0 R15: 00007ffe65037d38 [ 186.533831][ T9760] [ 187.013981][ T9773] __nla_validate_parse: 9 callbacks suppressed [ 187.014001][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'. [ 187.050311][ T9768] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 187.059227][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 187.091773][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 187.116055][ T9765] syzkaller1: entered promiscuous mode [ 187.125113][ T9765] syzkaller1: entered allmulticast mode [ 187.150749][ T3590] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.150896][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 187.168229][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 187.232127][ T3590] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.266481][ T3590] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.306027][ T3590] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.525999][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.983'. [ 187.548623][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 187.559591][ T9796] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 187.580702][ T9796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.598357][ T9794] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 187.609156][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.983'. [ 187.630098][ T9794] team0: Port device geneve0 added [ 187.636582][ T9799] lo speed is unknown, defaulting to 1000 [ 187.876014][ T9808] bridge4: entered allmulticast mode [ 187.899052][ T9802] lo speed is unknown, defaulting to 1000 [ 188.000637][ T9821] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 188.012553][ T9821] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 188.030504][ T9819] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 188.038698][ T9819] netlink: 'syz.0.989': attribute type 3 has an invalid length. [ 188.056275][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.989'. [ 188.253893][ T9830] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 188.513426][ T9830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.556322][ T9799] lo speed is unknown, defaulting to 1000 [ 189.806253][ T9802] lo speed is unknown, defaulting to 1000 [ 189.864717][ T9876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.997'. [ 189.976945][ T9878] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 190.572437][ T9909] netlink: 'syz.2.1007': attribute type 178 has an invalid length. [ 190.589405][ T9910] openvswitch: netlink: IP tunnel dst address not specified [ 190.648552][ T9904] can: request_module (can-proto-0) failed. [ 191.051308][ T9923] lo speed is unknown, defaulting to 1000 [ 191.125251][ T9936] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 191.139256][ T9926] lo speed is unknown, defaulting to 1000 [ 191.238452][ T9949] netlink: 'syz.0.1018': attribute type 18 has an invalid length. [ 191.269360][ T9936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.278665][ T9941] bond0: Error: Cannot enslave bond to itself. [ 191.329223][ T9939] veth5: entered promiscuous mode [ 191.396977][ T9923] lo speed is unknown, defaulting to 1000 [ 192.205798][ T9926] lo speed is unknown, defaulting to 1000 [ 192.231180][T10001] __nla_validate_parse: 14 callbacks suppressed [ 192.231199][T10001] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1030'. [ 192.621810][T10027] validate_nla: 2 callbacks suppressed [ 192.622572][T10026] netlink: 'syz.4.1036': attribute type 4 has an invalid length. [ 192.671709][T10033] netlink: zone id is out of range [ 192.680008][T10033] netlink: zone id is out of range [ 192.685188][T10033] netlink: zone id is out of range [ 192.690680][T10033] netlink: zone id is out of range [ 192.701560][T10033] netlink: zone id is out of range [ 192.707078][T10033] netlink: zone id is out of range [ 192.712481][T10027] netlink: 'syz.4.1036': attribute type 4 has an invalid length. [ 192.713958][T10033] netlink: zone id is out of range [ 192.725596][T10033] netlink: zone id is out of range [ 192.732055][T10033] netlink: zone id is out of range [ 192.737649][T10033] netlink: zone id is out of range [ 193.426186][T10065] tipc: Enabled bearer , priority 0 [ 193.459702][T10065] syzkaller0: entered promiscuous mode [ 193.478843][T10065] syzkaller0: entered allmulticast mode [ 193.522250][T10072] tun0: tun_chr_ioctl cmd 1074025681 [ 193.530084][T10065] tipc: Resetting bearer [ 193.543316][T10063] tipc: Resetting bearer [ 193.553637][T10074] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.572524][T10063] tipc: Disabling bearer [ 193.585282][T10071] tun0: tun_chr_ioctl cmd 1074025673 [ 193.849258][T10083] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 194.083049][T10095] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1056'. [ 194.301987][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.507575][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 194.662678][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.707557][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.721285][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.742826][T10118] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1061'. [ 194.745183][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.770885][T10126] netlink: 'syz.1.1062': attribute type 18 has an invalid length. [ 194.782991][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 194.800325][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.810705][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 194.856166][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.885839][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.922280][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.955434][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 194.964690][T10108] "syz.4.1058" (10108) uses obsolete ecb(arc4) skcipher [ 195.135453][T10145] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 195.141762][T10146] syzkaller0: entered promiscuous mode [ 195.149084][T10146] syzkaller0: entered allmulticast mode [ 195.166610][T10145] veth0_vlan: left promiscuous mode [ 195.173321][T10145] veth0_vlan: entered promiscuous mode [ 195.183220][T10145] team0: Device veth0_vlan failed to register rx_handler [ 195.206618][T10139] block nbd0: server does not support multiple connections per device. [ 195.221622][T10139] block nbd0: shutting down sockets [ 195.233480][T10146] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 195.378680][T10154] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 195.439351][T10156] tipc: Enabled bearer , priority 0 [ 195.450256][T10156] syzkaller0: entered promiscuous mode [ 195.459892][T10156] syzkaller0: entered allmulticast mode [ 195.483986][T10156] tipc: Resetting bearer [ 195.492718][T10155] tipc: Resetting bearer [ 195.510219][T10155] tipc: Disabling bearer [ 195.647286][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1077'. [ 195.732564][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 195.771230][T10177] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 195.872785][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 195.898543][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 195.909278][T10184] hsr_slave_0: left promiscuous mode [ 195.916572][T10184] hsr_slave_1: left promiscuous mode [ 195.978193][T10188] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 196.042185][T10191] netlink: 'syz.2.1083': attribute type 7 has an invalid length. [ 196.535905][ C1] [ 196.538261][ C1] ================================ [ 196.543355][ C1] WARNING: inconsistent lock state [ 196.548478][ C1] syzkaller #0 Not tainted [ 196.552882][ C1] -------------------------------- [ 196.557985][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 196.564820][ C1] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 196.570777][ C1] ffff88807428c0a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 196.579193][ C1] {SOFTIRQ-ON-W} state was registered at: [ 196.584884][ C1] lock_acquire+0x120/0x360 [ 196.587610][T10216] syzkaller0: entered promiscuous mode [ 196.589459][ C1] _raw_spin_lock+0x2e/0x40 [ 196.589487][ C1] tcf_nat_init+0x50a/0x920 [ 196.595106][T10216] syzkaller0: entered allmulticast mode [ 196.599489][ C1] tcf_action_init_1+0x460/0x6d0 [ 196.599515][ C1] tcf_action_init+0x2cf/0xab0 [ 196.599532][ C1] tc_ctl_action+0x430/0xbd0 [ 196.599552][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 196.599567][ C1] netlink_rcv_skb+0x205/0x470 [ 196.599579][ C1] netlink_unicast+0x82c/0x9e0 [ 196.599598][ C1] netlink_sendmsg+0x805/0xb30 [ 196.599612][ C1] __sock_sendmsg+0x21c/0x270 [ 196.599633][ C1] ____sys_sendmsg+0x505/0x830 [ 196.599650][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 196.599665][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 196.599682][ C1] do_syscall_64+0xfa/0x3b0 [ 196.599700][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.599715][ C1] irq event stamp: 376582 [ 196.599725][ C1] hardirqs last enabled at (376582): [] _raw_spin_unlock_irq+0x23/0x50 [ 196.687833][ C1] hardirqs last disabled at (376581): [] _raw_spin_lock_irq+0x7d/0xf0 [ 196.697543][ C1] softirqs last enabled at (376324): [] __irq_exit_rcu+0xca/0x1f0 [ 196.706999][ C1] softirqs last disabled at (376579): [] __irq_exit_rcu+0xca/0x1f0 [ 196.716810][ C1] [ 196.716810][ C1] other info that might help us debug this: [ 196.724870][ C1] Possible unsafe locking scenario: [ 196.724870][ C1] [ 196.732302][ C1] CPU0 [ 196.735567][ C1] ---- [ 196.738850][ C1] lock(&p->tcfa_lock); [ 196.743087][ C1] [ 196.746524][ C1] lock(&p->tcfa_lock); [ 196.750925][ C1] [ 196.750925][ C1] *** DEADLOCK *** [ 196.750925][ C1] [ 196.759051][ C1] 1 lock held by swapper/1/0: [ 196.763706][ C1] #0: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 196.772914][ C1] [ 196.772914][ C1] stack backtrace: [ 196.778803][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 196.778819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.778826][ C1] Call Trace: [ 196.778831][ C1] [ 196.778835][ C1] dump_stack_lvl+0x189/0x250 [ 196.778852][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.778862][ C1] ? __pfx__printk+0x10/0x10 [ 196.778875][ C1] ? print_lock_name+0xde/0x100 [ 196.778888][ C1] print_usage_bug+0x297/0x2e0 [ 196.778898][ C1] valid_state+0xc3/0xf0 [ 196.778906][ C1] mark_lock_irq+0x36/0x390 [ 196.778915][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.778936][ C1] mark_lock+0x11b/0x190 [ 196.778952][ C1] __lock_acquire+0x680/0xd20 [ 196.778977][ C1] ? est_timer+0xd4/0x9f0 [ 196.778999][ C1] lock_acquire+0x120/0x360 [ 196.779011][ C1] ? est_timer+0xd4/0x9f0 [ 196.779025][ C1] ? lockdep_unlock+0x89/0x120 [ 196.779037][ C1] _raw_spin_lock+0x2e/0x40 [ 196.779050][ C1] ? est_timer+0xd4/0x9f0 [ 196.779061][ C1] est_timer+0xd4/0x9f0 [ 196.779074][ C1] ? call_timer_fn+0xbe/0x5f0 [ 196.779087][ C1] ? call_timer_fn+0xbe/0x5f0 [ 196.779099][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.779113][ C1] call_timer_fn+0x17e/0x5f0 [ 196.779125][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.779136][ C1] ? call_timer_fn+0xbe/0x5f0 [ 196.779148][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 196.779161][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.779174][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.779182][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.779194][ C1] __run_timer_base+0x61a/0x860 [ 196.779205][ C1] ? ktime_get+0x3e/0x1f0 [ 196.779217][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 196.779228][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 196.779242][ C1] run_timer_softirq+0xb7/0x180 [ 196.779253][ C1] handle_softirqs+0x283/0x870 [ 196.779264][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 196.779274][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.779284][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 196.779295][ C1] __irq_exit_rcu+0xca/0x1f0 [ 196.779304][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 196.779314][ C1] irq_exit_rcu+0x9/0x30 [ 196.779322][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 196.779336][ C1] [ 196.779339][ C1] [ 196.779343][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.779353][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 196.779363][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e6 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 196.779371][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 196.779380][ C1] RAX: ec774ea28d132500 RBX: ffffffff819683c8 RCX: ec774ea28d132500 [ 196.779387][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b95f7 RDI: ffffffff8be33800 [ 196.779394][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 196.779401][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38c30 [ 196.779408][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 196.779415][ C1] ? do_idle+0x1e8/0x510 [ 196.779431][ C1] default_idle+0x13/0x20 [ 196.779441][ C1] default_idle_call+0x74/0xb0 [ 196.779452][ C1] do_idle+0x1e8/0x510 [ 196.779461][ C1] ? __pfx_do_idle+0x10/0x10 [ 196.779469][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.779481][ C1] cpu_startup_entry+0x44/0x60 [ 196.779490][ C1] start_secondary+0x101/0x110 [ 196.779508][ C1] common_startup_64+0x13e/0x147 [ 196.779524][ C1]