last executing test programs: 22.223208461s ago: executing program 0 (id=1703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000001580)=@can={0x1d, r7, 0xc7}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000003c0)='J', 0x1}, {0x0}], 0x2}}], 0x1, 0x41d4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 21.268234396s ago: executing program 0 (id=1712): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x2, 0x80, 0x3, 0x80, 0x886, 0xffff}, @eth={@random="17cc93bc3dd6", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@mpls_uc={0x8847, {[{0x8000, 0x0, 0x1}, {0x3e71, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}], @ipv6=@udp={0x8, 0x6, "05c9b1", 0xde, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x6, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x2}]}], {0x4e24, 0x4e21, 0xc6, 0x0, @gue={{0x1, 0x0, 0x2, 0xfd, 0x0, @void}, "9b4c3eff037acbd77f4d49d13a00926bc3557dae9f1047a5e7b1f94bdc47e2facdf70ff2f057f31fff7febe891a57d10cd3e030798e9573c193fe530c8773e69c2086dce72c47be31ae0f62dd9a075dd312f818bf4da5e55f822f16f9afbceea70c6fa51414c5bef4cbc6f6c6cf72441e7e0400ef6bf67dea98921c5fb80ca2649a3cd2efc10f066f5a45b68bcfa75b313bba5dbe734396eae2dddbe9907047af0c8b0e46e59028f0fb418f4fb72484906a5bd70a8b2579459b3"}}}}}}}}}, 0x12e) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 21.178523302s ago: executing program 4 (id=1716): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0x29, 0x2, 0xffffff7d) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0900020073797a3200000000340000000c0a010100000000000000000a0000060900020073797a300000000008000440000000000900010073797a3100000000140000001100010000000000000000000100000a6b3d789b0d9651af64615f0f18625b1e86dd0731ef1026d71dbeaa0ea779f0fa5807760ec715f8601678471aaceaefdc587fe5cc6c74a30da8d5eeed662153428863db051eedd66dbd85cf0dd4a0d4a2723891b0f53528e61e4ecf57313cbb6c24877e9b56e16921ed8a7e84c8719cc527761cd5649a7f2a1a9f67e85ab0e40a07c0e6e9c544997929"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f0000000d40)}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r2, @ANYRESDEC], 0x23c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c2300002e00090027bd700000000000040000000400190004001e00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 20.859279006s ago: executing program 0 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r3, @ANYBLOB="000099003c0000000000e5ff0000000000000000"], 0x24}}, 0x8000) 20.77929585s ago: executing program 0 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf2501000000080001000b8c511e11ebaee07f2a26a58ed925efea7b377128ad20b0d69ce8914350d349be4b0e2483ace9d0d27f51d68fc3d3f31ecc00b6805bbde94adb5f2c97229e40c56ae2d39eeb3f879e28a09e2d6210856fdc4c01d29c6e79969f83d1c7b03afd804ebc867b72cbaedcdc8f1dcc4db32e50809ed414a0769f1926cb4c553d540b9389d429015dd5313ea5c85699045d18e1eb05f9fb48d1881137390950bbee550551a1495666", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0}], 0x2}}], 0x1, 0x4000005) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x2, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.156734278s ago: executing program 4 (id=1724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x22, 0x7fff, @vifc_lcl_addr=@remote, @rand_addr=0x64010102}, 0x10) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r6, @ANYBLOB="46000400000000002400128009000100626f6e640000000014000280050001d1d5b60aeabef26a8bd9183eb8000400"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r6, @ANYBLOB="00000000a7a741f79143ab788c2959af477304111c0bc1507e566957fc0a1e4183db4ee19b5e440a649c88716d2c24caf1af7217ea8f860ba8a080ad98ce1197ab9c297a87169d87c63c6cc6ee96072827b8c93456199c194363d855debdb51fc78c9f0bdd8c41d58f3a47a730992ee2a2f8f57663568e82319f81871500b56192a944e8889b1fd2cc6fab6ad68b05ef02cca6"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x22, 0x7fff, @vifc_lcl_addr=@remote, @rand_addr=0x64010102}, 0x10) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r6, @ANYBLOB="46000400000000002400128009000100626f6e640000000014000280050001d1d5b60aeabef26a8bd9183eb8000400"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r6, @ANYBLOB="00000000a7a741f79143ab788c2959af477304111c0bc1507e566957fc0a1e4183db4ee19b5e440a649c88716d2c24caf1af7217ea8f860ba8a080ad98ce1197ab9c297a87169d87c63c6cc6ee96072827b8c93456199c194363d855debdb51fc78c9f0bdd8c41d58f3a47a730992ee2a2f8f57663568e82319f81871500b56192a944e8889b1fd2cc6fab6ad68b05ef02cca6"], 0x30}}, 0x0) (async) 20.052438653s ago: executing program 2 (id=1725): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r2, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffffd}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x240, 0xa, 0x148, 0x0, 0x10, 0x498, 0x2a8, 0x2a8, 0x498, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1, 0x0, 0x0, 'wg0\x00', 'rose0\x00'}, 0x0, 0x220, 0x240, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x400, 0x0, 0x44, 0x81, 0x4, 0xff, 0xfffffaf9, 0x2, 0x20, 0x8}, {0x9}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x67}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x3ff}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x8000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x590) 19.831203772s ago: executing program 2 (id=1726): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="b40000000000000079104800000000001500000000000000950000000000000064a4713c632dee78dcdedc2dd03a79b25e129cf901332998131817427671b18e5a21536b8067c9b908d8d923e45efeab0ed09e42a8f0698163fcf16ed614f7b6d78bdf23ceb6026ff46bba78ad988171b6750d64c99ec5668fd520eaa9acbf8f796935a87d33c41257380de521185cda62b36ced8a65b7b3afc9e59f730953dacc2da2cc2233d91576ed3dc9b36a7f951fe75d3dec0d3da4544cc7d823569ecdf7cb152990c9b6b08d8e913ca0f56dbf66f446c2108f01c845baa1954d9586791f2d42d4c8ff12d0652991"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="b40000000000000079104800000000001500000000000000950000000000000064a4713c632dee78dcdedc2dd03a79b25e129cf901332998131817427671b18e5a21536b8067c9b908d8d923e45efeab0ed09e42a8f0698163fcf16ed614f7b6d78bdf23ceb6026ff46bba78ad988171b6750d64c99ec5668fd520eaa9acbf8f796935a87d33c41257380de521185cda62b36ced8a65b7b3afc9e59f730953dacc2da2cc2233d91576ed3dc9b36a7f951fe75d3dec0d3da4544cc7d823569ecdf7cb152990c9b6b08d8e913ca0f56dbf66f446c2108f01c845baa1954d9586791f2d42d4c8ff12d0652991"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="271b050001000000200012800900010069706970000000001000028004001300"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0xc0) (async) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0xc0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100010000000000000008001900ffffffff080002000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100010000000000000008001900ffffffff080002000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r9, &(0x7f0000000080)="660eae049665e1999c326cb483311afcb7025f0862ce72bca95433b16e989e38f4d24352ea3b99467642b1b3e5650865", 0x30, 0x4004081, 0x0, 0x0) (async) sendto$inet(r9, &(0x7f0000000080)="660eae049665e1999c326cb483311afcb7025f0862ce72bca95433b16e989e38f4d24352ea3b99467642b1b3e5650865", 0x30, 0x4004081, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x6, "fc5cad8c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) socket$inet(0x2, 0x800, 0xc) 19.815180875s ago: executing program 4 (id=1727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000370429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b010000000000002c0012800b0001006d616373656300001c000280050003000d"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f0000000080), 0x4) (async) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b5181", 0x2a}], 0x1}, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r11, &(0x7f00000002c0), 0x2c5) (async) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000340)) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (rerun: 64) 19.466513187s ago: executing program 2 (id=1729): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818510000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, 0x0, &(0x7f0000000040)) (async) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6e00000000103afffe8000000000000000000000000000aa00000000c6"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcd78}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x283, 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100000082abd70003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8864760000140002800d0001004241544d41dc6036cd911dcf0e564e5f4956000000000000002fba2a2bcc03f7142458bdbbbe138ffd000000000000000000000000f3c03b0f073911efad3f4d131cd37afdb4dba3dc36831d1e0804eca08842d69a3aba8500c2571da2e570a12a9a9ff6"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x20000890}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) 19.465773935s ago: executing program 0 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x7d, 0x4, 0x0, @empty, @private=0xa010102}}}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bind$inet(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x1b0, 0x6c8, 0x498, 0x290, 0x498, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r9, 0x4, r6}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 19.46188804s ago: executing program 4 (id=1731): unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x804) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000dd250000000900000000000000"], 0x48) (async) unshare(0x600) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x3) (async) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a68", 0x999}], 0x1}}], 0x1, 0x40) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async) syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000340)=0x1) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="df3b46a1330000000000000000000000000000f1bfb4aa068fc60c48ae2cd8ab1fcc903b7ebd3bf583aaa8d7c8db6df62ecfbbbf9d88e22299fc6bf8966fde2978d207040000001fc672f220fb612483c7392064f03ec88c0d80463164cc66bad573b1862f7e9dd8c88d2a5ad193407968b7cc9beb08c875", 0x78}], 0x1}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES8=r5], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000d53529b5cc6906f8000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 19.203714146s ago: executing program 2 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0x3, "91abc12404cf378042"}]}, @NFT_MSG_DELTABLE={0xcc, 0x2, 0xa, 0x9, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xb8, 0x6, "4dd4be383f7e665d1807a57a7172e65333dae59d7fd9d167141de2a7d4a2863bb03f26422f421b29251bcd80caf928ae11340094be504e9f97d2ca0d89ad090e73fda9d7a9cab0a5d44f422a3174721710182a6825ef05436e218e318a3166cae2f0e97118448b87b69f112ca326dffcd31b601cbd6f7086d7d12f46bf59bf834a782493b4d68884ddcf7f0bd6d7008fe0ba3e0a1bdd9a6728c82ccff024806f4aa93b070b91425b64eeeaaebb99ccea3795d58f"}]}], {0x14}}, 0x144}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) 19.001023415s ago: executing program 2 (id=1736): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1ff, @local, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) recvfrom(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @private1, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x3, 0x0, 0x0, 0xf7}, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x15, 0x4, 0x20, 0x80, 0x81, 0xa, 0x3, 0x2, 0x2d, 0xa1, 0xa, 0x10, 0x84}, 0xe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b00200001600010000000000000000000000000000000000000000000074f3b151444a3a67d6000000fc0200000000000000000000000000004e200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000001000000000000000bf5a416000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100030300000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 18.44493865s ago: executing program 4 (id=1739): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80aceb0fe4", 0x5}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e010680", @ANYBLOB="1a48ba83"], 0x184}, 0x1, 0x0, 0x0, 0x200408c4}, 0x20000800) 18.244972286s ago: executing program 4 (id=1740): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) write$rfkill(r5, &(0x7f0000000280)={0x5, 0x3, 0x1}, 0x8) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x400c040) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000002d80)=ANY=[@ANYBLOB="aaaaaaaaaabb760047744c02000c01000000039200006e491958745984"], &(0x7f0000002e80)={0x1, 0x4, [0xf70, 0x4bd, 0xda3, 0x69f]}) sendmmsg$sock(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000016c0)="c6bf27d33179ac953afc898733636d8dd39009dfed145c383d60a9993160f16b9a758dddcf82a91fac58f71d88e6a1887439884933d00a534288ecf0542e7d961b38baab6ec5a647a89e", 0x4a}, {&(0x7f0000001940)}, {&(0x7f0000001a00)="22531f31b3d41a23bb7dfe3674f2969aa1ac762680f5dce5e9dc77fabedea468b5b71d217bf78c536bdff8ee3a1aacf3b449542c64d0beea5a36a253d0de08d82cdc67ef218557962bcec63c24718233b8cbf80cb37f0b98f0aec4eaec3fd21c4aef29b8696dec4c453b73818eb8790a05d1ae527f861d68e24ed62a47462fe444a7de1d7b", 0x85}], 0x3, &(0x7f0000001b40)=[@mark={{0x14, 0x1, 0x24, 0x499}}, @timestamping={{0x14, 0x1, 0x25, 0x74}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {0x0}], 0x2, &(0x7f0000002cc0)=[@mark={{0x14, 0x1, 0x24, 0xb181}}], 0x18}}, {{&(0x7f00000002c0)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)="f504bbf6c5b7e287d3e15b20f3dc74bb9ee3afbc87ba9195046abc81f016cbe777e870ed4b4ff186a6cf395935ccdd7aab83a76fc028e8f76e1da5cf24b441a455e0eb18c3a654c9057dbf091e288bb8b52677013583d9393b4addc87dc3734dea95193569c5f2ced08dfb01448e6d822f7fdf704b8811e704266fd6363d37bec138a24742d19e6f5a991b262b162835d4ae34ac0611b970b1be4940bc8cc246e38c72361dea215e763b229be7cab3d5bceadc65beb3bb2821b2", 0xba}, {0x0}, {&(0x7f0000002ec0)="d588056aabe6267b7a987754846e3189ac5520049f66ed286f07e099be0db8d70bc5017ec733629ffb94718d7993139266294a9f1503546ca949a6890a609b59517ae8b8e45478d732c2d47b3580c1afd5fa555e34561563ac912a71b8b4adc0ac199618ec887c0d1f8aecca85a03f75c3f0c8e799c10473e79a1308561b79db532aeef67ac381b2537f1dbb08a67af7966b074ec1caa9a294d075396696f9a3d18d7c9b233a78f3f93e49cd7fe9012c08558a9052b97dbf55e3f9b7f7f8675bcbe396a578d059945294d332525052274aecfd4f1db63f215cb5578e8335da56f7e588cc0750942ec8d7c048f619c5cf5534fd697f2eee61b7a0a631", 0xfc}, {&(0x7f0000002fc0)="0b0a2db24b9ff299d7e1382e1b9ad8f328a244d549b3f156caa2a2ca1b38f8925ff484b46336", 0x26}, {&(0x7f0000003000)}, {&(0x7f0000000340)="de62a1fd5a716370cf2d21ce000000f791887cbece3cd41ee70b3000000000000000e7284b7bc79f73aa894f07a85d2f8b4e47ce572f8add3b31ebe2aff136daac5d1468c19b4bd35f25dc2743cec8fa1392eb4bdd88c731532d19f8fcf66618e3eedc43b1d98e487eed65c27b026f5dd4e5fcd63678dfa8656c1adfe17fa275f997268500e9683b2c3540ab9d7404c0a5c382612c708c31dfac4b306dcccd8a2317be54d72e3a7e1460057737b10ece7b981a22c1d1acb85f103d8a8ee65cebd6e68aedfc8295edd4b23706c73f32643b56947dd572fd93231c330f7ac262aa0ab622081531f2fbf531eb82f7f53d2a7b89f0", 0xf3}], 0x7, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x29}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f0000003200)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)="c9cde1436dcd4194a08ac61da6bdae59d1e44420597f1b311e5044b6a776ef3f359b7477f5c64e435adaa73a9668e12959beace408da959cf4deff7cca4133e806436fdbd5463f0326da6380997aa58677edaa44f69f98a6b8c58ef86d28ddfb14d9feb612648c1740b6e43542c71a4f6eea87d31ad0c2376aefda391d8b3f29e4e9c9a37b366b51b195221b08fd0fae61aa1cc39bfeb21d99368cd2c3ef07497f46da23c0946add61dc97e4b727bea298924afdafc53dcd68cd1a4f141b47cfb46d9d618b8c131083c68b9f1514161456250cb0b1be1dfa", 0xd8}], 0x1, &(0x7f00000033c0)=[@txtime={{0x18}}], 0x18}}], 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.139092818s ago: executing program 2 (id=1741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x806, @empty}, 0x1c) socket(0x1d, 0x1, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x40}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x40}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000020c0), 0x4) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000000)='-', 0x1}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000000)='-', 0x1}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x45}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10, 0x0) (async) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10, 0x0) connect$phonet_pipe(r4, &(0x7f0000000300)={0x23, 0x7, 0x6, 0x6}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) (async) listen(r5, 0x50) socket$inet6(0xa, 0x5, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000001c0)=0xfffff9b7, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000001c0)=0xfffff9b7, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r7, 0xb) listen(r6, 0x50) 17.612575216s ago: executing program 0 (id=1746): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x0, 0x3, 0x301, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) (async) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x44, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0x3) 16.487342597s ago: executing program 3 (id=1758): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408b0}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 16.484131535s ago: executing program 3 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x33, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x74, r8, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x81) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1554, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x4008804) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2ab}], 0x2}, 0x8400) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x1002, 0x1}, 0x4) (async) sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1e", 0x4}], 0x1}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl2\x00', r12, 0x4, 0x66, 0xab, 0x2, 0x1e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x7, 0x700, 0x2, 0x3}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)={0x1b8, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x405c800}, 0x440) 16.392522361s ago: executing program 3 (id=1761): sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$llc(r2, &(0x7f0000000540)={0x1a, 0x306, 0x9, 0x1, 0x6, 0x8, @random="35e8a372ad0e"}, 0x10) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x4c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 15.899078531s ago: executing program 1 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4003, r6}) sendmmsg$unix(r4, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40041}}], 0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5d010000", @ANYRES16=r1, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x2044}, 0x40000) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006001700800a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_sctp(0x2, 0x5, 0x84) 15.727368328s ago: executing program 1 (id=1768): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002080, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600"], 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x350}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x5c}}, 0x40001) 15.718039217s ago: executing program 1 (id=1769): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="04000000002000003c0012800b000100697036746e6c00002c0002801400030000000000000000000000ff"], 0x5c}}, 0x4000010) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, &(0x7f0000000340)=0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24060400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r6, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) splice(r3, 0x0, r5, 0x0, 0xf3c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r8 = gettid() close(0x4) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90066802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000b80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff988bd8f5387116ffd76d13b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9eb"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet(0x2, 0x4, 0x9) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private0, 0x714d598b}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000000c0)="10bcd4", 0x3}, {&(0x7f00000003c0)="0aa56e8ed404a182e0d080b7c53e1524d4936553945248078c044598ceffaa022d8064f5c8469271ca86c20d4e22688560be807a2116c9655cf7e69a40c819f3e363d0a13c18e16af14a1fcd831bf7c2917c7e6d2963345e614042b00095218e63e44881c199616dcb97e2ce58a963c7b7df6f42b5402805df171c8f4c9bef8eb2c43c7acf498ab3168ef4359c3139a74d50eeb7d91b42146cd0c009482d5c8e07e26bfd3037c89864fffd", 0xab}, {&(0x7f0000000540)="5208322661fa33ff9ef2f10259e4e767a2b7552c15cc4b8358ec1519fb981855d870ab3d4b30a9ce509ae8816bf342838ac72bd12138fcbe498ce982eb22926af800e5855010b05d51a3eb692fe23cac8d858322ab38f6d2a54d76ac639e58ecd660ca7921fc56d2e91fceb506a7e2a820ec099150541b68d272e559ebc84e8659de032b91a2adf203416e986653177b98b312dd7a2c31dc600ded0494da4013cfc8e824be671e6cc9683f0e4f315058ab", 0xb1}, {&(0x7f0000000100)="d5afaf9c33aeef", 0x7}, {&(0x7f0000000480)="167aa11def782e6fd23242977e3b68aa405feb720799127b3da904f7e4b5215df30f9ef61df7acabdb305a16765a9d1d347223e3dadaf3f750d7d8e186acfffdd9950f3ac78c9b1aee1e6c76f0abc63d292b5215178130343022ce3053c6ef88bcf92b50ef98a7435719754588f72050119200b0be87c50cd658497b", 0x7c}, {&(0x7f0000000600)="1dc7ce5dccf34c5b2ca98e3c3e67e454b4fbab36390331494e7026914cf8e169d7e60c14a7c9ba470b74391058697e709a1c8290c54722832d747c8768f896ffbc88b4857c2cae46a3763ebf54242dedd55e10ec27806f71d9f187247963d878e81dd44b3aa2dbec5d4294733711fec069e2e1bfda6e56b2936bc0efaa38c0c6146f", 0x82}, {&(0x7f00000006c0)="1ea95b6902f8a4c0b3347b0d7cc07cce9e536df7b665a30d1e4149b7cca9e44c3088143392070f61efca4f62250c028259ee98e9c4bd9a4b60962820382c35b45f59481d5b85353922c95d0092fa23721e100e5cb34f8c380ed27a1fe68df30af487c3e5755928ae4770563c24ab88dd152c12768de2cd8bd37c2cbc814a394d", 0x80}, {&(0x7f00000001c0)="9e28196cb64c273bca4b245d65af5e498b647126a03e64d285664eb46860652c7d4e0e19824f51c5513f88c369d4de87928ecd252572641689f0f5f23c0293", 0x3f}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000002900000034000000100000000000000028000000000000002900000036000000330100000000000001080000000000000000040103000000140034000000be8800"/88], 0x58}}], 0x1, 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000010) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 15.481167368s ago: executing program 1 (id=1770): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000300), 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 15.477094623s ago: executing program 3 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x80000000) (async) listen(r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async, rerun: 32) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) (async, rerun: 32) shutdown(r1, 0x1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012"], 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r4, 0x10}}, 0x20) 15.350826417s ago: executing program 3 (id=1772): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) 15.299285404s ago: executing program 1 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000400)=0x7b, 0x4) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0xccaa, 0x7fffffffffffffff}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0x1000fffe}], 0x1, 0x2, 0x0) (async) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) (async) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r9 = socket$inet(0x2, 0x2, 0x1) (async) r10 = socket(0x2, 0x2, 0x1) bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14584254d59ce5246bba0083254400004600070128bd70040000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000200)={0x40, 0x0, 0xa}, 0xc) 15.218419495s ago: executing program 3 (id=1774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r1, 0xfff) r2 = accept(r1, 0xfffffffffffffffd, &(0x7f0000000680)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xecac, 0x2, 0x10f9fdf0, 0x8, 0xfffffff0}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0xfc000000, 0x4f, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x78f7, 0x0, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x0, 0x2, 0x1, @empty, @private1, 0x700, 0x80, 0x0, 0xb87}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x190, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40048c0}, 0x44000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1c0000", 0x3, 0x0, 0x0, 0x0) close(0x3) 15.143500426s ago: executing program 1 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='bic', 0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.11306774s ago: executing program 32 (id=1741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x806, @empty}, 0x1c) socket(0x1d, 0x1, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x40}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x40}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000020c0), 0x4) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000000)='-', 0x1}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000000)='-', 0x1}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x45}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10, 0x0) (async) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10, 0x0) connect$phonet_pipe(r4, &(0x7f0000000300)={0x23, 0x7, 0x6, 0x6}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) (async) listen(r5, 0x50) socket$inet6(0xa, 0x5, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000001c0)=0xfffff9b7, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000001c0)=0xfffff9b7, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r7, 0xb) listen(r6, 0x50) 3.074923061s ago: executing program 33 (id=1740): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) write$rfkill(r5, &(0x7f0000000280)={0x5, 0x3, 0x1}, 0x8) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x400c040) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000002d80)=ANY=[@ANYBLOB="aaaaaaaaaabb760047744c02000c01000000039200006e491958745984"], &(0x7f0000002e80)={0x1, 0x4, [0xf70, 0x4bd, 0xda3, 0x69f]}) sendmmsg$sock(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000016c0)="c6bf27d33179ac953afc898733636d8dd39009dfed145c383d60a9993160f16b9a758dddcf82a91fac58f71d88e6a1887439884933d00a534288ecf0542e7d961b38baab6ec5a647a89e", 0x4a}, {&(0x7f0000001940)}, {&(0x7f0000001a00)="22531f31b3d41a23bb7dfe3674f2969aa1ac762680f5dce5e9dc77fabedea468b5b71d217bf78c536bdff8ee3a1aacf3b449542c64d0beea5a36a253d0de08d82cdc67ef218557962bcec63c24718233b8cbf80cb37f0b98f0aec4eaec3fd21c4aef29b8696dec4c453b73818eb8790a05d1ae527f861d68e24ed62a47462fe444a7de1d7b", 0x85}], 0x3, &(0x7f0000001b40)=[@mark={{0x14, 0x1, 0x24, 0x499}}, @timestamping={{0x14, 0x1, 0x25, 0x74}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {0x0}], 0x2, &(0x7f0000002cc0)=[@mark={{0x14, 0x1, 0x24, 0xb181}}], 0x18}}, {{&(0x7f00000002c0)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)="f504bbf6c5b7e287d3e15b20f3dc74bb9ee3afbc87ba9195046abc81f016cbe777e870ed4b4ff186a6cf395935ccdd7aab83a76fc028e8f76e1da5cf24b441a455e0eb18c3a654c9057dbf091e288bb8b52677013583d9393b4addc87dc3734dea95193569c5f2ced08dfb01448e6d822f7fdf704b8811e704266fd6363d37bec138a24742d19e6f5a991b262b162835d4ae34ac0611b970b1be4940bc8cc246e38c72361dea215e763b229be7cab3d5bceadc65beb3bb2821b2", 0xba}, {0x0}, {&(0x7f0000002ec0)="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", 0xfc}, {&(0x7f0000002fc0)="0b0a2db24b9ff299d7e1382e1b9ad8f328a244d549b3f156caa2a2ca1b38f8925ff484b46336", 0x26}, {&(0x7f0000003000)}, {&(0x7f0000000340)="de62a1fd5a716370cf2d21ce000000f791887cbece3cd41ee70b3000000000000000e7284b7bc79f73aa894f07a85d2f8b4e47ce572f8add3b31ebe2aff136daac5d1468c19b4bd35f25dc2743cec8fa1392eb4bdd88c731532d19f8fcf66618e3eedc43b1d98e487eed65c27b026f5dd4e5fcd63678dfa8656c1adfe17fa275f997268500e9683b2c3540ab9d7404c0a5c382612c708c31dfac4b306dcccd8a2317be54d72e3a7e1460057737b10ece7b981a22c1d1acb85f103d8a8ee65cebd6e68aedfc8295edd4b23706c73f32643b56947dd572fd93231c330f7ac262aa0ab622081531f2fbf531eb82f7f53d2a7b89f0", 0xf3}], 0x7, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x29}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f0000003200)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)="c9cde1436dcd4194a08ac61da6bdae59d1e44420597f1b311e5044b6a776ef3f359b7477f5c64e435adaa73a9668e12959beace408da959cf4deff7cca4133e806436fdbd5463f0326da6380997aa58677edaa44f69f98a6b8c58ef86d28ddfb14d9feb612648c1740b6e43542c71a4f6eea87d31ad0c2376aefda391d8b3f29e4e9c9a37b366b51b195221b08fd0fae61aa1cc39bfeb21d99368cd2c3ef07497f46da23c0946add61dc97e4b727bea298924afdafc53dcd68cd1a4f141b47cfb46d9d618b8c131083c68b9f1514161456250cb0b1be1dfa", 0xd8}], 0x1, &(0x7f00000033c0)=[@txtime={{0x18}}], 0x18}}], 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.05604046s ago: executing program 34 (id=1746): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x0, 0x3, 0x301, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) (async) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x44, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0x3) 31.30473ms ago: executing program 35 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='bic', 0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 36 (id=1774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r1, 0xfff) r2 = accept(r1, 0xfffffffffffffffd, &(0x7f0000000680)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xecac, 0x2, 0x10f9fdf0, 0x8, 0xfffffff0}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x8, 0xfc000000, 0x4f, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x78f7, 0x0, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x0, 0x2, 0x1, @empty, @private1, 0x700, 0x80, 0x0, 0xb87}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x190, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40048c0}, 0x44000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1c0000", 0x3, 0x0, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): 124.707455][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 124.740470][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.819375][ T7045] ip6gretap1: entered promiscuous mode [ 124.825276][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.827775][ T7045] ip6gretap1: entered allmulticast mode [ 125.224492][ T7063] syzkaller0: entered promiscuous mode [ 125.252279][ T7063] syzkaller0: entered allmulticast mode [ 125.380297][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.422920][ T7073] bond2: Unable to set down delay as MII monitoring is disabled [ 125.469904][ T7073] bond2 (unregistering): Released all slaves [ 125.554637][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 125.697386][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 125.796332][ T7101] netlink: 188 bytes leftover after parsing attributes in process `syz.3.258'. [ 125.907040][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.271052][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 126.341309][ T7127] bridge1: entered promiscuous mode [ 126.382871][ T7127] team0: Port device bridge1 added [ 126.565213][ T7139] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 126.585888][ T7140] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 126.730063][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 126.741171][ T7149] block nbd0: Unsupported socket: should be TCP or UNIX. [ 126.920266][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 126.980323][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.294148][ T7178] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 127.332884][ T7178] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 127.353561][ T7182] ipt_ECN: cannot use operation on non-tcp rule [ 127.410228][ T7178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.275'. [ 127.590649][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.788180][ T6182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.017150][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.801311][ T7242] trusted_key: syz.3.294 sent an empty control message without MSG_MORE. [ 128.886740][ T7238] tipc: Enabled bearer , priority 0 [ 128.915008][ T7238] syzkaller0: entered promiscuous mode [ 128.920817][ T7238] syzkaller0: entered allmulticast mode [ 128.943813][ T7238] tipc: Resetting bearer [ 129.074824][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.218922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.271361][ T7250] vlan2: entered promiscuous mode [ 129.275975][ T7254] netlink: 'syz.2.298': attribute type 16 has an invalid length. [ 129.283662][ T7250] vlan2: entered allmulticast mode [ 129.300173][ T7254] __nla_validate_parse: 5 callbacks suppressed [ 129.300191][ T7254] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.298'. [ 129.325463][ T7250] hsr_slave_1: entered allmulticast mode [ 129.350245][ T7238] tipc: Resetting bearer [ 129.367930][ T7238] tipc: Disabling bearer [ 129.383126][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 129.552595][ T7262] netlink: 68 bytes leftover after parsing attributes in process `syz.1.300'. [ 129.652080][ T7266] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 129.774325][ T7265] syzkaller0: entered promiscuous mode [ 129.838662][ T7265] syzkaller0: entered allmulticast mode [ 129.879495][ T2121] syzkaller0: tun_net_xmit 48 [ 130.058576][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 130.086678][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.306'. [ 130.095702][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.306'. [ 130.108178][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.128730][ T7286] netlink: 540 bytes leftover after parsing attributes in process `syz.3.306'. [ 130.390621][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.818124][ T6178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.140472][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.250632][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 131.534162][ T7298] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 131.545845][ T7298] bond1 (unregistering): Released all slaves [ 131.766184][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 131.926283][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 131.974642][ T7331] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.007133][ T7328] bond1: option packets_per_slave: invalid value (1048582) [ 132.014624][ T7328] bond1: option packets_per_slave: allowed values 0 - 65535 [ 132.039591][ T7328] bond1 (unregistering): Released all slaves [ 132.118430][ T7342] tipc: Enabled bearer , priority 0 [ 132.179101][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.210831][ T7344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.268234][ T7337] syzkaller0: entered promiscuous mode [ 132.273775][ T7337] syzkaller0: entered allmulticast mode [ 132.280534][ T7337] tipc: Resetting bearer [ 132.679936][ T1141] tipc: Resetting bearer [ 132.893993][ T7336] tipc: Resetting bearer [ 134.117149][ T7336] tipc: Disabling bearer [ 134.129805][ T7370] tipc: New replicast peer: 0.0.0.0 [ 134.136840][ T7370] tipc: Enabled bearer , priority 10 [ 134.149341][ T7371] ip6gretap0: entered promiscuous mode [ 134.156011][ T7371] erspan0: entered promiscuous mode [ 134.167693][ T5884] tipc: Node number set to 3057446353 [ 134.234895][ T7380] dummy0: entered promiscuous mode [ 134.248782][ T7380] macsec0: entered allmulticast mode [ 134.274105][ T7380] dummy0: entered allmulticast mode [ 134.327115][ T7380] dummy0: left allmulticast mode [ 134.343216][ T7380] dummy0: left promiscuous mode [ 134.450911][ T7383] syzkaller1: entered promiscuous mode [ 134.486955][ T7383] syzkaller1: entered allmulticast mode [ 134.500058][ T7388] x_tables: ip_tables: ah match: only valid for protocol 51 [ 134.648753][ T7399] __nla_validate_parse: 5 callbacks suppressed [ 134.648776][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 134.774219][ T7403] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 134.816806][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.337'. [ 134.863977][ T7403] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 134.982041][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 134.999414][ T7399] syz.2.335 (7399) used greatest stack depth: 17656 bytes left [ 135.050588][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.090457][ T7411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.147027][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 135.170152][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 135.206715][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 135.266262][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 135.297253][ T7423] netlink: 108 bytes leftover after parsing attributes in process `syz.2.343'. [ 135.315994][ T7414] netlink: 'syz.0.338': attribute type 6 has an invalid length. [ 135.352524][ T6178] tipc: Node number set to 2250675181 [ 135.361972][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 135.415293][ T7429] netlink: 'syz.4.344': attribute type 11 has an invalid length. [ 135.528886][ T7422] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 135.785918][ T7450] netlink: 'syz.4.347': attribute type 29 has an invalid length. [ 135.846893][ T7453] netlink: 'syz.1.349': attribute type 12 has an invalid length. [ 135.869345][ T7451] netlink: 'syz.4.347': attribute type 29 has an invalid length. [ 135.914146][ T7454] netlink: 'syz.4.347': attribute type 29 has an invalid length. [ 136.269110][ T7463] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 136.926071][ T7494] openvswitch: netlink: Multiple metadata blocks provided [ 136.942681][ T7494] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 137.565929][ T7518] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 137.952908][ T30] audit: type=1107 audit(1766123424.030:2): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='žë4é$FÉ÷0×jÉñ7  [ 137.952908][ T30] x=7Q2g–qƒ´ZS™Þ¡`{èsÊ£G¨ [ 137.952908][ T30] Ðø#ìÑ[³Q;9!ûÒ̈¹' [ 138.185562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.192904][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.201236][ T7551] tipc: Enabled bearer , priority 0 [ 138.412455][ T7560] syzkaller0: entered promiscuous mode [ 138.446685][ T7560] syzkaller0: entered allmulticast mode [ 138.530819][ T7551] tipc: Resetting bearer [ 138.567897][ T7551] tipc: Disabling bearer [ 138.876154][ T7574] raw_sendmsg: syz.2.376 forgot to set AF_INET. Fix it! [ 138.930353][ T7590] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 139.202184][ T7602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.286162][ T7610] team0: Port device geneve0 added [ 139.384076][ T7617] bridge_slave_0: left allmulticast mode [ 139.417791][ T7617] bridge_slave_0: left promiscuous mode [ 139.423947][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.863517][ T7617] bridge_slave_1: left allmulticast mode [ 139.899790][ T7617] bridge_slave_1: left promiscuous mode [ 139.908195][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.951289][ T7617] bond0: (slave bond_slave_0): Releasing backup interface [ 139.981169][ T7617] bond0: (slave bond_slave_1): Releasing backup interface [ 140.133263][ T7617] team0: Port device team_slave_0 removed [ 140.165000][ T7617] team0: Port device team_slave_1 removed [ 140.175812][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.183838][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028857800: rx timeout, send abort [ 140.196987][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.224179][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.249435][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.303765][ T7617] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.521582][ T7651] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20004 [ 140.684230][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028857800: abort rx timeout. Force session deactivation [ 140.795174][ T7662] validate_nla: 7 callbacks suppressed [ 140.795195][ T7662] netlink: 'syz.2.393': attribute type 8 has an invalid length. [ 141.042914][ T7666] veth7: entered promiscuous mode [ 141.097700][ T7689] ip6t_srh: unknown srh invflags 4000 [ 141.129933][ T7689] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 141.218980][ T7689] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.252387][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.267393][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.397518][ T7700] __nla_validate_parse: 18 callbacks suppressed [ 141.397537][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.402'. [ 141.714371][ T7716] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 141.795812][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.404'. [ 142.485603][ T7733] tipc: Enabled bearer , priority 0 [ 142.502352][ T7733] syzkaller0: entered promiscuous mode [ 142.515833][ T7733] syzkaller0: entered allmulticast mode [ 142.593190][ T7740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 142.693671][ T7740] tipc: Resetting bearer [ 142.760447][ T7744] x_tables: duplicate underflow at hook 1 [ 142.775571][ T7744] netlink: 'syz.4.410': attribute type 5 has an invalid length. [ 142.798171][ T7744] netlink: 'syz.4.410': attribute type 5 has an invalid length. [ 142.891102][ T7748] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 143.101006][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.129940][ T7732] tipc: Resetting bearer [ 143.313676][ T7732] tipc: Disabling bearer [ 143.332473][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'. [ 143.649290][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.418'. [ 143.723590][ T7772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.419'. [ 143.733049][ T7772] block nbd0: not configured, cannot reconfigure [ 143.769347][ T7775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.792965][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.854702][ T7775] nbd: socks must be embedded in a SOCK_ITEM attr [ 143.951017][ T7780] batadv1: entered promiscuous mode [ 144.229015][ T7792] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 144.280579][ T7792] !: entered promiscuous mode [ 144.356957][ T7795] x_tables: ip_tables: osf match: only valid for protocol 6 [ 144.383572][ T7795] sctp: [Deprecated]: syz.1.425 (pid 7795) Use of int in max_burst socket option. [ 144.383572][ T7795] Use struct sctp_assoc_value instead [ 144.591442][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.428'. [ 144.857773][ T7816] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 144.868927][ T7816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.879680][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 144.956738][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.966596][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.997768][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.023734][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.361137][ T7834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.488720][ T7840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.215548][ T7863] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20003 [ 146.469104][ T7869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.521803][ T7871] bond_slave_0: entered promiscuous mode [ 146.527793][ T7871] bond_slave_1: entered promiscuous mode [ 146.533532][ T7871] syz_tun: entered promiscuous mode [ 146.543269][ T7871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.551401][ T7871] bond3: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 146.560825][ T7871] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 146.572429][ T7871] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 146.608652][ T7869] bond0: (slave syz_tun): Releasing backup interface [ 146.629979][ T7869] syz_tun: left promiscuous mode [ 146.672853][ T7869] bridge_slave_0: left allmulticast mode [ 146.696019][ T7869] bridge_slave_0: left promiscuous mode [ 146.705798][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.740657][ T7869] bridge_slave_1: left allmulticast mode [ 146.756782][ T7869] bridge_slave_1: left promiscuous mode [ 146.762847][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.791010][ T7869] bond0: (slave bond_slave_0): Releasing backup interface [ 146.803230][ T7869] bond_slave_0: left promiscuous mode [ 146.839565][ T7869] bond0: (slave bond_slave_1): Releasing backup interface [ 146.852574][ T7869] bond_slave_1: left promiscuous mode [ 146.876790][ T7869] team_slave_0: left promiscuous mode [ 146.905595][ T7869] team0: Port device team_slave_0 removed [ 146.933848][ T7869] team_slave_1: left promiscuous mode [ 146.950518][ T7869] team0: Port device team_slave_1 removed [ 146.977126][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.991435][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.002910][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.012078][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.033237][ T7869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.077845][ T3911] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 147.096822][ T3020] bond3: (slave macvlan2): link status up again after 0 ms [ 147.201609][ T6347] bond3: (slave macvlan2): link status definitely down, disabling slave [ 147.527910][ T7899] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 147.560235][ T7899] __nla_validate_parse: 1 callbacks suppressed [ 147.560253][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 147.588636][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 147.650854][ T7900] bond1: option ad_actor_sys_prio: invalid value (0) [ 147.666612][ T7900] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 147.863398][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 147.921168][ T7900] bond1 (unregistering): Released all slaves [ 148.039918][ T7923] Bluetooth: MGMT ver 1.23 [ 148.077832][ T7920] tipc: Enabled bearer , priority 0 [ 148.142301][ T7919] tipc: Disabling bearer [ 148.163064][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 148.180638][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.466'. [ 148.191707][ T7930] --map-set only usable from mangle table [ 148.833791][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 149.108405][ T7975] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 149.260772][ T7986] pim6reg: entered allmulticast mode [ 149.426830][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.434514][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.592678][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.611897][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.792106][ T7991] pim6reg: left allmulticast mode [ 150.121911][ T8011] tipc: Trying to set illegal importance in message [ 151.239810][ T8002] geneve2: entered promiscuous mode [ 151.256384][ T3020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.277105][ T3020] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.333930][ T3020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.354404][ T3020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.380504][ T3020] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.394274][ T3020] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.405983][ T3020] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.415978][ T3020] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.468878][ T3020] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.501338][ T3020] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.521071][ T3020] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.531938][ T8022] No such timeout policy "syz1" [ 151.541221][ T3020] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.629525][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 151.639530][ T8030] openvswitch: netlink: Flow key attr not present in new flow. [ 151.875779][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 152.175121][ T8064] tipc: Enabled bearer , priority 0 [ 152.187146][ T8064] syzkaller0: entered promiscuous mode [ 152.192732][ T8064] syzkaller0: entered allmulticast mode [ 152.219062][ T8064] tipc: Resetting bearer [ 152.225109][ T8064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.236909][ T8063] tipc: Resetting bearer [ 152.250461][ T8063] tipc: Disabling bearer [ 152.365269][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 152.377544][ T8067] netlink: 1 bytes leftover after parsing attributes in process `syz.2.503'. [ 152.542226][ T8069] bond2 (unregistering): Released all slaves [ 152.854113][ T8091] Bluetooth: MGMT ver 1.23 [ 152.890671][ T8091] geneve2: entered promiscuous mode [ 152.915634][ T8092] __nla_validate_parse: 3 callbacks suppressed [ 152.915655][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 152.936691][ T3911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.950775][ T3911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.980260][ T3911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.008076][ T3911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.089896][ T8097] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 153.252613][ T8097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.299331][ T8102] bond3: (slave ip6erspan0): making interface the new active one [ 153.309927][ T8102] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 153.322687][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'. [ 153.334077][ T8105] sit0: entered promiscuous mode [ 153.352449][ T8105] netlink: 1 bytes leftover after parsing attributes in process `syz.2.513'. [ 153.597626][ T8115] dvmrp0: entered allmulticast mode [ 153.627119][ T8117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 154.463876][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 154.494049][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 154.542481][ T8147] netlink: 'syz.2.523': attribute type 1 has an invalid length. [ 154.574910][ T8147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.523'. [ 154.744307][ T8164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.523'. [ 155.169734][ T8164] bond2 (unregistering): Released all slaves [ 155.430750][ T8200] x_tables: duplicate underflow at hook 3 [ 155.947632][ T8229] x_tables: duplicate entry at hook 3 [ 155.992160][ T8238] netlink: 'syz.0.539': attribute type 3 has an invalid length. [ 156.000094][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.539'. [ 156.122410][ T8237] pim6reg1: entered promiscuous mode [ 156.134881][ T8237] pim6reg1: entered allmulticast mode [ 156.319966][ T8230] delete_channel: no stack [ 156.325205][ T8230] delete_channel: no stack [ 156.417126][ T8259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'. [ 157.082186][ T8301] syzkaller0: entered promiscuous mode [ 157.090974][ T8301] syzkaller0: entered allmulticast mode [ 157.438751][ T8318] geneve2: left promiscuous mode [ 157.610152][ T8331] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 157.628611][ T8330] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 157.772824][ T8340] x_tables: duplicate underflow at hook 2 [ 158.624549][ T8379] __nla_validate_parse: 66 callbacks suppressed [ 158.624570][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 158.684265][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 158.763837][ T8390] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 158.975995][ T8396] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 160.055522][ T8390] veth0_vlan: left promiscuous mode [ 160.063144][ T8390] veth0_vlan: entered promiscuous mode [ 160.073924][ T8390] team0: Device veth0_vlan failed to register rx_handler [ 160.093392][ T8396] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 160.113241][ T8398] erspan1: entered allmulticast mode [ 160.185019][ T8399] veth0_to_bridge: entered promiscuous mode [ 160.220666][ T8399] vlan0: entered promiscuous mode [ 160.404711][ T8418] delete_channel: no stack [ 160.421303][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 160.457185][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.584'. [ 160.506890][ T8409] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 160.728322][ T8434] netlink: 'syz.3.589': attribute type 11 has an invalid length. [ 160.770428][ T8434] netlink: 224 bytes leftover after parsing attributes in process `syz.3.589'. [ 160.821710][ T8438] vlan0: entered promiscuous mode [ 160.846301][ T8438] vlan0: entered allmulticast mode [ 160.862982][ T8441] xt_hashlimit: max too large, truncated to 1048576 [ 160.869921][ T8445] xt_hashlimit: max too large, truncated to 1048576 [ 160.876836][ T8438] hsr_slave_1: entered allmulticast mode [ 160.926814][ T8440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.592'. [ 160.949558][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.594'. [ 160.958896][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 160.969810][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'. [ 160.980108][ T8444] netlink: 104 bytes leftover after parsing attributes in process `syz.2.594'. [ 161.033850][ T8448] netlink: 'syz.3.595': attribute type 33 has an invalid length. [ 161.129098][ T8454] block nbd0: Unsupported socket: should be TCP or UNIX. [ 162.101718][ T8518] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 162.175514][ T8518] veth5: entered promiscuous mode [ 162.205550][ T8518] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 162.705054][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 162.980983][ T8537] xt_hashlimit: size too large, truncated to 1048576 [ 162.988044][ T8537] xt_hashlimit: max too large, truncated to 1048576 [ 163.126387][ T8539] syzkaller0: entered promiscuous mode [ 163.158971][ T8539] syzkaller0: entered allmulticast mode [ 163.649223][ T8555] __nla_validate_parse: 10 callbacks suppressed [ 163.649244][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 163.665788][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 163.680475][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 164.570021][ T8550] ip6gre1: entered promiscuous mode [ 164.585369][ T8550] ip6gre1: entered allmulticast mode [ 164.833610][ T8576] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 164.843182][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 164.865509][ T8576] bond0: entered promiscuous mode [ 164.875721][ T8576] bond_slave_0: entered promiscuous mode [ 164.887481][ T8576] bond_slave_1: entered promiscuous mode [ 164.903627][ T8577] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 164.916667][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 164.929057][ T8576] bond0: left promiscuous mode [ 164.933888][ T8576] bond_slave_0: left promiscuous mode [ 164.942193][ T8576] bond_slave_1: left promiscuous mode [ 165.007100][ T8581] netlink: 'syz.0.628': attribute type 2 has an invalid length. [ 165.027556][ T8577] bond0: entered promiscuous mode [ 165.032651][ T8577] bond_slave_0: entered promiscuous mode [ 165.039272][ T8577] bond_slave_1: entered promiscuous mode [ 165.047825][ T8577] bond0: left promiscuous mode [ 165.052841][ T8577] bond_slave_0: left promiscuous mode [ 165.063463][ T8577] bond_slave_1: left promiscuous mode [ 165.073256][ T6182] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 165.075513][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 165.124150][ T8581] : entered promiscuous mode [ 165.151889][ T8577] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 165.159674][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 165.198269][ T8577] bond0: entered promiscuous mode [ 165.204927][ T8577] bond_slave_0: entered promiscuous mode [ 165.213963][ T8577] bond_slave_1: entered promiscuous mode [ 165.227476][ T8577] bond0: left promiscuous mode [ 165.232312][ T8577] bond_slave_0: left promiscuous mode [ 165.238430][ T8577] bond_slave_1: left promiscuous mode [ 165.300563][ T8577] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 165.311390][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 165.343590][ T8577] bond0: entered promiscuous mode [ 165.354291][ T8577] bond_slave_0: entered promiscuous mode [ 165.365991][ T8577] bond_slave_1: entered promiscuous mode [ 165.382026][ T8577] bond0: left promiscuous mode [ 165.400270][ T8577] bond_slave_0: left promiscuous mode [ 165.408932][ T8592] xt_hashlimit: max too large, truncated to 1048576 [ 165.417240][ T8577] bond_slave_1: left promiscuous mode [ 165.489595][ T8577] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 165.506692][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 165.522407][ T8577] bond0: entered promiscuous mode [ 165.546657][ T8577] bond_slave_0: entered promiscuous mode [ 165.553386][ T8577] bond_slave_1: entered promiscuous mode [ 165.561788][ T8577] bond0: left promiscuous mode [ 165.567786][ T8577] bond_slave_0: left promiscuous mode [ 165.576900][ T8577] bond_slave_1: left promiscuous mode [ 165.648845][ T8577] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 165.666044][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 165.703210][ T8577] bond0: entered promiscuous mode [ 165.721325][ T8577] bond_slave_0: entered promiscuous mode [ 165.740140][ T8577] bond_slave_1: entered promiscuous mode [ 165.774685][ T8577] bond0: left promiscuous mode [ 165.792627][ T8577] bond_slave_0: left promiscuous mode [ 165.804249][ T8577] bond_slave_1: left promiscuous mode [ 166.225260][ T8615] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 166.328484][ T8621] xt_hashlimit: size too large, truncated to 1048576 [ 166.372103][ T8615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.479091][ T8617] veth3: entered promiscuous mode [ 166.505804][ T8617] bond2: (slave veth3): Enslaving as an active interface with a down link [ 166.543630][ T8618] erspan0: entered allmulticast mode [ 166.561541][ T8618] bond2: (slave erspan0): making interface the new active one [ 166.589637][ T8618] erspan0: entered promiscuous mode [ 166.595588][ T8618] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 166.876375][ T8636] netlink: 'syz.3.641': attribute type 26 has an invalid length. [ 167.000933][ T8645] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 167.038096][ T8645] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 167.329364][ T8654] hsr_slave_1 (unregistering): left promiscuous mode [ 168.189497][ T8694] bond2: entered allmulticast mode [ 168.196177][ T8694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.439532][ T8705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.500134][ T8714] macsec1: entered promiscuous mode [ 168.505383][ T8714] bond5: entered promiscuous mode [ 168.545629][ T8714] macsec1: entered allmulticast mode [ 168.557859][ T8714] bond5: entered allmulticast mode [ 168.566129][ T8714] bond5: left allmulticast mode [ 168.575513][ T8714] bond5: left promiscuous mode [ 168.717898][ T8722] __nla_validate_parse: 8 callbacks suppressed [ 168.717920][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 168.747095][ T8725] : renamed from bond_slave_0 (while UP) [ 169.452784][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'. [ 169.514630][ T8750] netlink: 68 bytes leftover after parsing attributes in process `syz.4.672'. [ 169.996148][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.043620][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 170.341877][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 170.480149][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.543683][ T8795] bond0: (slave rose0): Enslaving as an active interface with an up link [ 170.638970][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 171.339577][ T8846] validate_nla: 1 callbacks suppressed [ 171.339812][ T8846] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 171.381126][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.440155][ T8846] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.557592][ T8857] netlink: 'syz.1.694': attribute type 7 has an invalid length. [ 171.687838][ T8864] x_tables: duplicate underflow at hook 1 [ 171.708693][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 172.549773][ T8887] bond2: entered promiscuous mode [ 172.555452][ T8887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.833372][ T8902] dvmrp0: entered allmulticast mode [ 172.915040][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 173.126301][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.485124][ T8927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.712'. [ 173.630130][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.712'. [ 174.203305][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 174.400997][ T8959] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 174.447810][ T8959] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 175.219151][ T8993] openvswitch: netlink: Message has -2 unknown bytes. [ 175.393461][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 175.580009][ T9010] erspan0: left allmulticast mode [ 175.585617][ T9010] netlink: 136 bytes leftover after parsing attributes in process `syz.3.730'. [ 175.626514][ T9010] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 176.235094][ T9029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.248250][ T9029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.260799][ T9029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.355998][ T9029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.367754][ T9029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.387187][ T9029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.559984][ T9029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.573452][ T9029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.592818][ T9029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.769409][ T9029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.797004][ T9029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.826623][ T9029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.045258][ T9049] xt_CT: No such helper "pptp" [ 177.173579][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 177.201217][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.742'. [ 177.296273][ T3020] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.335704][ T9071] x_tables: duplicate underflow at hook 2 [ 177.347060][ T3020] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.364555][ T3020] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.459776][ T1344] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.498822][ T1344] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.533817][ T1344] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.603819][ T1344] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.640535][ T1344] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.660485][ T1344] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.699974][ T9083] netlink: 'syz.4.746': attribute type 23 has an invalid length. [ 177.958702][ T1344] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.982293][ T1344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 178.002669][ T1344] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.115479][ T9105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.334326][ T9117] netlink: 'syz.3.755': attribute type 2 has an invalid length. [ 178.350725][ T9117] netlink: 'syz.3.755': attribute type 5 has an invalid length. [ 178.439884][ T9105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.517458][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 178.579468][ T9105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.731237][ T9105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.819053][ T9130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.759'. [ 178.948474][ T12] erspan0: left promiscuous mode [ 179.011793][ T3020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.034851][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.055888][ T9147] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 179.153914][ T5905] IPVS: starting estimator thread 0... [ 179.164623][ T9147] bond3: entered promiscuous mode [ 179.177815][ T9147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.201119][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.277789][ T9154] IPVS: using max 39 ests per chain, 93600 per kthread [ 179.286976][ T9153] nbd0: detected capacity change from 0 to 127 [ 179.297777][ T9155] netlink: 64 bytes leftover after parsing attributes in process `syz.2.764'. [ 179.315993][ T3020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.331752][ T9157] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 179.366139][ T5155] block nbd0: Receive control failed (result -32) [ 179.417856][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 179.616133][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'. [ 179.639291][ T9169] netlink: 'syz.1.769': attribute type 3 has an invalid length. [ 179.663146][ T9173] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 179.679654][ T9173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.770'. [ 179.787196][ T9175] veth0: entered promiscuous mode [ 180.327752][ T6182] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.476343][ T9165] veth0: left promiscuous mode [ 180.605658][ T9219] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.780'. [ 180.877154][ T6174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.892375][ T1141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.147991][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'. [ 181.160410][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.166649][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.195138][ T9239] ip6gretap2: entered promiscuous mode [ 181.201270][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.212236][ T9240] netlink: 'syz.1.786': attribute type 7 has an invalid length. [ 181.220106][ T9240] netlink: 'syz.1.786': attribute type 8 has an invalid length. [ 181.265555][ T9237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.317665][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 181.408735][ T9237] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.568126][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.600673][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'. [ 181.631606][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.677161][ T9260] tipc: Started in network mode [ 181.689115][ T9260] tipc: Node identity 5a8b9fc00d7b, cluster identity 4711 [ 181.708417][ T9260] tipc: Enabled bearer , priority 0 [ 181.733029][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.739671][ T9263] syzkaller0: entered allmulticast mode [ 181.766911][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.810201][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.819516][ T9237] wg1 speed is unknown, defaulting to 1000 [ 181.827002][ T9260] tipc: Resetting bearer [ 181.875610][ T9259] tipc: Disabling bearer [ 181.923852][ T9268] syz.1.792 uses old SIOCAX25GETINFO [ 181.939312][ T1002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.956404][ T1002] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.092505][ T9278] syzkaller0: entered promiscuous mode [ 182.110416][ T9278] syzkaller0: entered allmulticast mode [ 182.252657][ T9279] syzkaller1: entered promiscuous mode [ 182.304006][ T9279] syzkaller1: entered allmulticast mode [ 182.342949][ T9287] wg1 speed is unknown, defaulting to 1000 [ 182.456804][ T5972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.995587][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.802'. [ 183.373662][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 184.103627][ T9362] bond3: option mode: unable to set because the bond device has slaves [ 184.127278][ T9366] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 184.193107][ T9370] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 184.252666][ T9372] tipc: Enabling of bearer rejected, failed to enable media [ 184.275992][ T9372] sctp: [Deprecated]: syz.3.813 (pid 9372) Use of int in max_burst socket option. [ 184.275992][ T9372] Use struct sctp_assoc_value instead [ 184.389384][ T9372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.750755][ T9401] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 184.858433][ T9401] bond6: (slave bridge3): making interface the new active one [ 184.878625][ T9401] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 185.156352][ T9421] __nla_validate_parse: 5 callbacks suppressed [ 185.156373][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.824'. [ 185.203634][ T9414] wg1 speed is unknown, defaulting to 1000 [ 185.256328][ T9421] netlink: 35 bytes leftover after parsing attributes in process `syz.2.824'. [ 185.485640][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 185.519730][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 185.539276][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 185.747927][ T9451] wg1 speed is unknown, defaulting to 1000 [ 185.888012][ T9454] netlink: 136 bytes leftover after parsing attributes in process `syz.2.834'. [ 185.935253][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 185.946353][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.977861][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.016687][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.415967][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 186.458212][ T9491] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.843'. [ 186.597269][ T9497] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 186.680293][ T9497] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 186.719920][ T9504] Bluetooth: MGMT ver 1.23 [ 186.803292][ T9495] bridge0: port 1(gretap0) entered blocking state [ 186.817961][ T9495] bridge0: port 1(gretap0) entered disabled state [ 186.839341][ T9495] gretap0: entered allmulticast mode [ 186.855901][ T9495] gretap0: entered promiscuous mode [ 186.922359][ T9515] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 186.952936][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.978328][ T9515] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.182221][ T9523] netlink: 'syz.3.848': attribute type 13 has an invalid length. [ 187.369068][ T9532] syzkaller0: entered promiscuous mode [ 187.374821][ T9532] syzkaller0: entered allmulticast mode [ 187.525761][ T9542] tipc: Enabled bearer , priority 0 [ 187.534648][ T9542] syzkaller0: entered promiscuous mode [ 187.540719][ T9542] syzkaller0: entered allmulticast mode [ 187.608131][ T9542] tipc: Resetting bearer [ 187.625378][ T9541] tipc: Resetting bearer [ 187.670821][ T9541] tipc: Disabling bearer [ 187.740774][ T9552] wg1 speed is unknown, defaulting to 1000 [ 187.926856][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.978757][ T9558] wg1 speed is unknown, defaulting to 1000 [ 188.104337][ T9566] wg1 speed is unknown, defaulting to 1000 [ 188.226786][ T9556] wg1 speed is unknown, defaulting to 1000 [ 190.256318][ T9647] wg1 speed is unknown, defaulting to 1000 [ 190.927147][ T9667] __nla_validate_parse: 2 callbacks suppressed [ 190.927168][ T9667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.884'. [ 190.954424][ T9667] 8021q: VLANs not supported on ip6tnl0 [ 191.240961][ T9672] netlink: 'syz.1.887': attribute type 7 has an invalid length. [ 191.332303][ T9674] netlink: 'syz.2.886': attribute type 12 has an invalid length. [ 191.350938][ T9676] tipc: Enabled bearer , priority 0 [ 191.380334][ T9672] netlink: 'syz.1.887': attribute type 7 has an invalid length. [ 191.449906][ T9681] netlink: 'syz.2.886': attribute type 4 has an invalid length. [ 191.838573][ T9694] tipc: Enabled bearer , priority 0 [ 191.860470][ T9696] syzkaller0: entered promiscuous mode [ 191.865994][ T9696] syzkaller0: entered allmulticast mode [ 191.901650][ T9696] tipc: Resetting bearer [ 191.928665][ T9696] tipc: Disabling bearer [ 192.060047][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 192.458759][ T9729] gre0: left allmulticast mode [ 192.472164][ T9729] sit0: left promiscuous mode [ 192.580071][ T9729] ip6gretap1: left promiscuous mode [ 192.592452][ T9729] ip6gretap1: left allmulticast mode [ 192.638472][ T9729] bond2: left promiscuous mode [ 192.773302][ T9742] netlink: 'syz.4.905': attribute type 21 has an invalid length. [ 192.781867][ T9742] netlink: 128 bytes leftover after parsing attributes in process `syz.4.905'. [ 192.797041][ T9742] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 192.815539][ T9742] netlink: 'syz.4.905': attribute type 6 has an invalid length. [ 192.835974][ T9742] netlink: 3 bytes leftover after parsing attributes in process `syz.4.905'. [ 192.939316][ T9752] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 192.947175][ T9752] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 192.961213][ T9752] nbd: must specify an index to disconnect [ 193.201261][ T9765] syzkaller0: entered promiscuous mode [ 193.208097][ T9765] syzkaller0: entered allmulticast mode [ 193.240699][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 193.253714][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 193.273375][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 193.292141][ T9771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 193.305946][ T9771] erspan1: entered allmulticast mode [ 193.326220][ T9778] netlink: 'syz.1.915': attribute type 64 has an invalid length. [ 193.334313][ T9778] netlink: 5 bytes leftover after parsing attributes in process `syz.1.915'. [ 193.856659][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.251457][ T9813] netlink: 56 bytes leftover after parsing attributes in process `syz.3.922'. [ 195.293156][ T9835] wg1 speed is unknown, defaulting to 1000 [ 195.364087][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 195.487034][ T9841] wg1 speed is unknown, defaulting to 1000 [ 195.642536][ T9837] wg1 speed is unknown, defaulting to 1000 [ 195.862245][ T9864] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 195.906276][ T9864] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 196.090548][ T9875] __nla_validate_parse: 2 callbacks suppressed [ 196.090568][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.940'. [ 196.109363][ T9872] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 196.219208][ T9872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.300853][ T9871] bond3: (slave geneve2): making interface the new active one [ 196.348720][ T9871] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 196.380560][ T616] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.394188][ T616] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.431775][ T616] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.450495][ T616] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.549501][ T9881] wg1 speed is unknown, defaulting to 1000 [ 196.583309][ T9879] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 196.814882][ T9893] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 196.824084][ T9893] netlink: 'syz.0.946': attribute type 3 has an invalid length. [ 196.832388][ T9893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.946'. [ 196.898213][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 196.913894][ T9891] netlink: 'syz.3.944': attribute type 30 has an invalid length. [ 197.405496][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 197.668721][ T9947] netlink: 52 bytes leftover after parsing attributes in process `syz.3.959'. [ 197.693651][ T9950] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.960'. [ 197.939312][ T9968] C: renamed from team_slave_0 (while UP) [ 197.969794][ T9968] netlink: 'syz.1.964': attribute type 2 has an invalid length. [ 197.978278][ T9968] netlink: 116 bytes leftover after parsing attributes in process `syz.1.964'. [ 197.991781][ T9968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 198.028016][ T9968] syzkaller0: entered promiscuous mode [ 198.033777][ T9968] syzkaller0: entered allmulticast mode [ 198.048833][ T9968] netlink: 'syz.1.964': attribute type 4 has an invalid length. [ 198.063162][ T9968] syz_tun: entered allmulticast mode [ 198.076066][ T9967] syz_tun: left allmulticast mode [ 198.228246][ T9979] wg1 speed is unknown, defaulting to 1000 [ 198.348096][ T9984] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.967'. [ 198.367672][ T9984] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 198.396915][ T9986] veth0: entered promiscuous mode [ 198.447196][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 198.537781][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 198.681244][ T9984] wg1 speed is unknown, defaulting to 1000 [ 199.343491][T10024] tipc: Enabling of bearer rejected, already enabled [ 199.485364][T10019] tipc: Resetting bearer [ 199.494644][T10017] wg1 speed is unknown, defaulting to 1000 [ 199.627529][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.951599][T10040] netlink: 'syz.3.980': attribute type 3 has an invalid length. [ 200.298496][T10030] wg1 speed is unknown, defaulting to 1000 [ 200.323390][T10041] bond1: left promiscuous mode [ 200.346785][T10041] veth3: left promiscuous mode [ 200.352424][T10041] vlan2: left promiscuous mode [ 200.377726][T10041] geneve1: left promiscuous mode [ 200.398655][T10041] geneve2: left promiscuous mode [ 200.436801][T10041] veth5: left promiscuous mode [ 200.476294][T10041] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 200.605021][T10046] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 200.612354][T10046] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 200.643882][ T3020] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.669665][ T3020] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.802316][ T3020] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.823173][ T3020] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.207475][T10083] __nla_validate_parse: 2 callbacks suppressed [ 201.207494][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 201.253577][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 201.337961][T10087] tipc: Can't bind to reserved service type 2 [ 201.415650][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 201.586213][T10094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.989'. [ 201.749046][T10098] netlink: 68 bytes leftover after parsing attributes in process `syz.4.990'. [ 202.565846][T10141] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20000 [ 202.716072][T10149] wg1 speed is unknown, defaulting to 1000 [ 202.774164][T10136] wg1 speed is unknown, defaulting to 1000 [ 202.881966][T10161] x_tables: duplicate underflow at hook 1 [ 203.473336][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 203.543869][T10194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'. [ 203.707761][T10204] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1017'. [ 204.270049][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 204.412631][T10224] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1023'. [ 204.480478][T10224] bond4 (unregistering): Released all slaves [ 204.541509][T10229] pimreg: entered allmulticast mode [ 204.558544][T10231] pimreg: left allmulticast mode [ 204.646128][T10233] tipc: Enabling of bearer rejected, already enabled [ 204.677533][T10236] .70·: renamed from hsr0 (while UP) [ 204.708111][T10236] .70·: entered allmulticast mode [ 204.713222][T10236] hsr_slave_0: entered allmulticast mode [ 204.730335][T10236] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 204.749281][T10230] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 204.807630][T10244] netlink: 'syz.0.1030': attribute type 9 has an invalid length. [ 204.815578][T10244] netlink: 'syz.0.1030': attribute type 11 has an invalid length. [ 204.832991][T10244] netlink: 'syz.0.1030': attribute type 12 has an invalid length. [ 204.848466][T10242] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 204.861746][T10242] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 205.002324][T10251] wg1 speed is unknown, defaulting to 1000 [ 205.689567][T10287] tunl0: Master is either lo or non-ether device [ 205.724741][T10298] tunl0: Master is either lo or non-ether device [ 205.911650][T10322] netlink: 'syz.4.1050': attribute type 12 has an invalid length. [ 206.705174][T10340] netlink: 'syz.3.1052': attribute type 3 has an invalid length. [ 206.740751][T10319] wg1: entered promiscuous mode [ 206.745817][T10319] wg1: entered allmulticast mode [ 206.866771][T10336] wg1 speed is unknown, defaulting to 1000 [ 207.093113][T10354] __nla_validate_parse: 11 callbacks suppressed [ 207.093133][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 207.194726][T10350] wg1 speed is unknown, defaulting to 1000 [ 207.336052][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 207.401924][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 207.447535][T10368] netlink: 'syz.2.1061': attribute type 14 has an invalid length. [ 207.457435][T10368] netlink: 'syz.2.1061': attribute type 12 has an invalid length. [ 207.475561][T10360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.537646][T10359] wg1 speed is unknown, defaulting to 1000 [ 207.558340][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 207.912369][T10383] syzkaller1: entered promiscuous mode [ 207.918459][T10383] syzkaller1: entered allmulticast mode [ 207.934498][T10384] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 207.941480][T10385] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 208.239837][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 208.498968][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 208.534494][T10413] netlink: 'syz.0.1070': attribute type 9 has an invalid length. [ 208.565056][T10413] x_tables: ip_tables: osf match: only valid for protocol 6 [ 209.357532][T10449] netlink: 'syz.4.1080': attribute type 12 has an invalid length. [ 209.499960][T10455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1082'. [ 209.808720][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 209.832672][T10468] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1088'. [ 209.858655][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.899909][T10471] tun0: tun_chr_ioctl cmd 1074025675 [ 209.913659][T10471] tun0: persist enabled [ 209.921213][T10466] tun0: tun_chr_ioctl cmd 1074025675 [ 209.932930][T10466] tun0: persist disabled [ 209.937338][ T5844] Bluetooth: hci1: command 0x0401 tx timeout [ 209.952491][T10466] tipc: Enabled bearer , priority 0 [ 210.005084][T10466] tipc: Resetting bearer [ 210.139118][T10463] tipc: Disabling bearer [ 210.181402][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 210.328324][T10484] netlink: 'syz.0.1092': attribute type 21 has an invalid length. [ 210.398240][T10490] xt_l2tp: missing protocol rule (udp|l2tpip) [ 210.399487][T10489] 8021q: VLANs not supported on nlmon0 [ 210.475101][T10484] xt_hashlimit: overflow, rate too high: 0 [ 210.599503][T10496] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 210.738138][T10507] wireguard0: entered promiscuous mode [ 210.744700][T10507] wireguard0: entered allmulticast mode [ 211.433912][T10539] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 211.685202][T10559] netlink: 'syz.1.1111': attribute type 30 has an invalid length. [ 211.749719][T10548] Bluetooth: MGMT ver 1.23 [ 211.941234][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 211.948396][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 212.026607][ T5155] Bluetooth: hci1: command 0x0401 tx timeout [ 212.121983][T10561] __nla_validate_parse: 8 callbacks suppressed [ 212.122004][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 212.211273][T10541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1108'. [ 212.280669][T10559] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 212.302567][T10559] bond4 (unregistering): Released all slaves [ 212.363477][T10560] wg1 speed is unknown, defaulting to 1000 [ 212.716184][T10581] netlink: 'syz.4.1118': attribute type 10 has an invalid length. [ 212.716225][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 212.741148][T10576] wg1 speed is unknown, defaulting to 1000 [ 212.825661][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 212.982921][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 213.356619][T10617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1127'. [ 213.646075][T10627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.692272][T10631] geneve2: entered promiscuous mode [ 214.096696][ T5851] Bluetooth: hci1: command 0x0401 tx timeout [ 214.682393][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 214.771112][T10676] : entered promiscuous mode [ 214.821916][T10685] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 214.831526][T10676] netlink: 'syz.3.1139': attribute type 21 has an invalid length. [ 214.862519][T10690] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 214.870484][T10676] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1139'. [ 214.890633][T10694] netlink: 'syz.0.1143': attribute type 7 has an invalid length. [ 215.240313][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1148'. [ 215.378808][T10721] netlink: 'syz.0.1151': attribute type 2 has an invalid length. [ 215.404697][T10724] delete_channel: no stack [ 215.430078][T10728] netlink: 'syz.1.1154': attribute type 39 has an invalid length. [ 215.441075][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 215.530700][T10728] hsr_slave_1 (unregistering): left promiscuous mode [ 215.618824][T10726] bond3: entered promiscuous mode [ 215.624374][T10726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.677520][T10730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.691739][T10730] bond4: entered promiscuous mode [ 215.698103][T10730] bond3: (slave bond4): Enslaving as an active interface with an up link [ 215.827268][T10753] syzkaller0: entered promiscuous mode [ 215.833018][T10753] syzkaller0: entered allmulticast mode [ 215.844330][T10754] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 215.933520][T10754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.022183][T10754] veth7: entered promiscuous mode [ 216.150115][T10765] wg1 speed is unknown, defaulting to 1000 [ 216.413148][T10785] netlink: 'syz.3.1170': attribute type 1 has an invalid length. [ 216.485472][T10785] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.608224][T10789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.615645][T10789] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 216.628460][T10789] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 216.699535][T10785] gretap1: entered promiscuous mode [ 216.727707][T10785] bond5: (slave gretap1): making interface the new active one [ 216.738370][T10785] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 216.790351][T10785] x_tables: duplicate underflow at hook 1 [ 216.819213][T10789] macvlan2: entered promiscuous mode [ 216.824572][T10789] macvlan2: entered allmulticast mode [ 216.832144][T10789] bond5: entered promiscuous mode [ 216.842245][T10789] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.858547][T10789] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 216.876806][T10789] bond5: left promiscuous mode [ 216.991057][T10810] tipc: Enabled bearer , priority 18 [ 217.121176][T10818] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 217.160451][T10823] x_tables: duplicate underflow at hook 3 [ 217.169027][T10825] netlink: 'syz.2.1179': attribute type 6 has an invalid length. [ 217.283351][T10832] __nla_validate_parse: 6 callbacks suppressed [ 217.283373][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 217.302053][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1184'. [ 217.831511][T10855] wg1 speed is unknown, defaulting to 1000 [ 217.865407][T10862] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 217.980272][T10862] bond4: entered promiscuous mode [ 217.985991][T10862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.993325][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 218.034726][T10868] bond4: entered allmulticast mode [ 218.110110][T10873] wg1 speed is unknown, defaulting to 1000 [ 218.165119][T10862] bond4: (slave bridge2): making interface the new active one [ 218.176717][T10862] bridge2: entered promiscuous mode [ 218.182164][T10862] bridge2: entered allmulticast mode [ 218.199008][T10862] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 218.545553][T10881] wg1 speed is unknown, defaulting to 1000 [ 218.868470][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 218.880880][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 218.975845][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 219.251349][T10912] gretap2: entered allmulticast mode [ 219.284243][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 219.327162][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 219.402740][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 219.429191][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1208'. [ 219.743381][T10942] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 219.836568][T10920] syz.1.1208: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.893850][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.1.1208 Not tainted syzkaller #0 PREEMPT(full) [ 219.893891][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.893919][T10920] Call Trace: [ 219.893931][T10920] [ 219.893941][T10920] dump_stack_lvl+0x189/0x250 [ 219.893973][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.893996][T10920] ? __pfx__printk+0x10/0x10 [ 219.894023][T10920] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 219.894056][T10920] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 219.894090][T10920] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 219.894124][T10920] warn_alloc+0x214/0x310 [ 219.894159][T10920] ? __pfx_warn_alloc+0x10/0x10 [ 219.894197][T10920] ? __get_vm_area_node+0x28f/0x300 [ 219.894223][T10920] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 219.894254][T10920] __vmalloc_node_range_noprof+0x690/0x12d0 [ 219.894282][T10920] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 219.894340][T10920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.894368][T10920] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 219.894396][T10920] ? rcu_is_watching+0x15/0xb0 [ 219.894421][T10920] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 219.894447][T10920] __kvmalloc_node_noprof+0x670/0x910 [ 219.894475][T10920] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 219.894499][T10920] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 219.894524][T10920] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 219.894557][T10920] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 219.894601][T10920] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 219.894624][T10920] ? __fget_files+0x2a/0x420 [ 219.894646][T10920] ? __fget_files+0x2a/0x420 [ 219.894664][T10920] ? __fget_files+0x2a/0x420 [ 219.894686][T10920] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 219.894720][T10920] link_create+0x673/0x850 [ 219.894752][T10920] __sys_bpf+0x6be/0x860 [ 219.894779][T10920] ? __pfx___sys_bpf+0x10/0x10 [ 219.894835][T10920] ? rcu_is_watching+0x15/0xb0 [ 219.894868][T10920] __x64_sys_bpf+0x7c/0x90 [ 219.894892][T10920] do_syscall_64+0xfa/0xf80 [ 219.894921][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.894941][T10920] ? clear_bhb_loop+0x60/0xb0 [ 219.894966][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.894985][T10920] RIP: 0033:0x7fd85818f749 [ 219.895008][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.895025][T10920] RSP: 002b:00007fd8563f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.895047][T10920] RAX: ffffffffffffffda RBX: 00007fd8583e5fa0 RCX: 00007fd85818f749 [ 219.895061][T10920] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 219.895074][T10920] RBP: 00007fd858213f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.895086][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.895098][T10920] R13: 00007fd8583e6038 R14: 00007fd8583e5fa0 R15: 00007ffd20d4ec38 [ 219.895133][T10920] [ 219.896322][T10920] Mem-Info: [ 220.239468][T10920] active_anon:6852 inactive_anon:0 isolated_anon:0 [ 220.239468][T10920] active_file:3141 inactive_file:39929 isolated_file:0 [ 220.239468][T10920] unevictable:768 dirty:62 writeback:0 [ 220.239468][T10920] slab_reclaimable:11907 slab_unreclaimable:104142 [ 220.239468][T10920] mapped:29017 shmem:1411 pagetables:1147 [ 220.239468][T10920] sec_pagetables:0 bounce:0 [ 220.239468][T10920] kernel_misc_reclaimable:0 [ 220.239468][T10920] free:1308407 free_pcp:20549 free_cma:0 [ 220.356950][T10920] Node 0 active_anon:27908kB inactive_anon:0kB active_file:12564kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116068kB dirty:248kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14024kB pagetables:4552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 220.456560][T10920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 220.490294][T10960] wg1 speed is unknown, defaulting to 1000 [ 220.538211][T10920] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.587753][T10970] block nbd1: Unsupported socket: should be TCP or UNIX. [ 220.616492][T10920] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 220.636470][T10920] Node 0 DMA32 free:1320736kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27908kB inactive_anon:0kB active_file:12564kB inactive_file:159516kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:65384kB local_pcp:17104kB free_cma:0kB [ 220.705246][T10920] lowmem_reserve[]: 0 0 0 0 0 [ 220.712219][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.724682][T10920] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.769501][T10920] lowmem_reserve[]: 0 0 0 0 0 [ 220.774312][T10920] Node 1 Normal free:3897332kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16552kB local_pcp:6340kB free_cma:0kB [ 220.812104][T10975] ip6gre0: entered promiscuous mode [ 220.822582][T10975] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 220.838500][T10920] lowmem_reserve[]: 0 0 0 0 0 [ 220.843346][T10920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.884083][T10920] Node 0 DMA32: 301*4kB (M) 595*8kB (M) 212*16kB (UME) 1011*32kB (UME) 294*64kB (UM) 59*128kB (UME) 9*256kB (UME) 10*512kB (UM) 6*1024kB (UME) 3*2048kB (UM) 301*4096kB (UM) = 1320684kB [ 220.939072][T10920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.954736][T10920] Node 1 Normal: 165*4kB (UE) 48*8kB (UME) 36*16kB (UME) 71*32kB (UME) 27*64kB (UME) 8*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3897332kB [ 220.980645][T10920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.005683][T10920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.015300][T10920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.031438][T10980] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 221.035891][T10920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.048847][T10920] 44477 total pagecache pages [ 221.061628][T10920] 0 pages in swap cache [ 221.065841][T10920] Free swap = 124996kB [ 221.076483][T10920] Total swap = 124996kB [ 221.080982][T10920] 2097051 pages RAM [ 221.087357][T10920] 0 pages HighMem/MovableOnly [ 221.092088][T10920] 424280 pages reserved [ 221.096551][T10920] 0 pages cma reserved [ 221.335509][T10986] ipt_REJECT: TCP_RESET invalid for non-tcp [ 221.534872][T10988] vlan1: entered promiscuous mode [ 221.552171][T10988] bond0: entered promiscuous mode [ 221.588588][T10990] geneve3: entered promiscuous mode [ 221.790739][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.826977][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.858000][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.070524][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.116632][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.144570][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.212892][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.272314][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.283767][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.299367][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.326957][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.332733][T11029] tun0: persist disabled [ 222.338257][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.344059][T11027] tun0: persist enabled [ 222.348907][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.354892][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.371470][T11029] tun0: persist disabled [ 222.381530][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.402755][T11027] tun0: persist enabled [ 222.414251][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.423074][T11027] tun0: persist enabled [ 222.459127][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.473064][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.484685][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.504560][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.516593][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.523666][T11029] tun0: persist disabled [ 222.534434][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.540386][T11027] tun0: persist enabled [ 222.544859][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.559385][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.565214][T11029] tun0: persist disabled [ 222.570260][T11030] wg1 speed is unknown, defaulting to 1000 [ 222.580056][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.585669][T11027] tun0: persist enabled [ 222.593518][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.613414][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.624480][T11029] tun0: persist disabled [ 222.645841][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.655237][T11027] tun0: persist enabled [ 222.676064][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.684147][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.690230][T11029] tun0: persist disabled [ 222.719450][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.724939][T11027] tun0: persist enabled [ 222.732520][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.739531][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.745319][T11029] tun0: persist disabled [ 222.788309][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.799277][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.815493][ T50] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.836957][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 222.846085][T11027] tun0: persist enabled [ 222.853249][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 222.865491][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 222.878075][T11029] tun0: persist disabled [ 222.957924][ T1164] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.966171][ T1164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.975806][ T1164] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.994179][T11027] tun0: tun_chr_ioctl cmd 1074025675 [ 223.007870][T11027] tun0: persist enabled [ 223.027612][T11022] tun0: tun_chr_ioctl cmd 1074025673 [ 223.033160][T11029] tun0: tun_chr_ioctl cmd 1074025675 [ 223.047388][T11029] tun0: persist disabled [ 223.259044][ T6347] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.268121][ T6347] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.278683][ T6347] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.304846][ T6347] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.321331][ T6347] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.329981][ T6347] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.987183][T11067] __nla_validate_parse: 5 callbacks suppressed [ 223.987204][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 224.065701][T11075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'. [ 224.087032][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 224.431028][T11085] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.753829][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 224.981694][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 225.419229][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 225.514094][T11132] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 225.650498][T11141] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 225.705912][T11140] wg1 speed is unknown, defaulting to 1000 [ 225.726065][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 225.777895][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1266'. [ 225.806618][T11151] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1266'. [ 225.836793][T11150] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1266'. [ 226.847673][T11204] tipc: Enabling of bearer rejected, already enabled [ 226.906157][T11197] wg1 speed is unknown, defaulting to 1000 [ 227.160654][T11215] netlink: 'syz.1.1284': attribute type 2 has an invalid length. [ 227.184159][T11215] netlink: 'syz.1.1284': attribute type 2 has an invalid length. [ 227.239006][T11215] wg1 speed is unknown, defaulting to 1000 [ 227.385735][T11222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.534939][T11227] bond5: Invalid ad_actor_system MAC address. [ 227.542277][T11227] bond5: option ad_actor_system: invalid value (7) [ 227.550935][T11227] bond5 (unregistering): Released all slaves [ 227.802705][T11238] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 228.752635][T11291] gretap1: entered allmulticast mode [ 228.835398][T11301] netlink: 'syz.4.1307': attribute type 11 has an invalid length. [ 228.843562][ T5884] IPVS: starting estimator thread 0... [ 228.850282][T11302] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 228.951425][T11305] bridge0: entered promiscuous mode [ 228.971049][T11304] IPVS: using max 34 ests per chain, 81600 per kthread [ 228.985166][T11305] bridge0: port 3(macvtap1) entered blocking state [ 229.016622][T11305] bridge0: port 3(macvtap1) entered disabled state [ 229.033912][T11305] macvtap1: entered allmulticast mode [ 229.059600][T11305] bridge0: entered allmulticast mode [ 229.077971][T11305] macvtap1: left allmulticast mode [ 229.083163][T11305] bridge0: left allmulticast mode [ 229.100101][T11305] bridge0: left promiscuous mode [ 229.152022][T11312] pimreg: entered allmulticast mode [ 229.164463][T11317] pimreg: left allmulticast mode [ 229.191269][T11308] __nla_validate_parse: 14 callbacks suppressed [ 229.191288][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 229.475962][T11327] netlink: 'syz.0.1312': attribute type 12 has an invalid length. [ 229.504040][T11327] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 229.664850][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'. [ 229.741200][T11331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1311'. [ 230.267034][T11359] netlink: 'syz.1.1320': attribute type 16 has an invalid length. [ 230.284663][T11359] netlink: 'syz.1.1320': attribute type 17 has an invalid length. [ 230.479222][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.487175][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.681493][T11359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.978018][ T6347] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.987081][ T6347] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 230.995653][ T6347] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.031392][ T6347] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.048422][ T6347] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.057500][ T6347] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.066007][ T6347] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.075195][ T6347] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.119713][ T6347] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.150135][ T6347] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.169091][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 231.180717][ T6347] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.188503][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 231.226481][ T6347] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.339529][T11387] wg1 speed is unknown, defaulting to 1000 [ 231.564500][T11398] tc_dump_action: action bad kind [ 231.635035][T11401] netlink: 'syz.2.1333': attribute type 1 has an invalid length. [ 231.712009][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 231.725467][T11401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.733577][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 231.931659][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 231.973265][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 232.012413][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 232.133662][T11427] netlink: 'syz.2.1339': attribute type 5 has an invalid length. [ 232.829616][T11468] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 232.954561][T11474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.969542][T11474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.042833][T11468] wg1 speed is unknown, defaulting to 1000 [ 233.047743][T11481] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 233.166783][T11481] bond5: entered promiscuous mode [ 233.172324][T11481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.282754][T11474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.308414][T11474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.432859][T11474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.444428][T11474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.579693][T11501] block nbd1: shutting down sockets [ 233.594875][T11474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.611591][T11474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.640301][T11510] nbd: must specify at least one socket [ 233.720271][T11513] sctp: [Deprecated]: syz.2.1360 (pid 11513) Use of int in maxseg socket option. [ 233.720271][T11513] Use struct sctp_assoc_value instead [ 234.119821][ T3492] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.128806][ T3492] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.213241][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.232139][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.282337][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.301763][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.320531][T11544] netlink: 'syz.2.1370': attribute type 11 has an invalid length. [ 234.343185][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.346687][T11544] netlink: 'syz.2.1370': attribute type 4 has an invalid length. [ 234.375437][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.409822][T11544] netlink: 'syz.2.1370': attribute type 5 has an invalid length. [ 234.453639][T11544] netlink: 'syz.2.1370': attribute type 6 has an invalid length. [ 234.479353][T11544] __nla_validate_parse: 11 callbacks suppressed [ 234.479373][T11544] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.1370'. [ 234.499416][T11537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'. [ 234.621017][T11558] wg1 speed is unknown, defaulting to 1000 [ 234.667277][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1374'. [ 234.710398][T11564] netlink: 'syz.2.1375': attribute type 6 has an invalid length. [ 234.733733][T11564] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1375'. [ 234.836335][T11564] wireguard0: entered promiscuous mode [ 234.849925][T11564] wireguard0: entered allmulticast mode [ 235.293995][T11564] team0: Device wireguard0 is of different type [ 235.949197][T11600] openvswitch: netlink: Missing valid actions attribute. [ 235.956330][T11600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.545839][T11612] geneve4: entered promiscuous mode [ 236.588968][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.820963][T11625] veth1: entered allmulticast mode [ 236.861445][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 236.873198][T11629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1394'. [ 236.918866][T11629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1394'. [ 236.949539][T11631] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 236.964786][T11603] bond7: option miimon: invalid value (18446744073709551607) [ 236.981575][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1394'. [ 236.992675][T11633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1394'. [ 237.013347][T11603] bond7: option miimon: allowed values 0 - 2147483647 [ 237.033092][T11603] bond7 (unregistering): Released all slaves [ 237.317356][T11642] IPv6: NLM_F_REPLACE set, but no existing node found! [ 237.461171][T11642] wg1 speed is unknown, defaulting to 1000 [ 237.805758][T11671] syzkaller1: entered promiscuous mode [ 237.819190][T11671] syzkaller1: entered allmulticast mode [ 237.836823][T11666] tipc: Enabling of bearer rejected, already enabled [ 237.858022][T11671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 237.899170][T11667] wg1 speed is unknown, defaulting to 1000 [ 238.260400][T11693] wg1: entered promiscuous mode [ 238.273791][T11693] wg1: entered allmulticast mode [ 238.657464][T11715] 8021q: VLANs not supported on lo [ 238.680714][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 238.922112][T11728] netlink: 'syz.1.1421': attribute type 9 has an invalid length. [ 239.076023][T11709] wg1 speed is unknown, defaulting to 1000 [ 239.260044][T11747] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 239.532007][T11764] __nla_validate_parse: 2 callbacks suppressed [ 239.532029][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 239.935170][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.244397][T11808] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 240.317673][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 240.326334][T11812] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1445'. [ 240.615487][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 240.639173][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 240.870855][T11843] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 240.918403][T11843] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.935769][T11848] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1457'. [ 240.959908][T11847] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 240.972156][T11847] bond7 (unregistering): Released all slaves [ 240.991336][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1455'. [ 241.021814][T11850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.033156][T11850] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.044386][T11850] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 241.434848][T11871] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 241.777411][T11883] veth1_to_bond: entered allmulticast mode [ 241.795193][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 241.887905][T11883] bond0: (slave bond_slave_1): Releasing backup interface [ 241.920795][T11895] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1472'. [ 241.985442][T11883] veth1_to_bond (unregistering): left allmulticast mode [ 242.052696][T11905] syzkaller1: entered promiscuous mode [ 242.058395][T11905] syzkaller1: entered allmulticast mode [ 242.214375][T11909] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1476'. [ 242.491045][T11914] gretap2: entered promiscuous mode [ 242.736554][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 242.982197][T11937] netlink: 'syz.1.1484': attribute type 3 has an invalid length. [ 243.164588][T11949] atomic_op ffff88807a2f0198 conn xmit_atomic 0000000000000000 [ 243.273521][T11956] netlink: 'syz.1.1489': attribute type 12 has an invalid length. [ 243.282653][T11956] netlink: 'syz.1.1489': attribute type 29 has an invalid length. [ 243.394084][T11958] bond7 (unregistering): Released all slaves [ 243.792865][T11981] block nbd0: reconnected socket [ 243.803867][ T5837] block nbd0: Receive control failed (result -32) [ 243.902967][T11991] nft_compat: unsupported protocol 0 [ 244.185047][T12010] syzkaller1: entered promiscuous mode [ 244.211704][T12010] syzkaller1: entered allmulticast mode [ 244.237704][T12009] openvswitch: netlink: Message has -2 unknown bytes. [ 244.593527][T12027] wg1 speed is unknown, defaulting to 1000 [ 245.012631][T12052] __nla_validate_parse: 10 callbacks suppressed [ 245.012651][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 245.346558][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1509'. [ 245.374617][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1509'. [ 245.406883][T12052] chnl_net:caif_netlink_parms(): no params data found [ 245.522921][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 245.704931][T12071] wg1 speed is unknown, defaulting to 1000 [ 245.823650][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 246.117910][T12092] netlink: 'syz.1.1522': attribute type 16 has an invalid length. [ 246.146883][T12093] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 246.284434][T12110] netlink: 'syz.4.1523': attribute type 9 has an invalid length. [ 246.292374][T12110] netlink: 'syz.4.1523': attribute type 11 has an invalid length. [ 246.300464][T12110] netlink: 'syz.4.1523': attribute type 12 has an invalid length. [ 246.308397][T12110] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1523'. [ 246.334256][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 246.404114][T12116] netem: change failed [ 246.445779][T12118] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1529'. [ 246.460566][T12112] wg1 speed is unknown, defaulting to 1000 [ 246.508474][T12119] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1529'. [ 246.589437][T12116] xt_CT: No such helper "netbios-ns" [ 246.654917][T12129] netlink: 'syz.1.1530': attribute type 298 has an invalid length. [ 246.730061][T12125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'. [ 246.942930][T12144] SET target dimension over the limit! [ 247.169311][T12152] IPVS: length: 170 != 24 [ 247.277857][ T6173] IPVS: starting estimator thread 0... [ 247.386571][T12165] IPVS: using max 26 ests per chain, 62400 per kthread [ 247.445016][T12173] wg1 speed is unknown, defaulting to 1000 [ 247.534661][T12175] bond6: entered promiscuous mode [ 247.546681][T12175] bond6: entered allmulticast mode [ 248.083407][T12236] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 248.148026][T12242] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 248.181678][T12242] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 248.196188][T12242] team0: Failed to send options change via netlink (err -105) [ 248.203911][T12245] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 248.221488][T12242] team0: Port device geneve0 added [ 248.228581][T12233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.242883][T12233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.309935][T12245] bond6 (unregistering): Released all slaves [ 248.405165][T12233] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.469466][T12241] bond7 (unregistering): Released all slaves [ 248.549488][T12233] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.665742][T12252] wg1 speed is unknown, defaulting to 1000 [ 248.733957][T12254] IPv6: NLM_F_REPLACE set, but no existing node found! [ 248.801801][T12261] netlink: 'syz.0.1560': attribute type 4 has an invalid length. [ 249.067044][T12271] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 249.192795][T12271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.213062][T12278] bond6: (slave dummy0): making interface the new active one [ 249.223244][T12278] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 249.242679][T12280] ip6tnl2: entered allmulticast mode [ 249.277645][T12277] warn_alloc: 1 callbacks suppressed [ 249.277667][T12277] syz.4.1565: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.302870][T12277] CPU: 0 UID: 0 PID: 12277 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT(full) [ 249.302897][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.302919][T12277] Call Trace: [ 249.302928][T12277] [ 249.302936][T12277] dump_stack_lvl+0x189/0x250 [ 249.302969][T12277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.302992][T12277] ? __pfx__printk+0x10/0x10 [ 249.303020][T12277] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.303054][T12277] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.303088][T12277] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 249.303123][T12277] warn_alloc+0x214/0x310 [ 249.303159][T12277] ? __pfx_warn_alloc+0x10/0x10 [ 249.303195][T12277] ? __get_vm_area_node+0x28f/0x300 [ 249.303221][T12277] ? xskq_create+0xbf/0x170 [ 249.303249][T12277] __vmalloc_node_range_noprof+0x690/0x12d0 [ 249.303309][T12277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.303340][T12277] ? __kasan_kmalloc+0x93/0xb0 [ 249.303375][T12277] vmalloc_user_noprof+0xad/0xf0 [ 249.303402][T12277] ? xskq_create+0xbf/0x170 [ 249.303426][T12277] xskq_create+0xbf/0x170 [ 249.303453][T12277] xsk_init_queue+0xb0/0x110 [ 249.303478][T12277] xsk_setsockopt+0x57b/0x8d0 [ 249.303503][T12277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.303528][T12277] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.303563][T12277] ? aa_sock_opt_perm+0xff/0x1a0 [ 249.303586][T12277] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 249.303615][T12277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.303638][T12277] do_sock_setsockopt+0x17c/0x1b0 [ 249.303674][T12277] __x64_sys_setsockopt+0x13f/0x1b0 [ 249.303710][T12277] do_syscall_64+0xfa/0xf80 [ 249.303739][T12277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.303759][T12277] ? clear_bhb_loop+0x60/0xb0 [ 249.303784][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.303805][T12277] RIP: 0033:0x7fe260b8f749 [ 249.303823][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.303841][T12277] RSP: 002b:00007fe2619e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.303868][T12277] RAX: ffffffffffffffda RBX: 00007fe260de6180 RCX: 00007fe260b8f749 [ 249.303884][T12277] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 249.303896][T12277] RBP: 00007fe260c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 249.303909][T12277] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 249.303921][T12277] R13: 00007fe260de6218 R14: 00007fe260de6180 R15: 00007fffd0b963f8 [ 249.303957][T12277] [ 249.303965][T12277] Mem-Info: [ 249.598962][T12277] active_anon:7968 inactive_anon:0 isolated_anon:0 [ 249.598962][T12277] active_file:3141 inactive_file:39943 isolated_file:0 [ 249.598962][T12277] unevictable:768 dirty:49 writeback:0 [ 249.598962][T12277] slab_reclaimable:12609 slab_unreclaimable:105252 [ 249.598962][T12277] mapped:29022 shmem:1449 pagetables:1113 [ 249.598962][T12277] sec_pagetables:0 bounce:0 [ 249.598962][T12277] kernel_misc_reclaimable:0 [ 249.598962][T12277] free:1305688 free_pcp:22664 free_cma:0 [ 249.692407][T12277] Node 0 active_anon:34272kB inactive_anon:0kB active_file:12564kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116088kB dirty:196kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15008kB pagetables:4316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.738683][T12277] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.776051][T12277] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.846641][T12277] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 249.852513][T12277] Node 0 DMA32 free:1307124kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34772kB inactive_anon:0kB active_file:12564kB inactive_file:159572kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:72660kB local_pcp:38136kB free_cma:0kB [ 249.909702][T12277] lowmem_reserve[]: 0 0 0 0 0 [ 249.914498][T12277] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.953674][T12277] lowmem_reserve[]: 0 0 0 0 0 [ 249.966336][T12277] Node 1 Normal free:3898180kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15652kB local_pcp:9888kB free_cma:0kB [ 249.999440][T12277] lowmem_reserve[]: 0 0 0 0 0 [ 250.015838][T12277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.037693][T12277] Node 0 DMA32: 586*4kB (M) 597*8kB (UME) 294*16kB (UME) 654*32kB (UME) 373*64kB (UM) 89*128kB (UME) 49*256kB (UME) 13*512kB (UM) 7*1024kB (U) 4*2048kB (UE) 294*4096kB (UM) = 1306800kB [ 250.056799][T12277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.068700][T12277] Node 1 Normal: 161*4kB (UE) 48*8kB (UME) 36*16kB (UME) 84*32kB (UME) 30*64kB (UME) 10*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3898180kB [ 250.071877][T12271] bond6 (unregistering): (slave dummy0): Releasing active interface [ 250.092394][T12277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.107323][T12277] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.125145][T12277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.138812][T12271] bond6 (unregistering): Released all slaves [ 250.181989][T12297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.192274][T12277] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.203243][T12277] 45425 total pagecache pages [ 250.203796][T12301] tipc: Enabled bearer , priority 0 [ 250.215859][T12277] 0 pages in swap cache [ 250.287211][T12277] Free swap = 124996kB [ 250.297768][T12277] Total swap = 124996kB [ 250.302000][T12277] 2097051 pages RAM [ 250.305842][T12277] 0 pages HighMem/MovableOnly [ 250.341330][T12277] 424280 pages reserved [ 250.348456][T12277] 0 pages cma reserved [ 250.420663][T12307] __nla_validate_parse: 8 callbacks suppressed [ 250.420682][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 250.546907][T12312] netlink: 'syz.4.1573': attribute type 21 has an invalid length. [ 250.554809][T12312] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1573'. [ 250.583562][T12312] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1573'. [ 251.168794][T12335] : renamed from bond_slave_0 [ 251.248354][ T30] audit: type=1800 audit(1766123537.330:3): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1582" name="memory.events" dev="tmpfs" ino=1515 res=0 errno=0 [ 251.330433][ T6178] tipc: Node number set to 1946731218 [ 252.101919][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 252.223006][T12208] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.267819][T12208] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.306629][T12208] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.345764][T12208] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.777029][T12376] wg1 speed is unknown, defaulting to 1000 [ 253.052757][T12379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1591'. [ 253.074636][T12378] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1591'. [ 253.183431][T12381] wg1 speed is unknown, defaulting to 1000 [ 253.351370][T12390] wg1 speed is unknown, defaulting to 1000 [ 253.743607][T12406] SET target dimension over the limit! [ 253.781903][T12410] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1598'. [ 253.807974][T12408] sctp: [Deprecated]: syz.0.1597 (pid 12408) Use of int in max_burst socket option. [ 253.807974][T12408] Use struct sctp_assoc_value instead [ 253.880807][T12410] 0ªî{X¹¦: renamed from gretap0 [ 253.901880][T12410] 0ªî{X¹¦: entered allmulticast mode [ 253.927230][T12410] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 253.950040][T12418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'. [ 254.300535][T12432] tipc: Enabled bearer , priority 0 [ 254.307843][T12433] syzkaller0: entered promiscuous mode [ 254.313572][T12433] syzkaller0: entered allmulticast mode [ 254.388332][T12432] tipc: Resetting bearer [ 254.429857][T12425] tipc: Resetting bearer [ 254.481108][T12425] tipc: Disabling bearer [ 254.642169][T12446] batadv0: entered promiscuous mode [ 254.642625][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 254.689745][T12452] validate_nla: 2 callbacks suppressed [ 254.689766][T12452] netlink: 'syz.2.1610': attribute type 12 has an invalid length. [ 254.742115][T12454] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.801333][T12453] wg1 speed is unknown, defaulting to 1000 [ 254.910575][T12456] dvmrp1: entered allmulticast mode [ 254.930029][T12460] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1612'. [ 255.690298][T12499] wg1 speed is unknown, defaulting to 1000 [ 255.759163][T12503] tipc: Enabling of bearer rejected, already enabled [ 255.997064][T12516] openvswitch: netlink: Message has 4096 unknown bytes. [ 256.302611][T12531] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20001 [ 256.393367][T12535] __nla_validate_parse: 1 callbacks suppressed [ 256.393391][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 256.426837][T12535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1633'. [ 256.581873][T12538] tipc: Enabling of bearer rejected, already enabled [ 256.610278][T12540] macvtap1: entered allmulticast mode [ 256.616057][T12540] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 256.626259][T12540] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 256.934460][T12560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1643'. [ 257.106193][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1644'. [ 257.146604][T12571] netlink: 'syz.2.1644': attribute type 7 has an invalid length. [ 257.162200][T12571] netlink: 'syz.2.1644': attribute type 8 has an invalid length. [ 257.183226][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 257.197651][T12577] netlink: 'syz.0.1648': attribute type 3 has an invalid length. [ 257.239709][T12571] ip6gretap0: entered promiscuous mode [ 257.263339][T12571] ip6gretap0: left promiscuous mode [ 257.428370][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 257.624268][T12604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.946874][T12613] sctp: [Deprecated]: syz.1.1657 (pid 12613) Use of int in maxseg socket option. [ 257.946874][T12613] Use struct sctp_assoc_value instead [ 258.375291][T12632] wg1 speed is unknown, defaulting to 1000 [ 258.659357][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 258.686714][T12652] netlink: 'syz.2.1664': attribute type 30 has an invalid length. [ 258.746786][T12203] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.765597][T12203] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.786555][T12203] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.805037][T12203] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.090249][T12668] siw: device registration error -23 [ 259.478958][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 259.582687][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 259.607726][T12684] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 259.659777][T12682] vlan1: entered allmulticast mode [ 259.672997][T12682] bridge0: entered allmulticast mode [ 260.030928][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 260.313627][T12708] netlink: 'syz.2.1681': attribute type 11 has an invalid length. [ 260.500839][T12725] netlink: 'syz.0.1684': attribute type 2 has an invalid length. [ 260.593472][T12725] bond6 (unregistering): Released all slaves [ 260.626810][T12738] 8021q: VLANs not supported on ip6tnl0 [ 260.919179][T12759] veth0_to_team: entered promiscuous mode [ 260.946791][T12760] netlink: 'syz.2.1692': attribute type 9 has an invalid length. [ 261.062150][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.104704][T12769] netlink: 'syz.3.1694': attribute type 3 has an invalid length. [ 261.148034][T12769] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 261.177244][T12769] NCSI netlink: No device for ifindex 813332851 [ 261.527718][T12793] wg1 speed is unknown, defaulting to 1000 [ 261.628240][T12803] __nla_validate_parse: 3 callbacks suppressed [ 261.628261][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 261.760802][T12811] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 261.932236][T12817] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 261.951251][T12817] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1705'. [ 261.992486][T12818] netlink: 'syz.4.1706': attribute type 3 has an invalid length. [ 262.021996][T12811] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.122482][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 262.292454][T12829] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 262.306964][T12829] batman_adv: batadv0: Adding interface: gretap0 [ 262.314031][T12829] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 262.350705][T12829] batman_adv: batadv0: Interface activated: gretap0 [ 262.578373][T12846] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.725696][T12852] wg1 speed is unknown, defaulting to 1000 [ 262.875581][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 262.979323][T12868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1720'. [ 263.101232][T12868] wg1 speed is unknown, defaulting to 1000 [ 263.340863][T12876] tipc: Enabling of bearer rejected, already enabled [ 263.720326][T12888] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 263.738692][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 263.753431][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 263.929525][T12898] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1727'. [ 263.940036][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 263.969418][T12898] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1727'. [ 264.152507][T12906] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 264.478756][T12914] wg1 speed is unknown, defaulting to 1000 [ 264.832074][T12923] syz.0.1730: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 264.857052][T12923] CPU: 1 UID: 0 PID: 12923 Comm: syz.0.1730 Not tainted syzkaller #0 PREEMPT(full) [ 264.857080][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.857093][T12923] Call Trace: [ 264.857101][T12923] [ 264.857110][T12923] dump_stack_lvl+0x189/0x250 [ 264.857141][T12923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.857164][T12923] ? __pfx__printk+0x10/0x10 [ 264.857191][T12923] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.857224][T12923] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.857257][T12923] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 264.857291][T12923] warn_alloc+0x214/0x310 [ 264.857325][T12923] ? __pfx_warn_alloc+0x10/0x10 [ 264.857372][T12923] ? __get_vm_area_node+0x28f/0x300 [ 264.857408][T12923] ? __do_replace+0xab/0x980 [ 264.857434][T12923] __vmalloc_node_range_noprof+0x690/0x12d0 [ 264.857464][T12923] ? translate_table+0x12cb/0x2040 [ 264.857510][T12923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 264.857544][T12923] ? __do_replace+0xab/0x980 [ 264.857566][T12923] vzalloc_noprof+0xb2/0xf0 [ 264.857591][T12923] ? __do_replace+0xab/0x980 [ 264.857614][T12923] __do_replace+0xab/0x980 [ 264.857648][T12923] ? __pfx___do_replace+0x10/0x10 [ 264.857672][T12923] ? _copy_from_user+0x94/0xb0 [ 264.857707][T12923] do_ip6t_set_ctl+0xa16/0xce0 [ 264.857733][T12923] ? rcu_is_watching+0x15/0xb0 [ 264.857758][T12923] ? trace_contention_end+0x39/0x100 [ 264.857783][T12923] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 264.857828][T12923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.857908][T12923] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.857947][T12923] nf_setsockopt+0x26f/0x290 [ 264.857976][T12923] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.858005][T12923] do_sock_setsockopt+0x17c/0x1b0 [ 264.858040][T12923] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.858077][T12923] do_syscall_64+0xfa/0xf80 [ 264.858105][T12923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.858126][T12923] ? clear_bhb_loop+0x60/0xb0 [ 264.858151][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.858171][T12923] RIP: 0033:0x7f373218f749 [ 264.858189][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.858207][T12923] RSP: 002b:00007f37303f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.858229][T12923] RAX: ffffffffffffffda RBX: 00007f37323e6090 RCX: 00007f373218f749 [ 264.858255][T12923] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 264.858267][T12923] RBP: 00007f3732213f91 R08: 00000000000007f8 R09: 0000000000000000 [ 264.858281][T12923] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.858294][T12923] R13: 00007f37323e6128 R14: 00007f37323e6090 R15: 00007ffd65856fa8 [ 264.858329][T12923] [ 264.858337][T12923] Mem-Info: [ 265.139865][T12942] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 265.166466][T12923] active_anon:9203 inactive_anon:0 isolated_anon:0 [ 265.166466][T12923] active_file:3141 inactive_file:39949 isolated_file:0 [ 265.166466][T12923] unevictable:768 dirty:53 writeback:0 [ 265.166466][T12923] slab_reclaimable:12340 slab_unreclaimable:107067 [ 265.166466][T12923] mapped:30071 shmem:2695 pagetables:1177 [ 265.166466][T12923] sec_pagetables:0 bounce:0 [ 265.166466][T12923] kernel_misc_reclaimable:0 [ 265.166466][T12923] free:1300112 free_pcp:16388 free_cma:0 [ 265.256469][T12923] Node 0 active_anon:37612kB inactive_anon:0kB active_file:12564kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120284kB dirty:212kB writeback:0kB shmem:10244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14980kB pagetables:4472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.318547][T12923] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.376869][T12923] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.458957][T12923] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 265.464810][T12923] Node 0 DMA32 free:1286908kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36912kB inactive_anon:0kB active_file:12564kB inactive_file:159596kB unevictable:1536kB writepending:212kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:49936kB local_pcp:18800kB free_cma:0kB [ 265.517481][T12923] lowmem_reserve[]: 0 0 0 0 0 [ 265.522419][T12923] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.578571][T12923] lowmem_reserve[]: 0 0 0 0 0 [ 265.586685][T12923] Node 1 Normal free:3898180kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15656kB local_pcp:5764kB free_cma:0kB [ 265.620748][T12923] lowmem_reserve[]: 0 0 0 0 0 [ 265.625821][T12923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.640258][T12923] Node 0 DMA32: 648*4kB (ME) 305*8kB (ME) 191*16kB (UME) 261*32kB (UME) 429*64kB (UME) 103*128kB (UM) 66*256kB (UME) 14*512kB (UM) 9*1024kB (U) 4*2048kB (UE) 291*4096kB (UM) = 1290488kB [ 265.663773][T12923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.727381][T12923] Node 1 Normal: 161*4kB (UE) 48*8kB (UME) 36*16kB (UME) 84*32kB (UME) 30*64kB (UME) 10*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3898180kB [ 265.766525][T12923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.786491][T12923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.800520][T12923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.869502][T12923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.880207][T12923] 44556 total pagecache pages [ 265.885063][T12923] 0 pages in swap cache [ 265.890498][T12923] Free swap = 124996kB [ 265.894816][T12923] Total swap = 124996kB [ 265.899708][T12923] 2097051 pages RAM [ 265.903827][T12923] 0 pages HighMem/MovableOnly [ 265.910768][T12923] 424280 pages reserved [ 265.915785][T12923] 0 pages cma reserved [ 266.202593][T12985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.324647][T12989] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 266.637646][T13017] __nla_validate_parse: 13 callbacks suppressed [ 266.637662][T13017] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1754'. [ 266.695510][T13019] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1755'. [ 266.705565][T13020] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1755'. [ 266.773765][T13023] netlink: 'syz.3.1756': attribute type 2 has an invalid length. [ 266.787522][T13023] @„;: entered promiscuous mode [ 266.912098][T13024] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 267.500395][T13046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1763'. [ 267.819255][T13064] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 267.828247][T13064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.892368][T13067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.951920][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 268.028327][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1769'. [ 268.059089][T13072] wg1 speed is unknown, defaulting to 1000 [ 268.102377][T13074] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 268.281815][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 268.325465][T13084] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.351532][T13086] bond6: option ad_select: unable to set because the bond device is up [ 268.434409][T13091] vxlan1: entered promiscuous mode [ 268.439973][T13091] vxlan1: entered allmulticast mode [ 268.445950][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.466038][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.478699][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.496585][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.501193][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.219230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.896524][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 383.940242][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.376521][ T31] INFO: task kworker/1:1:40 blocked for more than 143 seconds. [ 429.384149][ T31] Not tainted syzkaller #0 [ 429.389202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.397954][ T31] task:kworker/1:1 state:D stack:21304 pid:40 tgid:40 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 429.410201][ T31] Workqueue: events rfkill_sync_work [ 429.415576][ T31] Call Trace: [ 429.418991][ T31] [ 429.421961][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.426831][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 429.432118][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.438699][ T31] ? preempt_schedule+0xae/0xc0 [ 429.443621][ T31] ? preempt_schedule+0xae/0xc0 [ 429.448766][ T31] ? __pfx___schedule+0x10/0x10 [ 429.453690][ T31] ? schedule+0x91/0x360 [ 429.459878][ T31] schedule+0x165/0x360 [ 429.464110][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.470232][ T31] __mutex_lock+0x7e6/0x1350 [ 429.474903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.479995][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 429.485353][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.490951][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 429.496216][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.502415][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.508866][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.514642][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 429.520458][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.526241][ T31] rfkill_set_block+0x1d2/0x440 [ 429.531286][ T31] rfkill_sync_work+0x114/0x200 [ 429.536184][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 429.548511][ T31] process_scheduled_works+0xad1/0x1770 [ 429.554225][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.560403][ T31] worker_thread+0x8a0/0xda0 [ 429.565084][ T31] kthread+0x711/0x8a0 [ 429.569417][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.574589][ T31] ? __pfx_kthread+0x10/0x10 [ 429.579355][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.584618][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 429.590081][ T31] ? __pfx_kthread+0x10/0x10 [ 429.594736][ T31] ret_from_fork+0x599/0xb30 [ 429.599855][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.605162][ T31] ? __switch_to_asm+0x39/0x70 [ 429.610224][ T31] ? __switch_to_asm+0x33/0x70 [ 429.615044][ T31] ? __pfx_kthread+0x10/0x10 [ 429.621162][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.626017][ T31] [ 429.629840][ T31] INFO: task kworker/1:4:5905 blocked for more than 143 seconds. [ 429.637901][ T31] Not tainted syzkaller #0 [ 429.642883][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.651782][ T31] task:kworker/1:4 state:D stack:23704 pid:5905 tgid:5905 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 429.664188][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 429.671024][ T31] Call Trace: [ 429.674341][ T31] [ 429.696517][ T31] __schedule+0x14bc/0x5000 [ 429.701167][ T31] ? __pfx___schedule+0x10/0x10 [ 429.706091][ T31] ? schedule+0x91/0x360 [ 429.728459][ T31] schedule+0x165/0x360 [ 429.732724][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.738842][ T31] __mutex_lock+0x7e6/0x1350 [ 429.743508][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.769573][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 429.775891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.781534][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 429.787828][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 429.794153][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 429.800702][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 429.806647][ T31] process_scheduled_works+0xad1/0x1770 [ 429.812491][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.818747][ T31] worker_thread+0x8a0/0xda0 [ 429.823561][ T31] kthread+0x711/0x8a0 [ 429.827841][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.832998][ T31] ? __pfx_kthread+0x10/0x10 [ 429.837892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.843130][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 429.848775][ T31] ? __pfx_kthread+0x10/0x10 [ 429.853436][ T31] ret_from_fork+0x599/0xb30 [ 429.858341][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.863792][ T31] ? __switch_to_asm+0x39/0x70 [ 429.868666][ T31] ? __switch_to_asm+0x33/0x70 [ 429.873709][ T31] ? __pfx_kthread+0x10/0x10 [ 429.878526][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.883484][ T31] [ 429.886858][ T31] INFO: task syz.4.1740:12955 blocked for more than 143 seconds. [ 429.894611][ T31] Not tainted syzkaller #0 [ 429.899898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.908769][ T31] task:syz.4.1740 state:D stack:25656 pid:12955 tgid:12953 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 429.920869][ T31] Call Trace: [ 429.924178][ T31] [ 429.927286][ T31] __schedule+0x14bc/0x5000 [ 429.931841][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 429.938099][ T31] ? irqentry_exit+0x5dd/0x660 [ 429.942910][ T31] ? trace_irq_disable+0x37/0x100 [ 429.948027][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 429.954143][ T31] ? __pfx___schedule+0x10/0x10 [ 429.959103][ T31] ? schedule+0x91/0x360 [ 429.963386][ T31] schedule+0x165/0x360 [ 429.967703][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.973216][ T31] __mutex_lock+0x7e6/0x1350 [ 429.977965][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.982800][ T31] ? rfkill_register+0x37/0x8e0 [ 429.987809][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.992891][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 429.998404][ T31] ? device_initialize+0x24b/0x440 [ 430.003573][ T31] rfkill_register+0x37/0x8e0 [ 430.008428][ T31] nfc_register_device+0x14a/0x320 [ 430.013604][ T31] nci_register_device+0x87f/0x9d0 [ 430.018989][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 430.024680][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 430.030078][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 430.035500][ T31] virtual_ncidev_open+0x129/0x1a0 [ 430.040817][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 430.046570][ T31] misc_open+0x2d5/0x350 [ 430.050876][ T31] chrdev_open+0x4cc/0x5e0 [ 430.055331][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.060422][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.066844][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.071836][ T31] do_dentry_open+0x7ce/0x1420 [ 430.076743][ T31] vfs_open+0x3b/0x340 [ 430.080846][ T31] ? path_openat+0x33f3/0x3dd0 [ 430.085624][ T31] path_openat+0x340e/0x3dd0 [ 430.090411][ T31] ? do_sys_openat2+0xbc/0x200 [ 430.095250][ T31] ? __x64_sys_openat+0x138/0x170 [ 430.100463][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.105524][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.110581][ T31] do_filp_open+0x1fa/0x410 [ 430.115137][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.120386][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.125304][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.129795][ T31] do_sys_openat2+0x121/0x200 [ 430.134520][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.139868][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.144678][ T31] __x64_sys_openat+0x138/0x170 [ 430.149648][ T31] do_syscall_64+0xfa/0xf80 [ 430.154199][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.160396][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.165120][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.171137][ T31] RIP: 0033:0x7fe260b8f749 [ 430.175676][ T31] RSP: 002b:00007fe261a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.184479][ T31] RAX: ffffffffffffffda RBX: 00007fe260de5fa0 RCX: 00007fe260b8f749 [ 430.192527][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 430.200654][ T31] RBP: 00007fe260c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.208747][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.216879][ T31] R13: 00007fe260de6038 R14: 00007fe260de5fa0 R15: 00007fffd0b963f8 [ 430.225008][ T31] [ 430.228159][ T31] INFO: task syz.2.1741:12954 blocked for more than 144 seconds. [ 430.235903][ T31] Not tainted syzkaller #0 [ 430.246512][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.255238][ T31] task:syz.2.1741 state:D stack:25784 pid:12954 tgid:12954 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 430.268995][ T31] Call Trace: [ 430.272296][ T31] [ 430.275237][ T31] __schedule+0x14bc/0x5000 [ 430.280148][ T31] ? lockdep_unlock+0x89/0x120 [ 430.284965][ T31] ? stack_trace_save+0x9c/0xe0 [ 430.289952][ T31] ? __pfx___schedule+0x10/0x10 [ 430.294855][ T31] ? schedule+0x91/0x360 [ 430.299193][ T31] schedule+0x165/0x360 [ 430.303387][ T31] schedule_timeout+0x9a/0x270 [ 430.308248][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 430.313672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.318969][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 430.324205][ T31] ? wait_for_completion+0x267/0x5d0 [ 430.329636][ T31] wait_for_completion+0x2bf/0x5d0 [ 430.334801][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 430.340717][ T31] ? __flush_work+0xd2/0xbc0 [ 430.345366][ T31] ? __flush_work+0xd2/0xbc0 [ 430.350032][ T31] __flush_work+0x9b9/0xbc0 [ 430.354842][ T31] ? __flush_work+0xd2/0xbc0 [ 430.359546][ T31] ? __pfx___flush_work+0x10/0x10 [ 430.364601][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 430.370052][ T31] ? __pfx___cancel_work+0x10/0x10 [ 430.375204][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 430.380936][ T31] ? __cancel_work_sync+0x5c/0x110 [ 430.386092][ T31] __cancel_work_sync+0xbe/0x110 [ 430.391238][ T31] rfkill_unregister+0x92/0x220 [ 430.396131][ T31] nfc_unregister_device+0x96/0x2a0 [ 430.401412][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 430.407247][ T31] virtual_ncidev_close+0x56/0x90 [ 430.412303][ T31] __fput+0x44c/0xa70 [ 430.416376][ T31] task_work_run+0x1d4/0x260 [ 430.421022][ T31] ? __pfx_task_work_run+0x10/0x10 [ 430.426187][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 430.431688][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 430.437225][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 430.442528][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.447382][ T31] do_syscall_64+0x2e3/0xf80 [ 430.452038][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.458194][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.462908][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.468966][ T31] RIP: 0033:0x7f2b43b8f749 [ 430.473440][ T31] RSP: 002b:00007ffcd732f7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 430.481937][ T31] RAX: 0000000000000000 RBX: 0000000000040d38 RCX: 00007f2b43b8f749 [ 430.489986][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 430.498318][ T31] RBP: 00007f2b43de7da0 R08: 0000000000000001 R09: 00000028d732fadf [ 430.506437][ T31] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007f2b43de609c [ 430.514438][ T31] R13: 00007f2b43de6090 R14: ffffffffffffffff R15: 00007ffcd732f900 [ 430.522532][ T31] [ 430.525628][ T31] INFO: task syz.0.1746:12981 blocked for more than 144 seconds. [ 430.533539][ T31] Not tainted syzkaller #0 [ 430.538573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.547322][ T31] task:syz.0.1746 state:D stack:28152 pid:12981 tgid:12980 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 430.559345][ T31] Call Trace: [ 430.562777][ T31] [ 430.565723][ T31] __schedule+0x14bc/0x5000 [ 430.570383][ T31] ? __pfx___schedule+0x10/0x10 [ 430.575293][ T31] ? schedule+0x91/0x360 [ 430.579650][ T31] schedule+0x165/0x360 [ 430.583855][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.589476][ T31] __mutex_lock+0x7e6/0x1350 [ 430.594107][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.599158][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.603967][ T31] ? misc_open+0x51/0x350 [ 430.608397][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.613505][ T31] misc_open+0x51/0x350 [ 430.617843][ T31] chrdev_open+0x4cc/0x5e0 [ 430.622307][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.627367][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.633742][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.638785][ T31] do_dentry_open+0x7ce/0x1420 [ 430.643595][ T31] vfs_open+0x3b/0x340 [ 430.647760][ T31] ? path_openat+0x33f3/0x3dd0 [ 430.652569][ T31] path_openat+0x340e/0x3dd0 [ 430.657628][ T31] ? do_sys_openat2+0xbc/0x200 [ 430.662448][ T31] ? __x64_sys_openat+0x138/0x170 [ 430.667545][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.672512][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.677555][ T31] do_filp_open+0x1fa/0x410 [ 430.682171][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.687327][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.692222][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.696659][ T31] do_sys_openat2+0x121/0x200 [ 430.701515][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.706786][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.711601][ T31] __x64_sys_openat+0x138/0x170 [ 430.716564][ T31] do_syscall_64+0xfa/0xf80 [ 430.721153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.727350][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.732187][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.738365][ T31] RIP: 0033:0x7f373218f749 [ 430.742939][ T31] RSP: 002b:00007f3732f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.751582][ T31] RAX: ffffffffffffffda RBX: 00007f37323e5fa0 RCX: 00007f373218f749 [ 430.759666][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 430.767715][ T31] RBP: 00007f3732213f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.775723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.783878][ T31] R13: 00007f37323e6038 R14: 00007f37323e5fa0 R15: 00007ffd65856fa8 [ 430.792013][ T31] [ 430.795133][ T31] INFO: task syz.0.1746:12982 blocked for more than 144 seconds. [ 430.802969][ T31] Not tainted syzkaller #0 [ 430.808049][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.816805][ T31] task:syz.0.1746 state:D stack:28152 pid:12982 tgid:12980 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 430.828820][ T31] Call Trace: [ 430.832126][ T31] [ 430.835087][ T31] __schedule+0x14bc/0x5000 [ 430.839837][ T31] ? __pfx___schedule+0x10/0x10 [ 430.844750][ T31] ? schedule+0x91/0x360 [ 430.849086][ T31] schedule+0x165/0x360 [ 430.853290][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.858876][ T31] __mutex_lock+0x7e6/0x1350 [ 430.863531][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.868552][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.873392][ T31] ? misc_open+0x51/0x350 [ 430.877862][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.882957][ T31] misc_open+0x51/0x350 [ 430.887203][ T31] chrdev_open+0x4cc/0x5e0 [ 430.891667][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.896677][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.903047][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.908111][ T31] do_dentry_open+0x7ce/0x1420 [ 430.912928][ T31] vfs_open+0x3b/0x340 [ 430.917063][ T31] ? path_openat+0x33f3/0x3dd0 [ 430.921877][ T31] path_openat+0x340e/0x3dd0 [ 430.926595][ T31] ? do_sys_openat2+0xbc/0x200 [ 430.931397][ T31] ? __x64_sys_openat+0x138/0x170 [ 430.936505][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.941486][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.946532][ T31] do_filp_open+0x1fa/0x410 [ 430.951085][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.956144][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.961125][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.965512][ T31] do_sys_openat2+0x121/0x200 [ 430.970325][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.975575][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.980469][ T31] __x64_sys_openat+0x138/0x170 [ 430.985468][ T31] do_syscall_64+0xfa/0xf80 [ 430.990064][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.996166][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.000951][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.006932][ T31] RIP: 0033:0x7f373218f749 [ 431.011360][ T31] RSP: 002b:00007f37303f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.019912][ T31] RAX: ffffffffffffffda RBX: 00007f37323e6090 RCX: 00007f373218f749 [ 431.027978][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 431.035982][ T31] RBP: 00007f3732213f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.044086][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.052151][ T31] R13: 00007f37323e6128 R14: 00007f37323e6090 R15: 00007ffd65856fa8 [ 431.060387][ T31] [ 431.063495][ T31] INFO: task syz.3.1774:13095 blocked for more than 145 seconds. [ 431.071342][ T31] Not tainted syzkaller #0 [ 431.076433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.085131][ T31] task:syz.3.1774 state:D stack:23544 pid:13095 tgid:13094 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 431.097162][ T31] Call Trace: [ 431.100496][ T31] [ 431.103471][ T31] __schedule+0x14bc/0x5000 [ 431.108111][ T31] ? __pfx___schedule+0x10/0x10 [ 431.113035][ T31] ? schedule+0x91/0x360 [ 431.117424][ T31] schedule+0x165/0x360 [ 431.121626][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.127165][ T31] __mutex_lock+0x7e6/0x1350 [ 431.131802][ T31] ? rcu_is_watching+0x15/0xb0 [ 431.136696][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.141518][ T31] ? rfkill_register+0x37/0x8e0 [ 431.146474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.151597][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 431.156639][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 431.162004][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 431.167421][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 431.173102][ T31] rfkill_register+0x37/0x8e0 [ 431.177910][ T31] wiphy_register+0x246a/0x2d20 [ 431.182884][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 431.188196][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 431.193550][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 431.198775][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 431.204891][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 431.210483][ T31] ? ieee80211_register_hw+0x1451/0x40d0 [ 431.216174][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 431.222285][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 431.228275][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 431.234234][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 431.240721][ T31] ? __hrtimer_setup+0x181/0x200 [ 431.245726][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 431.251691][ T31] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 431.257561][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 431.263686][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 431.269348][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 431.274534][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 431.279823][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 431.285736][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 431.291410][ T31] ? rcu_is_watching+0x15/0xb0 [ 431.296232][ T31] ? __nla_parse+0x40/0x60 [ 431.300865][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 431.307562][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 431.313161][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 431.319354][ T31] ? bpf_lsm_capable+0x9/0x20 [ 431.324264][ T31] ? security_capable+0x7e/0x2e0 [ 431.329387][ T31] genl_rcv_msg+0x60e/0x790 [ 431.333973][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.339124][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 431.344796][ T31] netlink_rcv_skb+0x208/0x470 [ 431.349898][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.354992][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.360443][ T31] ? down_read+0x274/0x2e0 [ 431.364929][ T31] ? genl_rcv+0xd/0x40 [ 431.369227][ T31] genl_rcv+0x28/0x40 [ 431.373249][ T31] netlink_unicast+0x82f/0x9e0 [ 431.378417][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.383747][ T31] ? netlink_sendmsg+0x642/0xb30 [ 431.388786][ T31] ? skb_put+0x11b/0x210 [ 431.393083][ T31] netlink_sendmsg+0x805/0xb30 [ 431.397973][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.403298][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.408363][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.413701][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.419090][ T31] __sock_sendmsg+0x21c/0x270 [ 431.423808][ T31] ____sys_sendmsg+0x505/0x820 [ 431.428700][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.434048][ T31] ? import_iovec+0x74/0xa0 [ 431.438680][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 431.443409][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.448741][ T31] ? futex_wait+0x285/0x360 [ 431.453327][ T31] ? __fget_files+0x2a/0x420 [ 431.458028][ T31] ? __fget_files+0x3a0/0x420 [ 431.462837][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 431.467887][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.473482][ T31] ? do_syscall_64+0xbe/0xf80 [ 431.478285][ T31] do_syscall_64+0xfa/0xf80 [ 431.482843][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.489004][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.493721][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.499720][ T31] RIP: 0033:0x7f1ad298f749 [ 431.504176][ T31] RSP: 002b:00007f1ad38d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.512690][ T31] RAX: ffffffffffffffda RBX: 00007f1ad2be5fa0 RCX: 00007f1ad298f749 [ 431.520729][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 431.528808][ T31] RBP: 00007f1ad2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.537194][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.545203][ T31] R13: 00007f1ad2be6038 R14: 00007f1ad2be5fa0 R15: 00007ffc3324dcd8 [ 431.553319][ T31] [ 431.556452][ T31] INFO: task syz.3.1774:13099 blocked for more than 145 seconds. [ 431.564206][ T31] Not tainted syzkaller #0 [ 431.569393][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.578135][ T31] task:syz.3.1774 state:D stack:25616 pid:13099 tgid:13094 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 431.590149][ T31] Call Trace: [ 431.593493][ T31] [ 431.596511][ T31] __schedule+0x14bc/0x5000 [ 431.601104][ T31] ? __pfx___schedule+0x10/0x10 [ 431.606024][ T31] ? schedule+0x91/0x360 [ 431.610379][ T31] schedule+0x165/0x360 [ 431.614587][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.620208][ T31] __mutex_lock+0x7e6/0x1350 [ 431.624862][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.629728][ T31] ? genl_rcv_msg+0x10d/0x790 [ 431.634472][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.639653][ T31] ? radix_tree_lookup+0x240/0x290 [ 431.644810][ T31] genl_rcv_msg+0x10d/0x790 [ 431.649491][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.654577][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 431.659617][ T31] netlink_rcv_skb+0x208/0x470 [ 431.664424][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.669571][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.674909][ T31] ? down_read+0x274/0x2e0 [ 431.679426][ T31] ? genl_rcv+0xd/0x40 [ 431.683563][ T31] genl_rcv+0x28/0x40 [ 431.687713][ T31] netlink_unicast+0x82f/0x9e0 [ 431.692622][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.698290][ T31] ? netlink_sendmsg+0x642/0xb30 [ 431.703319][ T31] ? skb_put+0x11b/0x210 [ 431.707659][ T31] netlink_sendmsg+0x805/0xb30 [ 431.712473][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.717886][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.722871][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.728256][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.733685][ T31] __sock_sendmsg+0x21c/0x270 [ 431.738487][ T31] __sys_sendto+0x3bd/0x520 [ 431.743043][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 431.748171][ T31] ? count_memcg_event_mm+0x21/0x260 [ 431.753524][ T31] ? exc_page_fault+0x82/0x100 [ 431.758399][ T31] __x64_sys_sendto+0xde/0x100 [ 431.763235][ T31] do_syscall_64+0xfa/0xf80 [ 431.767847][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.774181][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.779023][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.784971][ T31] RIP: 0033:0x7f1ad29915dc [ 431.789495][ T31] RSP: 002b:00007f1ad38aeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 431.797986][ T31] RAX: ffffffffffffffda RBX: 00007f1ad38aefc0 RCX: 00007f1ad29915dc [ 431.805974][ T31] RDX: 0000000000000020 RSI: 00007f1ad38af010 RDI: 0000000000000006 [ 431.814047][ T31] RBP: 0000000000000000 R08: 00007f1ad38aef14 R09: 000000000000000c [ 431.822097][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 431.830276][ T31] R13: 00007f1ad38aef68 R14: 00007f1ad38af010 R15: 0000000000000000 [ 431.838379][ T31] [ 431.841479][ T31] INFO: task syz.3.1774:13101 blocked for more than 145 seconds. [ 431.849381][ T31] Not tainted syzkaller #0 [ 431.854365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.863122][ T31] task:syz.3.1774 state:D stack:26016 pid:13101 tgid:13094 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 431.875157][ T31] Call Trace: [ 431.878525][ T31] [ 431.881516][ T31] __schedule+0x14bc/0x5000 [ 431.886085][ T31] ? __pfx___schedule+0x10/0x10 [ 431.891101][ T31] ? schedule+0x91/0x360 [ 431.895475][ T31] schedule+0x165/0x360 [ 431.899737][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.905234][ T31] __mutex_lock+0x7e6/0x1350 [ 431.909937][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.914747][ T31] ? genl_rcv_msg+0x10d/0x790 [ 431.919567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.924651][ T31] ? radix_tree_lookup+0x240/0x290 [ 431.930026][ T31] genl_rcv_msg+0x10d/0x790 [ 431.934670][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.939866][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 431.944857][ T31] netlink_rcv_skb+0x208/0x470 [ 431.949908][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.954977][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.960403][ T31] ? down_read+0x274/0x2e0 [ 431.964866][ T31] ? genl_rcv+0xd/0x40 [ 431.969035][ T31] genl_rcv+0x28/0x40 [ 431.973161][ T31] netlink_unicast+0x82f/0x9e0 [ 431.978020][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.983362][ T31] ? netlink_sendmsg+0x642/0xb30 [ 431.988410][ T31] ? skb_put+0x11b/0x210 [ 431.992726][ T31] netlink_sendmsg+0x805/0xb30 [ 431.997710][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.003032][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.008068][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.013475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.018877][ T31] __sock_sendmsg+0x21c/0x270 [ 432.023599][ T31] __sys_sendto+0x3bd/0x520 [ 432.028204][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.033336][ T31] ? fd_install+0x95/0x3d0 [ 432.037914][ T31] ? fd_install+0x307/0x3d0 [ 432.042587][ T31] __x64_sys_sendto+0xde/0x100 [ 432.047474][ T31] do_syscall_64+0xfa/0xf80 [ 432.052031][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.058213][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.062960][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.068965][ T31] RIP: 0033:0x7f1ad29915dc [ 432.073418][ T31] RSP: 002b:00007f1ad388dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.081982][ T31] RAX: ffffffffffffffda RBX: 00007f1ad388dfc0 RCX: 00007f1ad29915dc [ 432.090034][ T31] RDX: 0000000000000020 RSI: 00007f1ad388e010 RDI: 0000000000000009 [ 432.098271][ T31] RBP: 0000000000000000 R08: 00007f1ad388df14 R09: 000000000000000c [ 432.106292][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 432.114366][ T31] R13: 00007f1ad388df68 R14: 00007f1ad388e010 R15: 0000000000000000 [ 432.122482][ T31] [ 432.125559][ T31] INFO: task syz.1.1775:13097 blocked for more than 146 seconds. [ 432.133541][ T31] Not tainted syzkaller #0 [ 432.138580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.147398][ T31] task:syz.1.1775 state:D stack:25984 pid:13097 tgid:13096 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 432.159590][ T31] Call Trace: [ 432.162904][ T31] [ 432.165938][ T31] __schedule+0x14bc/0x5000 [ 432.170593][ T31] ? __pfx___schedule+0x10/0x10 [ 432.175497][ T31] ? schedule+0x91/0x360 [ 432.180019][ T31] schedule+0x165/0x360 [ 432.184314][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.189883][ T31] __mutex_lock+0x7e6/0x1350 [ 432.194531][ T31] ? __mutex_lock+0x5bb/0x1350 [ 432.199387][ T31] ? genl_rcv_msg+0x10d/0x790 [ 432.204107][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.209239][ T31] ? stack_trace_save+0x9c/0xe0 [ 432.214147][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.219185][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.224355][ T31] genl_rcv_msg+0x10d/0x790 [ 432.229054][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.234133][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.239174][ T31] netlink_rcv_skb+0x208/0x470 [ 432.243987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.249130][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.254481][ T31] ? down_read+0x274/0x2e0 [ 432.259148][ T31] ? genl_rcv+0xd/0x40 [ 432.263287][ T31] genl_rcv+0x28/0x40 [ 432.267371][ T31] netlink_unicast+0x82f/0x9e0 [ 432.272194][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.277599][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.282571][ T31] ? skb_put+0x11b/0x210 [ 432.286909][ T31] netlink_sendmsg+0x805/0xb30 [ 432.291714][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.297088][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.302061][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.307556][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.312917][ T31] __sock_sendmsg+0x21c/0x270 [ 432.317693][ T31] __sys_sendto+0x3bd/0x520 [ 432.322261][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.327418][ T31] ? count_memcg_event_mm+0x21/0x260 [ 432.332765][ T31] ? exc_page_fault+0x82/0x100 [ 432.337634][ T31] __x64_sys_sendto+0xde/0x100 [ 432.342444][ T31] do_syscall_64+0xfa/0xf80 [ 432.347026][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.353143][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.357963][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.363903][ T31] RIP: 0033:0x7fd8581915dc [ 432.368482][ T31] RSP: 002b:00007fd8563f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.377056][ T31] RAX: ffffffffffffffda RBX: 00007fd8563f4fc0 RCX: 00007fd8581915dc [ 432.385040][ T31] RDX: 000000000000001c RSI: 00007fd8563f5010 RDI: 0000000000000008 [ 432.393088][ T31] RBP: 0000000000000000 R08: 00007fd8563f4f14 R09: 000000000000000c [ 432.401136][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 432.409329][ T31] R13: 00007fd8563f4f68 R14: 00007fd8563f5010 R15: 0000000000000000 [ 432.417398][ T31] [ 432.420432][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 432.429569][ T31] [ 432.429569][ T31] Showing all locks held in the system: [ 432.437432][ T31] 1 lock held by khungtaskd/31: [ 432.442305][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 432.452345][ T31] 4 locks held by kworker/1:1/40: [ 432.457616][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 432.468785][ T31] #1: ffffc90000b07b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 432.481287][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 432.491456][ T31] #3: ffff888034088100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 432.501291][ T31] 2 locks held by getty/5592: [ 432.505995][ T31] #0: ffff88802f51c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.515847][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 432.526058][ T31] 3 locks held by kworker/1:4/5905: [ 432.531382][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 432.542466][ T31] #1: ffffc9000448fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 432.556069][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 432.567662][ T31] 2 locks held by ipvs-e:4:0/11304: [ 432.572879][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 432.583109][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 432.592111][ T31] 3 locks held by syz.4.1740/12955: [ 432.597397][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.605907][ T31] #1: ffff88806ba19100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 432.615623][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 432.625741][ T31] 1 lock held by syz.2.1741/12954: [ 432.630952][ T31] #0: ffff888034088100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 432.640849][ T31] 1 lock held by syz.0.1746/12981: [ 432.645988][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.654530][ T31] 1 lock held by syz.0.1746/12982: [ 432.659718][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.668315][ T31] 3 locks held by syz.3.1774/13095: [ 432.673540][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.682014][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.691083][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 432.701330][ T31] 2 locks held by syz.3.1774/13099: [ 432.706619][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.714859][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.723962][ T31] 2 locks held by syz.3.1774/13101: [ 432.729303][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.737841][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.746953][ T31] 2 locks held by syz.1.1775/13097: [ 432.752185][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.760567][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.769737][ T31] 2 locks held by syz.1.1775/13098: [ 432.774970][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.783319][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.792471][ T31] 2 locks held by syz.1.1775/13100: [ 432.797725][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.805981][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 432.815112][ T31] 1 lock held by syz-executor/13108: [ 432.820494][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.829198][ T31] 1 lock held by syz-executor/13109: [ 432.834698][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.843336][ T31] 1 lock held by syz-executor/13111: [ 432.848695][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.857270][ T31] 1 lock held by syz-executor/13114: [ 432.862591][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.871173][ T31] 1 lock held by syz-executor/13115: [ 432.876540][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.885074][ T31] 1 lock held by syz-executor/13122: [ 432.890471][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.899043][ T31] 1 lock held by syz-executor/13123: [ 432.904369][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.913110][ T31] 1 lock held by syz-executor/13125: [ 432.918476][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.927020][ T31] 1 lock held by syz-executor/13128: [ 432.932342][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.940918][ T31] 1 lock held by syz-executor/13129: [ 432.946240][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.954826][ T31] 1 lock held by syz-executor/13136: [ 432.960218][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.968770][ T31] 1 lock held by syz-executor/13137: [ 432.974068][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.982641][ T31] 1 lock held by syz-executor/13139: [ 432.988000][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.996537][ T31] 1 lock held by syz-executor/13142: [ 433.001858][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 433.010435][ T31] 1 lock held by syz-executor/13143: [ 433.015764][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 433.024375][ T31] [ 433.026778][ T31] ============================================= [ 433.026778][ T31] [ 433.035228][ T31] NMI backtrace for cpu 1 [ 433.035247][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 433.035263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.035272][ T31] Call Trace: [ 433.035279][ T31] [ 433.035286][ T31] dump_stack_lvl+0x189/0x250 [ 433.035309][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.035329][ T31] ? __pfx__printk+0x10/0x10 [ 433.035358][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 433.035376][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.035393][ T31] ? __pfx__printk+0x10/0x10 [ 433.035416][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.035440][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 433.035457][ T31] watchdog+0xf3c/0xf80 [ 433.035480][ T31] ? watchdog+0x1e2/0xf80 [ 433.035502][ T31] kthread+0x711/0x8a0 [ 433.035524][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.035541][ T31] ? __pfx_kthread+0x10/0x10 [ 433.035560][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.035577][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 433.035594][ T31] ? __pfx_kthread+0x10/0x10 [ 433.035612][ T31] ret_from_fork+0x599/0xb30 [ 433.035637][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 433.035666][ T31] ? __switch_to_asm+0x39/0x70 [ 433.035682][ T31] ? __switch_to_asm+0x33/0x70 [ 433.035699][ T31] ? __pfx_kthread+0x10/0x10 [ 433.035717][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.035748][ T31] [ 433.035753][ T31] Sending NMI from CPU 1 to CPUs 0: [ 433.181566][ C0] NMI backtrace for cpu 0 [ 433.181585][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 433.181605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.181616][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 433.181643][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 433.181660][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 433.181676][ C0] RAX: 4c9dad68ae05da00 RBX: ffffffff8197438a RCX: 4c9dad68ae05da00 [ 433.181690][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 433.181702][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 433.181715][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 433.181728][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 433.181739][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 433.181753][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.181765][ C0] CR2: 000055a5913c2000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 433.181781][ C0] Call Trace: [ 433.181788][ C0] [ 433.181795][ C0] default_idle+0x13/0x20 [ 433.181820][ C0] default_idle_call+0x73/0xb0 [ 433.181846][ C0] do_idle+0x1ea/0x520 [ 433.181864][ C0] ? irqentry_exit+0x5ba/0x660 [ 433.181888][ C0] ? __pfx_do_idle+0x10/0x10 [ 433.181914][ C0] cpu_startup_entry+0x44/0x60 [ 433.181932][ C0] rest_init+0x2de/0x300 [ 433.181948][ C0] start_kernel+0x3ae/0x410 [ 433.181966][ C0] x86_64_start_reservations+0x24/0x30 [ 433.181988][ C0] x86_64_start_kernel+0x143/0x1c0 [ 433.182010][ C0] common_startup_64+0x13e/0x147 [ 433.182039][ C0]