last executing test programs: 23.198348254s ago: executing program 2 (id=1283): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000cc0)={0x8, 0x2}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x7fff, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'bond0\x00'}) 23.042981384s ago: executing program 2 (id=1284): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0xf7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x802, @empty}}]}, 0x40}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) 22.956558542s ago: executing program 2 (id=1287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180700001000000000000000000000009500000000000000fdac18b3a85674499d43d1c895dff3853b1db585cde4ffe685f12f1b0abb3ca63d1bda55d5534e196fc394c7"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r5}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000bc0)={0xe, 0x6, {0x80000000, @usage=0x4, 0x0, 0x6, 0x3, 0xf, 0xf, 0x8, 0x10, @struct={0xcc2, 0x3}, 0x5, 0x7, [0x800, 0x1000, 0x3, 0x4, 0x7, 0x4b6b]}, {0x5, @usage=0xb9, 0x0, 0x2, 0x80, 0x86, 0x2, 0x7, 0x80, @struct={0x5, 0x8}, 0x2, 0xfffffffc, [0xc, 0xce, 0x8, 0x2, 0x5, 0x8]}, {0xfffffffffffffff8, @struct={0x5, 0x5}, 0x0, 0x389, 0x9, 0x2, 0x1, 0xffffffffffffffb0, 0x8, @struct={0x3ff, 0xd2}, 0x5, 0x100, [0x8, 0xffffffff, 0x100, 0x3, 0x4, 0x8744]}, {0x6, 0xfffffffffffffc00, 0x3}}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000000fc0)={r10, "b548c4500d873525e717dbe7e9744062"}) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r8, 0x0) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r8, 0x0, 0x0, 0x80800) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r12, 0x0) 22.723834233s ago: executing program 2 (id=1291): syz_emit_ethernet(0x2e, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x66, 0x0, 0x7, 0x1, 0x0, @remote, @private=0xa010100, {[@generic={0x82, 0x2}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x4}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000) (async) r1 = accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) close(0x4) 22.394963246s ago: executing program 2 (id=1296): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @remote}}, @sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @mcast2}}]}, 0xa8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x3}, {0xfff2, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x2, 0x1, 0x1, 0x5, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 22.142979648s ago: executing program 2 (id=1299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x800, 0x6, "2184e34d4650"}, 0xe) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r10], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x4d, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @opaque="f7a8080887faa66d31fff63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783ca6bb213639ed583dece835a51fa9c5a076757d783"}}}}}}, 0x0) 20.914787421s ago: executing program 0 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = getpid() getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r11}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000026c0)={0x1, 0xffffffffffffffff}, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) sendmsg$unix(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r10, r3, r12, r13, 0xffffffffffffffff, r1]}}], 0x50}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002480)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r17 = socket$key(0xf, 0x3, 0x2) r18 = socket$pppoe(0x18, 0x1, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r20, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002780)=ANY=[@ANYBLOB="4000000010df4b04000000007effffff7a0000008479053995e5ac3f5e03d1a42168c2e8635f3a7eb3144d725cee800596a9edf7c6d8e611f96a8a3be585852cd8b720030048675c03763496cd9310ffffbfc13fa949051902dd7c00b23adbfebfdec1c46ee4605162796c7e792d410fa6480df0dfbd", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) sendmsg$unix(r1, &(0x7f0000002580)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="4ccc519bde886aaf062c81291ccc696f3c1474ec4f8fe072df0bdea0e9d62bd3de541278cb5fd5493f921abd2bb8389d609173dcb01b9340d733e27e35f27de710d483602dcfc384528cfd251488e7e821a41a5a856e5962899e2aceb24a19407bf29179ee2edc2224d5d505e3280a8c6e0fab2eb69bde651193efde6241ad755fac30d6ecc0a043083f5917a8475b4097ffb8999a595fc2e9fb2b60a3858e0c08f9d9fec8a7e947c752e13192580a1589fdbdc3ed2d3b330aeb638ae5ac39b62e2a34a367f353eb859886e467a59d5375833a2bb69c7be1d5ca39d6a152cb", 0xdf}, {&(0x7f0000001480)="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", 0x1000}], 0x3, &(0x7f00000025c0)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r14, r16}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r1, r0, r2]}}, @rights={{0x24, 0x1, 0x1, [r1, r17, r2, r1, r18]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r0, 0xffffffffffffffff, r19, r2]}}], 0xc8, 0x240080d0}, 0x4000041) socket$nl_route(0x10, 0x3, 0x0) 20.72315379s ago: executing program 0 (id=1319): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd70008004000180"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x41}, {}, {0x6}, {0x4, 0x5, 0x40, 0x6}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 20.542843582s ago: executing program 0 (id=1324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x0, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000)=0x3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0xa, 0x6) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x30000000, 0x80, 0x1, 0x7eb}, 0x10) recvmmsg$unix(r6, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40012120) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}], 0x20) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1b23000d", @ANYRES16=r7], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20.172291881s ago: executing program 3 (id=1330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x50081}, 0x4040000) 20.034333965s ago: executing program 3 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r8 = socket(0x1e, 0x1, 0x0) sendmmsg$alg(r8, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000040043dbd700000000000008000000000000008001e000100000000000000"], 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19.903003461s ago: executing program 3 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r5, 0x29, 0x2d, 0x0, 0x0) connect$pppl2tp(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r3, 0x0, 0x83, 0x36, &(0x7f0000001080)="6475d303e984ade5f8156a7ca81cf1585824dc2db7ad21833def41fd5ab6a21ad39dec30b04504bcee82419ec58d2f31d3b7920c547ce6298ae2acb4d25e7f06c42fe298378668764efcc5b41fefb036f3a19e1fde1e3b15c22002fc3bae2a0bc94352307806d14614f4864945647d53449f9b9e79d25abd947681a81462456742a48c", &(0x7f0000001140)=""/54, 0x3, 0x0, 0xde, 0x84, &(0x7f0000001180)="fb0884cbf2d2ca0dd1db8a3d79122443b387393231db95cf79fe81fbb80feb8a4a186838c45c402a10fc4a704d5c8703270874337336b9259a738536380688486d71014fbd360c5641b37fe407f8684c000633cb1fb864360888c546e94f2abcb1b2261c3043b209d25ce8bfee1a1c9f6729d93b12dd4067aa4260f489ddcb3b0dde50570a8663a8c2b10f245a6ab4697cb4aa03beebac9b5454adb63b35e03eab73c8a7d61f673067c675ac93ef367e7b4a08d3a5d7597f797ddfcf5dbc0370cae95fb088d94389cd0fc0c33ce5dbc1f495781c30ecc379ec44521d8fbe", &(0x7f0000001280)="bedd42ee1d618599f92e71db12f5711c1c0c097e9ba7a3ccadd86737821a49987e3915f10840f57ccc5eb33a8b55ddc886b8005d0415f11c0d0f20f6c7022d1f1b931ac315722e09b44c96a5c02f83b861895db79b30cddb87ca827355dd077b61af8e79f013593ae345a63fa131b41b22b6ded9af300265c14962be78de8e5ef5fa35f1", 0x0, 0x0, 0x3}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xd5}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r10 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19.898802606s ago: executing program 1 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r3}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x2, 0x7, 0xc, 0xaa, 0x3}, 0x14) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x3, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c841}, 0x4000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 19.804865701s ago: executing program 1 (id=1338): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x721, 0x7f60, 0x8, 0x8, {{0x21, 0x4, 0x1, 0xd, 0x84, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x13, 0xffffffffffffffff, [{0x0, 0xd, "0adb40581a870d57c37f7b"}]}, @end, @timestamp_prespec={0x44, 0x34, 0x58, 0x3, 0x5, [{@empty, 0x5}, {@remote, 0x4}, {@multicast1, 0x4}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xd4}, {@local, 0x7}]}, @generic={0x88, 0xb, "1ee07a0bf45aff4711"}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0x4, 'W7'}, {0x1, 0x12, "cf32922503058122a6d24d9ac10309f2"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x0, 0x7d, 0x3, 0xffffffff, 0xffff, 0x5, 0x27, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8, 0xeb8, 0x3, @mcast2, @empty, 0x8000, 0x20, 0x0, 0x5}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000840)={@rand_addr, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x1, 0x80, 0xc0, 0x80000001, {{0x16, 0x4, 0x1, 0x3f, 0x58, 0x68, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x5, "a549b5"}, {0x5, 0x12, "14ba4ade82482a10c0d3d708bcbb66d9"}, {0x1, 0x12, "89b68bba3dc79a3b42ad1e2bfff6eb4d"}, {0xfc8ef18db0d18289, 0xe, "df3b94d4807f1d155b25e6a2"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x2, 0x7, {{0x51, 0x4, 0x1, 0x24, 0x144, 0x66, 0x0, 0xf8, 0x4, 0x0, @local, @local, {[@rr={0x7, 0x7, 0xf8, [@broadcast]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x3, 'N'}, {0x5, 0x8, "1cb104b449ea"}, {0x0, 0x6, "1738aa2a"}, {0x7, 0xf, "cbdead751acc6c4980b92c7876"}, {0x6, 0x6, "542a9c24"}]}, @rr={0x7, 0x1b, 0x22, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}, @cipso={0x86, 0x79, 0x3, [{0x5, 0xa, "b9e21e6a78551a9b"}, {0x5, 0xf, "4ccbb6ecddab08b9642424c596"}, {0x1, 0x5, "8cfc54"}, {0x5, 0x11, "d6e1bf70ad851caf32d7b2116ef11b"}, {0x6, 0xd, "27280c8429a82897514e7f"}, {0x7, 0x11, "cf03a9df3d64a312170094a70148be"}, {0x7, 0xe, "23b1b81d052936e77eaf6764"}, {0x2, 0x8, "71fa5f1bd7d3"}, {0x7, 0x10, "615d757fe5d502d4de69bc841ad6"}]}, @noop, @timestamp_addr={0x44, 0x44, 0x3d, 0x1, 0x1, [{@empty, 0x41e3}, {@broadcast, 0x3}, {@broadcast, 0x8}, {@broadcast, 0x8001}, {@empty, 0x3}, {@local, 0x9}, {@empty, 0x7}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x8, [{@rand_addr=0x64010100, 0x4024bd99}]}, @generic={0x88, 0x12, "dd0546d542bd1d01e1a9bf397198d653"}, @end]}}}}}) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r18, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x20, 0x20, 0x5, 0x4, {{0x49, 0x4, 0x3, 0x4, 0x124, 0x67, 0x0, 0xe1, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, {[@rr={0x7, 0x17, 0x92, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010100, @broadcast]}, @end, @timestamp={0x44, 0x28, 0xe2, 0x0, 0x3, [0x5, 0x401, 0x0, 0x7, 0x10, 0x2, 0x9, 0xfff, 0x1]}, @generic={0x82, 0x10, "cdfc8f4d377f98021ca01c254bff"}, @lsrr={0x83, 0x17, 0x45, [@local, @multicast2, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x41, 0x2, [{0x5, 0xc, "29990f9159e61ba7909e"}, {0x7, 0xc, "fc5c25b861b593313037"}, {0x3, 0x10, "5bc681d250b92bdedf8d6c68dbba"}, {0x6, 0x6, "2d87f6b7"}, {0x7, 0x5, "509a00"}, {0x5, 0x8, "2751dece0873"}]}, @cipso={0x86, 0x5f, 0x3, [{0x7, 0xc, "4045f0d31bb9e5cc55fe"}, {0x0, 0x12, "8ea3dc39de83de90f40bb5827bb66ec4"}, {0x2, 0x12, "7e8940a21e1a331e70b5b084bb8f6cfd"}, {0x1, 0xf, "6b471d360798673a78577bad09"}, {0x5, 0xf, "4b61def9a12c0626c5fc1414af"}, {0x0, 0xb, "abf07ea2a595b2f7e3"}]}, @rr={0x7, 0x7, 0x75, [@broadcast]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000000e40)={0x798, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8000, 0x9, 0x0, 0x1}, {0x3, 0x0, 0x71, 0x6}, {0x9, 0x7, 0x0, 0xff}, {0x9, 0x9, 0xea, 0xeb7c}, {0x2, 0x1, 0xff, 0x8}, {0x7, 0x5c, 0x2, 0xf6cc}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x5, 0xa0, 0x5}]}}}]}}, {{0x8, 0x1, r13}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x80}, 0x20040004) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xd4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xd4}}, 0x0) 19.576689359s ago: executing program 0 (id=1340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async, rerun: 32) close(r1) (rerun: 32) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) (rerun: 64) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000340)={0x20, r4, 0x100, 0x3ff, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r0, 0x4, r3}, 0x10) (async) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0x40038) (async, rerun: 32) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async, rerun: 32) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 19.531700667s ago: executing program 1 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r6, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) (async) 18.811591979s ago: executing program 1 (id=1342): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)='%pK \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, 0x0, 0x1, 0x4, 0x919}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x5, '\x00', r6, r0, 0x3}, 0x50) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990041a01a0c6cf184c2570000005f0000000800a00076090000080026006c0900000800270003000000"], 0x40}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) close(r1) 18.721383888s ago: executing program 3 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000d0a010300000000400000000a00000309000200730000000900010073797a31452364e795720811cd0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xbf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x39bf, 0x92}, 0x10, 0x2de39, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x3, 0x5, 0xc, 0x1}], 0x10, 0x43d5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x16, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x2f, &(0x7f00000006c0)=""/47, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x1, 0x4, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000780)=[0x1], &(0x7f00000007c0)=[{0x2, 0x3, 0x9, 0x1}, {0x1, 0x1, 0x6, 0x2}], 0x10, 0xb71}, 0x94) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='rdma.current\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000a80)=@bridge_getneigh={0x1b4, 0x1e, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x80, 0x21}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xba586af07a6d5e0e}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_VF_PORTS={0x114, 0x18, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "80e0ddfc3e3985b7b0073ce99e60e3c0"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dbc1752cb769f7eae16ae4ebe905c7ae"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '-\xf3-\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "51a3f4244d7a73f93630f8b3be9e7931"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "96bcce5eeaeb8acda6860c98627a5950"}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6f, 0x2, 'zJ&\x1cx\xca9\x13\x83\xe7\xd5\xabVO\xfb\x81(\x91\xdct\xdeP\xb1(\xf9\xa1\x9c\x9d+\x7f\xb89\xf7z;=@\xbe\xa2Y\x98\xd6\xec\xf2\x83\xe3\'(\xe9D.\xca\x95v\xdblv\xea\xe0\xe8`X\x86\xd0\xc1\x13\x1f\x94p\x051\xb4\xf0\xdd\xf4~u\x19\xcd\x0fgh\x8d\xc1\xac\xc1\x06/\xf6\xd1]\xf1n\xa1\x02\x98\xca\ag\xc1K\x9ax^p3\x11'}, @IFLA_PORT_PROFILE={0x6, 0x2, '/\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "976b33f3e6cc848943f717802ce5bd03"}]}]}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_MAP={0x24, 0xe, {0x0, 0x4, 0x59f8, 0x9ad, 0x0, 0xf9}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x1b4}}, 0x0) 18.510777325s ago: executing program 3 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b50000000000000095"], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x6}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="940100006d00010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="53cc3ce7525139f347f09543f68923ae3267705583c3e4d97eabdc609bc36424788c2cfb10190f9090e9a72bcd448c5f00ed"], 0x194}, 0x1, 0x0, 0x0, 0x4801}, 0x20004001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0xc4, 0x3, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5ff}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd5c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe0000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf2501"], 0x1c}}, 0x20004080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) 18.510453619s ago: executing program 1 (id=1346): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x6020400) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000001000), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r4}, 0x10) setsockopt$inet6_mtu(r0, 0x29, 0x4e, 0x0, 0x0) 18.489848148s ago: executing program 0 (id=1347): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x6, 0x4, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xe4, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xfe2}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x7ff}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0xfffff41b}]}, @generic={0x82, 0xe, "4a8343de4a04bfcc43e34272"}, @generic={0x94, 0x5, "ba058e"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x2, 0x8, {{0x10, 0x4, 0x0, 0xc, 0x40, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, {[@timestamp={0x44, 0x28, 0x8, 0x0, 0xe, [0x1ff, 0x81, 0x98c, 0x2, 0x3, 0x400, 0x7, 0x0, 0x9]}, @noop, @end]}}}}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b8, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x811}, 0x40) 18.427211167s ago: executing program 1 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @broadcast, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x1, 0x1f8, 0x200, 0x100004}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x2, 0x4) 18.258974247s ago: executing program 3 (id=1349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) accept$netrom(r2, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @default, @rose, @default, @remote, @null, @remote, @bcast]}, &(0x7f00000003c0)=0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f00000002c0)=[{&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000080)=""/230, 0xe6}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/83, 0x53}], 0x5}}], 0x48}, 0x1) 18.25734343s ago: executing program 0 (id=1350): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9e", 0x14}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r14 = accept4(r13, 0x0, 0x0, 0x0) sendmsg$alg(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xfc, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r14, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 17.130769773s ago: executing program 4 (id=1360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) sendmmsg$inet6(r1, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='@', 0x1}], 0x1}}], 0x1, 0x4000091) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x50cc40663fcd8d98}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_emit_ethernet(0x165, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada"}, {0x0, 0x1, "0000000500000000260004"}, {}, {0x0, 0x4, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2d"}, {0x2, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x6, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c8837473"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0) 16.264146193s ago: executing program 4 (id=1361): syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004c0000440000000000069078ac1e0001ac14140d8907a2ffff7fff440c050300000000000100008606ffffffff00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac000000010101010000000000000000010000090600124000020000100005800900010073797a31000000002c00198008000100100000000800020004080000080002009a0600000800010091000000080001001000000008000840fffffff84c000f80080003400000000308000340000000070800024000000008080003400000014c0800014000000000080003400000000000070800024000000008"], 0xac}, 0x1, 0x0, 0x0, 0x880}, 0x4c804) 16.140693254s ago: executing program 4 (id=1362): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xc}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x80000000, 0x4) r5 = socket(0x25, 0x1, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x400000a3, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 15.23091463s ago: executing program 4 (id=1363): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={r2, r3+60000000}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r4, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x6060600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r5, 0x0, 0x0, 0x4}, 0x20) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r6, 0x29, 0x46, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='balance_dirty_pages\x00', r7, 0x0, 0x401}, 0x18) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r9, r8, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f0000000040)=r9, 0x12) 15.220977686s ago: executing program 4 (id=1364): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c0004d7e423dd85d3792141f11b72f99f6b31415d4dafcd2665c751c68be7e36276862a77c3a4dfbf7e96fe938ced054ae92d16acb3f20ecd78eba8cc34ec780038fde2e672847bc4a76e033b54cc7013e3825b9de3e9cdfb069332a77726b7ea73aab929115289c7f9079072b85f48d0631e87b368dbcc09627c56b08f3719cbb1130b84c103a584fb1a451f93d1068bc375cf4c026eb39c0cd8afa15b9f5d7c9b0b5fdc06374f456e2a499e11a1c8194926b23847509e2a497a3b3213aad2a48d132a6b243fe44618a11ef5b7c399f437bf27e2f9d8b93acae91db56ed8f3920257dbca9ee30d30556f3169955d88d0e9bd0feb552dcd19b28caf89fff77f3cbb5087ce51861a79a5896ddd3e9c480dbca5dd3021693399064f9c611716b062da1a00915cfae2a47138c9e8e0a3e84910ba5a8070bfe1c22daca40a88905048422fc31cc53fab448c5c1b60add05230c006dec6bc24bf2cfea4f9e2b6d8e2784580c2f77cb75f2620850a5a3e8d00313ddbc9881dce93ce62e6b185bde8862acdabdb84ac67a08cd35a0dec0973a09cb433eb5ceee4f93849de4718031faccb56120975acf9d17185dcfb036c23e48a145c22f31e5123d0ed3708c507d73566574ec64bfb6959f0cf9e517e6ef14ed269419c7841504ef7487038829dd5e3b8c0415884115c2b7cdd82662158939abdee94289584e960e3c7056cb46b27875433bf8ae766e87a2c0901c4eb7296b1750bf1adae0bca054b7d76472fe7d0e2a45161f684f9a53fa113cea9887dbfa78937a245a309fbc32ffc8661c14ae142ae2c2d2a694e3341a7fadf8cb72d2d798fcf6fa39dcb42a4f220511fee360e2c9322d7af1c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) 15.170471768s ago: executing program 4 (id=1365): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) close(0x4) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd5, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xc, 0x7, 0x4, "0b6df4f5c06e887c"}, @exp_fastopen={0xfe, 0x7, 0xf989, "519f7e"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}, {"d461794bb59a6a872f6bf902e9028a8e795fe5418618df8ddd1198d85275c011a63c25695e289caa9e167ef558d8cdc92a52eeb3d48baea6d4c40803fba9f67942d7d64632e27698f336116b4b84187fc7fd0afaf5bb934a232d482379a5a740678247aa17c2946544b8eda0e57d7f355c167d827fb20c9af04cb2716498f9b3be00b4119df1773667e709ab49465f7021fb4d0402"}}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x810) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="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", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) (async) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="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", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getpid() socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000180)=0x1) (async) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000180)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 7.133564997s ago: executing program 32 (id=1299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x800, 0x6, "2184e34d4650"}, 0xe) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r10], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x4d, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @opaque="f7a8080887faa66d31fff63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783ca6bb213639ed583dece835a51fa9c5a076757d783"}}}}}}, 0x0) 3.108531733s ago: executing program 33 (id=1350): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9e", 0x14}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r14 = accept4(r13, 0x0, 0x0, 0x0) sendmsg$alg(r14, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xfc, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r14, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 3.074720095s ago: executing program 34 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @broadcast, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x1, 0x1f8, 0x200, 0x100004}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x2, 0x4) 3.037630442s ago: executing program 35 (id=1349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) accept$netrom(r2, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @default, @rose, @default, @remote, @null, @remote, @bcast]}, &(0x7f00000003c0)=0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f00000002c0)=[{&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000080)=""/230, 0xe6}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/83, 0x53}], 0x5}}], 0x48}, 0x1) 0s ago: executing program 36 (id=1365): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) close(0x4) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd5, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xc, 0x7, 0x4, "0b6df4f5c06e887c"}, @exp_fastopen={0xfe, 0x7, 0xf989, "519f7e"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}, {"d461794bb59a6a872f6bf902e9028a8e795fe5418618df8ddd1198d85275c011a63c25695e289caa9e167ef558d8cdc92a52eeb3d48baea6d4c40803fba9f67942d7d64632e27698f336116b4b84187fc7fd0afaf5bb934a232d482379a5a740678247aa17c2946544b8eda0e57d7f355c167d827fb20c9af04cb2716498f9b3be00b4119df1773667e709ab49465f7021fb4d0402"}}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x810) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a528305f3ec666c2e3d1032005eabe97b4d080047d3c258da988456f30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34036712e58ed25e721193af5ee6fded3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847cdb14e24237f00af5efc6d7d31bf9e163ef4674c45e2a085060f1180fc04a8842b46236952f8b09a2474acaefa829d9b3b6cb7a57fd6c5943a2fa2fea3577cfabb646dddd9b31c0c5e555337c87e6c5f1f8f000c0026f10c8f1b53d3b89eec1621a308d75f2b7c501c61c618fd9d48a110479ffbf4e1a4429448d7865f9122e6aa90901ffd05f7f09194559b74efef07d31e5f5083b6ac6bc9fc0f2b342a5add22b0e7da98f481e02b86c02780d04d116667362eb08c8c1e", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) (async) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a528305f3ec666c2e3d1032005eabe97b4d080047d3c258da988456f30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34036712e58ed25e721193af5ee6fded3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847cdb14e24237f00af5efc6d7d31bf9e163ef4674c45e2a085060f1180fc04a8842b46236952f8b09a2474acaefa829d9b3b6cb7a57fd6c5943a2fa2fea3577cfabb646dddd9b31c0c5e555337c87e6c5f1f8f000c0026f10c8f1b53d3b89eec1621a308d75f2b7c501c61c618fd9d48a110479ffbf4e1a4429448d7865f9122e6aa90901ffd05f7f09194559b74efef07d31e5f5083b6ac6bc9fc0f2b342a5add22b0e7da98f481e02b86c02780d04d116667362eb08c8c1e", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getpid() socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000180)=0x1) (async) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000180)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 83.123469][ T5815] cgroup: Unknown subsys name 'net' [ 83.255019][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.264284][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.868937][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.663691][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.672864][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.681798][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.690167][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.697736][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.706471][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.731829][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.753965][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.755233][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.762479][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.768933][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.775990][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.783578][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.791105][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.802646][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.803991][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.810986][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.821028][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.825194][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.832478][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.841034][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.845890][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.860355][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.869825][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.879949][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.394998][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.685184][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.714803][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.725895][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.843161][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.850640][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.858381][ T5836] bridge_slave_0: entered allmulticast mode [ 88.866517][ T5836] bridge_slave_0: entered promiscuous mode [ 88.879595][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.886913][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.894201][ T5836] bridge_slave_1: entered allmulticast mode [ 88.901521][ T5836] bridge_slave_1: entered promiscuous mode [ 88.942297][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.057526][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.112333][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.138521][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.146211][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.154008][ T5833] bridge_slave_0: entered allmulticast mode [ 89.161389][ T5833] bridge_slave_0: entered promiscuous mode [ 89.168743][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.176238][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.183612][ T5841] bridge_slave_0: entered allmulticast mode [ 89.191121][ T5841] bridge_slave_0: entered promiscuous mode [ 89.229311][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.236580][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244122][ T5833] bridge_slave_1: entered allmulticast mode [ 89.251519][ T5833] bridge_slave_1: entered promiscuous mode [ 89.258353][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.265813][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.273835][ T5841] bridge_slave_1: entered allmulticast mode [ 89.281360][ T5841] bridge_slave_1: entered promiscuous mode [ 89.300187][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.307480][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.315402][ T5829] bridge_slave_0: entered allmulticast mode [ 89.322768][ T5829] bridge_slave_0: entered promiscuous mode [ 89.375799][ T5836] team0: Port device team_slave_0 added [ 89.382306][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.389479][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.396726][ T5829] bridge_slave_1: entered allmulticast mode [ 89.404583][ T5829] bridge_slave_1: entered promiscuous mode [ 89.449127][ T5836] team0: Port device team_slave_1 added [ 89.467611][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.474943][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.482550][ T5828] bridge_slave_0: entered allmulticast mode [ 89.489754][ T5828] bridge_slave_0: entered promiscuous mode [ 89.500106][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.512248][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.546109][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.553558][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.561290][ T5828] bridge_slave_1: entered allmulticast mode [ 89.568499][ T5828] bridge_slave_1: entered promiscuous mode [ 89.577433][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.589353][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.624483][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.675802][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.683130][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.709268][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.723510][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.758464][ T5841] team0: Port device team_slave_0 added [ 89.765561][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.772639][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.798633][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.825798][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.836778][ T5833] team0: Port device team_slave_0 added [ 89.844626][ T5841] team0: Port device team_slave_1 added [ 89.871731][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.896373][ T5833] team0: Port device team_slave_1 added [ 89.902418][ T5148] Bluetooth: hci1: command tx timeout [ 89.902424][ T5839] Bluetooth: hci4: command tx timeout [ 89.946257][ T5829] team0: Port device team_slave_0 added [ 89.954642][ T5829] team0: Port device team_slave_1 added [ 89.987274][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.994649][ T5148] Bluetooth: hci3: command tx timeout [ 89.994658][ T5839] Bluetooth: hci0: command tx timeout [ 89.994987][ T5839] Bluetooth: hci2: command tx timeout [ 90.000571][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.037916][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.050282][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.057367][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.083532][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.108960][ T5828] team0: Port device team_slave_0 added [ 90.127414][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.134512][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.160844][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.173051][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.180012][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.206081][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.231107][ T5828] team0: Port device team_slave_1 added [ 90.276890][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.284000][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.310642][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.338966][ T5836] hsr_slave_0: entered promiscuous mode [ 90.345702][ T5836] hsr_slave_1: entered promiscuous mode [ 90.389841][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.397013][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.423102][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.448631][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.456219][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.482343][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.498291][ T5841] hsr_slave_0: entered promiscuous mode [ 90.504933][ T5841] hsr_slave_1: entered promiscuous mode [ 90.511260][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.517058][ T5841] Cannot create hsr debugfs directory [ 90.527746][ T5833] hsr_slave_0: entered promiscuous mode [ 90.534288][ T5833] hsr_slave_1: entered promiscuous mode [ 90.540381][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.546714][ T5833] Cannot create hsr debugfs directory [ 90.569461][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.576494][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.602513][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.774534][ T5829] hsr_slave_0: entered promiscuous mode [ 90.782368][ T5829] hsr_slave_1: entered promiscuous mode [ 90.788548][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.794499][ T5829] Cannot create hsr debugfs directory [ 90.822615][ T5828] hsr_slave_0: entered promiscuous mode [ 90.831209][ T5828] hsr_slave_1: entered promiscuous mode [ 90.837351][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.843171][ T5828] Cannot create hsr debugfs directory [ 91.327953][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.346429][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.365894][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.376550][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.447938][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.458943][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.470368][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.484160][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.581720][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.595734][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.606117][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.619995][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.729341][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.737620][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.749113][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.783961][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.796245][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.826956][ T983] cfg80211: failed to load regulatory.db [ 91.857333][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.909491][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.925681][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.932999][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.943160][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.950258][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.971762][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.980896][ T5839] Bluetooth: hci1: command tx timeout [ 91.989381][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.991059][ T5839] Bluetooth: hci4: command tx timeout [ 92.016037][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.049802][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.061432][ T5843] Bluetooth: hci0: command tx timeout [ 92.071546][ T5843] Bluetooth: hci2: command tx timeout [ 92.073487][ T5839] Bluetooth: hci3: command tx timeout [ 92.105857][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.134349][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.156642][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.177277][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.184454][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.197416][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.204611][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.228227][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.235465][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.264203][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.271360][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.340154][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.425202][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.472121][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.479297][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.522882][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.530011][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.664340][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.678725][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.691852][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.709715][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.787827][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.848256][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.855514][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.868190][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.875389][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.016152][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.053883][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.063759][ T5841] veth0_vlan: entered promiscuous mode [ 93.117109][ T5841] veth1_vlan: entered promiscuous mode [ 93.168495][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.285356][ T5833] veth0_vlan: entered promiscuous mode [ 93.312302][ T5841] veth0_macvtap: entered promiscuous mode [ 93.339896][ T5833] veth1_vlan: entered promiscuous mode [ 93.371164][ T5841] veth1_macvtap: entered promiscuous mode [ 93.380125][ T5836] veth0_vlan: entered promiscuous mode [ 93.434963][ T5836] veth1_vlan: entered promiscuous mode [ 93.487338][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.507960][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.525159][ T5833] veth0_macvtap: entered promiscuous mode [ 93.534576][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.573453][ T5833] veth1_macvtap: entered promiscuous mode [ 93.586484][ T5836] veth0_macvtap: entered promiscuous mode [ 93.595118][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619727][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.637978][ T5836] veth1_macvtap: entered promiscuous mode [ 93.657083][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.666631][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.718334][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.730564][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.771766][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.781250][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.827077][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.833273][ T5829] veth0_vlan: entered promiscuous mode [ 93.849459][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.851158][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.882246][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891433][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.904330][ T5829] veth1_vlan: entered promiscuous mode [ 93.929545][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938791][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.957870][ T5828] veth0_vlan: entered promiscuous mode [ 93.969113][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.978108][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999882][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.008244][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.009382][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.045875][ T5828] veth1_vlan: entered promiscuous mode [ 94.062607][ T5839] Bluetooth: hci4: command tx timeout [ 94.062617][ T5843] Bluetooth: hci1: command tx timeout [ 94.073285][ T5829] veth0_macvtap: entered promiscuous mode [ 94.138201][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.143608][ T5829] veth1_macvtap: entered promiscuous mode [ 94.155749][ T5843] Bluetooth: hci2: command tx timeout [ 94.164170][ T5843] Bluetooth: hci0: command tx timeout [ 94.165299][ T5839] Bluetooth: hci3: command tx timeout [ 94.207057][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.235648][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.294577][ T5828] veth0_macvtap: entered promiscuous mode [ 94.317848][ T5828] veth1_macvtap: entered promiscuous mode [ 94.335151][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.337168][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.364862][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.394517][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.409585][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.413388][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.424265][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.436751][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.448870][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.528046][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538005][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548682][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.561483][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.570529][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.623784][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.728023][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.746332][ T5955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.782732][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804358][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.924091][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.997958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.032902][ T5964] Zero length message leads to an empty skb [ 95.033702][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.176024][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.202757][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.322454][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.330337][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.366403][ T5968] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 95.416955][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 95.433017][ T5968] bond1 (unregistering): Released all slaves [ 95.510665][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.558538][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.587161][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.948609][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.948629][ T5988] netlink: 'syz.2.13': attribute type 2 has an invalid length. [ 95.948647][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 95.980330][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 95.994723][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.007922][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.021319][ T5992] netlink: 'syz.2.13': attribute type 2 has an invalid length. [ 96.040817][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.060245][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.141213][ T5839] Bluetooth: hci1: command tx timeout [ 96.143917][ T5148] Bluetooth: hci4: command tx timeout [ 96.221275][ T5148] Bluetooth: hci0: command tx timeout [ 96.221433][ T5839] Bluetooth: hci2: command tx timeout [ 96.226723][ T5148] Bluetooth: hci3: command tx timeout [ 96.230142][ T5997] netlink: 13 bytes leftover after parsing attributes in process `syz.2.16'. [ 96.938390][ T6037] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 97.001581][ T6040] tipc: Started in network mode [ 97.006905][ T6040] tipc: Node identity 0e6724ea7dfa, cluster identity 4711 [ 97.014615][ T6040] tipc: Enabled bearer , priority 0 [ 97.030584][ T6036] syzkaller0: entered promiscuous mode [ 97.036524][ T6036] syzkaller0: entered allmulticast mode [ 97.179923][ T6049] syzkaller0: entered promiscuous mode [ 97.186795][ T6049] syzkaller0: entered allmulticast mode [ 97.195972][ T6048] hsr_slave_0: left promiscuous mode [ 97.209329][ T6048] hsr_slave_1: left promiscuous mode [ 97.237852][ T6054] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.283548][ T6035] tipc: Resetting bearer [ 97.307063][ T6035] tipc: Disabling bearer [ 97.346942][ T6048] bridge_slave_1: left allmulticast mode [ 97.352798][ T6048] bridge_slave_1: left promiscuous mode [ 97.359160][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.373820][ T6048] bridge_slave_0: left allmulticast mode [ 97.379820][ T6048] bridge_slave_0: left promiscuous mode [ 97.391344][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.596392][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.606271][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.623134][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.662499][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.223735][ T6043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.614547][ T6117] netlink: 'syz.2.50': attribute type 2 has an invalid length. [ 98.749766][ T6117] 9: entered promiscuous mode [ 98.750613][ T6125] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 99.321231][ T6157] netlink: 'syz.4.59': attribute type 27 has an invalid length. [ 99.328933][ T6157] netlink: 'syz.4.59': attribute type 4 has an invalid length. [ 99.434730][ T6167] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 99.454650][ T6167] __nla_validate_parse: 12 callbacks suppressed [ 99.454670][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 99.503343][ T6158] netlink: 80 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.517905][ T6167] dummy0: entered promiscuous mode [ 99.551402][ T6167] bridge0: port 3(dummy0) entered blocking state [ 99.558671][ T6167] bridge0: port 3(dummy0) entered disabled state [ 99.601803][ T6167] dummy0: entered allmulticast mode [ 99.612276][ T6167] bridge0: port 3(dummy0) entered blocking state [ 99.618892][ T6167] bridge0: port 3(dummy0) entered forwarding state [ 99.628508][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 99.679878][ T6181] netlink: 'syz.0.64': attribute type 16 has an invalid length. [ 99.682030][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.690420][ T6181] netlink: 'syz.0.64': attribute type 17 has an invalid length. [ 99.729777][ T6163] netlink: 104 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.806995][ T6181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.905589][ T6185] batadv1: entered allmulticast mode [ 100.249143][ T6208] netlink: 144 bytes leftover after parsing attributes in process `syz.3.72'. [ 100.360139][ T6213] netlink: 596 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.399918][ T6215] netlink: 596 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.478804][ T6223] sctp: [Deprecated]: syz.3.77 (pid 6223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.478804][ T6223] Use struct sctp_sack_info instead [ 100.747539][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 100.776101][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'. [ 100.826291][ T6237] validate_nla: 2 callbacks suppressed [ 100.826310][ T6237] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 100.868872][ T6242] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.019156][ T6240] bond1: entered allmulticast mode [ 101.032446][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.042172][ T6240] bridge0: port 3(bond1) entered blocking state [ 101.048665][ T6240] bridge0: port 3(bond1) entered disabled state [ 101.066846][ T6240] bond1: entered promiscuous mode [ 101.073034][ T6240] bridge0: port 3(bond1) entered blocking state [ 101.079602][ T6240] bridge0: port 3(bond1) entered forwarding state [ 101.201347][ T6251] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 101.312104][ T6251] bond1: entered promiscuous mode [ 101.317203][ T6251] bond1: entered allmulticast mode [ 101.382739][ T6276] netlink: 'syz.1.87': attribute type 27 has an invalid length. [ 101.393277][ T6251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.404065][ T6276] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 101.447572][ T49] bridge0: port 3(bond1) entered disabled state [ 101.489236][ T6260] tipc: Started in network mode [ 101.494407][ T6260] tipc: Node identity d2015daf0fad, cluster identity 4711 [ 101.515732][ T6260] tipc: Enabled bearer , priority 0 [ 101.529590][ T6266] syzkaller0: entered promiscuous mode [ 101.568835][ T6266] syzkaller0: entered allmulticast mode [ 101.673499][ T6260] tipc: Resetting bearer [ 101.687453][ T6252] tipc: Resetting bearer [ 101.699794][ T6252] tipc: Disabling bearer [ 101.724617][ T6286] tap0: tun_chr_ioctl cmd 1074025673 [ 101.730210][ T6287] tap0: tun_chr_ioctl cmd 1074025672 [ 101.735843][ T6287] tap0: ignored: set checksum disabled [ 101.772721][ T6289] tap0: tun_chr_ioctl cmd 1074025672 [ 101.778168][ T6289] tap0: ignored: set checksum disabled [ 101.920375][ T6293] syzkaller0: entered promiscuous mode [ 101.931206][ T6293] syzkaller0: entered allmulticast mode [ 102.084053][ T6301] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 102.101281][ T6301] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 102.176869][ T6307] xt_TCPMSS: Only works on TCP SYN packets [ 102.184171][ T6303] bond1: Removing last ns target with arp_interval on [ 102.263091][ T6313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.317860][ T6301] macsec1: entered promiscuous mode [ 102.529152][ T6326] netlink: 'syz.1.101': attribute type 27 has an invalid length. [ 102.538012][ T6326] netlink: 'syz.1.101': attribute type 4 has an invalid length. [ 102.725255][ T6331] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 102.817882][ T6335] batadv_slave_0: entered promiscuous mode [ 102.851448][ T6335] batman_adv: batadv0: Adding interface: macsec1 [ 102.875846][ T6335] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.914022][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.929172][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.939531][ T6335] batman_adv: batadv0: Interface activated: macsec1 [ 103.144386][ T6345] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 103.169990][ T6317] syz.2.98 (6317) used greatest stack depth: 17832 bytes left [ 103.262113][ T6351] raw_sendmsg: syz.4.110 forgot to set AF_INET. Fix it! [ 103.531022][ T6368] netlink: 'syz.4.114': attribute type 27 has an invalid length. [ 103.933105][ T6378] bond1 (unregistering): Released all slaves [ 104.102288][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.114116][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.169522][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.196333][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.695316][ T6427] __nla_validate_parse: 16 callbacks suppressed [ 104.695334][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.129'. [ 104.751484][ T6428] syzkaller1: entered promiscuous mode [ 104.760937][ T6428] syzkaller1: entered allmulticast mode [ 105.309740][ T6461] netlink: 144 bytes leftover after parsing attributes in process `syz.1.139'. [ 105.386986][ T6467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.469287][ T6468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.481251][ T6468] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.492827][ T6468] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 105.538311][ T6471] veth3: entered promiscuous mode [ 105.552384][ T6471] bond1: (slave veth3): Enslaving as an active interface with a down link [ 105.845541][ T6493] tipc: Enabled bearer , priority 0 [ 105.883112][ T6492] tipc: Enabling of bearer rejected, already enabled [ 105.950419][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 106.052345][ T6493] tipc: Disabling bearer [ 106.174344][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.558744][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'. [ 106.673819][ T6532] netlink: 165 bytes leftover after parsing attributes in process `syz.1.158'. [ 106.673834][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 106.774061][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 106.786744][ T6544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.880880][ T6544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.948149][ T6558] validate_nla: 9 callbacks suppressed [ 106.948167][ T6558] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 106.971497][ T6560] Bluetooth: MGMT ver 1.23 [ 106.997876][ T6558] team0: Port device dummy0 added [ 107.029455][ T6560] netlink: 'syz.1.165': attribute type 29 has an invalid length. [ 107.045103][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 107.134416][ T6544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.172866][ T6544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.326933][ T6582] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 107.344804][ T6583] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.170'. [ 107.417374][ T6544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.428149][ T6544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.508763][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.592904][ T6544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.614971][ T6544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.706157][ T6601] veth1_to_bond: entered allmulticast mode [ 107.744973][ T6601] bond0: (slave bond_slave_1): Releasing backup interface [ 107.763870][ T6601] veth1_to_bond (unregistering): left allmulticast mode [ 107.815654][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.836839][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.868897][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.886759][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.941455][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.949858][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.998154][ T1339] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.015422][ T1339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.059952][ T6609] netlink: 'syz.1.177': attribute type 11 has an invalid length. [ 108.596592][ T6632] bond2: entered promiscuous mode [ 108.601812][ T6632] bond2: entered allmulticast mode [ 108.607464][ T6632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.858457][ T6659] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 108.866863][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 108.944850][ T6664] bond2: (slave geneve2): making interface the new active one [ 108.953575][ T6664] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 108.964390][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.980938][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.989818][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.005844][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.088521][ T6696] x_tables: duplicate underflow at hook 3 [ 110.103158][ T6698] x_tables: duplicate underflow at hook 3 [ 110.119134][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.174294][ T6700] __nla_validate_parse: 10 callbacks suppressed [ 110.174314][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 110.285966][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.206'. [ 110.403483][ T6716] netlink: 'syz.2.209': attribute type 27 has an invalid length. [ 110.564091][ T6722] netlink: 14 bytes leftover after parsing attributes in process `syz.0.211'. [ 110.577057][ T6723] netlink: 'syz.3.210': attribute type 8 has an invalid length. [ 110.721178][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.815885][ T6731] netlink: 'syz.3.215': attribute type 12 has an invalid length. [ 110.839206][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.215'. [ 110.883582][ T6731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 110.987433][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 111.012235][ T6743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.083455][ T6747] bpq0: entered promiscuous mode [ 111.106548][ T6748] delete_channel: no stack [ 111.111429][ T6747] bpq0: entered allmulticast mode [ 111.130717][ T6754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.220'. [ 111.202189][ T6754] bond3: (slave erspan0): Device is not bonding slave [ 111.209197][ T6754] bond3: option active_slave: invalid value (erspan0) [ 111.233834][ T6754] bond3 (unregistering): Released all slaves [ 111.279781][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 111.494098][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.784038][ T6778] bond2: entered promiscuous mode [ 111.789341][ T6778] bond2: entered allmulticast mode [ 111.795257][ T6778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.958627][ T6790] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 111.977981][ T6790] veth1_macvtap: left promiscuous mode [ 112.029960][ T6782] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 112.414263][ T6810] vlan2: entered allmulticast mode [ 112.446974][ T6810] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 112.680814][ T6825] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 112.692583][ T6827] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 112.745196][ T6825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.801318][ T6831] bond2: (slave veth3): Enslaving as an active interface with a down link [ 113.001413][ T6825] veth5: entered promiscuous mode [ 113.010434][ T6825] bond2: (slave veth5): Enslaving as an active interface with a down link [ 113.328940][ T6871] netlink: 'syz.0.252': attribute type 27 has an invalid length. [ 113.363488][ T6871] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 113.686329][ T6893] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.033809][ T6903] x_tables: duplicate underflow at hook 1 [ 114.094452][ T6912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 114.383961][ T6932] netlink: 'syz.1.267': attribute type 6 has an invalid length. [ 114.408967][ T6930] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 114.573828][ T6931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.510196][ T6976] __nla_validate_parse: 12 callbacks suppressed [ 115.510217][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 115.538123][ T6976] netlink: 'syz.3.278': attribute type 13 has an invalid length. [ 115.786423][ T6976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.810429][ T6988] netlink: 184 bytes leftover after parsing attributes in process `syz.2.283'. [ 115.975315][ T7004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.288'. [ 115.985887][ T7005] x_tables: duplicate underflow at hook 1 [ 116.040830][ T7004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.082309][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.333758][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 116.980053][ T7058] Cannot find map_set index 0 as target [ 117.280266][ T7070] netlink: 'syz.0.309': attribute type 12 has an invalid length. [ 117.529587][ T7085] trusted_key: syz.4.314 sent an empty control message without MSG_MORE. [ 117.682683][ T7089] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 117.714310][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 117.738545][ T7094] netlink: 'syz.4.318': attribute type 11 has an invalid length. [ 117.870489][ T7097] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 117.915379][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 117.941861][ T7099] bond4: entered promiscuous mode [ 117.948339][ T7099] bond4: entered allmulticast mode [ 117.955785][ T7099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.185755][ T7122] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.264263][ T7124] sctp: [Deprecated]: syz.4.327 (pid 7124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.264263][ T7124] Use struct sctp_sack_info instead [ 118.608096][ T7137] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 118.764806][ T7149] netlink: 'syz.2.336': attribute type 13 has an invalid length. [ 118.801960][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 119.047084][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 119.168352][ T7163] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.569096][ T7192] netlink: 'syz.1.349': attribute type 11 has an invalid length. [ 119.579059][ T7191] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 119.747835][ T7191] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 119.761328][ T7191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.808961][ T7211] sch_fq: defrate 0 ignored. [ 120.472649][ T7242] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 120.709574][ T7252] bond5: (slave bridge2): making interface the new active one [ 120.759786][ T7252] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 120.818919][ T7262] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 1, id = 0 [ 121.005985][ T7268] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 121.086225][ T7268] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 121.125324][ T7276] tipc: Started in network mode [ 121.192182][ T7276] tipc: Node identity b212eaaecd3f, cluster identity 4711 [ 121.200268][ T7276] tipc: Enabled bearer , priority 0 [ 121.251288][ T7274] syzkaller0: entered promiscuous mode [ 121.256814][ T7274] syzkaller0: entered allmulticast mode [ 121.365006][ T7285] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 121.382147][ T7265] tipc: Resetting bearer [ 121.488296][ T7265] tipc: Disabling bearer [ 121.556830][ T7285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.592017][ T7288] veth3: entered promiscuous mode [ 121.631248][ T7288] bond2: (slave veth3): Enslaving as an active interface with a down link [ 121.691667][ T7293] vlan2: entered allmulticast mode [ 121.710359][ T7293] bond2: entered allmulticast mode [ 121.719707][ T7293] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.665691][ T5912] IPVS: starting estimator thread 0... [ 122.733226][ T7360] __nla_validate_parse: 6 callbacks suppressed [ 122.733245][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 122.759150][ T7362] openvswitch: netlink: Message has 8 unknown bytes. [ 122.771427][ T7357] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.778543][ T7360] netlink: 'syz.1.395': attribute type 8 has an invalid length. [ 122.778648][ T7362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.005177][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 123.578638][ T7398] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 123.760096][ T7398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.805509][ T7401] veth3: entered promiscuous mode [ 123.815168][ T7401] bond4: (slave veth3): Enslaving as an active interface with a down link [ 123.846732][ T7403] vlan2: entered allmulticast mode [ 123.872583][ T7403] bond4: entered allmulticast mode [ 123.899226][ T7403] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.150319][ T7424] veth1_macvtap: left promiscuous mode [ 124.195926][ T7424] macsec0: entered promiscuous mode [ 124.221697][ T7424] macsec0: entered allmulticast mode [ 124.271188][ T7424] veth1_macvtap: entered promiscuous mode [ 124.276974][ T7424] veth1_macvtap: entered allmulticast mode [ 124.285040][ T7424] macsec0: left promiscuous mode [ 124.300313][ T7424] macsec0: left allmulticast mode [ 124.332445][ T7424] veth1_macvtap: left allmulticast mode [ 124.341237][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.367152][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.389420][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.406454][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.445074][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.475803][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.495572][ T7440] syzkaller0: entered promiscuous mode [ 124.508180][ T7440] syzkaller0: entered allmulticast mode [ 124.515715][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.526080][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 124.569729][ T7440] tipc: Enabled bearer , priority 0 [ 124.578798][ T7440] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 124.724961][ T7453] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.737706][ T7437] tipc: Resetting bearer [ 124.813815][ T7437] tipc: Disabling bearer [ 124.987064][ T7467] geneve2: entered promiscuous mode [ 125.002506][ T7467] geneve2: entered allmulticast mode [ 125.061022][ T49] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.071561][ T49] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.147467][ T7467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.249153][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 125.561875][ T7484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.365279][ T7538] x_tables: duplicate underflow at hook 4 [ 126.706940][ T7557] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 126.846024][ T7565] bond5: entered promiscuous mode [ 126.857942][ T7565] bond5: entered allmulticast mode [ 126.864541][ T7565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 126.970443][ T7467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.017089][ T7467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 127.126379][ T7570] bond6: entered promiscuous mode [ 127.140492][ T7570] bond6: entered allmulticast mode [ 127.155401][ T7570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.273164][ T7467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.301102][ T7467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 127.443510][ T7467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.480818][ T7467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 127.747625][ T1144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.765371][ T1144] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.786885][ T1144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.804718][ T1144] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.832438][ T7592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.894937][ T1144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.908574][ T1144] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.915065][ T7598] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 127.927729][ T1144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.940959][ T1144] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.159665][ T7598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 128.204205][ T7600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 128.211992][ T7600] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 128.224327][ T7600] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 128.295510][ T7606] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 128.337349][ T7606] bond7: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 128.604912][ T7634] __nla_validate_parse: 63 callbacks suppressed [ 128.604932][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 128.621451][ T7634] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 128.630085][ T7634] netlink: 'syz.0.478': attribute type 11 has an invalid length. [ 128.643751][ T7636] openvswitch: netlink: Key type 31 is not supported [ 128.660877][ T7636] can: request_module (can-proto-0) failed. [ 128.676540][ T7634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'. [ 128.742239][ T7640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.474'. [ 128.811773][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 129.158594][ T7659] netlink: 184 bytes leftover after parsing attributes in process `syz.3.484'. [ 129.190155][ T7659] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 129.502572][ T7668] netlink: 'syz.4.488': attribute type 7 has an invalid length. [ 129.551725][ T7668] netlink: 140 bytes leftover after parsing attributes in process `syz.4.488'. [ 129.597284][ T7672] tipc: Enabling of bearer rejected, failed to enable media [ 129.712778][ T7668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.861458][ T7673] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 129.933627][ T7673] team0: Port device dummy0 added [ 129.965025][ T7683] x_tables: duplicate underflow at hook 3 [ 129.993688][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 130.384057][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 130.400435][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 130.420906][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 130.863273][ T7724] unsupported nlmsg_type 40 [ 130.951532][ T7730] sctp: [Deprecated]: syz.0.507 (pid 7730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.951532][ T7730] Use struct sctp_sack_info instead [ 131.223621][ T7746] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 131.668099][ T7764] netlink: 'syz.4.519': attribute type 2 has an invalid length. [ 131.685453][ T7769] geneve2: entered promiscuous mode [ 131.698867][ T7770] xt_hashlimit: size too large, truncated to 1048576 [ 131.710824][ T7769] geneve2: entered allmulticast mode [ 131.728242][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 131.774572][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 131.802221][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 131.823486][ T7773] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 131.831380][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 131.883485][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.929663][ T7760] can: request_module (can-proto-0) failed. [ 131.931837][ T7773] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.132235][ T7792] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.372107][ T7778] tipc: Enabled bearer , priority 0 [ 132.395630][ T7787] syzkaller0: entered promiscuous mode [ 132.421487][ T7787] syzkaller0: entered allmulticast mode [ 132.503415][ T7787] tipc: Resetting bearer [ 132.550061][ T7787] tipc: Disabling bearer [ 132.786710][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801381][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.905280][ T7793] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 133.056446][ T7829] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 133.245563][ T7837] netlink: 'syz.1.542': attribute type 9 has an invalid length. [ 133.254889][ T7837] netlink: 'syz.1.542': attribute type 6 has an invalid length. [ 133.311514][ T7834] tipc: Started in network mode [ 133.316458][ T7834] tipc: Node identity 8280b74f40bf, cluster identity 4711 [ 133.350045][ T7834] tipc: Enabled bearer , priority 0 [ 133.401326][ T7834] syzkaller0: entered promiscuous mode [ 133.406855][ T7834] syzkaller0: entered allmulticast mode [ 133.468174][ T7857] IPVS: set_ctl: invalid protocol: 41 172.20.20.61:20004 [ 133.478472][ T7832] tipc: Resetting bearer [ 133.565782][ T7832] tipc: Disabling bearer [ 133.681296][ T7861] __nla_validate_parse: 15 callbacks suppressed [ 133.681313][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 133.874546][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 133.984241][ T7885] netlink: 'syz.1.552': attribute type 16 has an invalid length. [ 134.029951][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.049060][ T7885] netlink: 'syz.1.552': attribute type 17 has an invalid length. [ 134.059970][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.206829][ T7885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.635512][ T7920] syzkaller0: entered promiscuous mode [ 134.641838][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 134.653371][ T7920] syzkaller0: entered allmulticast mode [ 134.774595][ T7927] tipc: Enabled bearer , priority 0 [ 134.779789][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 134.862199][ T7927] syzkaller0: entered promiscuous mode [ 134.875389][ T7927] syzkaller0: entered allmulticast mode [ 134.906250][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 134.972288][ T7927] tipc: Resetting bearer [ 134.998342][ T7926] tipc: Resetting bearer [ 135.018135][ T7926] tipc: Disabling bearer [ 135.079729][ T7943] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.101608][ T7942] sctp: [Deprecated]: syz.3.569 (pid 7942) Use of int in max_burst socket option deprecated. [ 135.101608][ T7942] Use struct sctp_assoc_value instead [ 135.118650][ T7949] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 135.156641][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.165737][ T7949] bridge_slave_1: left allmulticast mode [ 135.179314][ T7949] bridge_slave_1: left promiscuous mode [ 135.195630][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.212659][ T7949] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 135.331306][ T7960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 135.393883][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 135.762759][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 135.899641][ T7988] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 135.917301][ T7988] bond3 (unregistering): Released all slaves [ 135.928048][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 135.950555][ T7991] tipc: Enabled bearer , priority 0 [ 136.038565][ T7997] tipc: Disabling bearer [ 136.158815][ T8006] netlink: 76 bytes leftover after parsing attributes in process `syz.0.584'. [ 136.257426][ T8015] tipc: Enabled bearer , priority 0 [ 136.265662][ T8015] syzkaller0: entered promiscuous mode [ 136.271290][ T8015] syzkaller0: entered allmulticast mode [ 136.288253][ T8015] bridge_slave_1: mtu less than device minimum [ 136.307237][ T8014] tipc: Resetting bearer [ 136.359871][ T8014] tipc: Disabling bearer [ 136.495723][ T8026] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 136.519704][ T8030] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 136.553173][ T8024] Illegal XDP return value 3358509168 on prog (id 123) dev syz_tun, expect packet loss! [ 136.601095][ T8032] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 136.744714][ T8038] syzkaller0: entered promiscuous mode [ 136.751747][ T8038] syzkaller0: entered allmulticast mode [ 136.946918][ T8046] netem: change failed [ 137.040618][ T8054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.135182][ T8057] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 138.188614][ T8112] 0: reclassify loop, rule prio 0, protocol 800 [ 138.804809][ T8148] __nla_validate_parse: 8 callbacks suppressed [ 138.804828][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 139.715282][ T8148] : entered promiscuous mode [ 139.891254][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 139.937386][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 139.952895][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 140.089268][ T8173] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 140.115393][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.637'. [ 140.325450][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 140.334415][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.342427][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.368398][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.386418][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.410098][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.644'. [ 140.434193][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.645'. [ 140.443882][ T8197] netlink: 7 bytes leftover after parsing attributes in process `syz.0.645'. [ 140.533222][ T8203] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 141.197788][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 141.512854][ T5912] IPVS: starting estimator thread 0... [ 141.611556][ T8271] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 141.622972][ T8266] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.713284][ T8276] Bluetooth: MGMT ver 1.23 [ 141.840592][ T8280] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 142.478182][ T8299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.480519][ T8345] syzkaller0: entered promiscuous mode [ 143.492092][ T8345] syzkaller0: entered allmulticast mode [ 143.517508][ T8345] tipc: Enabled bearer , priority 0 [ 143.652907][ T8344] tipc: Resetting bearer [ 143.697071][ T8344] tipc: Disabling bearer [ 143.739401][ T8358] netlink: 'syz.0.692': attribute type 25 has an invalid length. [ 143.800182][ T8363] veth0_macvtap: left promiscuous mode [ 143.808909][ T8363] macvtap0: entered allmulticast mode [ 144.332260][ T8398] __nla_validate_parse: 1 callbacks suppressed [ 144.332278][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.359787][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.378730][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.389083][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.529729][ T8412] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 144.645104][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'. [ 144.951441][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 144.973788][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.981535][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.991579][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 145.115178][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.142825][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.285496][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 145.301645][ T8456] tipc: Can't bind to reserved service type 2 [ 145.405779][ T8437] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 145.419319][ T8437] bond4 (unregistering): Released all slaves [ 145.447364][ T8442] geneve3: entered promiscuous mode [ 145.453145][ T8442] geneve3: entered allmulticast mode [ 145.468077][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.477772][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.488222][ T49] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 145.501090][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.510329][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.539987][ T49] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 145.588495][ T8465] netlink: zone id is out of range [ 145.615112][ T8465] netlink: zone id is out of range [ 145.620397][ T8465] netlink: zone id is out of range [ 145.626061][ T8465] netlink: zone id is out of range [ 145.641291][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.660450][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.669973][ T8465] netlink: zone id is out of range [ 145.684853][ T49] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 145.696078][ T8465] netlink: zone id is out of range [ 145.705288][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.714607][ T8465] netlink: zone id is out of range [ 145.719746][ T8465] netlink: zone id is out of range [ 145.731551][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.753100][ T49] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 145.763005][ T8465] netlink: zone id is out of range [ 145.782882][ T8475] vlan2: entered allmulticast mode [ 145.788430][ T8475] bridge_slave_0: entered allmulticast mode [ 145.849178][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 145.864708][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 146.176096][ T8503] netlink: 'syz.2.732': attribute type 9 has an invalid length. [ 146.763714][ T8531] bond6 (unregistering): Released all slaves [ 147.245080][ T8563] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 147.274932][ T8563] team0: Port device dummy0 added [ 147.292121][ T8563] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 147.301854][ T8563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.356128][ T8563] team0: Failed to send options change via netlink (err -105) [ 147.364874][ T8563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.374727][ T8563] team0: Port device dummy0 removed [ 147.403439][ T8563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.605735][ T8585] ip6t_REJECT: ECHOREPLY is not supported [ 147.623880][ T8586] net_ratelimit: 8 callbacks suppressed [ 147.623896][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.798534][ T8599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.806066][ T8599] IPv6: NLM_F_CREATE should be set when creating new route [ 147.825062][ T8602] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 148.278756][ T8624] netlink: 'syz.0.774': attribute type 13 has an invalid length. [ 148.287212][ T8634] sctp: [Deprecated]: syz.4.775 (pid 8634) Use of int in max_burst socket option. [ 148.287212][ T8634] Use struct sctp_assoc_value instead [ 148.420493][ T8638] veth0: entered promiscuous mode [ 149.190929][ T8681] syz_tun: entered allmulticast mode [ 149.216662][ T8674] syz_tun: left allmulticast mode [ 149.409593][ T8695] __nla_validate_parse: 10 callbacks suppressed [ 149.409610][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 149.472845][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 149.616339][ T8709] x_tables: duplicate underflow at hook 1 [ 149.927122][ T8735] netlink: 'syz.3.808': attribute type 33 has an invalid length. [ 149.947208][ T8741] netlink: 'syz.3.808': attribute type 33 has an invalid length. [ 149.967400][ T8735] netlink: 152 bytes leftover after parsing attributes in process `syz.3.808'. [ 149.990964][ T8741] netlink: 152 bytes leftover after parsing attributes in process `syz.3.808'. [ 150.003668][ T8744] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 150.021190][ T8738] netlink: 'syz.0.810': attribute type 8 has an invalid length. [ 150.044641][ T49] bridge0: port 3(dummy0) entered disabled state [ 150.067428][ T8744] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 150.207047][ T8751] syzkaller0: entered promiscuous mode [ 150.214383][ T8751] syzkaller0: entered allmulticast mode [ 150.388406][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 150.509569][ T8772] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 151.114524][ T8793] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.950778][ T8001] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.971014][ T8001] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.979802][ T8001] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.054153][ T8001] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.110435][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 152.111278][ T8798] syzkaller1: entered promiscuous mode [ 152.159932][ T8798] syzkaller1: entered allmulticast mode [ 152.198988][ T8810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.826'. [ 152.282933][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 152.300532][ T8814] validate_nla: 1 callbacks suppressed [ 152.300551][ T8814] netlink: 'syz.0.829': attribute type 30 has an invalid length. [ 152.314590][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 152.699562][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 152.713712][ T8839] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.772468][ T8841] vlan2: entered allmulticast mode [ 152.790829][ T8841] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 153.025839][ T8867] sctp: [Deprecated]: syz.4.845 (pid 8867) Use of int in max_burst socket option. [ 153.025839][ T8867] Use struct sctp_assoc_value instead [ 153.083981][ T8874] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.143092][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.151547][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.610573][ T8919] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.393108][ T8971] tipc: Enabled bearer , priority 0 [ 154.537518][ T8971] tipc: Disabling bearer [ 154.573964][ T8984] __nla_validate_parse: 4 callbacks suppressed [ 154.573981][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 154.867515][ T8998] netlink: 'syz.3.870': attribute type 24 has an invalid length. [ 154.935094][ T8999] tipc: Enabled bearer , priority 0 [ 154.977648][ T8995] tipc: Disabling bearer [ 155.147843][ T9010] syzkaller0: entered promiscuous mode [ 155.159435][ T9010] syzkaller0: entered allmulticast mode [ 155.367982][ T9025] tipc: Enabled bearer , priority 0 [ 155.406843][ T9030] syzkaller0: entered promiscuous mode [ 155.425163][ T9030] syzkaller0: entered allmulticast mode [ 155.449078][ T9008] tipc: Resetting bearer [ 155.484764][ T9008] tipc: Disabling bearer [ 155.643999][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 155.821822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.842805][ T9030] macvtap0: left allmulticast mode [ 155.940449][ T9030] veth3: left promiscuous mode [ 155.948687][ T9030] geneve2: left promiscuous mode [ 155.953884][ T9030] geneve2: left allmulticast mode [ 155.976039][ T9030] syzkaller0: left promiscuous mode [ 155.990817][ T9030] syzkaller0: left allmulticast mode [ 156.024216][ T9053] tipc: Enabled bearer , priority 0 [ 156.038275][ T60] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 156.062464][ T60] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.080146][ T9062] syzkaller0: entered promiscuous mode [ 156.092875][ T9062] syzkaller0: entered allmulticast mode [ 156.128922][ T60] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 156.145908][ T60] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.158531][ T9046] tipc: Resetting bearer [ 156.171029][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 156.188367][ T60] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.198153][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 156.208563][ T9042] tipc: Resetting bearer [ 156.223277][ T9042] tipc: Disabling bearer [ 156.235284][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 156.243933][ T60] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.254139][ T9076] delete_channel: no stack [ 156.306046][ T9080] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:5120 [ 156.317935][ T9080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 156.472537][ T9086] netlink: 'syz.4.891': attribute type 26 has an invalid length. [ 156.550664][ T9090] xt_CT: No such helper "snmp_trap" [ 156.638270][ T9096] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 156.652711][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 156.678416][ T9097] macsec0: entered promiscuous mode [ 156.688358][ T9097] bridge0: entered promiscuous mode [ 156.698980][ T9097] macsec0: entered allmulticast mode [ 156.705039][ T9097] bridge0: entered allmulticast mode [ 156.716877][ T9097] bridge0: port 3(macsec0) entered blocking state [ 156.723691][ T9097] bridge0: port 3(macsec0) entered disabled state [ 156.737162][ T9097] bridge0: left allmulticast mode [ 156.742429][ T9097] bridge0: left promiscuous mode [ 156.939617][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 157.067997][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 157.291174][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 157.300319][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 157.508590][ T9140] netlink: 'syz.3.910': attribute type 18 has an invalid length. [ 157.516799][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 157.537494][ T9140] netlink: 'syz.3.910': attribute type 18 has an invalid length. [ 157.537512][ T8001] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.545581][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 157.564274][ T8001] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.573632][ T8001] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.603902][ T8001] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.906402][ T9156] team0: Caught tx_queue_len zero misconfig [ 158.026960][ T9163] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 158.085438][ T9163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.104935][ T9170] bond3: (slave geneve3): making interface the new active one [ 158.116607][ T9170] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 158.125719][ T8001] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.141684][ T8001] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.173255][ T8001] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.205778][ T8001] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.681024][ T9203] veth9: entered promiscuous mode [ 158.686223][ T9203] veth9: entered allmulticast mode [ 158.781508][ T9217] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 160.049919][ T9294] __nla_validate_parse: 5 callbacks suppressed [ 160.049938][ T9294] netlink: 596 bytes leftover after parsing attributes in process `syz.1.955'. [ 160.205131][ T9303] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 160.251375][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 160.275982][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 160.296018][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 160.305776][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 160.439602][ T9317] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 160.776522][ T9342] xt_hashlimit: size too large, truncated to 1048576 [ 160.883219][ T9353] tipc: Enabled bearer , priority 0 [ 160.901327][ T9353] syzkaller0: entered promiscuous mode [ 160.906942][ T9353] syzkaller0: entered allmulticast mode [ 160.918510][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 161.034507][ T9348] tipc: Resetting bearer [ 161.129990][ T9360] syzkaller0: entered promiscuous mode [ 161.141233][ T9360] syzkaller0: entered allmulticast mode [ 161.163494][ T9341] tipc: Resetting bearer [ 161.207131][ T9341] tipc: Disabling bearer [ 162.044737][ T9382] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.542026][ T9391] netlink: 112 bytes leftover after parsing attributes in process `syz.1.980'. [ 162.602733][ T9399] netlink: 'syz.3.983': attribute type 11 has an invalid length. [ 162.618297][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 162.630592][ T9399] netlink: 184 bytes leftover after parsing attributes in process `syz.3.983'. [ 162.702963][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 162.870012][ T9416] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 163.303295][ T9449] netlink: 'syz.1.998': attribute type 5 has an invalid length. [ 163.312612][ T9449] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 163.325488][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.348660][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.370232][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.416044][ T9447] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.454023][ T9447] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 163.524543][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.552634][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.561690][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.585543][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 163.625105][ T9447] wlan0 speed is unknown, defaulting to 1000 [ 164.209030][ T9502] netlink: ct family unspecified [ 164.226733][ T9502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.853060][ T9538] syzkaller0: entered promiscuous mode [ 164.859015][ T9538] syzkaller0: entered allmulticast mode [ 164.866979][ T9536] tipc: Enabled bearer , priority 0 [ 164.894135][ T9536] tipc: Resetting bearer [ 164.923405][ T9536] tipc: Disabling bearer [ 165.029134][ T9550] sit0: Caught tx_queue_len zero misconfig [ 165.050162][ T9550] tipc: New replicast peer: 255.255.255.255 [ 165.060849][ T9550] tipc: Enabled bearer , priority 10 [ 165.094165][ T9553] __nla_validate_parse: 10 callbacks suppressed [ 165.094186][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 165.234591][ T9556] sctp: [Deprecated]: syz.0.1036 (pid 9556) Use of int in maxseg socket option. [ 165.234591][ T9556] Use struct sctp_assoc_value instead [ 165.343556][ T9562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1040'. [ 165.414333][ T9570] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1041'. [ 165.431756][ T9575] netlink: 'syz.3.1039': attribute type 16 has an invalid length. [ 165.451345][ T9575] netlink: 'syz.3.1039': attribute type 17 has an invalid length. [ 165.456495][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.478163][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.568190][ T9575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.739910][ T8956] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.755378][ T8956] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.764104][ T8956] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.773037][ T9590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.798482][ T8956] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.941383][ T9602] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 165.986955][ T9606] netlink: 'syz.1.1050': attribute type 33 has an invalid length. [ 165.996554][ T9606] sctp: [Deprecated]: syz.1.1050 (pid 9606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.996554][ T9606] Use struct sctp_sack_info instead [ 166.124451][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 166.141698][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 166.182655][ T5885] tipc: Node number set to 3258955599 [ 166.232687][ T9618] bridge0: port 1(batadv0) entered blocking state [ 166.239778][ T9618] bridge0: port 1(batadv0) entered disabled state [ 166.250993][ T9618] batadv0: entered allmulticast mode [ 166.258344][ T9618] batadv0: entered promiscuous mode [ 166.497718][ T8008] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 166.536308][ T9646] sctp: [Deprecated]: syz.3.1060 (pid 9646) Use of int in maxseg socket option. [ 166.536308][ T9646] Use struct sctp_assoc_value instead [ 166.723858][ T7201] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 166.733489][ T7201] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 166.832989][ T9664] TCP: TCP_TX_DELAY enabled [ 166.897860][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 167.198344][ T9679] syzkaller0: entered promiscuous mode [ 167.205858][ T9679] syzkaller0: entered allmulticast mode [ 167.498261][ T9695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.510767][ T9695] bond0: (slave bond4): Enslaving as an active interface with an up link [ 167.519456][ T9701] netem: incorrect ge model size [ 167.524851][ T9701] netem: change failed [ 167.614097][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 167.622271][ T9718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1082'. [ 167.624623][ T9717] netlink: 'syz.4.1083': attribute type 21 has an invalid length. [ 167.789848][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'. [ 167.927848][ T9701] dummy0: left allmulticast mode [ 167.933058][ T9701] dummy0: left promiscuous mode [ 167.938269][ T9701] bridge0: port 3(dummy0) entered disabled state [ 168.026557][ T9701] bridge_slave_0: left allmulticast mode [ 168.033565][ T9701] bridge_slave_0: left promiscuous mode [ 168.039594][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.060093][ T9701] bridge_slave_1: left allmulticast mode [ 168.066255][ T9701] bridge_slave_1: left promiscuous mode [ 168.073572][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.102739][ T9701] bond0: (slave bond_slave_0): Releasing backup interface [ 168.125199][ T9701] bond0: (slave bond_slave_1): Releasing backup interface [ 168.150585][ T9701] team0: Port device team_slave_0 removed [ 168.168488][ T9701] team0: Port device team_slave_1 removed [ 168.180254][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.193052][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.206018][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.233214][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.256701][ T9701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.292484][ T9717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1083'. [ 168.622117][ T9760] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 168.873105][ T9781] netlink: 'syz.3.1095': attribute type 11 has an invalid length. [ 168.893672][ T9781] netlink: 'syz.3.1095': attribute type 11 has an invalid length. [ 168.967814][ T9785] pim6reg: entered allmulticast mode [ 168.979982][ T9781] pim6reg: left allmulticast mode [ 169.067824][ T9785] netlink: 'syz.3.1095': attribute type 11 has an invalid length. [ 169.078534][ T9785] netlink: 'syz.3.1095': attribute type 11 has an invalid length. [ 169.845548][ T9844] netlink: 'syz.3.1117': attribute type 83 has an invalid length. [ 169.877613][ T9846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.992486][ T9850] netlink: 'syz.0.1120': attribute type 24 has an invalid length. [ 170.207775][ T9860] __nla_validate_parse: 4 callbacks suppressed [ 170.207796][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 170.239690][ T9867] netlink: 'syz.4.1127': attribute type 13 has an invalid length. [ 170.248642][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.334331][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.384870][ T9879] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 170.396096][ T9879] netlink: 'syz.1.1130': attribute type 3 has an invalid length. [ 170.404445][ T9879] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1130'. [ 170.417591][ T9879] NCSI netlink: No device for ifindex 813332851 [ 170.455226][ T9878] syzkaller0: entered promiscuous mode [ 170.461942][ T9878] syzkaller0: entered allmulticast mode [ 170.482523][ T9878] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 170.524948][ T9884] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 170.656630][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 170.885412][ T9905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1139'. [ 171.022990][ T9905] bond5: (slave ip6tnl0): Device is not bonding slave [ 171.030023][ T9905] bond5: option active_slave: invalid value (ip6tnl0) [ 171.039075][ T9905] bond5 (unregistering): Released all slaves [ 171.068343][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 171.097104][ T9918] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1144'. [ 171.395194][ T9935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1147'. [ 171.422641][ T9939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1144'. [ 172.599088][ T9957] syzkaller0: entered promiscuous mode [ 194.225117][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.433882][ T9987] tipc: Enabled bearer , priority 0 [ 201.464918][ T9991] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1156'. [ 201.480832][ T30] audit: type=1800 audit(1763220317.654:2): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1158" name="memory.events" dev="tmpfs" ino=1270 res=0 errno=0 [ 201.512034][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 201.526089][ T9990] bond7: invalid ARP target 0.0.0.0 specified for addition [ 201.534516][ T9990] bond7: option arp_ip_target: invalid value (0) [ 201.543400][ T9990] bond7 (unregistering): Released all slaves [ 201.575163][ T9985] tipc: Disabling bearer [ 201.593711][ T9984] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1156'. [ 201.791087][T10009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.996362][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 202.016347][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1164'. [ 202.030152][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 202.055138][T10027] xfrm1: entered promiscuous mode [ 202.074076][T10027] xfrm1: entered allmulticast mode [ 202.084593][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 202.161429][T10037] netlink: 'syz.0.1171': attribute type 4 has an invalid length. [ 202.317949][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 202.653355][T10071] netlink: 'syz.4.1181': attribute type 1 has an invalid length. [ 202.742075][T10071] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 202.769233][T10081] x_tables: duplicate underflow at hook 1 [ 202.918016][T10085] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 203.203385][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 203.383106][T10115] netlink: 'syz.2.1194': attribute type 13 has an invalid length. [ 203.392616][T10114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.433357][T10115] gretap0: refused to change device tx_queue_len [ 203.439773][T10115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 204.278079][T10185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1205'. [ 204.586823][T10205] netem: invalid attributes len -24 [ 204.609326][T10205] netem: change failed [ 204.624458][T10205] netem: invalid attributes len -24 [ 204.629886][T10205] netem: change failed [ 204.930486][T10237] netlink: ct family unspecified [ 204.940038][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.096712][T10250] Unsupported ieee802154 address type: 0 [ 205.220450][T10254] tipc: Enabled bearer , priority 0 [ 205.228344][T10254] syzkaller0: entered promiscuous mode [ 205.234275][T10254] syzkaller0: entered allmulticast mode [ 205.253223][T10254] tipc: Resetting bearer [ 205.264227][T10252] tipc: Resetting bearer [ 205.287245][T10252] tipc: Disabling bearer [ 205.747705][T10274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.831650][T10276] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.948233][T10278] openvswitch: netlink: Missing key (keys=40, expected=100) [ 206.235589][T10292] sctp: [Deprecated]: syz.2.1236 (pid 10292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.235589][T10292] Use struct sctp_sack_info instead [ 206.284252][T10291] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.596870][T10309] __nla_validate_parse: 12 callbacks suppressed [ 206.596889][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 206.613071][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'. [ 206.759154][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1249'. [ 206.803145][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 206.814985][T10320] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1250'. [ 206.824483][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'. [ 206.890840][T10325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.329704][T10356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1259'. [ 207.538603][T10366] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1262'. [ 207.864771][T10387] tipc: Enabled bearer , priority 0 [ 207.887053][T10385] openvswitch: netlink: IP tunnel dst address not specified [ 207.899980][T10387] syzkaller0: entered promiscuous mode [ 207.908487][T10387] syzkaller0: entered allmulticast mode [ 207.997019][T10377] tipc: Resetting bearer [ 208.032829][T10349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.039085][T10349] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 208.066538][T10377] tipc: Disabling bearer [ 208.103549][T10349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.105448][T10399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.109764][T10349] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 208.127719][T10349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.133980][T10349] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 208.149876][T10349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.168199][T10349] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 208.191123][T10391] bond5: entered promiscuous mode [ 208.196332][T10391] bond5: entered allmulticast mode [ 208.207009][T10391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.277079][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.293379][T10349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.297843][T10403] bond0: (slave rose0): Enslaving as an active interface with an up link [ 208.309651][T10349] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 208.568760][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.787199][T10433] vlan2: entered promiscuous mode [ 208.803666][T10433] bridge0: entered promiscuous mode [ 209.011254][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 209.020428][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 209.082790][T10452] syzkaller0: entered promiscuous mode [ 209.097713][T10452] syzkaller0: entered allmulticast mode [ 209.251159][T10467] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 209.810633][T10501] netlink: 'syz.1.1294': attribute type 12 has an invalid length. [ 209.835600][T10501] netlink: 'syz.1.1294': attribute type 29 has an invalid length. [ 209.874923][T10501] netlink: 'syz.1.1294': attribute type 2 has an invalid length. [ 209.928492][T10503] dvmrp2: entered allmulticast mode [ 210.127449][T10517] netlink: 'syz.1.1298': attribute type 13 has an invalid length. [ 210.410117][T10538] netlink: 'syz.4.1302': attribute type 35 has an invalid length. [ 210.574630][T10517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.342810][T10584] tipc: Enabled bearer , priority 0 [ 211.350366][T10584] syzkaller0: entered promiscuous mode [ 211.357661][T10585] netlink: 'syz.0.1315': attribute type 5 has an invalid length. [ 211.358955][T10584] syzkaller0: entered allmulticast mode [ 211.658320][ T5950] IPVS: starting estimator thread 0... [ 211.751604][T10611] IPVS: using max 29 ests per chain, 69600 per kthread [ 211.797550][T10621] syzkaller0: entered promiscuous mode [ 211.804504][T10621] syzkaller0: entered allmulticast mode [ 211.946004][T10628] bond6: option lp_interval: invalid value (0) [ 211.953076][T10628] bond6: option lp_interval: allowed values 1 - 2147483647 [ 211.962299][T10628] bond6 (unregistering): Released all slaves [ 212.067357][T10635] __nla_validate_parse: 14 callbacks suppressed [ 212.067380][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1330'. [ 212.089230][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 212.146887][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 212.160500][T10580] tipc: Resetting bearer [ 212.179906][T10580] tipc: Disabling bearer [ 212.207518][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 212.733727][T10678] syzkaller0: entered promiscuous mode [ 212.738609][T10675] syz.0.1340: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset= [ 212.739447][T10678] syzkaller0: entered allmulticast mode [ 212.739628][T10675] /,mems_allowed=0-1 [ 212.769684][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.0.1340 Not tainted syzkaller #0 PREEMPT(full) [ 212.769709][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.769746][T10675] Call Trace: [ 212.769755][T10675] [ 212.769764][T10675] dump_stack_lvl+0x189/0x250 [ 212.769807][T10675] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 212.769849][T10675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.769877][T10675] ? __pfx__printk+0x10/0x10 [ 212.769898][T10675] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.769926][T10675] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.769963][T10675] warn_alloc+0x214/0x310 [ 212.770001][T10675] ? __pfx_warn_alloc+0x10/0x10 [ 212.770043][T10675] ? __get_vm_area_node+0x28f/0x300 [ 212.770069][T10675] ? packet_set_ring+0x6f3/0x2120 [ 212.770091][T10675] __vmalloc_node_range_noprof+0x690/0x12d0 [ 212.770149][T10675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.770178][T10675] ? alloc_pages_mpol+0x3cd/0x4a0 [ 212.770198][T10675] ? packet_set_ring+0x6f3/0x2120 [ 212.770215][T10675] vzalloc_noprof+0xb2/0xf0 [ 212.770241][T10675] ? packet_set_ring+0x6f3/0x2120 [ 212.770259][T10675] packet_set_ring+0x6f3/0x2120 [ 212.770302][T10675] ? __pfx_packet_set_ring+0x10/0x10 [ 212.770345][T10675] ? _copy_from_user+0x94/0xb0 [ 212.770374][T10675] packet_setsockopt+0xc5a/0x12c0 [ 212.770408][T10675] ? __pfx_packet_setsockopt+0x10/0x10 [ 212.770440][T10675] ? file_init_path+0x3b/0x590 [ 212.770479][T10675] ? aa_sk_perm+0x81e/0x950 [ 212.770513][T10675] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.770543][T10675] ? aa_sock_opt_perm+0xff/0x1b0 [ 212.770578][T10675] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.770598][T10675] ? __pfx_packet_setsockopt+0x10/0x10 [ 212.770652][T10675] do_sock_setsockopt+0x17c/0x1b0 [ 212.770684][T10675] __x64_sys_setsockopt+0x13f/0x1b0 [ 212.770711][T10675] do_syscall_64+0xfa/0xfa0 [ 212.770742][T10675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.770761][T10675] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.770781][T10675] ? clear_bhb_loop+0x60/0xb0 [ 212.770807][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.770834][T10675] RIP: 0033:0x7f792a78f6c9 [ 212.770866][T10675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.770882][T10675] RSP: 002b:00007f792b56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.770903][T10675] RAX: ffffffffffffffda RBX: 00007f792a9e6090 RCX: 00007f792a78f6c9 [ 212.770917][T10675] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 212.770929][T10675] RBP: 00007f792a811f91 R08: 000000000000001c R09: 0000000000000000 [ 212.770940][T10675] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 212.770953][T10675] R13: 00007f792a9e6128 R14: 00007f792a9e6090 R15: 00007ffc4f589518 [ 212.770990][T10675] [ 213.052518][T10675] Mem-Info: [ 213.055739][T10675] active_anon:3905 inactive_anon:0 isolated_anon:0 [ 213.055739][T10675] active_file:2636 inactive_file:39917 isolated_file:0 [ 213.055739][T10675] unevictable:778 dirty:85 writeback:0 [ 213.055739][T10675] slab_reclaimable:11585 slab_unreclaimable:171892 [ 213.055739][T10675] mapped:29914 shmem:1357 pagetables:939 [ 213.055739][T10675] sec_pagetables:0 bounce:0 [ 213.055739][T10675] kernel_misc_reclaimable:0 [ 213.055739][T10675] free:1256656 free_pcp:18044 free_cma:0 [ 213.101916][T10675] Node 0 active_anon:15620kB inactive_anon:0kB active_file:10544kB inactive_file:159464kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:119656kB dirty:340kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13232kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.134235][T10675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.166822][T10675] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.198678][T10675] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 213.204996][T10675] Node 0 DMA32 free:1119304kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15620kB inactive_anon:0kB active_file:10544kB inactive_file:159464kB unevictable:1576kB writepending:340kB zspages:0kB present:3129332kB managed:2565160kB mlocked:40kB bounce:0kB free_pcp:56152kB local_pcp:20972kB free_cma:0kB [ 213.239216][T10675] lowmem_reserve[]: 0 0 0 0 0 [ 213.244218][T10675] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.274371][T10675] lowmem_reserve[]: 0 0 0 0 0 [ 213.279243][T10675] Node 1 Normal free:3891960kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:3552kB free_cma:0kB [ 213.312080][T10675] lowmem_reserve[]: 0 0 0 0 0 [ 213.316872][T10675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.329646][T10675] Node 0 DMA32: 635*4kB (UME) 884*8kB (UME) 284*16kB (UME) 726*32kB (UME) 130*64kB (UME) 75*128kB (UME) 41*256kB (UM) 33*512kB (UME) 15*1024kB (UME) 6*2048kB (U) 247*4096kB (UM) = 1122060kB [ 213.349103][T10675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.360791][T10675] Node 1 Normal: 196*4kB (UE) 43*8kB (UME) 35*16kB (UME) 77*32kB (UME) 25*64kB (UME) 5*128kB (UME) 4*256kB (UM) 3*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891960kB [ 213.379616][T10675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.390330][T10675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.399738][T10675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.412100][T10675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.431491][T10675] 43907 total pagecache pages [ 213.436429][T10675] 0 pages in swap cache [ 213.436675][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 213.440672][T10675] Free swap = 124996kB [ 213.453983][T10675] Total swap = 124996kB [ 213.458223][T10675] 2097051 pages RAM [ 213.464225][T10675] 0 pages HighMem/MovableOnly [ 213.469359][T10675] 424119 pages reserved [ 213.480833][T10675] 0 pages cma reserved [ 213.657594][T10697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.718951][T10701] netlink: 'syz.3.1345': attribute type 1 has an invalid length. [ 213.739981][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 213.751268][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 213.863819][T10710] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1348'. [ 213.873373][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 213.882714][T10710] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1348'. [ 213.892060][T10710] netlink: 'syz.1.1348': attribute type 2 has an invalid length. [ 214.455138][T10723] lo: Caught tx_queue_len zero misconfig [ 214.469563][T10723] openvswitch: netlink: Key type 234 is out of range max 32 [ 214.517536][T10725] batadv_slave_0: Caught tx_queue_len zero misconfig [ 215.183439][ T1144] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.192547][ T1144] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 215.201631][ T1144] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.210619][ T1144] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 215.220006][ T1144] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.228909][ T1144] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 215.237908][ T1144] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.247080][ T1144] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 215.947688][T10748] C: renamed from lo [ 216.993164][T10761] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 255.665223][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.104056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.581057][ T31] INFO: task kworker/0:12:9731 blocked for more than 143 seconds. [ 369.588951][ T31] Not tainted syzkaller #0 [ 369.594160][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.603228][ T31] task:kworker/0:12 state:D stack:22824 pid:9731 tgid:9731 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 369.615322][ T31] Workqueue: events rfkill_sync_work [ 369.620971][ T31] Call Trace: [ 369.624258][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.627183][ T31] __schedule+0x1798/0x4cc0 [ 369.631730][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.637272][ T31] ? __pfx___schedule+0x10/0x10 [ 369.642219][ T31] ? schedule+0x91/0x360 [ 369.646495][ T31] schedule+0x165/0x360 [ 369.651010][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.656493][ T31] __mutex_lock+0x7e6/0x1350 [ 369.662652][ T31] ? __mutex_lock+0x5bb/0x1350 [ 369.670699][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 369.676025][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.720862][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.726160][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 369.738601][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.745394][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.751177][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 369.756288][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.762076][ T31] rfkill_set_block+0x1d2/0x440 [ 369.766946][ T31] rfkill_sync_work+0x114/0x200 [ 369.772216][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.777955][ T31] process_scheduled_works+0xae1/0x17b0 [ 369.783539][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.789528][ T31] worker_thread+0x8a0/0xda0 [ 369.794262][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.800598][ T31] ? __kthread_parkme+0x7b/0x200 [ 369.805930][ T31] kthread+0x711/0x8a0 [ 369.810026][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.815188][ T31] ? __pfx_kthread+0x10/0x10 [ 369.819783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.825436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.830994][ T31] ? __pfx_kthread+0x10/0x10 [ 369.835644][ T31] ret_from_fork+0x4bc/0x870 [ 369.840234][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.845380][ T31] ? __switch_to_asm+0x39/0x70 [ 369.850134][ T31] ? __switch_to_asm+0x33/0x70 [ 369.854927][ T31] ? __pfx_kthread+0x10/0x10 [ 369.859520][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.864622][ T31] [ 369.867644][ T31] INFO: task kworker/0:13:9732 blocked for more than 143 seconds. [ 369.875521][ T31] Not tainted syzkaller #0 [ 369.880532][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.889244][ T31] task:kworker/0:13 state:D stack:26344 pid:9732 tgid:9732 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 369.905450][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 369.912193][ T31] Call Trace: [ 369.915484][ T31] [ 369.918429][ T31] __schedule+0x1798/0x4cc0 [ 369.922992][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.929334][ T31] ? __pfx___schedule+0x10/0x10 [ 369.934455][ T31] ? schedule+0x91/0x360 [ 369.938703][ T31] schedule+0x165/0x360 [ 369.942936][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.948502][ T31] __mutex_lock+0x7e6/0x1350 [ 369.953227][ T31] ? __mutex_lock+0x5bb/0x1350 [ 369.958044][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 369.964598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.969661][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.975465][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.981227][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 369.987291][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.993251][ T31] process_scheduled_works+0xae1/0x17b0 [ 369.998826][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.004859][ T31] worker_thread+0x8a0/0xda0 [ 370.009470][ T31] kthread+0x711/0x8a0 [ 370.013674][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.018781][ T31] ? __pfx_kthread+0x10/0x10 [ 370.023648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.028857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.034091][ T31] ? __pfx_kthread+0x10/0x10 [ 370.038687][ T31] ret_from_fork+0x4bc/0x870 [ 370.043304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.048424][ T31] ? __switch_to_asm+0x39/0x70 [ 370.053426][ T31] ? __switch_to_asm+0x33/0x70 [ 370.058191][ T31] ? __pfx_kthread+0x10/0x10 [ 370.062965][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.067752][ T31] [ 370.070868][ T31] INFO: task syz.2.1299:10514 blocked for more than 143 seconds. [ 370.078628][ T31] Not tainted syzkaller #0 [ 370.083899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.092656][ T31] task:syz.2.1299 state:D stack:25960 pid:10514 tgid:10514 ppid:5829 task_flags:0x400040 flags:0x00080003 [ 370.104660][ T31] Call Trace: [ 370.107945][ T31] [ 370.111146][ T31] __schedule+0x1798/0x4cc0 [ 370.115678][ T31] ? validate_chain+0x897/0x2140 [ 370.120751][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.125638][ T31] ? __pfx___schedule+0x10/0x10 [ 370.130517][ T31] ? schedule+0x91/0x360 [ 370.135014][ T31] schedule+0x165/0x360 [ 370.139203][ T31] schedule_timeout+0x9a/0x270 [ 370.144533][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 370.149948][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.155412][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.160690][ T31] ? wait_for_completion+0x267/0x5d0 [ 370.166014][ T31] wait_for_completion+0x2bf/0x5d0 [ 370.171402][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 370.177056][ T31] ? __flush_work+0xd2/0xbc0 [ 370.181698][ T31] ? __flush_work+0xd2/0xbc0 [ 370.186299][ T31] __flush_work+0x9b9/0xbc0 [ 370.190888][ T31] ? __flush_work+0xd2/0xbc0 [ 370.195512][ T31] ? __pfx___flush_work+0x10/0x10 [ 370.200546][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 370.206135][ T31] ? __pfx___cancel_work+0x10/0x10 [ 370.211296][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 370.216979][ T31] __cancel_work_sync+0xbe/0x110 [ 370.221971][ T31] rfkill_unregister+0x92/0x220 [ 370.226835][ T31] nfc_unregister_device+0x96/0x2a0 [ 370.232314][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 370.238060][ T31] virtual_ncidev_close+0x56/0x90 [ 370.243300][ T31] __fput+0x44c/0xa70 [ 370.247317][ T31] task_work_run+0x1d4/0x260 [ 370.251965][ T31] ? __pfx_task_work_run+0x10/0x10 [ 370.257093][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 370.262874][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 370.268433][ T31] do_syscall_64+0x2bd/0xfa0 [ 370.273083][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.278292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.284392][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.289077][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.295242][ T31] RIP: 0033:0x7ffb8eb8f6c9 [ 370.299659][ T31] RSP: 002b:00007ffd7c604c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 370.308194][ T31] RAX: 0000000000000000 RBX: 0000000000033477 RCX: 00007ffb8eb8f6c9 [ 370.316252][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 370.324484][ T31] RBP: 00007ffb8ede7da0 R08: 0000000000000001 R09: 0000001c7c604f5f [ 370.332492][ T31] R10: 0000001b2ff20000 R11: 0000000000000246 R12: 00007ffb8ede5fac [ 370.340459][ T31] R13: 00007ffb8ede5fa0 R14: ffffffffffffffff R15: 00007ffd7c604d80 [ 370.348496][ T31] [ 370.351887][ T31] INFO: task syz.1.1348:10705 blocked for more than 144 seconds. [ 370.359618][ T31] Not tainted syzkaller #0 [ 370.368668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.377467][ T31] task:syz.1.1348 state:D stack:25160 pid:10705 tgid:10704 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 370.389794][ T31] Call Trace: [ 370.393117][ T31] [ 370.396050][ T31] __schedule+0x1798/0x4cc0 [ 370.400568][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.405474][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.410328][ T31] ? __pfx___schedule+0x10/0x10 [ 370.415437][ T31] ? schedule+0x91/0x360 [ 370.419692][ T31] schedule+0x165/0x360 [ 370.423905][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.429376][ T31] __mutex_lock+0x7e6/0x1350 [ 370.434044][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.438837][ T31] ? rfkill_register+0x37/0x8e0 [ 370.443937][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.448976][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 370.454396][ T31] ? device_initialize+0x24b/0x440 [ 370.459512][ T31] rfkill_register+0x37/0x8e0 [ 370.464391][ T31] nfc_register_device+0x14a/0x320 [ 370.469508][ T31] nci_register_device+0x87f/0x9d0 [ 370.474942][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 370.480668][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 370.485999][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 370.491414][ T31] virtual_ncidev_open+0x129/0x1a0 [ 370.496531][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 370.502413][ T31] misc_open+0x2d5/0x350 [ 370.506746][ T31] chrdev_open+0x4cc/0x5e0 [ 370.511182][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.516172][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 370.522570][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.527506][ T31] do_dentry_open+0x953/0x13f0 [ 370.532523][ T31] vfs_open+0x3b/0x340 [ 370.536597][ T31] ? path_openat+0x2ecd/0x3830 [ 370.541484][ T31] path_openat+0x2ee5/0x3830 [ 370.546123][ T31] ? __pfx_path_openat+0x10/0x10 [ 370.551133][ T31] do_filp_open+0x1fa/0x410 [ 370.555672][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.560520][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 370.565829][ T31] ? _raw_spin_unlock+0x28/0x50 [ 370.570935][ T31] ? alloc_fd+0x64c/0x6c0 [ 370.575314][ T31] do_sys_openat2+0x121/0x1c0 [ 370.579997][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.585236][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.590002][ T31] __x64_sys_openat+0x138/0x170 [ 370.595164][ T31] do_syscall_64+0xfa/0xfa0 [ 370.599681][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.604952][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.611077][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.615767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.621901][ T31] RIP: 0033:0x7f8259b8f6c9 [ 370.626331][ T31] RSP: 002b:00007f825aa4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.634787][ T31] RAX: ffffffffffffffda RBX: 00007f8259de5fa0 RCX: 00007f8259b8f6c9 [ 370.642802][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 370.651123][ T31] RBP: 00007f8259c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.659108][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.667105][ T31] R13: 00007f8259de6038 R14: 00007f8259de5fa0 R15: 00007ffc4dab9c78 [ 370.675127][ T31] [ 370.678159][ T31] INFO: task syz.3.1349:10712 blocked for more than 144 seconds. [ 370.686225][ T31] Not tainted syzkaller #0 [ 370.691198][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.699877][ T31] task:syz.3.1349 state:D stack:26888 pid:10712 tgid:10711 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 370.712196][ T31] Call Trace: [ 370.715496][ T31] [ 370.718429][ T31] __schedule+0x1798/0x4cc0 [ 370.723016][ T31] ? security_file_open+0xb1/0x270 [ 370.728165][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.733119][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.737990][ T31] ? __pfx___schedule+0x10/0x10 [ 370.743178][ T31] ? schedule+0x91/0x360 [ 370.747436][ T31] schedule+0x165/0x360 [ 370.751628][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.757095][ T31] __mutex_lock+0x7e6/0x1350 [ 370.761715][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.766487][ T31] ? misc_open+0x51/0x350 [ 370.771082][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.776128][ T31] misc_open+0x51/0x350 [ 370.780285][ T31] chrdev_open+0x4cc/0x5e0 [ 370.784814][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.789780][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 370.796297][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.801470][ T31] do_dentry_open+0x953/0x13f0 [ 370.806272][ T31] vfs_open+0x3b/0x340 [ 370.810336][ T31] ? path_openat+0x2ecd/0x3830 [ 370.815157][ T31] path_openat+0x2ee5/0x3830 [ 370.819790][ T31] ? __pfx_path_openat+0x10/0x10 [ 370.824806][ T31] do_filp_open+0x1fa/0x410 [ 370.829314][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.834466][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 370.839518][ T31] ? _raw_spin_unlock+0x28/0x50 [ 370.844418][ T31] ? alloc_fd+0x64c/0x6c0 [ 370.848771][ T31] do_sys_openat2+0x121/0x1c0 [ 370.853474][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.858677][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.863865][ T31] __x64_sys_openat+0x138/0x170 [ 370.868757][ T31] do_syscall_64+0xfa/0xfa0 [ 370.873370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.878605][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.884708][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.889386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.895524][ T31] RIP: 0033:0x7fd9f7d8f6c9 [ 370.899936][ T31] RSP: 002b:00007fd9f8c26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.908548][ T31] RAX: ffffffffffffffda RBX: 00007fd9f7fe5fa0 RCX: 00007fd9f7d8f6c9 [ 370.916562][ T31] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 370.924786][ T31] RBP: 00007fd9f7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.932819][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.944878][ T31] R13: 00007fd9f7fe6038 R14: 00007fd9f7fe5fa0 R15: 00007fffbf593518 [ 370.953224][ T31] [ 370.956258][ T31] INFO: task syz.0.1350:10714 blocked for more than 144 seconds. [ 370.964032][ T31] Not tainted syzkaller #0 [ 370.968966][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.977666][ T31] task:syz.0.1350 state:D stack:26632 pid:10714 tgid:10713 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 370.989859][ T31] Call Trace: [ 370.993205][ T31] [ 370.996161][ T31] __schedule+0x1798/0x4cc0 [ 371.000759][ T31] ? security_file_open+0xb1/0x270 [ 371.005900][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.011164][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.016025][ T31] ? __pfx___schedule+0x10/0x10 [ 371.021022][ T31] ? schedule+0x91/0x360 [ 371.025301][ T31] schedule+0x165/0x360 [ 371.029485][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.035000][ T31] __mutex_lock+0x7e6/0x1350 [ 371.039610][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.044631][ T31] ? misc_open+0x51/0x350 [ 371.048967][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.054069][ T31] misc_open+0x51/0x350 [ 371.058238][ T31] chrdev_open+0x4cc/0x5e0 [ 371.062686][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.067627][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.074222][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.079164][ T31] do_dentry_open+0x953/0x13f0 [ 371.084001][ T31] vfs_open+0x3b/0x340 [ 371.088073][ T31] ? path_openat+0x2ecd/0x3830 [ 371.092880][ T31] path_openat+0x2ee5/0x3830 [ 371.097501][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.102851][ T31] do_filp_open+0x1fa/0x410 [ 371.107362][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.112272][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.117321][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.122421][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.126799][ T31] do_sys_openat2+0x121/0x1c0 [ 371.131751][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.137022][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.142138][ T31] __x64_sys_openat+0x138/0x170 [ 371.147015][ T31] do_syscall_64+0xfa/0xfa0 [ 371.151556][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.156783][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.163027][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.167735][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.173906][ T31] RIP: 0033:0x7f792a78f6c9 [ 371.178335][ T31] RSP: 002b:00007f792b590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.187012][ T31] RAX: ffffffffffffffda RBX: 00007f792a9e5fa0 RCX: 00007f792a78f6c9 [ 371.195057][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 371.203273][ T31] RBP: 00007f792a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.211323][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.219307][ T31] R13: 00007f792a9e6038 R14: 00007f792a9e5fa0 R15: 00007ffc4f589518 [ 371.227377][ T31] [ 371.230428][ T31] INFO: task syz.4.1365:10763 blocked for more than 145 seconds. [ 371.238980][ T31] Not tainted syzkaller #0 [ 371.244062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.252964][ T31] task:syz.4.1365 state:D stack:26248 pid:10763 tgid:10762 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 371.265170][ T31] Call Trace: [ 371.268472][ T31] [ 371.271586][ T31] __schedule+0x1798/0x4cc0 [ 371.276131][ T31] ? security_file_open+0xb1/0x270 [ 371.281342][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.286230][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.291322][ T31] ? __pfx___schedule+0x10/0x10 [ 371.296195][ T31] ? schedule+0x91/0x360 [ 371.300446][ T31] schedule+0x165/0x360 [ 371.304640][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.310107][ T31] __mutex_lock+0x7e6/0x1350 [ 371.314747][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.319525][ T31] ? misc_open+0x51/0x350 [ 371.324108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.329197][ T31] misc_open+0x51/0x350 [ 371.333393][ T31] chrdev_open+0x4cc/0x5e0 [ 371.337814][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.342877][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.349237][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.354430][ T31] do_dentry_open+0x953/0x13f0 [ 371.359221][ T31] vfs_open+0x3b/0x340 [ 371.363313][ T31] ? path_openat+0x2ecd/0x3830 [ 371.368085][ T31] path_openat+0x2ee5/0x3830 [ 371.372747][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.377706][ T31] do_filp_open+0x1fa/0x410 [ 371.382512][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.387396][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.392525][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.397399][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.401776][ T31] do_sys_openat2+0x121/0x1c0 [ 371.406459][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.411908][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.416679][ T31] __x64_sys_openat+0x138/0x170 [ 371.421628][ T31] do_syscall_64+0xfa/0xfa0 [ 371.426176][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.431455][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.437537][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.442464][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.448362][ T31] RIP: 0033:0x7f679b38f6c9 [ 371.452814][ T31] RSP: 002b:00007f679c26a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.461271][ T31] RAX: ffffffffffffffda RBX: 00007f679b5e5fa0 RCX: 00007f679b38f6c9 [ 371.469259][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 371.477472][ T31] RBP: 00007f679b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.485472][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.493484][ T31] R13: 00007f679b5e6038 R14: 00007f679b5e5fa0 R15: 00007ffebb43c608 [ 371.501950][ T31] [ 371.505022][ T31] INFO: task syz-executor:10767 blocked for more than 145 seconds. [ 371.512958][ T31] Not tainted syzkaller #0 [ 371.517887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.526573][ T31] task:syz-executor state:D stack:27736 pid:10767 tgid:10767 ppid:1 task_flags:0x400040 flags:0x00080000 [ 371.538741][ T31] Call Trace: [ 371.542054][ T31] [ 371.545213][ T31] __schedule+0x1798/0x4cc0 [ 371.549741][ T31] ? security_file_open+0xb1/0x270 [ 371.554916][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.559779][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.564856][ T31] ? __pfx___schedule+0x10/0x10 [ 371.569722][ T31] ? schedule+0x91/0x360 [ 371.574059][ T31] schedule+0x165/0x360 [ 371.578265][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.583907][ T31] __mutex_lock+0x7e6/0x1350 [ 371.588544][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.593559][ T31] ? misc_open+0x51/0x350 [ 371.597891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.602954][ T31] misc_open+0x51/0x350 [ 371.607116][ T31] chrdev_open+0x4cc/0x5e0 [ 371.611567][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.616506][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.623099][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.628035][ T31] do_dentry_open+0x953/0x13f0 [ 371.632847][ T31] vfs_open+0x3b/0x340 [ 371.636911][ T31] ? path_openat+0x2ecd/0x3830 [ 371.641972][ T31] path_openat+0x2ee5/0x3830 [ 371.646586][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 371.652317][ T31] ? count_memcg_event_mm+0x21/0x260 [ 371.657640][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.662863][ T31] ? __pfx___up_read+0x10/0x10 [ 371.667642][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 371.672985][ T31] do_filp_open+0x1fa/0x410 [ 371.677488][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.682581][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.687626][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.692559][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.696936][ T31] do_sys_openat2+0x121/0x1c0 [ 371.701678][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.706879][ T31] ? fd_install+0x97/0x540 [ 371.711537][ T31] ? fd_install+0x30d/0x540 [ 371.716099][ T31] __x64_sys_openat+0x138/0x170 [ 371.721021][ T31] do_syscall_64+0xfa/0xfa0 [ 371.725552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.730832][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.736917][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.741854][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.747747][ T31] RIP: 0033:0x7f8a9498de91 [ 371.752191][ T31] RSP: 002b:00007ffd0c02e560 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 371.760605][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8a9498de91 [ 371.768639][ T31] RDX: 0000000000000002 RSI: 00007f8a94a129b7 RDI: 00000000ffffff9c [ 371.776854][ T31] RBP: 00007f8a94a129b7 R08: 0000000000000000 R09: 00007f8a9571d6c0 [ 371.784869][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 371.792899][ T31] R13: 0000000000000003 R14: 00007ffd0c02e938 R15: 0000000000000000 [ 371.801226][ T31] [ 371.804305][ T31] [ 371.804305][ T31] Showing all locks held in the system: [ 371.812251][ T31] 1 lock held by khungtaskd/31: [ 371.817111][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 371.827102][ T31] 2 locks held by getty/5589: [ 371.832006][ T31] #0: ffff8880334e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 371.841804][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 371.851989][ T31] 4 locks held by kworker/0:12/9731: [ 371.857290][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 371.868544][ T31] #1: ffffc90003877ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 371.880966][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 371.891260][ T31] #3: ffff88802f9bd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 371.900994][ T31] 3 locks held by kworker/0:13/9732: [ 371.906287][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 371.917310][ T31] #1: ffffc900037e7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 371.931258][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 371.942673][ T31] 1 lock held by syz.2.1299/10514: [ 371.947780][ T31] #0: ffff88802f9bd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 371.957573][ T31] 3 locks held by syz.1.1348/10705: [ 371.963003][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 371.971532][ T31] #1: ffff88806b24c100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 371.981261][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 371.991588][ T31] 1 lock held by syz.3.1349/10712: [ 371.996701][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.005198][ T31] 1 lock held by syz.0.1350/10714: [ 372.010305][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.018791][ T31] 1 lock held by syz.4.1365/10763: [ 372.024139][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.032645][ T31] 1 lock held by syz-executor/10767: [ 372.037921][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.046422][ T31] 1 lock held by syz-executor/10771: [ 372.052038][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.060500][ T31] 1 lock held by syz-executor/10772: [ 372.065835][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.074377][ T31] 1 lock held by syz-executor/10773: [ 372.079688][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.088396][ T31] 1 lock held by syz-executor/10775: [ 372.093722][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.102206][ T31] 1 lock held by syz-executor/10777: [ 372.107485][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.116195][ T31] 1 lock held by syz-executor/10781: [ 372.121523][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.129992][ T31] 1 lock held by syz-executor/10782: [ 372.135345][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.144141][ T31] 1 lock held by syz-executor/10783: [ 372.149428][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.157949][ T31] 1 lock held by syz-executor/10785: [ 372.163272][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.171964][ T31] 1 lock held by syz-executor/10787: [ 372.177240][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.185739][ T31] 1 lock held by syz-executor/10791: [ 372.191095][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.199605][ T31] 1 lock held by syz-executor/10792: [ 372.205140][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.213631][ T31] 1 lock held by syz-executor/10793: [ 372.218903][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.227425][ T31] 1 lock held by syz-executor/10795: [ 372.233042][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 372.241566][ T31] [ 372.243906][ T31] ============================================= [ 372.243906][ T31] [ 372.252375][ T31] NMI backtrace for cpu 0 [ 372.252392][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.252408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.252417][ T31] Call Trace: [ 372.252424][ T31] [ 372.252431][ T31] dump_stack_lvl+0x189/0x250 [ 372.252456][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.252477][ T31] ? __pfx__printk+0x10/0x10 [ 372.252501][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 372.252520][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 372.252539][ T31] ? __pfx__printk+0x10/0x10 [ 372.252556][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.252583][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 372.252602][ T31] watchdog+0xf60/0xfa0 [ 372.252620][ T31] ? watchdog+0x1e2/0xfa0 [ 372.252639][ T31] kthread+0x711/0x8a0 [ 372.252661][ T31] ? __pfx_watchdog+0x10/0x10 [ 372.252675][ T31] ? __pfx_kthread+0x10/0x10 [ 372.252695][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.252714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.252733][ T31] ? __pfx_kthread+0x10/0x10 [ 372.252753][ T31] ret_from_fork+0x4bc/0x870 [ 372.252770][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 372.252790][ T31] ? __switch_to_asm+0x39/0x70 [ 372.252802][ T31] ? __switch_to_asm+0x33/0x70 [ 372.252813][ T31] ? __pfx_kthread+0x10/0x10 [ 372.252833][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.252857][ T31] [ 372.252862][ T31] Sending NMI from CPU 0 to CPUs 1: [ 372.398945][ C1] NMI backtrace for cpu 1 [ 372.398974][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 372.398994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.399005][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 372.399034][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 372.399050][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 372.399065][ C1] RAX: d1db98a7df399400 RBX: ffffffff81967b47 RCX: d1db98a7df399400 [ 372.399079][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 372.399091][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 372.399120][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce870 [ 372.399133][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 372.399144][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 372.399158][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.399170][ C1] CR2: 00007ffc081a72b8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 372.399185][ C1] Call Trace: [ 372.399191][ C1] [ 372.399198][ C1] default_idle+0x13/0x20 [ 372.399214][ C1] default_idle_call+0x73/0xb0 [ 372.399233][ C1] do_idle+0x1e7/0x510 [ 372.399252][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 372.399271][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.399296][ C1] ? __pfx_do_idle+0x10/0x10 [ 372.399320][ C1] ? do_idle+0x4ed/0x510 [ 372.399339][ C1] cpu_startup_entry+0x44/0x60 [ 372.399357][ C1] start_secondary+0x101/0x110 [ 372.399372][ C1] common_startup_64+0x13e/0x147 [ 372.399404][ C1] [ 378.544719][ T1302] ieee802154 phy0 wpan0: encryption failed: -22