last executing test programs: 1m48.68405146s ago: executing program 2 (id=1966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'syzkaller0\x00', &(0x7f0000000380)=@ethtool_stats={0x1d, 0x6, [0xd, 0xffffffffffffffff, 0xde11, 0x35, 0x6, 0x0]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000240)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r4, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8915, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x60}}, {0x306}, 0x0, {0x2, 0x4e20, @broadcast}, 'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000580)=0x2, &(0x7f0000000540)=r4}, 0xfffffe7c) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xffffffffffff27c3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x67b7, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xb0}}, 0x4c004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e000000303962a4e587f1070039bd9c14630002801400060020010000000000000017989ef10ddb62030000000000000214"], 0x64}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100000081d326d500000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000002380)={'wpan0\x00'}) 1m47.910404559s ago: executing program 0 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) (async) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x4, 0x2}}, 0x80) 1m47.751623248s ago: executing program 0 (id=1970): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x5, 0x3, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x13, 0xde, [@rand_addr=0x64010102, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xab, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x4}, {@broadcast, 0x3}, {@empty, 0x8}, {@empty, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r1, 0x80, 0x10, 0x8000, 0xa, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @private=0xa010102, {[@noop, @rr={0x7, 0x13, 0x43, [@broadcast, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x9, "ba5c32ec7b8200"}, @timestamp_addr={0x44, 0x3c, 0xac, 0x1, 0xd, [{@empty, 0xc94}, {@multicast2, 0x4f4}, {@loopback, 0x3}, {@remote, 0x8}, {@private=0xa010102, 0x58}, {@multicast2, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}]}, @noop]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x5, 0x3, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x13, 0xde, [@rand_addr=0x64010102, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xab, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x4}, {@broadcast, 0x3}, {@empty, 0x8}, {@empty, 0x4}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r1, 0x80, 0x10, 0x8000, 0xa, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @private=0xa010102, {[@noop, @rr={0x7, 0x13, 0x43, [@broadcast, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x9, "ba5c32ec7b8200"}, @timestamp_addr={0x44, 0x3c, 0xac, 0x1, 0xd, [{@empty, 0xc94}, {@multicast2, 0x4f4}, {@loopback, 0x3}, {@remote, 0x8}, {@private=0xa010102, 0x58}, {@multicast2, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}]}, @noop]}}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) 1m47.751172499s ago: executing program 3 (id=1971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x6c}}, 0x0) 1m47.670200501s ago: executing program 3 (id=1974): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) 1m47.503346348s ago: executing program 3 (id=1976): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8001, 0x6ef, 0x2, 0xa, 0x439}, &(0x7f0000000140)=0x14) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffff0001}}, 0x9cd, 0x7f}, &(0x7f00000004c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000500)={r2, 0x7, 0x11, "67348f6494e2bd92f7a1f666b12563a3be"}, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffe8a0"], 0x8397de475a1b5b02) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r6, 0xc0189436, 0x1ffffffe) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) socket(0x21, 0x4, 0x6b7) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1m46.959157633s ago: executing program 0 (id=1978): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x6, [@enum={0x2, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x7a}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x40, 0x70, 0x100}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c01c}, 0x4000001) pipe(&(0x7f0000000600)) (async) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f0000000500)) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) close(r3) (async) close(r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x6, [@enum={0x2, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x7a}, 0x28) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x40, 0x70, 0x100}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c01c}, 0x4000001) (async) 1m46.896652864s ago: executing program 2 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7) (async) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r2, 0x0, 0x12) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="00d30db023aa1619b6048c32d860e81af19a4e957a23ea81e5813d29eb8c6626d7505ba9bbe8938a9242fb1d3cad3b15fdf2f4328791b012abcf3e86de54667dfda3b7e25ee17f8334d4d467174b1d264460d1e4339600afa818c1fd91c86cbc3fdfdf2f281927b6d1a2d6de5c7b767424b3ea3ddd98f7", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000064fc0b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) 1m46.768795566s ago: executing program 2 (id=1982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff3, 0xffe0}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfe, 0x0, 0xb, 0xff, 0x3, 0x3, 0xb, 0x3, 0x0, 0x10, 0xe, 0x0, 0xfd, 0xf6, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4000, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 1m46.619522052s ago: executing program 2 (id=1985): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.609827878s ago: executing program 0 (id=1986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xf12b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 1m46.600590748s ago: executing program 3 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="180500000000000000000000000000009e020000e3ff000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x3, &(0x7f0000000180)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)=':\x00', &(0x7f0000000140)='$\x00'], 0x0, 0x1}}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001014000000000080002400000001b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r1, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xfffffffb) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="180500000000000000000000000000009e020000e3ff000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x3, &(0x7f0000000180)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)=':\x00', &(0x7f0000000140)='$\x00'], 0x0, 0x1}}, 0x30) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001014000000000080002400000001b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r1, 0x4) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xfffffffb) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) (async) 1m46.479696148s ago: executing program 0 (id=1988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) r3 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x7}, 0x40000000) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x1006) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x880) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1m46.406964689s ago: executing program 2 (id=1989): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m46.354978497s ago: executing program 0 (id=1990): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0xffffffffffffffff, "ff00000058b274e6d845167fefe42897ae48fc3c7b00000000000000fcff00", 0xb2, 0xc, 0x6, 0x6}, 0x3c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1m46.323717203s ago: executing program 3 (id=1991): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x1}]}}}}}}}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x23, 0x5, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x4a96f000) setsockopt$llc_int(r4, 0x10c, 0xe, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000000000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a31000000000500010007"], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32], 0x144}}, 0x0) 1m45.932769954s ago: executing program 32 (id=1990): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0xffffffffffffffff, "ff00000058b274e6d845167fefe42897ae48fc3c7b00000000000000fcff00", 0xb2, 0xc, 0x6, 0x6}, 0x3c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1m45.891530604s ago: executing program 2 (id=1993): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000ff080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000dc0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4) r8 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x2f90, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010102, @remote}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x40080}, 0x20004044) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m45.830796387s ago: executing program 33 (id=1993): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000ff080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000dc0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4) r8 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x2f90, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010102, @remote}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x40080}, 0x20004044) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m45.823086357s ago: executing program 3 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000801b50000000000000000000000030600024080f300000400048005000300010000000900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m45.791385799s ago: executing program 34 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000801b50000000000000000000000030600024080f300000400048005000300010000000900010073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 27.51832276s ago: executing program 5 (id=2744): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', r2, 0x20, 0x1, 0x4, 0x9, {{0x8, 0x4, 0x0, 0x2d, 0x20, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0xb, 0x4f, [@loopback, @multicast1]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000001ac0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fedbdf250d000000050900000300000006001a004224000006000100080000000600010004000000"], 0x34}}, 0x4008841) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@private, @dev, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', r3, 0x40, 0x8, 0xbe, 0xfffffffa, {{0xd, 0x4, 0x2, 0x3d, 0x34, 0x64, 0x0, 0x28, 0x29, 0x0, @remote, @remote, {[@end, @ra={0x94, 0x4}, @end, @noop, @rr={0x7, 0x17, 0x83, [@remote, @rand_addr=0x64010102, @empty, @remote, @remote]}]}}}}}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200802}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x9c8, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10e7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x78, 0x1, 0x5, 0x10000}, {0x7, 0xd7, 0x8, 0x9}, {0x3, 0x7, 0x7f, 0x1}, {0x8ae6, 0xf7, 0x3, 0x3143}, {0x7, 0x8, 0x0, 0x1}, {0x5, 0x7, 0x1f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc17b}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r7}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r2}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdbef}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c1c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffbc25}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x6d, 0x3, 0x10001}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044001) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r14, 0xd000941e, &(0x7f0000000a40)={r15, "8d804cd5ca75c723da52eabc17eba6d4"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001180)={r15, 0x0, 0x0, [0x5, 0x83b3, 0x1e, 0xaea2, 0xfff], [0x7, 0x5, 0x2, 0x6f, 0x7fffffff, 0x6, 0x1, 0x1, 0x2, 0x1ff, 0x9, 0x6, 0x2, 0x4, 0x0, 0x5, 0xc5eb, 0x8, 0x1, 0x7ff, 0x1ff, 0x3, 0x8, 0xffffffffffffffff, 0x10, 0xfffffffffffffff7, 0x1000, 0x5, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x2, 0xc4e9, 0xffff, 0x4, 0x5, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x6, 0xe, 0xb7, 0x4, 0x4, 0x8, 0x2, 0x4, 0x0, 0x0, 0x6, 0x6, 0xfffffffffffff001, 0x1, 0x5, 0xc, 0x3, 0x100000001, 0x0, 0x8, 0x2, 0x8000000000000000, 0x7fff, 0x10, 0xc9d, 0x8, 0x84f, 0x9, 0xf7, 0x2, 0x2, 0x4, 0x0, 0xed7, 0x80, 0x2, 0xff, 0x6, 0x3, 0x9, 0x8, 0xb43, 0x100000000, 0x3, 0x8000, 0x0, 0x9c5e, 0x0, 0x4, 0x5, 0x6, 0x5, 0x2, 0x5, 0x9, 0xffffffffffffffc0, 0x9290, 0x6, 0x5, 0x4, 0x2, 0x100, 0x15c31fc2, 0x1, 0x6, 0x2, 0x5, 0x5, 0x26b3, 0x1, 0x18, 0x7, 0x0, 0xffffffff, 0x3e]}) r16 = socket$netlink(0x10, 0x3, 0x0) preadv(r12, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001d0000032e00000000de020d848d672b81327eb57f787000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="4000b006080009000300000008000d00e1090000"], 0x2c}}, 0xc0) 27.045504334s ago: executing program 5 (id=2750): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x7, [@datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x5}, {0x3, 0x8000, 0xa83}, {0x4, 0x5}, {0x3, 0x3, 0x81}, {0x4, 0xc60, 0x3720}], "fe63"}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x4}, {0x10, 0x4}, {0x4, 0x781f4cfe}, {0xc, 0xfffff801}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x6}, @union={0x1, 0x1, 0x0, 0x5, 0x1, 0x7fffffff, [{0x8, 0x1}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x51, 0x6}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @const={0x1}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x10001}, {0x4, 0xf0000}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000800)=""/92, 0x11b, 0x5c, 0xf00000, 0xd}, 0x28) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r11, 0xa2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000440)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x332c980a, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0x0, 0x6, 0x8, 0x0, 0x6, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x7, 0x3, 0xa, 0xfffffffffffffff8}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x12f}}]}, &(0x7f0000000580)='syzkaller\x00', 0x8000, 0x57, &(0x7f00000005c0)=""/87, 0x41000, 0x2, '\x00', r7, 0x1c, r8, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xc, 0x3, 0xfffffff8}, 0x10, 0x1f7ba, r9, 0x4, &(0x7f0000000a80)=[r10, r11, r14, r15], &(0x7f0000000ac0)=[{0x0, 0x1, 0x5, 0x1}, {0x5, 0x2, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xc}, {0x3, 0x5, 0xd, 0xb}], 0x10, 0x67c372b4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r16}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e00)={0xfff, 0x0}, 0x8) r19 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x16, &(0x7f0000001200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x101}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000f00)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000f40)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000f80)=[r15], &(0x7f0000000fc0)=[{0x0, 0x4, 0x0, 0x1}, {0x1, 0x5, 0xc}, {0x1, 0x1, 0xc, 0x1}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3, 0x32, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @map_val={0x18, 0xb, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r17}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x78a, 0x0, 0x0, 0x0, 0x9ee}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x401, 0x53, &(0x7f00000001c0)=""/83, 0x41000, 0x4, '\x00', r12, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0xb, 0x7, 0x100}, 0x10, r18, r19, 0x3, &(0x7f00000010c0)=[r11], &(0x7f0000001100)=[{0x2, 0x1, 0xe, 0x5}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x5, 0xf, 0x8}], 0x10, 0x1}, 0x94) 25.813107693s ago: executing program 5 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x51) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x64}}}}, [@NL80211_ATTR_FRAME_MATCH={0x58, 0x5b, "70fd37d46d0222d2ff4a640012b7e705460d5332e2dd6726a8b161bf3f970dc3f5f24264289091974648b3f062ef26515296abebb9c1a5665b02b6402aabc2bd76be3fdc1e6601e870103d97895a45afe4a2ea85"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048000) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x3, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@rr={0x7, 0x13, 0x57, [@multicast1, @loopback, @remote, @loopback]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x311, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44801) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000680)={'macvlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, r1, 0x9f90093b8232bcfe, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x4}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x5}]}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x7fff}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x80}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x9a2}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x2}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x9}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7fff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0xc0c0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xa4}, 0x40000) writev(r3, &(0x7f0000001c00)=[{&(0x7f00000009c0)="d6c46e32affb5535a68b924fa8778270e201077557e6e12f0792e109f55cd3b9f968ed9250893ccb20f77aa2508a9cd154fefc944272125d7bcd09dfacdbde3050f674cfd13098756168a746a4530ce936ab5c8e0da72e8d90", 0x59}, {&(0x7f0000000a40)="26188f4ee6d01c26a973f3b5a464b3cdc6da9a4119d6ea25e47cfbf903d3fbd56f0d81aca2c5d79ed82c05dcf1afdd3eb6b0bfe3e77a4adb56df17de6888d3865caa22c4c3e0c79b18584c41cc0742a8262a981972d65aa6ce6df3", 0x5b}, {&(0x7f0000000ac0)="f93af0603dc857f48fc0a0f5a6a0f932a9bb0c5133", 0x15}, {&(0x7f0000000b00)="35cb37cf175aee988ebdbc8a78498d2501d1e230f38edf6b31811d1800f85bbd20acdb919baaf5aa184ba3e7e291d35eeb5eecb6f525ec6d4957edec12e8ffe9343fb8a20291a1e1a340d3aed174482f06d3a05a65bf1ae869ae6b40451464e3a01526de4a0dac5e7917e73050dd95fea5", 0x71}, {&(0x7f0000000b80)="3f6cae7edd2a904a171527305d7cdf3b86f28eeeee9b1aa9cd91e7170dca9f3890190df0a4293b02f1a9d7ae7371e79bc66f5782192111ddc6bb8f2900c6b15df7dab4312d007cbb36f91da93a060f17de50b70c011785", 0x57}, {&(0x7f0000000c00)="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", 0x1000}], 0x6) socket$inet6(0xa, 0x2, 0x5) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = accept4(r9, &(0x7f0000001c80)=@can, &(0x7f0000001d00)=0x80, 0x800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}]}, 0x3c}}, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, r1, 0x301, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r10) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x68, r12, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1a7b, 0x1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x9, 0x3, 0x1dd, 0xb, 0xac7, 0x9, 0x639f]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x8001}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7b9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e3e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004854}, 0x1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x10008811) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0xffffffffffffffff}, 0xc) 25.697023897s ago: executing program 6 (id=2761): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1e02, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x20000004) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000380)=r4) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x80000) sendto$phonet(r5, &(0x7f0000000440)="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", 0x1000, 0x4000000, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0xb02, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x95ec}]}, 0x24}}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x12, r2, 0x1d45a000) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x128, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0x128}}, 0x5) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x9cfe1aee11119de4}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000001880)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000018c0)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000001900)={@remote, 0x80, 0x2, 0x0, 0x4, 0x800}, 0x20) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x7c, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x40, 0x43}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x447, 0x4, 0x7, 0x8, 0xba7b]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x11}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) r11 = socket$inet_sctp(0x2, 0x5, 0x84) splice(r11, &(0x7f0000001c40)=0x3, r5, &(0x7f0000001c80)=0x4, 0x7, 0x0) (async) connect(r2, &(0x7f0000001cc0)=@can, 0x80) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r12, 0x2, &(0x7f0000001d80)=0xaf2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x8c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 25.533220163s ago: executing program 6 (id=2763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0000120000ff0000"], 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100fdffffef000000001d00000008000300", @ANYRES32=r15, @ANYBLOB="38002f800c00020000000000000000000800010000000000200003800c000500070000000000000008000100030000000500020002000000"], 0x54}}, 0x0) 25.26177628s ago: executing program 5 (id=2767): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r1, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) epoll_create(0x3) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x180c00) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x7fd, @empty, 0x60}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x460481, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x460481, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r7, &(0x7f00000006c0)={@void, @val={0x0, 0x1, 0x0, 0x0, 0x20}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a9f1a9d56828", @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0xb26, 0x0, 0x1}, {0x3}], @llc={@snap={0xaa, 0x0, "ca", "6a11ab", 0x8035, "ed9b8200ddca678ea1bbc661cac72fef9c97e0dcfe409ee10af98f72bfc263f2015a2272d6bd15f4054f064f48943a10520ae57aa40ad97e847cd34d4c20dcac26f33344460123458b068e31ab246b95ea6ca1c5d1d0491f08ba67ba7498bb5c91c95557fd83828a30c695f94a479cb389ac246dd1179c4bd6ff4f"}}}}}}}, 0xaf) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x541b, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xfffffff9, '\x00', r8, r6, 0x1, 0x1, 0x1}, 0x50) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000340)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r10, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty, 0x40105}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty, 0x40105}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 25.126436241s ago: executing program 5 (id=2769): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500050002000000"], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500050002000000"], 0x44}}, 0x0) 24.929438475s ago: executing program 6 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @multicast1}, {0x1, @remote}, 0x20, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 'dvmrp0\x00'}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 24.427346176s ago: executing program 6 (id=2777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 24.252460477s ago: executing program 6 (id=2778): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x6, 0x2, [0x4, 0x8]}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r4, 0x7}, 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x8, "349549419679b73b"}, &(0x7f00000002c0)=0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000300)=0x3, 0x4) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000340)={0x1}) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000380)={r4, 0x232, 0xd, 0xe, 0xa2d, 0xc6, 0x3, 0x6, {r4, @in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}, 0x9}}, 0x6, 0xce, 0xffffffff, 0x7, 0xc}}, &(0x7f0000000440)=0xb0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)={[{0x2d, 'net_cls'}, {0x2d, 'pids'}, {0x2b, 'freezer'}, {0x2b, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x2b, 'cpu'}]}, 0x32) r7 = openat$cgroup_int(r6, &(0x7f0000000500)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000540)={0x2}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}, "ee09cb85cd5fed65", "4c13bd598e5e4b9e476d0e7ef26e864c", "b0b04deb", "7a4117ceddc38d19"}, 0x28) ioctl$FITHAW(r3, 0xc0045878) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x4, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x10, 0x1, 0x9, 0x7ff, {{0x34, 0x4, 0x1, 0x0, 0xd0, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xa, "b882804e33a0f4f8"}, @noop, @timestamp={0x44, 0x10, 0xc8, 0x0, 0x2, [0x8, 0x5, 0x0]}, @rr={0x7, 0x1b, 0x6d, [@multicast2, @broadcast, @private=0xa010101, @multicast2, @remote, @loopback]}, @rr={0x7, 0x27, 0x82, [@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x64, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x1, [{@private=0xa010102, 0xdd1e}, {@loopback, 0x3a}]}, @ssrr={0x89, 0x27, 0x5e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @local]}, @rr={0x7, 0x17, 0xb4, [@private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f00000006c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000700)='GPL\x00', 0x3, 0xb, &(0x7f0000000740)=""/11, 0x0, 0x4e, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x1, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r2, 0xffffffffffffffff, r1, r1, r1, r9, r2, r1], &(0x7f0000000a40)=[{0x4, 0x4, 0x1, 0x2}], 0x10, 0x80000000}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f0000000c40)={&(0x7f0000000b40)=""/247, 0xf7}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000c80)={r1, 0xfffffffffffffffe, 0x14, 0x2}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x80000001, '\x00', r8, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, 0x140f, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x2000c045) write$cgroup_subtree(r10, &(0x7f0000000e80)={[{0x2d, 'blkio'}, {0x2d, 'net_prio'}, {0x2b, 'cpuset'}]}, 0x19) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000ec0)) 24.15162068s ago: executing program 5 (id=2780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20040840) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x102, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '.]+&!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24028880}, 0x4000810) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20040840) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x102, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '.]+&!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24028880}, 0x4000810) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) gettid() (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) 24.11977649s ago: executing program 6 (id=2782): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1, 0x1}, 0x8) 23.827775786s ago: executing program 4 (id=2784): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x10}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0xc0189436, &(0x7f0000000000)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) ppoll(&(0x7f0000000600)=[{r1, 0x101}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) 23.707495334s ago: executing program 4 (id=2788): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040011}, 0x4000) (async) recvmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0x57) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034073797a32000000000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000f0076f0ffff"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r8, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pB \x00'}, 0x20) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x2, 0x2902, r12, 0x8, '\x00', r5, r13, 0x4, 0x4, 0x2, 0x6}, 0x50) 23.672229737s ago: executing program 4 (id=2790): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x5}, @window={0x3, 0x7, 0x3}], 0x2) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) 23.579739556s ago: executing program 4 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="31bf27bd7000fedbdf250900000030000280f5fe0100010100001c00038008000200020000000800020008000000080002000000000008000100010001000000068000000500"], 0x44}, 0x1, 0x0, 0x0, 0x400c015}, 0x20000004) 23.39171123s ago: executing program 4 (id=2794): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 23.25170364s ago: executing program 4 (id=2795): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_int(r1, 0x6, 0x28, 0x0, &(0x7f00000000c0)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x128, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_VFINFO_LIST={0xe8, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x296}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x95e}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @random="35c2441ffa79"}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfff, 0x1ffc0000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfff, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffa, @random="a31c8feac782"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xe836, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x8}}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 16.942343564s ago: executing program 1 (id=2856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x24}, 0x1, 0x0, 0x0, 0xc809}, 0xc000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x86, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x532}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000700)='R', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="1300000200", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) socket$kcm(0x29, 0x7, 0x0) 16.601549559s ago: executing program 1 (id=2857): syz_emit_ethernet(0xffffffffffffffb7, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x7, "04030ec0a4"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001180)={'batadv_slave_0\x00', 0x0}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0}, &(0x7f0000001200)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280cc009}, 0xc, &(0x7f0000000100)={&(0x7f0000001240)=@migrate={0x138, 0x21, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x3, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x84, r1, r3}, 0x6e6bb6}, [@algo_auth={0xc9, 0x1, {{'cbcmac(seed)\x00'}, 0x408, "2a4bea078ec0f59db06a51c15d7a2fa133500390a16fe6f173bb8864c6fe0de5341c87e7ad818385f17bae6d0e5384b01611d38ee45c1620c00ac912db808f37feb3ebe6bfaab91f95571ff0d7fb3f4147321e6139a0b857325ad6a7f6978852e5c80adb2c20c1bded1b7de98915b9a977a6bc8c538767ec514f58887a450664aa"}}, @srcaddr={0x14, 0xd, @in=@empty}, @extra_flags={0x8, 0x18, 0x3}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x6, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x10, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1d3622fb24b095"}, @fastopen={0x22, 0x6, "5f83c50f"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000180)={{r0}, "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"}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 16.479625262s ago: executing program 1 (id=2858): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00000400000000000000008180000000000000000000001400010000000100000000000000ffffe0000001"], 0x30}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) unshare(0x8040480) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x5760, 0x0) (async) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, 0x0) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600) 16.450939826s ago: executing program 1 (id=2859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) socket$inet(0x2, 0x3, 0xbc4) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x66d23000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000"], 0x40}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRESHEX=r2], 0x38}}, 0x0) 16.390590687s ago: executing program 1 (id=2860): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) write$cgroup_subtree(r1, 0x0, 0x4d) 16.263592607s ago: executing program 1 (id=2861): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) close(0x4) 16.034915545s ago: executing program 7 (id=2863): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) (async) close(r1) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'ip6gre0\x00'}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x8880) (async) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r9, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) 15.935798181s ago: executing program 7 (id=2864): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 15.913096477s ago: executing program 7 (id=2865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1c}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2006c001}, 0x98) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) 15.822825599s ago: executing program 7 (id=2866): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x5c, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xcc802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) socket(0xf, 0xa, 0xf7a) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x0, 0xfffffffc, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}], 0x20}}], 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x700, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c00018006cc11000200000008000300ac1414aa080006000a000000"], 0x30}}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x4040140) 15.679923726s ago: executing program 7 (id=2867): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x7, 0xfff2}, {0xffe0, 0x6}}}, 0x24}}, 0x40000) 15.602039648s ago: executing program 7 (id=2868): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0x10, r2, r1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0x10, r2, r1}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 9.03743234s ago: executing program 35 (id=2780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20040840) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x102, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '.]+&!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24028880}, 0x4000810) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20040840) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x102, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '.]+&!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24028880}, 0x4000810) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) gettid() (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) 8.996796453s ago: executing program 36 (id=2782): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1, 0x1}, 0x8) 1.031090533s ago: executing program 37 (id=2861): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) close(0x4) 0s ago: executing program 38 (id=2868): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0x10, r2, r1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0x10, r2, r1}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) kernel console output (not intermixed with test programs): callbacks suppressed [ 168.529756][ T9777] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.809458][ T9786] netlink: 'syz.1.1018': attribute type 3 has an invalid length. [ 169.111608][ T9811] IPVS: Unknown mcast interface: dvmrp0 [ 169.400296][ T9827] gretap0: entered promiscuous mode [ 169.430074][ T9827] gretap0: left promiscuous mode [ 169.817004][ T9861] __nla_validate_parse: 11 callbacks suppressed [ 169.817022][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 170.026263][ T9867] tipc: Enabling of bearer rejected, failed to enable media [ 170.194064][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 170.226370][ T9868] syz.0.1040 (9868) used greatest stack depth: 17864 bytes left [ 170.246798][ T9873] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 170.272508][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.338089][ T9877] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1045'. [ 170.525112][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 170.577660][ T9885] netlink: 'syz.4.1049': attribute type 3 has an invalid length. [ 171.101024][ T9913] netlink: 'syz.2.1058': attribute type 6 has an invalid length. [ 171.101027][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 171.252717][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.300616][ T9919] bond0: (slave rose0): Enslaving as an active interface with an up link [ 171.655822][ T9941] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.711224][ T9941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 171.761318][ T9941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 171.983749][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.005643][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.181525][ T9968] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 172.202070][ T9941] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.202324][ T9968] netlink: 'syz.2.1069': attribute type 3 has an invalid length. [ 172.226250][ T9941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 172.240706][ T9941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 172.251340][ T9968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1069'. [ 172.338222][ T9973] openvswitch: netlink: Flow key attr not present in new flow. [ 172.353281][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1072'. [ 172.423637][ T9941] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.464195][ T9941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 172.491640][ T9941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 172.595580][ T8832] IPVS: starting estimator thread 0... [ 172.697686][ T9989] IPVS: using max 31 ests per chain, 74400 per kthread [ 172.721571][ T9941] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.738636][ T9941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 172.761970][ T9941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 172.812017][ T9990] tipc: Enabled bearer , priority 10 [ 172.819277][ T9988] sit0: entered promiscuous mode [ 172.824775][ T9988] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 172.848846][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 172.856570][ T9988] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1075'. [ 173.036957][T10009] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 173.050071][ T6043] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.065192][ T6043] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 173.074979][ T6043] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.095595][ T6043] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.120413][ T6043] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 173.142210][ T6043] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.157305][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1079'. [ 173.221704][T10011] bond4 (unregistering): Released all slaves [ 173.299253][ T9983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.305371][ T9983] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 173.434257][ T9983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.443494][ T9983] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 173.454351][T10030] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 173.522623][T10014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.534178][ T9983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.558430][ T9983] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 173.571937][T10024] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 173.589338][ T9983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.609019][ T9983] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 173.642959][T10019] dvmrp0: entered allmulticast mode [ 173.662462][ T6043] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.690046][ T6043] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 173.710251][ T6043] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.750491][T10030] veth1_macvtap: left promiscuous mode [ 173.755723][ T9983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.779037][ T9983] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 173.921900][ T1113] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.932234][ T5956] tipc: Node number set to 2537959408 [ 173.963298][ T1113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 173.985331][ T1113] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.874492][T10090] __nla_validate_parse: 4 callbacks suppressed [ 174.874512][T10090] netlink: 212184 bytes leftover after parsing attributes in process `syz.1.1092'. [ 174.885254][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 175.494098][T10120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1101'. [ 175.586992][T10126] pim6reg: entered allmulticast mode [ 175.616767][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 175.822258][T10146] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1105'. [ 175.863903][T10146] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 175.890413][T10146] openvswitch: netlink: Duplicate key (type 0). [ 176.234216][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1111'. [ 176.469371][T10172] tipc: Enabled bearer , priority 0 [ 176.484663][T10172] syzkaller0: entered promiscuous mode [ 176.504253][T10172] syzkaller0: entered allmulticast mode [ 176.600187][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 176.723388][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 176.774175][T10187] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 176.802820][T10187] netlink: 'syz.4.1116': attribute type 2 has an invalid length. [ 176.965605][T10170] tipc: Resetting bearer [ 177.067727][T10170] tipc: Disabling bearer [ 177.578463][T10222] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 177.622113][T10224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.819037][T10222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.897651][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 177.959757][T10225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.991163][T10225] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.039139][T10225] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 178.040457][T10246] netlink: 'syz.4.1128': attribute type 21 has an invalid length. [ 178.192817][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1128'. [ 178.584694][T10277] nftables ruleset with unbound set [ 178.887492][T10297] netlink: 'syz.1.1138': attribute type 83 has an invalid length. [ 178.914923][T10299] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 179.122265][T10299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.367370][T10314] IPVS: length: 157 != 24 [ 179.460488][T10314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.511829][T10323] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 179.859647][T10340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.901438][T10327] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.948438][T10327] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 180.078067][T10335] __nla_validate_parse: 5 callbacks suppressed [ 180.078088][T10335] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1147'. [ 180.097259][T10323] vlan3: entered allmulticast mode [ 180.116616][T10323] bridge0: entered allmulticast mode [ 180.135774][T10323] bridge0: entered promiscuous mode [ 180.158752][T10323] bridge0: left promiscuous mode [ 180.184464][T10323] bond5: (slave vlan3): Enslaving as an active interface with a down link [ 180.244307][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 180.269420][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 180.771317][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'. [ 180.967689][T10390] syzkaller0: entered promiscuous mode [ 180.973839][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1165'. [ 181.001345][T10390] syzkaller0: entered allmulticast mode [ 181.439947][T10427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'. [ 181.553318][T10432] netlink: 'syz.3.1170': attribute type 1 has an invalid length. [ 183.111564][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 183.205409][T10467] team_slave_0: mtu greater than device maximum [ 183.354344][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 183.373751][T10471] bond0: entered promiscuous mode [ 183.418386][T10471] bond0: left promiscuous mode [ 183.482859][T10483] pim6reg: entered allmulticast mode [ 183.693999][T10493] syzkaller1: entered promiscuous mode [ 183.705666][T10493] syzkaller1: entered allmulticast mode [ 183.843097][T10509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1185'. [ 183.988553][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 184.485574][T10538] syzkaller0: entered promiscuous mode [ 184.495424][T10538] syzkaller0: entered allmulticast mode [ 184.510687][T10549] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 185.113367][T10576] netlink: 'syz.3.1202': attribute type 83 has an invalid length. [ 185.941143][T10566] netlink: 'syz.1.1201': attribute type 29 has an invalid length. [ 185.963962][T10566] __nla_validate_parse: 8 callbacks suppressed [ 185.963978][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 186.176661][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 186.232206][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 186.270083][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.343678][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.433365][T10592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.436629][T10610] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 186.662128][T10620] netlink: 'syz.2.1216': attribute type 10 has an invalid length. [ 186.697999][T10619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.866389][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1219'. [ 186.882473][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'. [ 187.370444][T10661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1226'. [ 187.671795][T10672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1228'. [ 188.032086][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.086025][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.121470][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.155062][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.169722][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.181237][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.190037][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.198800][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.224284][T10684] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1231'. [ 188.283586][T10685] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1230'. [ 188.323048][T10691] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 188.380385][T10691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.510921][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 188.631238][T10710] veth1: entered promiscuous mode [ 190.366975][T10804] tipc: Enabled bearer , priority 0 [ 190.374482][T10804] syzkaller0: entered promiscuous mode [ 190.385966][T10804] syzkaller0: entered allmulticast mode [ 190.454499][T10804] tipc: Resetting bearer [ 190.501258][T10803] tipc: Resetting bearer [ 190.571616][T10803] tipc: Disabling bearer [ 191.033042][T10841] macvtap1: entered allmulticast mode [ 191.039480][T10841] veth0_macvtap: entered allmulticast mode [ 191.130769][T10851] sctp: [Deprecated]: syz.1.1281 (pid 10851) Use of int in max_burst socket option. [ 191.130769][T10851] Use struct sctp_assoc_value instead [ 191.153014][T10851] sctp: [Deprecated]: syz.1.1281 (pid 10851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.153014][T10851] Use struct sctp_sack_info instead [ 191.175555][T10853] __nla_validate_parse: 8 callbacks suppressed [ 191.175572][T10853] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1282'. [ 191.286712][T10855] netlink: 'syz.0.1283': attribute type 9 has an invalid length. [ 191.302405][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 191.313880][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'. [ 191.329628][T10857] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 191.344657][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 191.354185][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 191.413841][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 191.423473][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'. [ 191.633421][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1287'. [ 191.651451][T10863] veth3: entered allmulticast mode [ 191.654248][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 191.685740][T10871] blkio.reset_stats is deprecated [ 191.783109][T10880] pim6reg1: entered promiscuous mode [ 191.796667][T10880] pim6reg1: entered allmulticast mode [ 192.093165][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 192.108919][T10890] netlink: 'syz.2.1294': attribute type 7 has an invalid length. [ 192.148029][T10890] netlink: 'syz.2.1294': attribute type 8 has an invalid length. [ 192.317689][T10916] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20002 [ 192.413643][T10918] tipc: Enabled bearer , priority 10 [ 192.700973][T10936] netlink: 'syz.3.1308': attribute type 11 has an invalid length. [ 192.782680][T10938] vlan3: entered allmulticast mode [ 192.827648][T10938] hsr0: entered allmulticast mode [ 192.837648][T10945] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 192.862731][T10938] hsr_slave_0: entered allmulticast mode [ 192.882484][T10938] hsr_slave_1: entered allmulticast mode [ 193.162885][T10963] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 193.284846][T10972] vlan2: entered allmulticast mode [ 193.306562][T10972] bond0: entered allmulticast mode [ 193.334334][T10972] bridge_slave_1: entered allmulticast mode [ 193.376873][T10981] sctp: [Deprecated]: syz.4.1319 (pid 10981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.376873][T10981] Use struct sctp_sack_info instead [ 193.536649][ T6001] tipc: Node number set to 2886997162 [ 193.707646][T10989] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.853553][T11007] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 193.946405][T11012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.155552][T11022] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 194.292108][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468910][T11038] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 194.670123][T11053] netlink: 'syz.2.1348': attribute type 11 has an invalid length. [ 196.388948][T11165] __nla_validate_parse: 18 callbacks suppressed [ 196.388969][T11165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'. [ 196.492228][T11168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'. [ 196.995227][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 197.064036][T11212] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1393'. [ 197.163290][T11216] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1395'. [ 197.200605][T11218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1396'. [ 197.216278][T11218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1396'. [ 197.349470][T11221] netlink: 'syz.0.1395': attribute type 29 has an invalid length. [ 197.520619][T11240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.608537][T11249] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1404'. [ 197.633331][T11248] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 197.752234][T11258] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1406'. [ 197.771229][T11256] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.799393][T11256] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 197.868563][T11248] gretap2: entered promiscuous mode [ 197.917827][T11248] bond5: (slave gretap2): making interface the new active one [ 197.936533][T11248] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 197.985986][T11248] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 198.024914][T11259] macvlan4: entered promiscuous mode [ 198.064984][T11248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1405'. [ 198.078849][T11259] macvlan4: entered allmulticast mode [ 198.108776][T11259] bond5: entered promiscuous mode [ 198.125893][T11259] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 198.164419][T11259] bond5: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 198.185965][T11259] bond5: left promiscuous mode [ 198.833946][T11324] veth0: entered promiscuous mode [ 198.850197][T11323] veth0: left promiscuous mode [ 199.079254][T11337] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.098222][T11337] xt_policy: neither incoming nor outgoing policy selected [ 199.244904][T11345] netlink: 'syz.1.1431': attribute type 3 has an invalid length. [ 199.378877][T11347] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 200.159728][T11405] macvtap1: entered promiscuous mode [ 200.184305][T11405] vlan0: entered promiscuous mode [ 200.231406][T11405] macvtap1: entered allmulticast mode [ 200.243359][T11405] vlan0: entered allmulticast mode [ 200.266695][T11405] veth0_vlan: entered allmulticast mode [ 200.305485][T11412] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.339803][T11394] macvtap2: entered promiscuous mode [ 200.345227][T11394] macvtap2: entered allmulticast mode [ 200.359908][ T30] audit: type=1800 audit(1759301729.693:2): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1445" name="memory.events" dev="tmpfs" ino=1536 res=0 errno=0 [ 201.122221][T11456] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 201.275802][T11474] team0: Device vti0 is of different type [ 201.402503][T11478] __nla_validate_parse: 12 callbacks suppressed [ 201.402521][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1473'. [ 201.424872][T11478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'. [ 201.891862][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 202.093102][T11521] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 202.124551][T11521] bond6: entered promiscuous mode [ 202.130155][T11521] bond6: entered allmulticast mode [ 202.135843][T11521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.298251][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 202.422431][T11539] sock: sock_set_timeout: `syz.0.1489' (pid 11539) tries to set negative timeout [ 202.668965][T11551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1493'. [ 202.678381][T11553] veth1_macvtap: left promiscuous mode [ 202.994126][T11559] team0: Device vti0 is of different type [ 203.090788][T11567] tipc: Enabled bearer , priority 0 [ 203.100797][T11567] syzkaller0: entered promiscuous mode [ 203.128305][T11567] syzkaller0: entered allmulticast mode [ 203.228265][T11567] netlink: zone id is out of range [ 203.233420][T11567] netlink: zone id is out of range [ 203.270076][T11567] netlink: zone id is out of range [ 203.275233][T11567] netlink: zone id is out of range [ 203.301199][T11579] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 203.316043][T11567] netlink: zone id is out of range [ 203.323703][T11567] netlink: zone id is out of range [ 203.329470][T11583] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 203.335831][T11567] netlink: zone id is out of range [ 203.344220][T11567] netlink: zone id is out of range [ 203.374550][T11579] bond7: entered promiscuous mode [ 203.381551][T11579] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.393868][T11567] tipc: Resetting bearer [ 203.410764][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 203.460774][T11566] tipc: Resetting bearer [ 203.494573][T11566] tipc: Disabling bearer [ 203.528306][T11587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 203.993187][T11612] syzkaller0: entered promiscuous mode [ 204.015496][T11612] syzkaller0: entered allmulticast mode [ 205.559385][T11642] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1516'. [ 205.602219][T11633] syzkaller0: entered promiscuous mode [ 205.611920][T11633] syzkaller0: entered allmulticast mode [ 205.651390][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 205.693470][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 205.746927][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 207.048576][T11649] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 207.074168][T11658] bridge4: entered promiscuous mode [ 207.091524][T11658] bridge4: entered allmulticast mode [ 207.344620][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'. [ 207.365582][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'. [ 207.448762][T11684] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1530'. [ 207.461121][T11686] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1531'. [ 207.483316][T11686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1531'. [ 207.615967][T11691] syzkaller0: entered allmulticast mode [ 207.655274][T11699] netlink: 'syz.3.1535': attribute type 6 has an invalid length. [ 207.770255][T11706] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1537'. [ 208.055498][T11718] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1540'. [ 208.076737][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 208.086040][T11718] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1540'. [ 208.095413][T11718] netlink: 'syz.3.1540': attribute type 3 has an invalid length. [ 208.103428][T11718] netlink: 'syz.3.1540': attribute type 2 has an invalid length. [ 208.111822][T11718] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1540'. [ 209.752697][T11750] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 210.915554][T11821] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 210.983254][T11825] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 211.283605][T11843] geneve3: entered promiscuous mode [ 211.294182][T11845] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 211.318170][T11843] geneve3: entered allmulticast mode [ 211.360687][T11848] net_ratelimit: 17 callbacks suppressed [ 211.360708][T11848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.454411][ T6053] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.501080][T11868] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 211.519193][ T6053] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.533537][ T6053] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.649651][T11868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.660336][ T6053] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.684911][T11871] bond1: (slave geneve2): making interface the new active one [ 211.694409][T11871] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 212.080396][T11895] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.092905][T11895] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 212.142178][T11897] macvlan2: entered promiscuous mode [ 212.163721][T11897] macvlan2: entered allmulticast mode [ 212.190944][T11897] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 212.373213][T11911] __nla_validate_parse: 11 callbacks suppressed [ 212.373233][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 212.433278][T11913] openvswitch: netlink: Key type 14096 is out of range max 32 [ 213.002044][T11939] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 213.081044][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 213.492445][T11961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1617'. [ 213.594808][T11977] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 213.603917][T11978] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 213.708428][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'. [ 214.109309][T12004] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1630'. [ 214.515019][T12017] tipc: Enabled bearer , priority 0 [ 214.538471][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 214.552433][T12017] vxcan1: entered promiscuous mode [ 214.562287][T12017] vxcan1: entered allmulticast mode [ 214.574930][T12019] netlink: 'syz.1.1638': attribute type 83 has an invalid length. [ 214.612141][T12017] tipc: Resetting bearer [ 214.622574][T12027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1640'. [ 214.649875][T12015] tipc: Disabling bearer [ 214.766321][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.905136][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 214.947289][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 215.024448][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'. [ 215.252222][T12070] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 215.436532][T12085] netlink: 'syz.1.1658': attribute type 6 has an invalid length. [ 215.462401][T12088] netlink: 'syz.1.1658': attribute type 6 has an invalid length. [ 216.040425][T12081] lec:lec_atm_close: lec0: Shut down! [ 216.144597][T12120] netlink: 'syz.3.1666': attribute type 2 has an invalid length. [ 216.793632][T12148] netlink: 'syz.0.1675': attribute type 5 has an invalid length. [ 216.801874][T12150] netlink: 'syz.4.1676': attribute type 29 has an invalid length. [ 216.814137][T12148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.831329][T12152] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 216.866921][T12154] netlink: 'syz.3.1678': attribute type 15 has an invalid length. [ 216.999578][T12161] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 217.011513][T12161] netlink: 'syz.1.1681': attribute type 3 has an invalid length. [ 217.025792][T12161] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 217.035790][T12161] netlink: 'syz.1.1681': attribute type 3 has an invalid length. [ 217.044364][T12161] NCSI netlink: No device for ifindex 813332851 [ 217.053369][T12161] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 217.071916][T12166] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 217.221068][T12176] nft_compat: unsupported protocol 0 [ 217.236984][T12176] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 217.243057][T12179] netlink: 'syz.4.1686': attribute type 10 has an invalid length. [ 217.244680][T12176] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 217.260083][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.295620][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.311233][T12179] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.323696][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.332562][T12185] batman_adv: batadv0: Interface deactivated: team0 [ 217.351566][T12185] batman_adv: batadv0: Removing interface: team0 [ 217.372602][T12185] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.385551][T12185] team0: entered allmulticast mode [ 217.390924][T12185] team_slave_0: entered allmulticast mode [ 217.396880][T12185] team_slave_1: entered allmulticast mode [ 217.422933][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.448096][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.465749][T12194] __nla_validate_parse: 17 callbacks suppressed [ 217.465775][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1690'. [ 217.671368][T12205] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 217.780558][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1696'. [ 217.819355][T12209] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 217.828497][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 217.839295][T12209] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 217.943080][T12213] bridge6: port 1(veth1) entered blocking state [ 217.950043][T12213] bridge6: port 1(veth1) entered disabled state [ 217.956616][T12213] veth1: entered allmulticast mode [ 217.963853][T12213] veth1: entered promiscuous mode [ 217.975679][T12215] syzkaller1: entered promiscuous mode [ 217.986700][T12215] syzkaller1: entered allmulticast mode [ 218.009906][T12216] bridge6: port 2(veth3) entered blocking state [ 218.017370][T12216] bridge6: port 2(veth3) entered disabled state [ 218.023821][T12216] veth3: entered allmulticast mode [ 218.032087][T12216] veth3: entered promiscuous mode [ 242.300416][T12228] tipc: Enabled bearer , priority 0 [ 242.347097][T12228] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 242.571991][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 242.705017][T12252] openvswitch: netlink: EtherType 50a is less than min 600 [ 242.743362][T12262] batadv_slave_0: entered promiscuous mode [ 242.782791][T12261] batadv_slave_0: left promiscuous mode [ 242.806357][T12269] rdma_op ffff888078f3b1f0 conn xmit_rdma 0000000000000000 [ 243.035999][T12283] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1720'. [ 243.186445][T12299] validate_nla: 2 callbacks suppressed [ 243.186463][T12299] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 243.228931][T12306] netlink: set zone limit has 8 unknown bytes [ 243.252221][T12299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.289078][T12309] xt_l2tp: unknown flags: 10 [ 243.300144][T12307] bond3: (slave geneve4): making interface the new active one [ 243.321166][T12307] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 243.335682][ T6059] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.354268][ T6059] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.372138][ T6059] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.382690][ T6059] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.418181][T10678] tipc: Node number set to 1091168843 [ 243.462347][T12316] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1732'. [ 243.651799][T12324] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 243.700654][T12324] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 244.073012][T12354] openvswitch: netlink: IPv4 tun info is not correct [ 244.241059][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 244.273685][T12372] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 244.301493][T12372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1749'. [ 244.384519][T12372] geneve0: entered allmulticast mode [ 244.394926][T12372] team0: Port device geneve0 added [ 244.502951][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 244.542439][T12390] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 244.625424][T12394] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 244.627530][T12392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1756'. [ 244.666304][T12394] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 244.921958][T12408] wireguard0: entered allmulticast mode [ 244.987161][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 245.036944][T12419] smc: net device erspan0 applied user defined pnetid SYZ0 [ 245.049440][T12419] bridge1: entered allmulticast mode [ 245.433537][T12441] syzkaller1: entered promiscuous mode [ 245.466235][T12441] syzkaller1: entered allmulticast mode [ 245.637256][T12449] syzkaller1: entered promiscuous mode [ 245.642837][T12449] syzkaller1: entered allmulticast mode [ 245.682626][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 245.893590][T12418] bridge1: left allmulticast mode [ 245.979201][T12461] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 245.987638][T12461] netlink: 'syz.0.1776': attribute type 2 has an invalid length. [ 245.995814][T12461] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 246.184595][T12471] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 246.198152][T12469] tipc: Enabling of bearer rejected, already enabled [ 246.295616][T12476] veth5: entered promiscuous mode [ 246.685024][T12488] macvtap2: entered promiscuous mode [ 246.726212][T12488] macvtap2: entered allmulticast mode [ 247.009727][T12491] macvtap2: entered promiscuous mode [ 247.031205][T12491] macvtap2: entered allmulticast mode [ 247.041299][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 247.077974][ T6001] IPVS: starting estimator thread 0... [ 247.186273][T12511] IPVS: using max 27 ests per chain, 64800 per kthread [ 247.682562][T12548] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.201836][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 248.349315][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 248.493801][T12579] openvswitch: netlink: IPv4 tunnel dst address is zero [ 248.496462][T12581] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 248.587010][T12584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1805'. [ 248.767130][T12584] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 248.813226][T12584] bond7 (unregistering): Released all slaves [ 249.137368][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 249.162503][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 249.330037][T12621] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 249.450770][T12626] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 249.457182][T12629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1821'. [ 249.472794][T12626] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 249.509508][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 249.537214][T12629] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1821'. [ 249.663686][T12625] syzkaller0: entered promiscuous mode [ 249.669909][T12625] syzkaller0: entered allmulticast mode [ 249.697884][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 249.818797][T12647] netlink: 'syz.1.1825': attribute type 33 has an invalid length. [ 249.881012][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 251.044090][T12647] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 251.073211][T12647] bond10 (unregistering): Released all slaves [ 251.113160][T12650] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 251.220849][T12664] netlink: set zone limit has 8 unknown bytes [ 251.435527][T12680] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 251.449606][T12680] bond7: (slave vcan1): Error -95 calling set_mac_address [ 251.493331][T12679] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 251.512428][T12679] bond7: (slave vcan1): Error -95 calling set_mac_address [ 251.712308][T12694] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 251.780020][T12694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.983062][T12705] netlink: 'syz.3.1837': attribute type 11 has an invalid length. [ 251.992407][T12706] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 252.000902][T12706] netlink: 'syz.3.1837': attribute type 4 has an invalid length. [ 252.378183][T12728] vlan2: entered allmulticast mode [ 252.393513][T12728] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 252.672326][T12736] netlink: 'syz.3.1847': attribute type 29 has an invalid length. [ 252.674995][T12738] netlink: 'syz.1.1848': attribute type 6 has an invalid length. [ 252.704445][T12738] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 252.712434][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.723972][T12738] IPVS: ip_vs_edit_dest(): server weight less than zero [ 252.882229][T12755] vlan3: entered promiscuous mode [ 252.901581][T12755] gretap0: entered promiscuous mode [ 253.274534][T12785] netlink: 'syz.1.1860': attribute type 10 has an invalid length. [ 253.677047][T12812] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 253.689097][T12812] __nla_validate_parse: 12 callbacks suppressed [ 253.689116][T12812] netlink: 784 bytes leftover after parsing attributes in process `syz.0.1869'. [ 254.022529][T12833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1876'. [ 254.141360][T12839] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20003 [ 254.444898][T12850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1878'. [ 254.458692][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 254.499503][T12851] sctp: [Deprecated]: syz.3.1881 (pid 12851) Use of int in maxseg socket option. [ 254.499503][T12851] Use struct sctp_assoc_value instead [ 254.709129][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 255.101303][T12865] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1885'. [ 255.329267][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 255.387825][T12881] xt_l2tp: missing protocol rule (udp|l2tpip) [ 255.621653][T12897] tipc: Enabling of bearer rejected, failed to enable media [ 255.731491][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764181][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 255.786294][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 255.826569][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 256.271313][T12932] gretap1: entered promiscuous mode [ 256.276819][T12932] gretap1: entered allmulticast mode [ 256.619380][T12938] rdma_rxe: rxe_newlink: failed to add lo [ 257.337239][T12985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.770408][T13012] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 257.810445][T13014] syz.4.1924 uses old SIOCAX25GETINFO [ 258.997098][T13060] netlink: 'syz.0.1937': attribute type 7 has an invalid length. [ 259.004876][T13060] __nla_validate_parse: 8 callbacks suppressed [ 259.004892][T13060] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1937'. [ 259.275602][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.304986][T13078] team0: Cannot enslave team device to itself [ 259.454616][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 259.498990][T13084] bridge_slave_1: default FDB implementation only supports local addresses [ 259.582472][T13091] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1949'. [ 259.903171][T13104] netlink: 'syz.1.1955': attribute type 3 has an invalid length. [ 260.030859][T13117] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1956'. [ 260.291202][T13137] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1964'. [ 260.463381][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 260.532401][T13150] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 260.915338][T13150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1966'. [ 260.930213][T13150] tunl0: left promiscuous mode [ 261.060020][T13150] tipc: Resetting bearer [ 261.361013][T13164] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.1970'. [ 261.397792][T13167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1972'. [ 261.440763][T13150] bridge1: port 1(vlan2) entered disabled state [ 261.864594][T13150] macvtap1: left promiscuous mode [ 261.870318][T13150] macvtap1: left allmulticast mode [ 261.914220][T13150] vlan0: left allmulticast mode [ 261.919390][T13150] veth0_vlan: left allmulticast mode [ 261.924727][T13150] vlan0: left promiscuous mode [ 261.932405][T13150] macvtap2: left promiscuous mode [ 261.937927][T13150] macvtap2: left allmulticast mode [ 261.980565][ T1157] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.005284][ T1157] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.022750][ T1157] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.033811][ T1157] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.061677][ T1157] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.090606][ T1157] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.116499][ T6047] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.140528][ T6047] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.488251][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1987'. [ 262.515956][T13218] tap0: tun_chr_ioctl cmd 1074025688 [ 262.541243][T13218] tap0: tun_chr_ioctl cmd 1074025677 [ 262.553795][T13218] tap0: linktype set to 65534 [ 263.860855][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.877980][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.886644][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.895688][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.904071][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.932529][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.943924][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.949723][ T6045] vlan2: left allmulticast mode [ 263.960007][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.961023][ T6045] bridge0: left allmulticast mode [ 263.975457][ T6045] vlan2: left promiscuous mode [ 263.976604][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.981810][ T6045] bridge0: left promiscuous mode [ 263.996488][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.001144][ T6045] bridge1: port 1(vlan2) entered disabled state [ 264.110719][T13251] __nla_validate_parse: 1 callbacks suppressed [ 264.110738][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 264.163510][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 264.268896][ T6045] tipc: Disabling bearer [ 264.426963][ T6045] dvmrp0 (unregistering): left allmulticast mode [ 264.488686][ T6045] bond1 (unregistering): (slave geneve2): Releasing active interface [ 264.640120][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.652529][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.681361][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.691361][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.707629][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.715780][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.735304][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.743275][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.752277][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.760837][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.779508][ T6045] bond0 (unregistering): (slave bridge2): Releasing active interface [ 265.051322][ T6045] bond0 (unregistering): Released all slaves [ 265.144781][ T6045] bond1 (unregistering): Released all slaves [ 265.158596][ T6045] bond2 (unregistering): Released all slaves [ 265.319164][ T6045] tipc: Left network mode [ 265.440312][T13274] vlan4: entered promiscuous mode [ 265.445463][T13274] bridge0: entered promiscuous mode [ 265.563973][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 265.591534][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 265.721309][T13285] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 265.745068][T13285] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 265.882766][T13285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 265.897847][T13285] bond10: (slave bond11): making interface the new active one [ 265.906026][T13285] bond10: (slave bond11): Enslaving as an active interface with an up link [ 265.953101][T13290] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 266.000047][T13285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 266.018997][T13285] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.049527][ T5876] Bluetooth: hci0: command tx timeout [ 266.582059][T13306] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.766318][ T5876] Bluetooth: hci1: command tx timeout [ 266.846298][ T5876] Bluetooth: hci2: command tx timeout [ 267.053885][T13261] chnl_net:caif_netlink_parms(): no params data found [ 267.100901][T13327] netlink: 'syz.4.2017': attribute type 5 has an invalid length. [ 267.126754][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 267.416990][T13337] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2020'. [ 267.682406][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.702717][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.712908][T13261] bridge_slave_0: entered allmulticast mode [ 267.729449][T13261] bridge_slave_0: entered promiscuous mode [ 267.766458][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.773616][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.786505][T13261] bridge_slave_1: entered allmulticast mode [ 267.815386][T13261] bridge_slave_1: entered promiscuous mode [ 267.860272][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 267.963368][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.020685][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.128218][ T5876] Bluetooth: hci0: command tx timeout [ 268.194794][T13261] team0: Port device team_slave_0 added [ 268.203707][T13261] team0: Port device team_slave_1 added [ 268.252177][T13373] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 268.469693][T13376] netlink: 'syz.4.2030': attribute type 5 has an invalid length. [ 268.538374][ T6045] macvlan0: left promiscuous mode [ 268.554928][ T6045] batadv_slave_0: left promiscuous mode [ 268.557201][T13378] netlink: 'syz.4.2031': attribute type 11 has an invalid length. [ 268.575301][T13378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2031'. [ 268.617687][ T6045] hsr_slave_0: left promiscuous mode [ 268.641234][ T6045] hsr_slave_1: left promiscuous mode [ 268.846664][ T5876] Bluetooth: hci1: command tx timeout [ 268.929636][ T5876] Bluetooth: hci2: command tx timeout [ 269.132331][ T6043] smc: removing ib device syz1 [ 269.424720][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.432156][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.458980][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.527384][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.547293][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.580426][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.594819][ T7027] syz0: Port: 1 Link ACTIVE [ 269.742553][T13390] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 269.769229][T13391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.068859][T13390] veth5: entered promiscuous mode [ 270.199623][T13391] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 270.207033][ T5876] Bluetooth: hci0: command tx timeout [ 270.309071][T13261] hsr_slave_0: entered promiscuous mode [ 270.327284][T13261] hsr_slave_1: entered promiscuous mode [ 270.333695][T13261] debugfs: 'hsr0' already exists in 'hsr' [ 270.376113][T13261] Cannot create hsr debugfs directory [ 270.398720][T13264] chnl_net:caif_netlink_parms(): no params data found [ 270.895374][T13421] netlink: 'syz.4.2040': attribute type 11 has an invalid length. [ 270.909249][T13421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2040'. [ 270.926936][ T5876] Bluetooth: hci1: command tx timeout [ 271.006202][ T5876] Bluetooth: hci2: command tx timeout [ 271.308507][T13429] C: renamed from lo [ 271.330902][T13429] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.384714][T13436] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 271.569352][T13436] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 271.805593][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 271.834533][T13443] netlink: 'syz.1.2044': attribute type 14 has an invalid length. [ 271.851837][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.864354][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.871821][T13264] bridge_slave_0: entered allmulticast mode [ 271.881911][T13264] bridge_slave_0: entered promiscuous mode [ 271.939766][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.952745][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.961090][T13264] bridge_slave_1: entered allmulticast mode [ 271.975975][T13264] bridge_slave_1: entered promiscuous mode [ 272.007910][T13245] chnl_net:caif_netlink_parms(): no params data found [ 272.056575][T13458] netlink: 'syz.4.2048': attribute type 11 has an invalid length. [ 272.064429][T13458] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2048'. [ 272.104802][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.120511][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.244849][T13264] team0: Port device team_slave_0 added [ 272.289350][ T5876] Bluetooth: hci0: command tx timeout [ 272.333288][T13264] team0: Port device team_slave_1 added [ 272.453968][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.461653][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.473634][ T6045] IPVS: stop unused estimator thread 0... [ 272.488306][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.508671][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2053'. [ 272.527965][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.537012][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.544325][T13245] bridge_slave_0: entered allmulticast mode [ 272.552280][T13245] bridge_slave_0: entered promiscuous mode [ 272.560694][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.568071][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.594100][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.618976][T13261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.631423][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.638779][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.646003][T13245] bridge_slave_1: entered allmulticast mode [ 272.654616][T13245] bridge_slave_1: entered promiscuous mode [ 272.681855][T13261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.698958][T13261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.761479][T13264] hsr_slave_0: entered promiscuous mode [ 272.770042][T13264] hsr_slave_1: entered promiscuous mode [ 272.782635][T13264] debugfs: 'hsr0' already exists in 'hsr' [ 272.789022][T13264] Cannot create hsr debugfs directory [ 272.794898][T13261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.809283][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.828571][ T6045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 272.840270][ T6045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 272.893969][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.926030][T13485] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2054'. [ 272.959693][ T6045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 272.969958][ T6045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.007599][ T5876] Bluetooth: hci1: command tx timeout [ 273.028615][T13245] team0: Port device team_slave_0 added [ 273.082926][T13245] team0: Port device team_slave_1 added [ 273.088808][ T5876] Bluetooth: hci2: command tx timeout [ 273.095389][ T6045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 273.108003][ T6045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.161017][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.169069][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.202300][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.298814][ T6045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 273.331719][ T6045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 273.352727][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.360616][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.387858][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.558784][T13494] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2057'. [ 273.559702][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 273.576850][T13494] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.2057'. [ 273.594023][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 273.603304][T13494] openvswitch: netlink: Flow key attr not present in new flow. [ 273.625281][T13496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2058'. [ 273.629722][T13245] hsr_slave_0: entered promiscuous mode [ 273.647652][T13245] hsr_slave_1: entered promiscuous mode [ 273.657018][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 273.662773][T13245] Cannot create hsr debugfs directory [ 273.964894][T13264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.984822][T13264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.324345][ T6045] bond3 (unregistering): (slave geneve4): Releasing active interface [ 274.369645][ T6045] team0: Port device geneve0 removed [ 274.716317][ T6045] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 274.725508][ T6045] bridge_slave_1: left allmulticast mode [ 274.731887][ T6045] bond0 (unregistering): Released all slaves [ 274.746871][ T6045] bond1 (unregistering): Released all slaves [ 274.761659][ T6045] bond2 (unregistering): Released all slaves [ 274.861003][ T6045] bond3 (unregistering): Released all slaves [ 274.872815][T13264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.938522][T13264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.295223][T13261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.500868][T13261] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.537807][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.544992][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.562331][T13245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.590372][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.598314][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.609037][T13245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.622643][T13245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.650689][T13245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.750997][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.804240][T13264] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.862417][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.869647][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.904088][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.911335][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.104984][T13245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.178360][T13245] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.202954][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.210167][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.245915][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.253166][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.289514][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.575584][T13583] pim6reg527: entered allmulticast mode [ 276.604677][ T6045] tipc: Left network mode [ 276.639191][T13586] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 276.661406][T13586] bond7 (unregistering): Released all slaves [ 276.732477][T13588] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 276.744376][T13588] bond7 (unregistering): Released all slaves [ 276.964327][T13264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.975848][T13606] netlink: 'syz.4.2080': attribute type 1 has an invalid length. [ 276.984827][T13596] syzkaller1: entered promiscuous mode [ 276.994483][T13596] syzkaller1: entered allmulticast mode [ 276.994757][T13606] __nla_validate_parse: 2 callbacks suppressed [ 276.994770][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 277.016802][T13598] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 277.082308][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2081'. [ 277.441792][T13245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.515467][T13261] veth0_vlan: entered promiscuous mode [ 277.614090][T13261] veth1_vlan: entered promiscuous mode [ 277.620215][T13628] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 277.630721][T13629] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 277.639126][T13627] netlink: 'syz.4.2085': attribute type 13 has an invalid length. [ 277.651811][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 277.671086][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2084'. [ 277.784788][T13627] netlink: 'syz.4.2085': attribute type 13 has an invalid length. [ 277.802203][ T1103] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.821221][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 277.821686][ T1103] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.846445][ T1103] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.869391][ T6045] hsr_slave_0: left promiscuous mode [ 277.875557][ T6045] hsr_slave_1: left promiscuous mode [ 278.651894][ T1103] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.771608][T13261] veth0_macvtap: entered promiscuous mode [ 278.815784][T13261] veth1_macvtap: entered promiscuous mode [ 278.903966][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 278.912910][T13261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.921273][T13264] veth0_vlan: entered promiscuous mode [ 278.940535][T13261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.970740][ T6059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.063314][ T1157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.073026][ T1157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.086046][T13264] veth1_vlan: entered promiscuous mode [ 279.100248][ T1157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.219460][ T6045] IPVS: stop unused estimator thread 0... [ 279.258443][T13264] veth0_macvtap: entered promiscuous mode [ 279.278059][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.293155][T13264] veth1_macvtap: entered promiscuous mode [ 279.296023][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.321123][T13245] veth0_vlan: entered promiscuous mode [ 279.353756][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.364053][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.365109][T13245] veth1_vlan: entered promiscuous mode [ 279.392881][T13264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.432271][T13264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.457911][ T6059] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.482813][ T6059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.500710][ T1157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.510982][ T1157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.520752][T13656] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1992'. [ 279.545937][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1992'. [ 279.572157][T13245] veth0_macvtap: entered promiscuous mode [ 279.589243][T13245] veth1_macvtap: entered promiscuous mode [ 279.696925][T13245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.722568][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.739379][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.759885][T13245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.850902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.853141][ T1157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.867926][ T1157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.881058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.928735][ T6059] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.965219][ T6059] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.357839][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.391977][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.497404][T13678] IPVS: Unknown mcast interface: pimreg [ 280.535424][T13677] IPVS: Unknown mcast interface: pimreg [ 280.558176][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.593614][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.673220][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 280.694797][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 280.848187][T13686] veth1_macvtap: left promiscuous mode [ 282.376822][T13739] __nla_validate_parse: 8 callbacks suppressed [ 282.376841][T13739] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2114'. [ 282.946748][T13751] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2116'. [ 283.093708][T13758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.169787][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2119'. [ 283.210260][T13760] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2119'. [ 283.262235][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2120'. [ 283.364133][T13767] netlink: 'syz.7.2121': attribute type 1 has an invalid length. [ 283.384128][T13767] netlink: 'syz.7.2121': attribute type 11 has an invalid length. [ 283.422376][T13771] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2121'. [ 283.446794][T13767] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2121'. [ 284.017589][T13796] sctp: [Deprecated]: syz.7.2128 (pid 13796) Use of int in max_burst socket option deprecated. [ 284.017589][T13796] Use struct sctp_assoc_value instead [ 284.046899][T13797] sit0: entered allmulticast mode [ 284.254695][T13805] Bluetooth: MGMT ver 1.23 [ 284.578601][T13805] bond1: option mode: invalid value (133) [ 284.589811][T13805] bond1 (unregistering): Released all slaves [ 284.628843][T13812] tipc: Started in network mode [ 284.633758][T13812] tipc: Node identity 6a82a7c122f4, cluster identity 4711 [ 284.659870][T13812] tipc: Enabled bearer , priority 0 [ 284.682194][T13813] syzkaller0: entered promiscuous mode [ 284.692474][T13813] syzkaller0: entered allmulticast mode [ 284.820163][T13813] tipc: Resetting bearer [ 284.852044][T13811] tipc: Resetting bearer [ 284.934443][T13811] tipc: Disabling bearer [ 285.173164][T13855] netlink: 'syz.7.2144': attribute type 1 has an invalid length. [ 285.344983][T13863] netlink: 'syz.4.2147': attribute type 83 has an invalid length. [ 285.366345][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2148'. [ 285.402101][T13864] netem: unknown loss type 0 [ 285.416167][T13864] netem: change failed [ 285.478817][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2150'. [ 285.519656][ T8832] IPVS: starting estimator thread 0... [ 285.586099][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2150'. [ 285.629292][T13877] IPVS: using max 30 ests per chain, 72000 per kthread [ 286.388844][T13914] veth3: entered promiscuous mode [ 286.397725][T13914] veth3: entered allmulticast mode [ 286.507312][T13916] veth5: entered promiscuous mode [ 286.524610][T13916] veth5: entered allmulticast mode [ 286.534867][T13923] netlink: 'syz.1.2165': attribute type 1 has an invalid length. [ 286.587790][T13923] netlink: 'syz.1.2165': attribute type 2 has an invalid length. [ 286.625591][T13925] netlink: 'syz.1.2165': attribute type 1 has an invalid length. [ 286.690145][T13925] netlink: 'syz.1.2165': attribute type 2 has an invalid length. [ 287.921960][T13971] __nla_validate_parse: 4 callbacks suppressed [ 287.921980][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 288.074648][T13971] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 288.084635][T13971] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 288.094207][T13971] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2177'. [ 288.346487][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2183'. [ 288.541595][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 288.790168][T14010] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2190'. [ 289.012537][T14023] º: renamed from veth1_vlan (while UP) [ 289.113342][T14026] sctp: [Deprecated]: syz.5.2194 (pid 14026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.113342][T14026] Use struct sctp_sack_info instead [ 289.188367][T14023] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2194'. [ 289.206356][T14023] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2194'. [ 289.350988][T14033] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 289.390628][T14033] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2196'. [ 289.501565][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2197'. [ 289.535670][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2197'. [ 290.354965][T14072] validate_nla: 1 callbacks suppressed [ 290.355049][T14072] netlink: 'syz.7.2206': attribute type 1 has an invalid length. [ 290.597473][T14077] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.619961][T14077] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.645548][T14077] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 290.775728][T14083] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.832309][T14083] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.929546][T14084] ªªªªªª: renamed from wg2 [ 290.934127][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.951720][T14112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.337198][T14128] netlink: 'syz.7.2224': attribute type 4 has an invalid length. [ 291.487955][T14139] netlink: 'syz.5.2227': attribute type 33 has an invalid length. [ 291.534965][T14139] netlink: 'syz.5.2227': attribute type 33 has an invalid length. [ 291.550922][T14139] netlink: 'syz.5.2227': attribute type 33 has an invalid length. [ 291.627849][T14138] veth3: entered allmulticast mode [ 291.754636][T14162] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 291.803459][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.811348][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.962470][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.979197][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.139569][T14165] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 292.152852][T14169] 8021q: adding VLAN 0 to HW filter on device bond12 [ 292.170355][ T6047] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.180400][ T6047] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.192958][ T6047] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.202436][ T6047] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.437828][T14174] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 292.999202][T14198] __nla_validate_parse: 75 callbacks suppressed [ 292.999219][T14198] netlink: 340 bytes leftover after parsing attributes in process `syz.7.2241'. [ 293.229048][T14213] netlink: 'syz.7.2246': attribute type 1 has an invalid length. [ 293.261724][T14213] netlink: 'syz.7.2246': attribute type 2 has an invalid length. [ 293.290224][T14215] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2247'. [ 293.362269][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2248'. [ 293.551269][T14230] netlink: 'syz.6.2250': attribute type 8 has an invalid length. [ 293.765680][T14235] tipc: Enabled bearer , priority 0 [ 293.792256][T14235] syzkaller0: entered promiscuous mode [ 293.808269][T14235] syzkaller0: entered allmulticast mode [ 293.899973][T14235] tipc: Resetting bearer [ 293.936930][T14245] netlink: 'syz.5.2256': attribute type 17 has an invalid length. [ 293.951422][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 293.969633][T14233] tipc: Resetting bearer [ 293.989912][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2256'. [ 293.993820][T14247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2258'. [ 294.041760][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2258'. [ 294.071776][T14233] tipc: Disabling bearer [ 294.465582][ T8832] IPVS: starting estimator thread 0... [ 294.566712][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 294.577797][T14272] IPVS: using max 27 ests per chain, 64800 per kthread [ 294.596440][T14275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2267'. [ 294.658279][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 294.686281][ T5942] IPVS: starting estimator thread 0... [ 294.812458][T14281] IPVS: using max 34 ests per chain, 81600 per kthread [ 294.908119][ T6049] tipc: Resetting bearer [ 294.994822][T14284] vlan2: entered promiscuous mode [ 295.033472][T14284] veth0: entered promiscuous mode [ 295.092935][T14303] syzkaller1: entered promiscuous mode [ 295.100302][T14303] syzkaller1: entered allmulticast mode [ 295.488526][T14318] tipc: Started in network mode [ 295.506591][T14318] tipc: Node identity 8640fa9ea1b2, cluster identity 4711 [ 295.517586][T14318] tipc: Enabled bearer , priority 0 [ 295.533086][T14318] syzkaller0: entered promiscuous mode [ 295.540492][T14318] syzkaller0: entered allmulticast mode [ 295.692481][T14318] tipc: Resetting bearer [ 295.773357][T14317] tipc: Resetting bearer [ 295.862133][T14317] tipc: Disabling bearer [ 296.142607][T14353] vlan2: entered allmulticast mode [ 296.159977][T14353] bridge0: entered allmulticast mode [ 296.300764][T14355] syzkaller0: entered allmulticast mode [ 297.159173][T14403] validate_nla: 1 callbacks suppressed [ 297.159193][T14403] netlink: 'syz.5.2305': attribute type 9 has an invalid length. [ 297.267926][T14411] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 297.287831][T14412] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.918903][T14443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.926569][T14443] IPv6: NLM_F_CREATE should be set when creating new route [ 298.330344][T14458] __nla_validate_parse: 17 callbacks suppressed [ 298.330364][T14458] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2320'. [ 298.659041][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2325'. [ 298.916014][T14480] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 298.950117][T14480] bond7 (unregistering): Released all slaves [ 299.030699][T14493] lo speed is unknown, defaulting to 1000 [ 299.083555][T14487] nbd: device at index 7 is going down [ 299.089976][T14493] lo speed is unknown, defaulting to 1000 [ 299.105464][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 299.138978][T14493] lo speed is unknown, defaulting to 1000 [ 299.180956][T14493] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 299.226927][T14493] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 299.279089][T14493] lo speed is unknown, defaulting to 1000 [ 299.301341][T14493] lo speed is unknown, defaulting to 1000 [ 299.394767][T14493] lo speed is unknown, defaulting to 1000 [ 299.440075][T14493] lo speed is unknown, defaulting to 1000 [ 299.504054][T14493] lo speed is unknown, defaulting to 1000 [ 299.527209][T14511] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 299.559211][T12320] udevd[12320]: inotify_add_watch(7, /dev/nbd7, 10) failed: No such file or directory [ 299.599200][T14493] lo speed is unknown, defaulting to 1000 [ 299.634518][T14518] netlink: 'syz.7.2338': attribute type 1 has an invalid length. [ 299.659942][T14518] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2338'. [ 299.754777][T14518] syzkaller1: entered promiscuous mode [ 299.793457][T14518] syzkaller1: entered allmulticast mode [ 299.929233][T14533] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 300.029223][T14533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.214687][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2348'. [ 300.420740][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2350'. [ 300.430637][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.577106][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.100374][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 301.355038][T14599] netlink: 'syz.6.2365': attribute type 4 has an invalid length. [ 301.545375][T14604] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 302.025445][T14618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2370'. [ 302.084918][T14629] netlink: 'syz.7.2373': attribute type 2 has an invalid length. [ 302.100321][T14616] syzkaller1: entered promiscuous mode [ 302.110156][T14616] syzkaller1: entered allmulticast mode [ 302.110928][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2373'. [ 302.404677][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 302.781632][T14659] netlink: 'syz.1.2387': attribute type 1 has an invalid length. [ 302.974886][T14659] veth9: entered promiscuous mode [ 303.099968][T14676] team0: No ports can be present during mode change [ 303.309361][T14685] vlan3: entered allmulticast mode [ 303.336201][T14685] hsr0: entered allmulticast mode [ 303.366206][T14685] hsr_slave_0: entered allmulticast mode [ 303.379594][T14685] hsr_slave_1: entered allmulticast mode [ 303.452207][T14689] __nla_validate_parse: 4 callbacks suppressed [ 303.452227][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2397'. [ 303.458424][T14687] siw: device registration error -23 [ 303.643976][T14706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 303.713241][T14707] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2401'. [ 303.915055][T14709] syz.5.2401: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.963485][T14709] CPU: 0 UID: 0 PID: 14709 Comm: syz.5.2401 Not tainted syzkaller #0 PREEMPT(full) [ 303.963513][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.963538][T14709] Call Trace: [ 303.963546][T14709] [ 303.963557][T14709] dump_stack_lvl+0x189/0x250 [ 303.963590][T14709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.963615][T14709] ? __pfx__printk+0x10/0x10 [ 303.963643][T14709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.963668][T14709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.963694][T14709] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 303.963721][T14709] warn_alloc+0x214/0x310 [ 303.963759][T14709] ? __pfx_warn_alloc+0x10/0x10 [ 303.963800][T14709] ? __get_vm_area_node+0x28f/0x300 [ 303.963829][T14709] ? nf_tables_newset+0x132b/0x2530 [ 303.963860][T14709] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 303.963918][T14709] ? alloc_pages_mpol+0x3cd/0x4a0 [ 303.963948][T14709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.963984][T14709] ? rcu_is_watching+0x15/0xb0 [ 303.964005][T14709] ? nf_tables_newset+0x132b/0x2530 [ 303.964030][T14709] ? nf_tables_newset+0x132b/0x2530 [ 303.964054][T14709] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 303.964083][T14709] ? nf_tables_newset+0x132b/0x2530 [ 303.964109][T14709] ? nft_table_lookup+0x211/0x230 [ 303.964133][T14709] ? nft_set_lookup+0x128/0x150 [ 303.964165][T14709] ? nft_hash_privsize+0xdf/0xf0 [ 303.964191][T14709] nf_tables_newset+0x132b/0x2530 [ 303.964233][T14709] ? __pfx_nf_tables_newset+0x10/0x10 [ 303.964302][T14709] ? __nla_parse+0x40/0x60 [ 303.964329][T14709] nfnetlink_rcv+0x1132/0x2520 [ 303.964397][T14709] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 303.964448][T14709] ? ref_tracker_free+0x63a/0x7d0 [ 303.964499][T14709] ? __netlink_deliver_tap+0x807/0x850 [ 303.964521][T14709] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.964563][T14709] netlink_unicast+0x82c/0x9e0 [ 303.964606][T14709] ? __pfx_netlink_unicast+0x10/0x10 [ 303.964639][T14709] ? netlink_sendmsg+0x642/0xb30 [ 303.964659][T14709] ? skb_put+0x11b/0x210 [ 303.964686][T14709] netlink_sendmsg+0x805/0xb30 [ 303.964720][T14709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.964745][T14709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.964769][T14709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.964791][T14709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.964813][T14709] __sock_sendmsg+0x21c/0x270 [ 303.964848][T14709] ____sys_sendmsg+0x505/0x830 [ 303.964879][T14709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.964916][T14709] ? import_iovec+0x74/0xa0 [ 303.964947][T14709] ___sys_sendmsg+0x21f/0x2a0 [ 303.964976][T14709] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.965044][T14709] ? __fget_files+0x2a/0x420 [ 303.965061][T14709] ? __fget_files+0x3a0/0x420 [ 303.965092][T14709] __x64_sys_sendmsg+0x19b/0x260 [ 303.965121][T14709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.965159][T14709] ? rcu_is_watching+0x15/0xb0 [ 303.965185][T14709] ? do_syscall_64+0xbe/0x3b0 [ 303.965214][T14709] do_syscall_64+0xfa/0x3b0 [ 303.965235][T14709] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.965336][T14709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.965357][T14709] ? clear_bhb_loop+0x60/0xb0 [ 303.965382][T14709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.965402][T14709] RIP: 0033:0x7fdb2678eec9 [ 303.965421][T14709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.965439][T14709] RSP: 002b:00007fdb27593038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.965460][T14709] RAX: ffffffffffffffda RBX: 00007fdb269e6090 RCX: 00007fdb2678eec9 [ 303.965475][T14709] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 303.965488][T14709] RBP: 00007fdb26811f91 R08: 0000000000000000 R09: 0000000000000000 [ 303.965500][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.965512][T14709] R13: 00007fdb269e6128 R14: 00007fdb269e6090 R15: 00007fffb0b4aa98 [ 303.965551][T14709] [ 303.965569][T14709] Mem-Info: [ 304.177424][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2407'. [ 304.232236][T14727] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2406'. [ 304.243099][T14709] active_anon:4890 inactive_anon:0 isolated_anon:0 [ 304.243099][T14709] active_file:3207 inactive_file:39968 isolated_file:0 [ 304.243099][T14709] unevictable:768 dirty:65 writeback:0 [ 304.243099][T14709] slab_reclaimable:11952 slab_unreclaimable:110425 [ 304.243099][T14709] mapped:29244 shmem:1375 pagetables:1090 [ 304.243099][T14709] sec_pagetables:0 bounce:0 [ 304.243099][T14709] kernel_misc_reclaimable:0 [ 304.243099][T14709] free:1313366 free_pcp:14969 free_cma:0 [ 304.286952][T14728] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 304.313727][T14709] Node 0 active_anon:19560kB inactive_anon:0kB active_file:12828kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116976kB dirty:260kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14020kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.313788][T14709] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.313838][T14709] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.313910][T14709] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 304.313956][T14709] Node 0 DMA32 free:1342160kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19508kB inactive_anon:0kB active_file:12828kB inactive_file:158096kB unevictable:1536kB writepending:260kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:41012kB local_pcp:20144kB free_cma:0kB [ 304.314018][T14709] lowmem_reserve[]: 0 0 1 1 1 [ 304.314061][T14709] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 304.614444][T14709] lowmem_reserve[]: 0 0 0 0 0 [ 304.637583][T14709] Node 1 Normal free:3895724kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18784kB local_pcp:10160kB free_cma:0kB [ 304.669886][T14709] lowmem_reserve[]: 0 0 0 0 0 [ 304.674641][T14709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.711051][T14709] Node 0 DMA32: 393*4kB (ME) 1141*8kB (UME) 335*16kB (UME) 140*32kB (UME) 98*64kB (UME) 59*128kB (UME) 32*256kB (UME) 12*512kB (UME) 5*1024kB (UME) 1*2048kB (U) 314*4096kB (M) = 1342012kB [ 304.743831][T14709] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 304.762064][T14709] Node 1 Normal: 193*4kB (UE) 43*8kB (UME) 47*16kB (UME) 99*32kB (UME) 22*64kB (UME) 5*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895724kB [ 304.810435][T14709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.839615][T14709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.901620][T14709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.932586][T14709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.948443][T14744] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2409'. [ 304.973564][T14709] 44545 total pagecache pages [ 304.979468][T14709] 0 pages in swap cache [ 304.984122][T14709] Free swap = 124996kB [ 304.994591][T14709] Total swap = 124996kB [ 305.014296][T14709] 2097051 pages RAM [ 305.018569][T14709] 0 pages HighMem/MovableOnly [ 305.033674][T14709] 425673 pages reserved [ 305.038312][T14709] 0 pages cma reserved [ 305.706732][T14770] netlink: 'syz.7.2414': attribute type 1 has an invalid length. [ 305.715114][T14770] netlink: 'syz.7.2414': attribute type 4 has an invalid length. [ 305.723841][T14770] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2414'. [ 308.768899][T14767] batadv0: entered promiscuous mode [ 308.774658][T14767] batadv0: left promiscuous mode [ 309.316371][T14794] netlink: 'syz.4.2420': attribute type 39 has an invalid length. [ 309.900046][T14819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2426'. [ 309.934104][T14821] netlink: 'syz.1.2426': attribute type 13 has an invalid length. [ 310.011869][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 310.037167][T14821] netlink: 'syz.1.2426': attribute type 13 has an invalid length. [ 310.061531][T14827] netlink: 'syz.7.2428': attribute type 21 has an invalid length. [ 310.076271][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 310.093858][T14827] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2428'. [ 310.543742][T14841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2433'. [ 310.835842][T14845] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 310.863979][T14847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.866269][T14845] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2435'. [ 310.935883][T14845] nbd: must specify a device to reconfigure [ 311.708514][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2441'. [ 312.018631][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2443'. [ 312.178008][T14877] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2445'. [ 312.373744][T14874] lo speed is unknown, defaulting to 1000 [ 312.510983][T14882] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2447'. [ 312.646201][ T5876] Bluetooth: hci2: link tx timeout [ 312.652685][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 312.784349][T14893] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20003 [ 313.165526][T14909] tipc: Started in network mode [ 313.192113][T14909] tipc: Node identity e2a09aad238a, cluster identity 4711 [ 313.243849][T14909] tipc: Enabled bearer , priority 0 [ 313.279141][T14910] syzkaller0: entered promiscuous mode [ 313.284658][T14910] syzkaller0: entered allmulticast mode [ 313.384636][T14910] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 313.548715][T14921] tipc: Resetting bearer [ 313.573219][T14910] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.644078][T14906] tipc: Resetting bearer [ 313.699882][T14906] tipc: Disabling bearer [ 313.935277][T14935] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 313.937153][T14932] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 314.070833][T14937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.119344][T14946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.373726][T14953] : renamed from bridge_slave_0 (while UP) [ 314.604564][T14965] netlink: 'syz.1.2469': attribute type 2 has an invalid length. [ 314.686193][ T5871] Bluetooth: hci2: command 0x0405 tx timeout [ 314.879325][T14976] sctp: [Deprecated]: syz.4.2474 (pid 14976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.879325][T14976] Use struct sctp_sack_info instead [ 315.184449][T14985] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 316.042071][T15010] siw: device registration error -23 [ 316.077054][T15014] tipc: MTU too low for tipc bearer [ 316.580690][T15028] __nla_validate_parse: 7 callbacks suppressed [ 316.580709][T15028] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2493'. [ 316.609077][T15034] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2497'. [ 316.619205][T15028] gretap0: entered promiscuous mode [ 316.662457][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2494'. [ 316.675401][T15028] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2493'. [ 316.675401][T15029] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2493'. [ 316.675599][T15029] 0ªî{X¹¦: renamed from gretap0 [ 316.753837][T15029] 0ªî{X¹¦: left promiscuous mode [ 316.770230][T15029] 0ªî{X¹¦: entered allmulticast mode [ 316.802586][T15029] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.862447][T15028] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 316.893167][T15028] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.977145][T15046] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.155898][T15050] tipc: New replicast peer: 255.255.255.255 [ 317.175196][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.183136][T15050] tipc: Enabled bearer , priority 10 [ 317.305382][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2504'. [ 317.321927][T15059] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 317.699352][T15071] openvswitch: netlink: Message has -1 unknown bytes. [ 317.780876][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2509'. [ 318.025389][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 318.035640][T15087] netlink: 'syz.6.2515': attribute type 1 has an invalid length. [ 318.137351][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2515'. [ 318.174878][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2515'. [ 318.306434][ T8832] tipc: Node number set to 670235294 [ 318.460215][T15093] veth3: entered promiscuous mode [ 318.807152][T15113] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 318.995851][T15113] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.182795][T15128] netlink: 'syz.7.2527': attribute type 10 has an invalid length. [ 319.187849][T15115] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.229815][T15115] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 319.258575][T15115] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 319.456630][T15126] veth11: entered promiscuous mode [ 319.488183][T15126] bond14: (slave veth11): Enslaving as an active interface with a down link [ 319.578849][T15128] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 319.794625][T15149] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 320.214353][T15166] netlink: 'syz.1.2539': attribute type 8 has an invalid length. [ 320.328282][T15170] netlink: 'syz.6.2542': attribute type 17 has an invalid length. [ 320.711971][T15187] netlink: 'syz.4.2550': attribute type 10 has an invalid length. [ 320.733709][T15189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.811831][T15187] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 321.079826][T15220] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 324.598909][T15258] __nla_validate_parse: 4 callbacks suppressed [ 324.598927][T15258] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2566'. [ 324.610467][T15257] pimreg: entered allmulticast mode [ 324.679354][T15258] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2566'. [ 324.723980][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2566'. [ 324.748262][T15264] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 324.758087][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2566'. [ 325.413193][T15278] tipc: Enabling of bearer rejected, already enabled [ 325.535075][T15265] lo speed is unknown, defaulting to 1000 [ 326.132600][T15296] netlink: 'syz.5.2578': attribute type 3 has an invalid length. [ 326.274665][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 326.450982][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 326.479670][T15316] sctp: [Deprecated]: syz.7.2586 (pid 15316) Use of int in max_burst socket option. [ 326.479670][T15316] Use struct sctp_assoc_value instead [ 326.524111][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2586'. [ 326.534100][ T30] audit: type=1107 audit(1759301855.863:3): pid=15313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Jȉmrÿ´ÓßÅ$/1ùPa8’HçÍ‚G,ì|” …ߺÕÏ' [ 326.664008][T15314] syzkaller0: entered promiscuous mode [ 326.671077][T15314] syzkaller0: entered allmulticast mode [ 327.958028][T15337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2593'. [ 329.179485][T15370] FAULT_INJECTION: forcing a failure. [ 329.179485][T15370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.231223][T15371] ipvlan3: entered promiscuous mode [ 329.259093][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.5.2601 Not tainted syzkaller #0 PREEMPT(full) [ 329.259120][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.259132][T15370] Call Trace: [ 329.259140][T15370] [ 329.259149][T15370] dump_stack_lvl+0x189/0x250 [ 329.259177][T15370] ? __pfx____ratelimit+0x10/0x10 [ 329.259199][T15370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.259221][T15370] ? __pfx__printk+0x10/0x10 [ 329.259249][T15370] ? __might_fault+0xb0/0x130 [ 329.259289][T15370] should_fail_ex+0x414/0x560 [ 329.259324][T15370] _copy_from_user+0x2d/0xb0 [ 329.259351][T15370] ___sys_sendmsg+0x158/0x2a0 [ 329.259381][T15370] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.259446][T15370] ? __fget_files+0x2a/0x420 [ 329.259464][T15370] ? __fget_files+0x3a0/0x420 [ 329.259494][T15370] __x64_sys_sendmsg+0x19b/0x260 [ 329.259522][T15370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.259558][T15370] ? __pfx_ksys_write+0x10/0x10 [ 329.259581][T15370] ? rcu_is_watching+0x15/0xb0 [ 329.259608][T15370] ? do_syscall_64+0xbe/0x3b0 [ 329.259635][T15370] do_syscall_64+0xfa/0x3b0 [ 329.259656][T15370] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.259677][T15370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.259697][T15370] ? clear_bhb_loop+0x60/0xb0 [ 329.259721][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.259741][T15370] RIP: 0033:0x7fdb2678eec9 [ 329.259759][T15370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.259776][T15370] RSP: 002b:00007fdb275b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.259797][T15370] RAX: ffffffffffffffda RBX: 00007fdb269e5fa0 RCX: 00007fdb2678eec9 [ 329.259813][T15370] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 329.259826][T15370] RBP: 00007fdb275b4090 R08: 0000000000000000 R09: 0000000000000000 [ 329.259838][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.259858][T15370] R13: 00007fdb269e6038 R14: 00007fdb269e5fa0 R15: 00007fffb0b4aa98 [ 329.259891][T15370] [ 329.722107][T15394] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 329.723454][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'. [ 329.807309][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'. [ 329.984137][ T7018] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 330.038098][ T7018] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 330.230200][T15431] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2617'. [ 330.277892][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2617'. [ 330.301285][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 330.320893][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2617'. [ 330.339707][T15423] fido_id[15423]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 330.387984][T15440] FAULT_INJECTION: forcing a failure. [ 330.387984][T15440] name failslab, interval 1, probability 0, space 0, times 0 [ 330.433657][T15440] CPU: 1 UID: 0 PID: 15440 Comm: syz.1.2620 Not tainted syzkaller #0 PREEMPT(full) [ 330.433707][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.433732][T15440] Call Trace: [ 330.433755][T15440] [ 330.433763][T15440] dump_stack_lvl+0x189/0x250 [ 330.433792][T15440] ? __pfx____ratelimit+0x10/0x10 [ 330.433814][T15440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.433837][T15440] ? __pfx__printk+0x10/0x10 [ 330.433871][T15440] ? __pfx___might_resched+0x10/0x10 [ 330.433896][T15440] should_fail_ex+0x414/0x560 [ 330.433930][T15440] should_failslab+0xa8/0x100 [ 330.433961][T15440] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 330.433990][T15440] ? __alloc_skb+0x112/0x2d0 [ 330.434015][T15440] __alloc_skb+0x112/0x2d0 [ 330.434046][T15440] netlink_sendmsg+0x5c6/0xb30 [ 330.434081][T15440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.434104][T15440] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.434125][T15440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.434147][T15440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.434170][T15440] __sock_sendmsg+0x21c/0x270 [ 330.434203][T15440] ____sys_sendmsg+0x505/0x830 [ 330.434234][T15440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.434270][T15440] ? import_iovec+0x74/0xa0 [ 330.434299][T15440] ___sys_sendmsg+0x21f/0x2a0 [ 330.434327][T15440] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.434394][T15440] ? __fget_files+0x2a/0x420 [ 330.434412][T15440] ? __fget_files+0x3a0/0x420 [ 330.434445][T15440] __x64_sys_sendmsg+0x19b/0x260 [ 330.434474][T15440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.434510][T15440] ? __pfx_ksys_write+0x10/0x10 [ 330.434534][T15440] ? rcu_is_watching+0x15/0xb0 [ 330.434560][T15440] ? do_syscall_64+0xbe/0x3b0 [ 330.434587][T15440] do_syscall_64+0xfa/0x3b0 [ 330.434608][T15440] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.434629][T15440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.434648][T15440] ? clear_bhb_loop+0x60/0xb0 [ 330.434673][T15440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.434692][T15440] RIP: 0033:0x7fbabeb8eec9 [ 330.434710][T15440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.434728][T15440] RSP: 002b:00007fbabf97a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.434755][T15440] RAX: ffffffffffffffda RBX: 00007fbabede5fa0 RCX: 00007fbabeb8eec9 [ 330.434770][T15440] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 330.434782][T15440] RBP: 00007fbabf97a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.434794][T15440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.434806][T15440] R13: 00007fbabede6038 R14: 00007fbabede5fa0 R15: 00007ffecf1850c8 [ 330.434839][T15440] [ 330.716166][T15444] netlink: 'syz.5.2623': attribute type 21 has an invalid length. [ 330.724033][T15444] netlink: 'syz.5.2623': attribute type 22 has an invalid length. [ 330.732259][T15444] netlink: 'syz.5.2623': attribute type 23 has an invalid length. [ 330.740161][T15444] netlink: 'syz.5.2623': attribute type 25 has an invalid length. [ 330.748134][T15444] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2623'. [ 330.875968][T15452] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2624'. [ 330.933993][T15450] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 330.949607][T15452] 8021q: VLANs not supported on gre0 [ 331.009532][T15455] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 331.191425][T15471] netlink: 'syz.7.2632': attribute type 5 has an invalid length. [ 331.244989][T15473] tipc: Enabling of bearer rejected, already enabled [ 331.277642][T15473] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2633'. [ 331.291789][T15468] netlink: 'syz.5.2631': attribute type 10 has an invalid length. [ 331.350210][T15468] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.368896][T15468] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.570357][T15491] netlink: 'syz.1.2638': attribute type 6 has an invalid length. [ 331.732211][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2640'. [ 331.805529][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.003403][T15514] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 332.098466][T15514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.259570][T15524] openvswitch: netlink: IPv4 tun info is not correct [ 332.615981][T15522] tipc: Enabling of bearer rejected, failed to enable media [ 332.830922][T15544] netlink: 'syz.5.2650': attribute type 1 has an invalid length. [ 333.057325][T15551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.064980][T15558] netlink: 'syz.5.2653': attribute type 21 has an invalid length. [ 333.077018][T15558] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.090740][T15558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.098034][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 333.105334][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 333.112618][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 333.234948][T15566] dvmrp0: left allmulticast mode [ 333.240986][T15566] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 333.317183][T15570] netlink: 'syz.4.2658': attribute type 10 has an invalid length. [ 333.334220][T15570] veth1_macvtap: left allmulticast mode [ 333.341587][T15570] veth1_macvtap: left promiscuous mode [ 334.015309][T15589] tipc: Can't bind to reserved service type 0 [ 334.062453][T15589] vxlan0: entered promiscuous mode [ 334.080503][T15589] vxlan0: entered allmulticast mode [ 334.109465][T15203] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.146210][T15203] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.154958][T15203] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.199463][T15203] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.314934][T15604] tipc: Enabling of bearer rejected, failed to enable media [ 334.763287][T15623] __nla_validate_parse: 10 callbacks suppressed [ 334.763306][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2676'. [ 334.782417][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2676'. [ 335.253356][T15650] netlink: 58 bytes leftover after parsing attributes in process `syz.6.2684'. [ 335.454141][T15665] netlink: 'syz.7.2686': attribute type 1 has an invalid length. [ 335.464828][T15212] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 335.563605][T15670] bond2: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.577019][T15670] bond2: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 335.600781][T15670] bond2: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 336.177998][T15667] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 336.192757][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 336.387401][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2691'. [ 336.451323][T15212] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.451394][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2691'. [ 336.474790][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 336.484303][T15203] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.503961][T15688] openvswitch: netlink: IP tunnel dst address not specified [ 336.511463][T15203] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.527468][T15689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2693'. [ 336.542339][T15211] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.566532][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2695'. [ 336.583671][T15693] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2695'. [ 336.664499][T15699] netlink: 'syz.4.2696': attribute type 1 has an invalid length. [ 336.687148][T15699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.842959][T15708] netlink: 'syz.5.2699': attribute type 1 has an invalid length. [ 337.078752][T15725] netlink: 'syz.4.2702': attribute type 1 has an invalid length. [ 337.189747][T15730] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:21 [ 337.475528][T15750] tipc: Enabled bearer , priority 0 [ 337.647377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.678142][T15755] syzkaller0: entered promiscuous mode [ 337.687147][T15755] syzkaller0: entered allmulticast mode [ 337.700793][T15755] tipc: Resetting bearer [ 337.765730][T15749] tipc: Resetting bearer [ 338.087567][T15786] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 338.507110][ T5942] tipc: Node number set to 3240794797 [ 339.561501][T15749] tipc: Disabling bearer [ 339.649024][T15769] vcan0: entered allmulticast mode [ 339.658776][T15790] erspan0: entered promiscuous mode [ 339.664038][T15790] erspan0: entered allmulticast mode [ 339.769608][T15795] __nla_validate_parse: 9 callbacks suppressed [ 339.769650][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2720'. [ 339.887620][T15802] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2723'. [ 339.942691][T15802] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2723'. [ 340.004790][T15804] dummy0: entered promiscuous mode [ 340.017848][T15804] dummy0: entered allmulticast mode [ 340.160868][T15811] netlink: 'syz.5.2726': attribute type 21 has an invalid length. [ 340.187819][T15813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.226187][T15811] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2726'. [ 340.490416][T15833] veth0_to_batadv: entered allmulticast mode [ 340.553024][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 341.051354][T15846] netlink: 'syz.5.2735': attribute type 10 has an invalid length. [ 341.169801][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 341.195767][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 341.242958][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2737'. [ 341.505727][T15874] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 341.545803][T15874] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.558972][T15877] ksmbd: Unknown IPC event: 3, ignore. [ 341.895125][T15892] IPVS: Unknown mcast interface: rose0 [ 342.554716][T15924] netlink: 'syz.7.2757': attribute type 10 has an invalid length. [ 342.571375][T15908] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.635920][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2757'. [ 342.657950][T15931] netlink: 'syz.1.2759': attribute type 1 has an invalid length. [ 342.811019][T15908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.080893][T15908] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 343.088920][T15908] veth3: left allmulticast mode [ 343.094133][T15908] vlan2: left allmulticast mode [ 343.099258][T15908] bridge0: left allmulticast mode [ 343.109241][T15908] vlan3: left allmulticast mode [ 343.114338][T15908] hsr0: left allmulticast mode [ 343.119554][T15908] hsr_slave_0: left allmulticast mode [ 343.125090][T15908] hsr_slave_1: left allmulticast mode [ 343.137455][ T7025] lo speed is unknown, defaulting to 1000 [ 343.150072][ T7025] syz2: Port: 1 Link DOWN [ 343.168009][T15924] bridge0: port 3(team0) entered blocking state [ 343.175206][T15924] bridge0: port 3(team0) entered disabled state [ 343.182982][T15924] team0: entered allmulticast mode [ 343.189227][T15924] team_slave_0: entered allmulticast mode [ 343.195149][T15924] team_slave_1: entered allmulticast mode [ 343.213959][T15924] team0: entered promiscuous mode [ 343.225746][T15924] team_slave_0: entered promiscuous mode [ 343.240098][T15924] team_slave_1: entered promiscuous mode [ 343.256785][T15924] bridge0: port 3(team0) entered blocking state [ 343.263210][T15924] bridge0: port 3(team0) entered forwarding state [ 343.366254][T15931] bond15: entered promiscuous mode [ 343.371967][T15931] 8021q: adding VLAN 0 to HW filter on device bond15 [ 343.514208][T15198] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.546382][T15198] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.584823][T15198] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.593977][T15198] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.603465][T15198] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.614799][T15198] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.632157][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 343.656531][T15198] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.667848][T15198] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.696944][T15959] netlink: 'syz.6.2763': attribute type 10 has an invalid length. [ 343.739566][T15959] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 344.048177][T15984] erspan0: left promiscuous mode [ 344.162782][T15984] bridge0: port 3(team0) entered disabled state [ 344.169373][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.214380][T15984] dummy0: left promiscuous mode [ 344.302595][T15984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.319492][T15984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.434416][T15984] veth3: left promiscuous mode [ 344.442089][T15984] veth5: left promiscuous mode [ 344.450432][T15984] ipvlan3: left promiscuous mode [ 344.463263][T15984] vxlan0: left promiscuous mode [ 344.512673][T15198] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.536120][T15198] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.556305][T15198] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.594043][T15198] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.611348][T15198] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.622574][T15198] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.655533][T15198] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.673030][T15198] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.913987][T16020] tipc: Resetting bearer [ 345.045712][T16030] netlink: 'syz.1.2783': attribute type 24 has an invalid length. [ 345.054793][T16015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.490224][T16060] __nla_validate_parse: 2 callbacks suppressed [ 345.490303][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 345.507862][T16060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2792'. [ 345.602118][T16060] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 345.619758][T16060] bond16 (unregistering): Released all slaves [ 345.671571][T16071] openvswitch: netlink: Key type 10512 is out of range max 32 [ 345.743197][T16020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.757733][T16020] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.788956][T16020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.803433][T16020] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 346.093703][T16082] tipc: New replicast peer: 255.255.255.255 [ 346.110644][T16082] tipc: Enabled bearer , priority 10 [ 346.430663][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2802'. [ 346.445262][T16089] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2802'. [ 346.694855][T16097] netlink: 'syz.7.2804': attribute type 4 has an invalid length. [ 346.706724][T16097] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2804'. [ 346.725333][T16097] wlan1: mtu less than device minimum [ 346.736012][T16097] delete_channel: no stack [ 346.838997][T16095] delete_channel: no stack [ 347.106492][ T7025] tipc: Node number set to 1215735745 [ 347.262980][T16135] delete_channel: no stack [ 347.407004][T16143] netlink: 'syz.1.2813': attribute type 11 has an invalid length. [ 347.816637][T16159] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 347.978991][ T7025] syz0: Port: 1 Link DOWN [ 348.013618][T16164] netlink: 'syz.1.2819': attribute type 24 has an invalid length. [ 348.134278][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'. [ 348.327634][T16177] vlan2: entered promiscuous mode [ 348.332822][T16177] erspan0: entered promiscuous mode [ 349.352559][T16187] netlink: 'syz.7.2826': attribute type 1 has an invalid length. [ 349.380581][T16187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.387926][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2826'. [ 349.401714][T16186] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 349.644492][T16198] netlink: 'syz.7.2829': attribute type 6 has an invalid length. [ 349.653991][T16198] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2829'. [ 349.715667][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2830'. [ 349.729383][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2830'. [ 350.095950][T16215] IPVS: Unknown mcast interface: dvmrp0 [ 350.367170][T16226] openvswitch: netlink: IPv4 tunnel dst address is zero [ 350.377198][T16226] : renamed from bridge_slave_0 (while UP) [ 350.603121][T16243] netlink: 'syz.7.2845': attribute type 16 has an invalid length. [ 350.612257][T16243] __nla_validate_parse: 1 callbacks suppressed [ 350.612275][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 350.693231][T16249] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.717843][T16245] !€ÿ: renamed from bond_slave_0 [ 350.815254][T16252] tipc: Enabled bearer , priority 0 [ 350.883303][T16254] syzkaller0: entered promiscuous mode [ 350.889392][T16254] syzkaller0: entered allmulticast mode [ 350.910338][T16254] tipc: Resetting bearer [ 351.694745][T16264] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 351.701966][T16264] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 351.713671][T16251] tipc: Resetting bearer [ 351.730954][T16251] tipc: Disabling bearer [ 351.947650][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 351.957517][T16270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.055979][T16309] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2864'. [ 353.230922][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2866'. [ 353.239975][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2866'. [ 353.293213][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2867'. [ 353.332308][T16319] hsr_slave_0 (unregistering): left promiscuous mode [ 499.576445][ T31] INFO: task syz-executor:5873 blocked for more than 143 seconds. [ 499.584334][ T31] Not tainted syzkaller #0 [ 499.595485][ T31] Blocked by coredump. [ 499.600404][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.609311][ T31] task:syz-executor state:D stack:21336 pid:5873 tgid:5873 ppid:1 task_flags:0x40054c flags:0x00004006 [ 499.621414][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.624691][ T31] [ 499.627712][ T31] __schedule+0x1798/0x4cc0 [ 499.632250][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.637280][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.642179][ T31] ? __pfx___schedule+0x10/0x10 [ 499.647195][ T31] ? schedule+0x91/0x360 [ 499.651449][ T31] schedule+0x165/0x360 [ 499.655610][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.661370][ T31] __mutex_lock+0x7e6/0x1350 [ 499.691988][ T31] ? __mutex_lock+0x5bb/0x1350 [ 499.710788][ T31] ? rfkill_unregister+0xc8/0x220 [ 499.715864][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.743555][ T31] ? __pfx_device_del+0x10/0x10 [ 499.748801][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 499.754034][ T31] rfkill_unregister+0xc8/0x220 [ 499.759521][ T31] hci_unregister_dev+0x374/0x510 [ 499.764938][ T31] vhci_release+0x152/0x1a0 [ 499.769876][ T31] ? __pfx_vhci_release+0x10/0x10 [ 499.774927][ T31] __fput+0x44c/0xa70 [ 499.779290][ T31] task_work_run+0x1d1/0x260 [ 499.783904][ T31] ? __pfx_task_work_run+0x10/0x10 [ 499.789151][ T31] ? kmem_cache_free+0x18f/0x400 [ 499.794109][ T31] do_exit+0x6b5/0x2300 [ 499.798650][ T31] ? do_raw_spin_lock+0x121/0x290 [ 499.803699][ T31] ? __pfx_do_exit+0x10/0x10 [ 499.808388][ T31] ? cgroup_freezing+0x20/0x350 [ 499.813254][ T31] do_group_exit+0x21c/0x2d0 [ 499.817896][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.823111][ T31] get_signal+0x1286/0x1340 [ 499.827968][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 499.833532][ T31] ? fput_close_sync+0x119/0x200 [ 499.838807][ T31] ? kmem_cache_free+0x309/0x400 [ 499.843757][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.850047][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 499.855517][ T31] exit_to_user_mode_loop+0x75/0x110 [ 499.861090][ T31] do_syscall_64+0x2bd/0x3b0 [ 499.865673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.870939][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.877052][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.881720][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.888020][ T31] RIP: 0033:0x7f49f1d8d8dc [ 499.892449][ T31] RSP: 002b:00007ffc20878360 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.900973][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f49f1d8d8dc [ 499.908995][ T31] RDX: 0000000000000030 RSI: 00007ffc20878420 RDI: 00000000000000f9 [ 499.917231][ T31] RBP: 00007ffc208783cc R08: 0000000000000000 R09: 00007ffc208780d7 [ 499.925208][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 499.933258][ T31] R13: 00000000000927c0 R14: 00000000000546bb R15: 00007ffc20878420 [ 499.941310][ T31] [ 499.944356][ T31] INFO: task kworker/0:4:5942 blocked for more than 143 seconds. [ 499.953850][ T31] Not tainted syzkaller #0 [ 499.958849][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.967713][ T31] task:kworker/0:4 state:D stack:22920 pid:5942 tgid:5942 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 499.980036][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 499.986792][ T31] Call Trace: [ 499.990075][ T31] [ 499.993006][ T31] __schedule+0x1798/0x4cc0 [ 499.997554][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 500.002960][ T31] ? __pfx___schedule+0x10/0x10 [ 500.008214][ T31] ? schedule+0x91/0x360 [ 500.012474][ T31] schedule+0x165/0x360 [ 500.016712][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.022162][ T31] __mutex_lock+0x7e6/0x1350 [ 500.026804][ T31] ? __mutex_lock+0x5bb/0x1350 [ 500.031583][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 500.038128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.043157][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 500.048960][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 500.054682][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 500.061068][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 500.067106][ T31] process_scheduled_works+0xae1/0x17b0 [ 500.072702][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.078773][ T31] worker_thread+0x8a0/0xda0 [ 500.083379][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.089843][ T31] ? __kthread_parkme+0x7b/0x200 [ 500.094799][ T31] kthread+0x70e/0x8a0 [ 500.099306][ T31] ? __pfx_worker_thread+0x10/0x10 [ 500.104425][ T31] ? __pfx_kthread+0x10/0x10 [ 500.109071][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.114310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.119578][ T31] ? __pfx_kthread+0x10/0x10 [ 500.124175][ T31] ret_from_fork+0x439/0x7d0 [ 500.129144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 500.134312][ T31] ? __switch_to_asm+0x39/0x70 [ 500.139122][ T31] ? __switch_to_asm+0x33/0x70 [ 500.143891][ T31] ? __pfx_kthread+0x10/0x10 [ 500.148531][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.153317][ T31] [ 500.156675][ T31] INFO: task syz.5.2780:16028 blocked for more than 143 seconds. [ 500.164390][ T31] Not tainted syzkaller #0 [ 500.170414][ T31] Blocked by coredump. [ 500.175006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.183754][ T31] task:syz.5.2780 state:D stack:26888 pid:16028 tgid:16014 ppid:13261 task_flags:0x40054c flags:0x00004002 [ 500.196058][ T31] Call Trace: [ 500.199344][ T31] [ 500.202317][ T31] __schedule+0x1798/0x4cc0 [ 500.207411][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.212295][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.217654][ T31] ? __pfx___schedule+0x10/0x10 [ 500.222544][ T31] ? schedule+0x91/0x360 [ 500.227077][ T31] schedule+0x165/0x360 [ 500.231243][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.236780][ T31] __mutex_lock+0x7e6/0x1350 [ 500.241389][ T31] ? __mutex_lock+0x5bb/0x1350 [ 500.246216][ T31] ? rfkill_unregister+0xc8/0x220 [ 500.251245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.256628][ T31] ? __pfx_device_del+0x10/0x10 [ 500.261512][ T31] rfkill_unregister+0xc8/0x220 [ 500.266422][ T31] nfc_unregister_device+0x96/0x2a0 [ 500.271626][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 500.277691][ T31] virtual_ncidev_close+0x56/0x90 [ 500.282729][ T31] __fput+0x44c/0xa70 [ 500.287093][ T31] task_work_run+0x1d1/0x260 [ 500.291705][ T31] ? __pfx_task_work_run+0x10/0x10 [ 500.296914][ T31] do_exit+0x6b5/0x2300 [ 500.301095][ T31] ? cgroup_freezing+0x20/0x350 [ 500.305950][ T31] ? __pfx_do_exit+0x10/0x10 [ 500.310598][ T31] ? cgroup_freezing+0x20/0x350 [ 500.315431][ T31] ? cgroup_freezing+0x20/0x350 [ 500.320662][ T31] do_group_exit+0x21c/0x2d0 [ 500.325275][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.330523][ T31] get_signal+0x1286/0x1340 [ 500.335059][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 500.340717][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.347173][ T31] ? fd_install+0x30d/0x540 [ 500.351702][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 500.357281][ T31] exit_to_user_mode_loop+0x75/0x110 [ 500.362574][ T31] do_syscall_64+0x2bd/0x3b0 [ 500.367525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.372738][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.379127][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.383802][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.390011][ T31] RIP: 0033:0x7fdb26790d5c [ 500.394433][ T31] RSP: 002b:00007fdb27570ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.402896][ T31] RAX: 0000000000000024 RBX: 00007fdb27570fc0 RCX: 00007fdb26790d5c [ 500.411206][ T31] RDX: 0000000000000024 RSI: 00007fdb27571010 RDI: 0000000000000006 [ 500.419221][ T31] RBP: 0000000000000000 R08: 00007fdb27570f14 R09: 000000000000000c [ 500.427246][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 500.435218][ T31] R13: 00007fdb27570f68 R14: 00007fdb27571010 R15: 0000000000000000 [ 500.443450][ T31] [ 500.446714][ T31] INFO: task syz.6.2782:16020 blocked for more than 144 seconds. [ 500.454428][ T31] Not tainted syzkaller #0 [ 500.464460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.473355][ T31] task:syz.6.2782 state:D stack:25608 pid:16020 tgid:16019 ppid:13264 task_flags:0x400040 flags:0x00004006 [ 500.485453][ T31] Call Trace: [ 500.488800][ T31] [ 500.491740][ T31] __schedule+0x1798/0x4cc0 [ 500.496711][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.501561][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.506461][ T31] ? __pfx___schedule+0x10/0x10 [ 500.511340][ T31] ? schedule+0x91/0x360 [ 500.515587][ T31] schedule+0x165/0x360 [ 500.519800][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.525259][ T31] __mutex_lock+0x7e6/0x1350 [ 500.530313][ T31] ? __mutex_lock+0x5bb/0x1350 [ 500.535094][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 500.540428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.545463][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.550702][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 500.556765][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.563073][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 500.568824][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 500.573940][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 500.579726][ T31] rfkill_set_block+0x1cf/0x440 [ 500.584579][ T31] rfkill_fop_write+0x44b/0x570 [ 500.589740][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 500.595121][ T31] ? security_file_permission+0x60/0x290 [ 500.600782][ T31] ? rw_verify_area+0x255/0x4d0 [ 500.605646][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.616032][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 500.621432][ T31] vfs_write+0x27e/0xb30 [ 500.625667][ T31] ? __pfx_vfs_write+0x10/0x10 [ 500.631041][ T31] ? __fget_files+0x2a/0x420 [ 500.635657][ T31] ? __fget_files+0x2a/0x420 [ 500.640314][ T31] ? __fget_files+0x3a0/0x420 [ 500.644991][ T31] ? __fget_files+0x2a/0x420 [ 500.649900][ T31] ksys_write+0x145/0x250 [ 500.654249][ T31] ? __pfx_ksys_write+0x10/0x10 [ 500.659151][ T31] ? rcu_is_watching+0x15/0xb0 [ 500.663919][ T31] ? do_syscall_64+0xbe/0x3b0 [ 500.668650][ T31] do_syscall_64+0xfa/0x3b0 [ 500.673155][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.678628][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.684687][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.689514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.695406][ T31] RIP: 0033:0x7f04f318eec9 [ 500.699849][ T31] RSP: 002b:00007f04f3fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.708599][ T31] RAX: ffffffffffffffda RBX: 00007f04f33e5fa0 RCX: 00007f04f318eec9 [ 500.716804][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 500.724799][ T31] RBP: 00007f04f3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 500.732904][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.741182][ T31] R13: 00007f04f33e6038 R14: 00007f04f33e5fa0 R15: 00007ffd714d31a8 [ 500.749216][ T31] [ 500.752249][ T31] INFO: task syz-executor:16087 blocked for more than 144 seconds. [ 500.760217][ T31] Not tainted syzkaller #0 [ 500.765145][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.774081][ T31] task:syz-executor state:D stack:28040 pid:16087 tgid:16087 ppid:1 task_flags:0x400040 flags:0x00004000 [ 500.786056][ T31] Call Trace: [ 500.789352][ T31] [ 500.792285][ T31] __schedule+0x1798/0x4cc0 [ 500.797100][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.801970][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.806857][ T31] ? __pfx___schedule+0x10/0x10 [ 500.811740][ T31] ? schedule+0x91/0x360 [ 500.816018][ T31] schedule+0x165/0x360 [ 500.820180][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.825640][ T31] __mutex_lock+0x7e6/0x1350 [ 500.830524][ T31] ? __mutex_lock+0x5bb/0x1350 [ 500.835281][ T31] ? rfkill_register+0x37/0x8e0 [ 500.840419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.845453][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 500.851016][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 500.856727][ T31] ? device_initialize+0x24b/0x440 [ 500.861861][ T31] rfkill_register+0x37/0x8e0 [ 500.866602][ T31] hci_register_dev+0x3f5/0x890 [ 500.871483][ T31] vhci_create_device+0x39c/0x650 [ 500.876657][ T31] vhci_write+0x3ce/0x4a0 [ 500.880996][ T31] vfs_write+0x5c9/0xb30 [ 500.885228][ T31] ? __pfx_vhci_write+0x10/0x10 [ 500.890353][ T31] ? __pfx_vfs_write+0x10/0x10 [ 500.895133][ T31] ? count_memcg_event_mm+0x21/0x260 [ 500.900472][ T31] ksys_write+0x145/0x250 [ 500.904817][ T31] ? __pfx_ksys_write+0x10/0x10 [ 500.909712][ T31] ? do_syscall_64+0xbe/0x3b0 [ 500.914405][ T31] do_syscall_64+0xfa/0x3b0 [ 500.919212][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.924433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.930584][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.935268][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.941208][ T31] RIP: 0033:0x7f778938d940 [ 500.945624][ T31] RSP: 002b:00007ffe038b1db8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 500.954530][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f778938d940 [ 500.962587][ T31] RDX: 0000000000000002 RSI: 00007ffe038b1dca RDI: 00000000000000ca [ 500.970603][ T31] RBP: 00007f77895e67b8 R08: 0000000000000000 R09: 00007f778a11d6c0 [ 500.978924][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 500.986956][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 500.994952][ T31] [ 500.998048][ T31] INFO: task syz.1.2861:16295 blocked for more than 144 seconds. [ 501.005762][ T31] Not tainted syzkaller #0 [ 501.011126][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.019852][ T31] task:syz.1.2861 state:D stack:26792 pid:16295 tgid:16294 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 501.031820][ T31] Call Trace: [ 501.035084][ T31] [ 501.038744][ T31] __schedule+0x1798/0x4cc0 [ 501.043267][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.048556][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.053424][ T31] ? __pfx___schedule+0x10/0x10 [ 501.058891][ T31] ? schedule+0x91/0x360 [ 501.063147][ T31] schedule+0x165/0x360 [ 501.067725][ T31] schedule_preempt_disabled+0x13/0x30 [ 501.073206][ T31] __mutex_lock+0x7e6/0x1350 [ 501.078478][ T31] ? __mutex_lock+0x5bb/0x1350 [ 501.083261][ T31] ? rfkill_register+0x37/0x8e0 [ 501.088506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 501.093546][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 501.098978][ T31] ? device_initialize+0x24b/0x440 [ 501.104188][ T31] rfkill_register+0x37/0x8e0 [ 501.109126][ T31] nfc_register_device+0x14a/0x320 [ 501.114235][ T31] nci_register_device+0x87f/0x9d0 [ 501.119409][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 501.125060][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 501.130441][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 501.135830][ T31] virtual_ncidev_open+0x129/0x1a0 [ 501.141122][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 501.146801][ T31] misc_open+0x2b9/0x330 [ 501.151054][ T31] chrdev_open+0x4c9/0x5e0 [ 501.155454][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 501.160430][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 501.167368][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 501.172350][ T31] do_dentry_open+0x950/0x13f0 [ 501.177169][ T31] vfs_open+0x3b/0x340 [ 501.181239][ T31] ? path_openat+0x2ecd/0x3830 [ 501.186060][ T31] path_openat+0x2ee5/0x3830 [ 501.190655][ T31] ? arch_stack_walk+0xfc/0x150 [ 501.195498][ T31] ? stack_depot_save_flags+0x40/0x860 [ 501.201244][ T31] ? __pfx_path_openat+0x10/0x10 [ 501.206223][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.212300][ T31] do_filp_open+0x1fa/0x410 [ 501.216857][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.221722][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 501.227050][ T31] ? _raw_spin_unlock+0x28/0x50 [ 501.231910][ T31] ? alloc_fd+0x64c/0x6c0 [ 501.236319][ T31] do_sys_openat2+0x121/0x1c0 [ 501.241004][ T31] ? __se_sys_futex+0x36f/0x400 [ 501.245868][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.251691][ T31] ? rcu_is_watching+0x15/0xb0 [ 501.256782][ T31] __x64_sys_openat+0x138/0x170 [ 501.261658][ T31] do_syscall_64+0xfa/0x3b0 [ 501.266227][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.271435][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.277770][ T31] ? clear_bhb_loop+0x60/0xb0 [ 501.282463][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.288751][ T31] RIP: 0033:0x7fbabeb8eec9 [ 501.293179][ T31] RSP: 002b:00007fbabf97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.301888][ T31] RAX: ffffffffffffffda RBX: 00007fbabede5fa0 RCX: 00007fbabeb8eec9 [ 501.309948][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 501.317964][ T31] RBP: 00007fbabec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.325933][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.334227][ T31] R13: 00007fbabede6038 R14: 00007fbabede5fa0 R15: 00007ffecf1850c8 [ 501.342300][ T31] [ 501.345333][ T31] INFO: task syz.7.2868:16321 blocked for more than 145 seconds. [ 501.353233][ T31] Not tainted syzkaller #0 [ 501.358322][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.367045][ T31] task:syz.7.2868 state:D stack:25864 pid:16321 tgid:16320 ppid:13245 task_flags:0x400140 flags:0x00004004 [ 501.379019][ T31] Call Trace: [ 501.382297][ T31] [ 501.385233][ T31] __schedule+0x1798/0x4cc0 [ 501.390232][ T31] ? kasan_save_free_info+0x46/0x50 [ 501.395448][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.400721][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.405605][ T31] ? __pfx___schedule+0x10/0x10 [ 501.410574][ T31] ? schedule+0x91/0x360 [ 501.414825][ T31] schedule+0x165/0x360 [ 501.419285][ T31] schedule_preempt_disabled+0x13/0x30 [ 501.424752][ T31] __mutex_lock+0x7e6/0x1350 [ 501.429388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 501.434172][ T31] ? misc_open+0x51/0x330 [ 501.438566][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 501.443617][ T31] misc_open+0x51/0x330 [ 501.448049][ T31] chrdev_open+0x4c9/0x5e0 [ 501.452458][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 501.457440][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 501.463781][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 501.468768][ T31] do_dentry_open+0x950/0x13f0 [ 501.473541][ T31] vfs_open+0x3b/0x340 [ 501.477941][ T31] ? path_openat+0x2ecd/0x3830 [ 501.482715][ T31] path_openat+0x2ee5/0x3830 [ 501.490116][ T31] ? arch_stack_walk+0xfc/0x150 [ 501.495013][ T31] ? stack_depot_save_flags+0x40/0x860 [ 501.500735][ T31] ? __pfx_path_openat+0x10/0x10 [ 501.505688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.512227][ T31] do_filp_open+0x1fa/0x410 [ 501.516788][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.521654][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 501.526746][ T31] ? _raw_spin_unlock+0x28/0x50 [ 501.531598][ T31] ? alloc_fd+0x64c/0x6c0 [ 501.535919][ T31] do_sys_openat2+0x121/0x1c0 [ 501.540905][ T31] ? __se_sys_futex+0x36f/0x400 [ 501.545772][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.551018][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 501.556261][ T31] ? rcu_is_watching+0x15/0xb0 [ 501.561039][ T31] __x64_sys_openat+0x138/0x170 [ 501.565897][ T31] do_syscall_64+0xfa/0x3b0 [ 501.570815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.576065][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.582136][ T31] ? clear_bhb_loop+0x60/0xb0 [ 501.586853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.592749][ T31] RIP: 0033:0x7f74af18eec9 [ 501.597462][ T31] RSP: 002b:00007f74b007a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.605886][ T31] RAX: ffffffffffffffda RBX: 00007f74af3e5fa0 RCX: 00007f74af18eec9 [ 501.613875][ T31] RDX: 0000000000040241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 501.622134][ T31] RBP: 00007f74af211f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.630389][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.638410][ T31] R13: 00007f74af3e6038 R14: 00007f74af3e5fa0 R15: 00007fff87bfb968 [ 501.648632][ T31] [ 501.651742][ T31] [ 501.651742][ T31] Showing all locks held in the system: [ 501.659728][ T31] 1 lock held by khungtaskd/31: [ 501.664588][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 501.675434][ T31] 1 lock held by klogd/5224: [ 501.680175][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 501.690640][ T31] 2 locks held by getty/5620: [ 501.695317][ T31] #0: ffff8880308130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.705147][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 501.715283][ T31] 1 lock held by syz-executor/5873: [ 501.720668][ T31] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 501.731049][ T31] 3 locks held by kworker/0:4/5942: [ 501.736320][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.747555][ T31] #1: ffffc9000470fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.761147][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 501.772544][ T31] 1 lock held by syz-executor/13261: [ 501.778208][ T31] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 501.788388][ T31] 2 locks held by kworker/u8:22/15198: [ 501.793853][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 501.803838][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 501.812922][ T31] 2 locks held by syz.5.2780/16028: [ 501.818158][ T31] #0: ffff888027496100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 501.827990][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 501.838388][ T31] 2 locks held by syz.6.2782/16020: [ 501.843582][ T31] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 501.853954][ T31] #1: ffff888027496100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 501.863695][ T31] 2 locks held by syz-executor/16087: [ 501.869345][ T31] #0: ffff88803261f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 501.879427][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 501.889468][ T31] 3 locks held by syz.1.2861/16295: [ 501.894660][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.903434][ T31] #1: ffff888055b2e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 501.913082][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 501.923105][ T31] 1 lock held by syz.7.2868/16321: [ 501.928548][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.937111][ T31] 1 lock held by syz-executor/16329: [ 501.942398][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.950899][ T31] 1 lock held by syz-executor/16331: [ 501.956757][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.965234][ T31] 1 lock held by syz-executor/16333: [ 501.970561][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.979061][ T31] 1 lock held by syz-executor/16335: [ 501.984326][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 501.993009][ T31] 1 lock held by syz-executor/16337: [ 501.998330][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.006856][ T31] 1 lock held by syz-executor/16340: [ 502.012137][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.020876][ T31] 1 lock held by syz-executor/16341: [ 502.026208][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.034688][ T31] 1 lock held by syz-executor/16343: [ 502.040013][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.048810][ T31] 1 lock held by syz-executor/16345: [ 502.054107][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.062603][ T31] 1 lock held by syz-executor/16347: [ 502.068191][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.076953][ T31] 1 lock held by syz-executor/16349: [ 502.082233][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.090727][ T31] 1 lock held by syz-executor/16351: [ 502.096042][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.104534][ T31] 1 lock held by syz-executor/16353: [ 502.110106][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.118649][ T31] 1 lock held by syz-executor/16355: [ 502.123932][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 502.132595][ T31] [ 502.134924][ T31] ============================================= [ 502.134924][ T31] [ 502.143613][ T31] NMI backtrace for cpu 1 [ 502.143638][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 502.143659][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.143671][ T31] Call Trace: [ 502.143679][ T31] [ 502.143687][ T31] dump_stack_lvl+0x189/0x250 [ 502.143718][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.143742][ T31] ? __pfx__printk+0x10/0x10 [ 502.143783][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 502.143816][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 502.143846][ T31] ? __pfx__printk+0x10/0x10 [ 502.143878][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.143910][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 502.143942][ T31] watchdog+0xf93/0xfe0 [ 502.143973][ T31] ? watchdog+0x1de/0xfe0 [ 502.144005][ T31] kthread+0x70e/0x8a0 [ 502.144033][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.144058][ T31] ? __pfx_kthread+0x10/0x10 [ 502.144084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.144102][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.144120][ T31] ? __pfx_kthread+0x10/0x10 [ 502.144145][ T31] ret_from_fork+0x439/0x7d0 [ 502.144168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.144194][ T31] ? __switch_to_asm+0x39/0x70 [ 502.144218][ T31] ? __switch_to_asm+0x33/0x70 [ 502.144240][ T31] ? __pfx_kthread+0x10/0x10 [ 502.144265][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.144306][ T31] [ 502.144313][ T31] Sending NMI from CPU 1 to CPUs 0: [ 502.290435][ C0] NMI backtrace for cpu 0 [ 502.290453][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 502.290471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.290481][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 502.290504][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 b9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 502.290519][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 502.290534][ C0] RAX: 2b7e146be9d91600 RBX: ffffffff81968528 RCX: 2b7e146be9d91600 [ 502.290547][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba53b RDI: ffffffff8be33f80 [ 502.290559][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 502.290571][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a830 [ 502.290584][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 502.290595][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 502.290609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.290620][ C0] CR2: 000055d6f8473000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 502.290636][ C0] Call Trace: [ 502.290642][ C0] [ 502.290648][ C0] default_idle+0x13/0x20 [ 502.290668][ C0] default_idle_call+0x74/0xb0 [ 502.290689][ C0] do_idle+0x1e8/0x510 [ 502.290708][ C0] ? __pfx_do_idle+0x10/0x10 [ 502.290732][ C0] cpu_startup_entry+0x44/0x60 [ 502.290748][ C0] rest_init+0x2de/0x300 [ 502.290770][ C0] start_kernel+0x3a9/0x410 [ 502.290790][ C0] x86_64_start_reservations+0x24/0x30 [ 502.290813][ C0] x86_64_start_kernel+0x143/0x1c0 [ 502.290835][ C0] common_startup_64+0x13e/0x147 [ 502.290865][ C0] [ 502.291497][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 502.471741][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 502.480840][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.490881][ T31] Call Trace: [ 502.494154][ T31] [ 502.497075][ T31] dump_stack_lvl+0x99/0x250 [ 502.501662][ T31] ? __asan_memcpy+0x40/0x70 [ 502.506242][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.511431][ T31] ? __pfx__printk+0x10/0x10 [ 502.516024][ T31] vpanic+0x281/0x750 [ 502.520000][ T31] ? __pfx_vpanic+0x10/0x10 [ 502.524490][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 502.530028][ T31] ? preempt_schedule+0xae/0xc0 [ 502.534871][ T31] ? preempt_schedule_common+0x83/0xd0 [ 502.540323][ T31] panic+0xb9/0xc0 [ 502.544034][ T31] ? __pfx_panic+0x10/0x10 [ 502.548442][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 502.553815][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 502.559964][ T31] watchdog+0xfd2/0xfe0 [ 502.564117][ T31] ? watchdog+0x1de/0xfe0 [ 502.568445][ T31] kthread+0x70e/0x8a0 [ 502.572510][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.577184][ T31] ? __pfx_kthread+0x10/0x10 [ 502.581767][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.586951][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.592134][ T31] ? __pfx_kthread+0x10/0x10 [ 502.596715][ T31] ret_from_fork+0x439/0x7d0 [ 502.601295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.606403][ T31] ? __switch_to_asm+0x39/0x70 [ 502.611158][ T31] ? __switch_to_asm+0x33/0x70 [ 502.615909][ T31] ? __pfx_kthread+0x10/0x10 [ 502.620491][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.625262][ T31] [ 502.628541][ T31] Kernel Offset: disabled [ 502.632849][ T31] Rebooting in 86400 seconds..