last executing test programs: 2m40.993593269s ago: executing program 3 (id=2102): socket(0x15, 0x2, 0x24) (async) r0 = socket(0x15, 0x2, 0x24) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0x3, 0x365}]}) 2m40.745921137s ago: executing program 3 (id=2105): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r8, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x70fd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88adfd8d}, [@IFLA_PORT_SELF={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}]}, 0x38}}, 0x0) 2m39.779199094s ago: executing program 3 (id=2115): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x8, 0x4, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a3000000000080005400000000d200012801c000180090001006c617374000000000c00028008000140000000000800034000000110140000001000010000000000000000000784000a"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 2m39.108170192s ago: executing program 2 (id=2123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x185, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x8, @empty, 0x7}}, 0x0, 0x0, 0x30, 0x0, "387a0ffc862d169b0da9eedbf5a062305d1c6a1b88ec828339671a81f103b0bf64e4928cb671cac5427fb824d03df544781dc451a2bee79627aea4ab4e0297720b2497f7d784afab82a5d44c9951aa46"}, 0xd8) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x2400000, 0x80000000}, 0x10) 2m38.871693026s ago: executing program 2 (id=2126): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x7fff, 0xc, 0x9}, 0x10) close(0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0xc008010) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x7fff, 0xc, 0x9}, 0x10) (async) close(0x3) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0xc008010) (async) 2m38.768352439s ago: executing program 2 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = gettid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={r1, 0xee01}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) unshare(0x20000400) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c) 2m38.521973948s ago: executing program 2 (id=2128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa1000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa1000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r7) (async) close(r7) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 2m37.423894533s ago: executing program 3 (id=2134): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xa, 0x8, 0x6, 0x0, 0x4, 0x3, 0x0, 0x81, 0xff, 0x0, 0x10}, 0xe) (async, rerun: 32) shutdown(r3, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000040)={r4, 0x0, 0x8, 0xfff4, 0x4, 0x3, 0x7f, 0x8000, {r4, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x3}}, 0x3, 0x7ff, 0xfffffffd, 0xffffffff, 0x7}}, &(0x7f0000000140)=0xb0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xe100534) (async, rerun: 64) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) (async, rerun: 64) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000300000005000400000000000500030033000000"], 0x24}}, 0x0) 2m37.217223278s ago: executing program 3 (id=2137): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000c7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000bab704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e23, 0x4000, 0x0, 0x9, 0xa, 0x0, 0x30, 0x2c, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1bd}, {0x3, 0xfffffffffffffffc, 0x0, 0xc40}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000) 2m36.967847224s ago: executing program 2 (id=2138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r2, 0x0, 0x0, 0xee) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000d40)='<', 0x1, 0x4000800, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r6, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x5) r7 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x84, 0x8, 0x9, 0x4, [0xc, 0x10083, 0x1000000, 0x2, 0x2eea0afb, 0x7, 0x4000004d, 0xb9ab]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="c50a938f8602a953c518ce7f0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f00000003c0)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r10, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2m36.838980538s ago: executing program 3 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a21", @ANYRES32=r3, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c0002"], 0x15c}}, 0x0) (async) sendmsg$nl_route(r0, 0xfffffffffffffffe, 0xb52df1f62d517dc2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002780)=@deltaction={0x1c8, 0x31, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff04a}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa31}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="102000003c0007010000000000000000017c00000400fc80100001800c0006000100000000000000e81f0280e11f7280d502c3809900ca80d27060e26985a5d6484ec2d39e694e8052156b304e0be8ee225d889c198800ce147803922a658a3f70c55ec83cb458a5812ba1166ce6d59653cbe22f54864f63ab0209bd0aced7056c241603af4b0e7e7892517d117837d343ee37bd9b98fa09432884e90f772c276a64d1016be5e2267fa107c08456feaf56becc9cbb43ab44bef48a1a8c04002f800400868004004c800400a90000000008004400", @ANYRES32=0x0, @ANYBLOB="9c248a87c1ddd7e8dd59440c391d6ecd1cbc7b9b6577434a8380791c2acd4b5d80cdd5d3df2d479c881d23f84230b1b6e6fc075963f49a842fe05822a9befb5be51ef71b97ec7a57aa71b716b707d481729e60e207000000829f67ea9dabc4c358fcdaca62faf7746bf2791299e8ee4b58cd8dd53e58e47a4fd92430fc12431e2ffe721a1ab04f93e31fd415397efd49aaf8233564826ad5d2e5dc665bfd6b117ac3d9635710fa6446f5691252ee72826e435f40bcae9e58e124f56121e7e83ce278992f8fc88d08009300", @ANYRES32=0x0, @ANYBLOB="04006080bee01b0cec21fc43e768b22fe42b0dc66c8567ca7585b138b3b4fad17c7038ea6e9b5be15c166eb1a2c5bd7c7cf63bfc4ca2b9a3252286ed80da8ed1626ba9ccd489dd1c875a9ce900a5c6fbc716b82d0bee5790ffa0c2a38281707fa4b707ea1830b3dafa3d8625a687fc31acbeebe8c363f74578f800171ce0e9f3f3dd266653122060619cd35bd9ddf198505be8aac1e9c11c0e2753c414c85bc113535a9bdf38b7ff412e93b3e2bd48aa1386ffddc5865e50c9b68f248142b8ba73b927e09b6600123d0f0c00618008001400a00000000c005a8008000f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08007600ff0f0000a443d6f95f0b32e04db77561cfff0705b175fb442783ae3fac48186200d6c34f6568161ea6455863b98e9839aeec13c05829e46cf815467e047eab93f12cf2bbfb5314b897a209ed7b59dc0a33f9d0756d5ed3426f02694d6b582dad0a84f94552bbdbfe7bacb79a92cf947a1262d6224965ac34147a3c53c264b85099090157469ec31b08f552317892bcecb07b7e752f5d1bbc85703651f2f90fd7cba6e901a2803210da1eaa3274f49701a55a6e994b1c80fb1f7e2d6599c5c571b81d10a473873166039cf3811c6f83aad775e99d1f970096285bcf2f68cd6e1dc2afa9e31716e5faa8bead86cd6cd8aba9bdd204a2c130cad67bbee2bf5a787b61d9f04453a1be2f8362c0e573b69d8476fcb49eb65aa13d4231ef65b59ee75f713bc6583d9efa1c64466dddb7de96d941382f254a8c2d6462d1b542679987388142f2a36ed077b669d40bfaed07d1abf4e588adb58b0027a863c03967fa35a46c46e840e85681b66b624d48fc8b4f79246368be027c30bb15250180ee21038b5bd20eef2f4999e47c9414c850b902d8418bc808004b00", @ANYRES32, @ANYBLOB="0400388008009a0000e0ff01c1002a00be638b99d66a2645caeb97ec11d2f4834420f4b05623ecb38eaafa6ed8af53869c1a52b9ed23563361eb32e2f28ab7998f65881ed5651eb0acd0727ca0ab80f4da17629c901b959527949f0d26e3e4fff2a302e9c62a05dd7d5d0c8749d2aa63d32ee74577ecd174067f573b06466e474bc67ae0cde27dad2e1641df11c501a2b009794fd0e766dcddd5323f22165aff2fad153635ac21b852acf330584a575879bbc7b55f1a3295d2871cf7573c2a1dcfd67e2a655b1919d2dad68d9b00000014004c00fe80000000000000000000000000003808002200", @ANYRES32=0x0, @ANYBLOB="04007c800000000000001c06f68008004700", @ANYRES32=0x0, @ANYBLOB="1000a5800c00c100420a000000000000fd05c280040074800800ec00", @ANYRES32=0x0, @ANYBLOB="0800bf00", @ANYRES32=0x0, @ANYBLOB="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"], 0x2010}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 2m36.460436764s ago: executing program 32 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a21", @ANYRES32=r3, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c0002"], 0x15c}}, 0x0) (async) sendmsg$nl_route(r0, 0xfffffffffffffffe, 0xb52df1f62d517dc2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002780)=@deltaction={0x1c8, 0x31, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff04a}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa31}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="102000003c0007010000000000000000017c00000400fc80100001800c0006000100000000000000e81f0280e11f7280d502c3809900ca80d27060e26985a5d6484ec2d39e694e8052156b304e0be8ee225d889c198800ce147803922a658a3f70c55ec83cb458a5812ba1166ce6d59653cbe22f54864f63ab0209bd0aced7056c241603af4b0e7e7892517d117837d343ee37bd9b98fa09432884e90f772c276a64d1016be5e2267fa107c08456feaf56becc9cbb43ab44bef48a1a8c04002f800400868004004c800400a90000000008004400", @ANYRES32=0x0, @ANYBLOB="9c248a87c1ddd7e8dd59440c391d6ecd1cbc7b9b6577434a8380791c2acd4b5d80cdd5d3df2d479c881d23f84230b1b6e6fc075963f49a842fe05822a9befb5be51ef71b97ec7a57aa71b716b707d481729e60e207000000829f67ea9dabc4c358fcdaca62faf7746bf2791299e8ee4b58cd8dd53e58e47a4fd92430fc12431e2ffe721a1ab04f93e31fd415397efd49aaf8233564826ad5d2e5dc665bfd6b117ac3d9635710fa6446f5691252ee72826e435f40bcae9e58e124f56121e7e83ce278992f8fc88d08009300", @ANYRES32=0x0, @ANYBLOB="04006080bee01b0cec21fc43e768b22fe42b0dc66c8567ca7585b138b3b4fad17c7038ea6e9b5be15c166eb1a2c5bd7c7cf63bfc4ca2b9a3252286ed80da8ed1626ba9ccd489dd1c875a9ce900a5c6fbc716b82d0bee5790ffa0c2a38281707fa4b707ea1830b3dafa3d8625a687fc31acbeebe8c363f74578f800171ce0e9f3f3dd266653122060619cd35bd9ddf198505be8aac1e9c11c0e2753c414c85bc113535a9bdf38b7ff412e93b3e2bd48aa1386ffddc5865e50c9b68f248142b8ba73b927e09b6600123d0f0c00618008001400a00000000c005a8008000f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08007600ff0f0000a443d6f95f0b32e04db77561cfff0705b175fb442783ae3fac48186200d6c34f6568161ea6455863b98e9839aeec13c05829e46cf815467e047eab93f12cf2bbfb5314b897a209ed7b59dc0a33f9d0756d5ed3426f02694d6b582dad0a84f94552bbdbfe7bacb79a92cf947a1262d6224965ac34147a3c53c264b85099090157469ec31b08f552317892bcecb07b7e752f5d1bbc85703651f2f90fd7cba6e901a2803210da1eaa3274f49701a55a6e994b1c80fb1f7e2d6599c5c571b81d10a473873166039cf3811c6f83aad775e99d1f970096285bcf2f68cd6e1dc2afa9e31716e5faa8bead86cd6cd8aba9bdd204a2c130cad67bbee2bf5a787b61d9f04453a1be2f8362c0e573b69d8476fcb49eb65aa13d4231ef65b59ee75f713bc6583d9efa1c64466dddb7de96d941382f254a8c2d6462d1b542679987388142f2a36ed077b669d40bfaed07d1abf4e588adb58b0027a863c03967fa35a46c46e840e85681b66b624d48fc8b4f79246368be027c30bb15250180ee21038b5bd20eef2f4999e47c9414c850b902d8418bc808004b00", @ANYRES32, @ANYBLOB="0400388008009a0000e0ff01c1002a00be638b99d66a2645caeb97ec11d2f4834420f4b05623ecb38eaafa6ed8af53869c1a52b9ed23563361eb32e2f28ab7998f65881ed5651eb0acd0727ca0ab80f4da17629c901b959527949f0d26e3e4fff2a302e9c62a05dd7d5d0c8749d2aa63d32ee74577ecd174067f573b06466e474bc67ae0cde27dad2e1641df11c501a2b009794fd0e766dcddd5323f22165aff2fad153635ac21b852acf330584a575879bbc7b55f1a3295d2871cf7573c2a1dcfd67e2a655b1919d2dad68d9b00000014004c00fe80000000000000000000000000003808002200", @ANYRES32=0x0, @ANYBLOB="04007c800000000000001c06f68008004700", @ANYRES32=0x0, @ANYBLOB="1000a5800c00c100420a000000000000fd05c280040074800800ec00", @ANYRES32=0x0, @ANYBLOB="0800bf00", @ANYRES32=0x0, @ANYBLOB="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"], 0x2010}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 2m36.453933637s ago: executing program 2 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) close(0x3) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0xda}]}}]}, 0x48}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000ec7a19929b25f8ed258bad02b5eb6bc000024000180060005004e2300000600010002000000"], 0x38}}, 0x0) 2m36.349248006s ago: executing program 33 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) close(0x3) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0xda}]}}]}, 0x48}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000ec7a19929b25f8ed258bad02b5eb6bc000024000180060005004e2300000600010002000000"], 0x38}}, 0x0) 32.65017068s ago: executing program 4 (id=2968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20}}, 0x1c}}, 0x4004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind$nfc_llcp(r3, &(0x7f0000000200)={0x27, r4, 0xffffffffffffffff, 0x2, 0x5, 0x6, "02547e5b3bb63ea676738770c122fb3c3594876af1405c593b94c02e45d595af3de818c5d80fd47bdda16004a289c054c6cf9574a67b5ba7949fda79a624d9", 0x20}, 0x60) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18100000000100000004000000000000181100004d50947d7bb8bf47b928a2d7ba429374b9bdad298208e69dd55f799a0ec0a4fe7ec3952feb5eb3b3b010d046e0c01ea4ed9eeef62b537a73fd2d98f05cb8e2b3fbaf03cc04961a7f61d39bd2c199af7043e1912460eab2856a46bc32cb68c73bd1f4d1319d5552", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 32.487997886s ago: executing program 4 (id=2969): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002440)='\n', 0x1}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0xfffffffffffffffd, 0x40000402dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x23c}}, 0x8000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20040600) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r9, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/206, 0xce}], 0x1}, 0x7}], 0x2, 0x12300, 0x0) close(r8) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 32.261844861s ago: executing program 4 (id=2974): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x4c010) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@empty, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) (async) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x4, {{0x30, 0x4, 0x3, 0x7, 0xc0, 0x66, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_addr={0x44, 0x34, 0x13, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1}, {@local, 0x150}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xe000}]}, @timestamp={0x44, 0x28, 0xdf, 0x0, 0x9, [0xf, 0x0, 0x52, 0xffff, 0x3, 0x8, 0x6, 0x2, 0xfffffffb]}, @cipso={0x86, 0x4d, 0x2, [{0x5, 0x12, "06382838909771d3022e56817df16fab"}, {0x5, 0x9, "e1bf91a4ecc60c"}, {0x6, 0x9, "941531f07096d8"}, {0x6, 0x4, "63f3"}, {0x1, 0x11, "e30d6b0cdae7098df6d240c221af94"}, {0x5, 0x4, "a949"}, {0x7, 0xa, "3cfca5e47513bcc6"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0xd, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0xdc, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0xd, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0xdc, 0x6}}) getpeername$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x17c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x17c}}, 0xa5) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x41) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000980)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000980)={r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0x35, 0xdb, &(0x7f00000009c0)="9a49057e6eb9a8e48cab86308b0656f6b8d4e0b771512194a64be7a2fd9eb44615397d40970b41a0359e26f969de7de049d0b2c716", &(0x7f0000000a00)=""/219, 0x3, 0x0, 0x57, 0xbe, &(0x7f0000000b00)="5eac902b81e324d28cde3ecfde7b5f70df420059105450d1736e99088c509e1627f63b0b858672c3833c54e5d502332e7aafaea0dede484450bf4ec9539459314c38b6c00f68633a335cb7b504abbe4e78e406109b084d", &(0x7f0000000b80)="ed04551538267344e20f865ed87eb0e73a369a8bbdbeb4c7804694ba927e7a30d62dd958b0ee9b520dac55764148229e2ae465748f0ca4980088fa63ae07b06b98817a73d4de440dfb0982828c9f3db340d4d14049dda6b948f0d1fb834460d0a2bf5bad679ff49a463aa2fa75162f36a31ab66e009a70fdea7d26c238fb726e33d64b42673587ac7be92e4ee057bb92a9f06f9af477265e96e702a2f063af80557882730c0e763983fddd2f49dc15abe1c35b50472e2b8a89db54fe15e1", 0x4, 0x0, 0x477}, 0x50) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000cc0)="28b84ac3822aa316d3996baa3b0c03db", 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r11, 0x13, 0x0, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r11, 0x13, 0x0, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)={@map=r1, r0, 0x3e, 0x0, 0x0, @void, @value=r0, @void, @void, r13}, 0x20) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000e80)=""/75, &(0x7f0000000f00)=0x4b) r14 = socket$inet6(0xa, 0x3, 0xffff8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={&(0x7f0000000f40)=""/143, 0x8f, 0x0, &(0x7f0000001000)=""/72, 0x48}}, 0x10) gettid() (async) r15 = gettid() getuid() (async) r16 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) setsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001180)={r15, r16, r17}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r14, 0x9d4a6000) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000011c0)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000011c0)={0x80}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f0000001340)={0x0, @ethernet={0x1, @multicast}, @nl=@unspec, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001300)='vcan0\x00', 0x99e, 0x7, 0xa}) (async) ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f0000001340)={0x0, @ethernet={0x1, @multicast}, @nl=@unspec, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001300)='vcan0\x00', 0x99e, 0x7, 0xa}) 32.140104117s ago: executing program 4 (id=2976): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 32.117175001s ago: executing program 4 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 31.959538892s ago: executing program 4 (id=2980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000025c0)={0x1d44, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x28c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x41}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x25c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3a4ada4b2350"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf}]}, @NL80211_ATTR_NAN_FUNC={0x160, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x12c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xfe}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xc}]}, @NL80211_ATTR_NAN_FUNC={0x2ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x21, 0xb, "6365fb0bb4bdc6e018ee0bc7dfe275ee9a3f2d2c20cd3b83548b1857b1"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x81}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0x1678, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6, 0xb, "f784"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1304, 0xe, 0x0, 0x1, [{0x33, 0x0, "664f38353ba1a2e574eb9b68a794be4bbba06ee936dcc8156b68b596f01d82d4c4321686b7ef3c667bf208d67ec5a0"}, {0x71, 0x0, "8876d6eb4abdf805c57b1d9ace415abd67cdd8743d5644e973c8fbfc8e76a761012c5c7a00d81296b01383d8315490b78396413b4ab0f3c2c273b055e6edd711ba21369374a8640bb7e1fc0937dcfbe78a3e54e73edd1de8178f3903aa08ff13621b6b868930bcb4435267e823"}, {0x41, 0x0, "1a1c2ff074de58de3a24f307068fb31389275976412fbd79dfb4621a48eecbd9a4f9246e5b0a3f13b386f34981b4cb18d95582b0ad9c9b10d56d1f1eff"}, {0x53, 0x0, "8efa27fca8e70e90716e0b5f673df4719873b76a04670849a6cdb230fec9e967dc7dc83c18f806626c8d2d7ab12707e23c1bb4c964d04895fa2d449a453cb0f36669f1eca15498b4c69d2917deef89"}, {0x1004, 0x0, "29d44dab813c124317fe9cac29a3f3edc49a0845763b76a03d3e8b8a84b3aede1870301ef414b99e9caa96bd5c7b695ac3ef27058e9cb14e2e76abddeb823bdc6bce328eae24bd0048fe4f522ba06610d16b6811428b56871087ec35c1431dd9dba5c45318884b242679184b0b50e265356a81a0d1bc787edc5c8eddb8651cc5b6c13bf6732af98ae7c99e0119612887777baa7fb00e53efa81f310f2cb9233e380d38e54196fb1129eedc141d13f1bf622aa213fd9b95b971b5db646329ceedc5c56031333bd53c94809053edb6d61c650f1bc51086e5a13cc6a8cbdcca18086a4519d49defe2b99308d8e5cdb1afe52a654b6821119cc2338cf321d7a3b008e5d7aab598e76ef4583fec9e22b4abf6ec7f0198c9a6105f3219f620778d2b3fb865ca6f95af70b241e023ff76201c5672d6bcebbe63feef7a65bf022512125a7746c4ec37a522693d6add26d0f358baa20b6e170b329246761ee9990f23a62b8cee0536529d48bd55e8fc2a8c052c90a2d7a152cac0e94c5183f418231ee79279b943b2f56173fc141e97d98eac27de38671722e34b3bb4ab1d5c12aa7d6de0697385e25cacf5dd2efc076fec4aa13acd7211e2ed41a95e2c95746544d9c83411ca13c62b8f3e74f78bd10a55d80727cc00e953383acb884f1da7eaca2fe6949544c47ee05875b17be0bfcd3a38d5581b1dcb0c1d1ea4add16c5e5b957a4e4af6ffd26b872036690a27dc811cff9f59f0f4671b24a346d5324cb18512d91eaf5df4c9a8667cd70f281b80d29e40ca4338bfc736fcc32921d949c2601a2ae98026bb6cb61902fe442c2b59266b16feb4af10fa8a8961bc0158c7bb1ca8d2c7828eefb7ef531d76a94413ca133d02116bc694347c72c93d86fce07280de3be44401d2f59667835f86f6e74050948d79ab82a0bed14ea7b0a272bffc825bc98992ad6bf5c646a04b83b2fa6f87b2108e3e4bd184c86eb23306651a32c8b309237de091c52a6b3866cfd845e080b6273ffe9f926ae483a30d1ad085688a6f719ebee807f65d7e32c4b251ed1fc04bf3b75d0f40c4748c34471dd0adefec875d760e6554020da21930cd9cae817b6f863ab0759913cf071cdaa81ee58c40abeaed651e51259b57f9e0db56c2a09e3be8f684bf78b9d92f4b1e13d5d1e65d9db648348951936526df7cbd2ab12e9011c90f13e572248dc8b6c531d01f4c31ca1b1fe48b59c59272f85615404465ddd053c8b40290888196647ca8c23a3442a16842c9d09004ca2be27b7f671fdfe8a0fa92571bbdbeb3f96573daecb6e96562a7e8f1f2468df5767110ed0c4fe6cc76b4842b9e1b8200f9d9e6c2a29c947fab593c1a2d5008d765b77089ee6145bfcedf9ac55481e48fea5584b752cc5e049e9eb9b8b7e2455f46f69f2239675ff7369750d7250029d9a8b9e670d0ae00c93eb8d420d0942320218211751ad81cdb36299744807737f04f4b775d621113c65537bb4b7a885f3f5f4591d133f0f0e118b311b96508a55ed5228130f8fdac6bce217d8cc983f79a32a4fc99f3959e2096730e6452545eb183cb8c4e2a880cc30b5f140513b8deabaeff1fcf59aca06830697510d8f374e936b8ce8862f1ca77b7ef0226a8cb39eefd6d73a5c3430dd2826bab7b8998c7018d550454c92980fa138a7bb9138774d8b6f7aa9f0545dc547c615b9701ecd01756337368b5c76c8e9f3d36131b550ad61e6f822bd56cb0d181bcc402af62cd7aa0a33e6c6961e223fbb2249b9849184b124adc7a9f931df291174a3c5976b49406f69912e235eabbc1bf29fd421bc67079f33d996b3f35b3d9ccf71ff2555c91d2558877904da0d0e55aa678d645a1a228b51b4fa24391caed94355adee56de2e36d6062579c7a6053b671fac15b6523909ad5d31e17bef75e857f8ccc8df883ce7ac2cd46e381267e0c8174b8556200cab49828fcab047b4a45108a9f2688e6c889a73db5e5ed4c531dcf9361fd8ecce31793244a02900560ad74c29f62a5683a1c804876aaa1ab88cba035cc1dfdeee009122e06f8ba91c4229d612c37153c8e7b287bbf5276a6709b45e6f0c77f420fac48b4ad1aa53de268f138a3a4d6a13b9a17456509af513ac4869493b32cf85d1b23a58b494a831e8d0a3f5856fd11b18624c83189f8809979083c82e66c2b0617e4a562c802606f45ebc818c51bbf4960b5df36ffbfe10c15e72470fa2dc24942de77d8d60d6eb07f1ffbf9bad48cf7ad6d6e1c00472f68a74ded3d2345b3d9839099cab693b1f7a38d97fbeb340edd770aa5821ee0fdaf32a55021f0ad1905e0f0dca563bfb84f165101ebef45b14b4111fb39107159b305908b13fe65e82b595adb2da6c705ff65d7349b075c64ee65478c22f66e5f27dd393d4596fcd70c36b574de15cb371e972ff3892ace81b96c583cb712bbc5f1d828b0190ae2c43cad4b822860bba610e6ac1dd965b1b6fbde35aaa677925d2de58e9a04dc92d40eae3fdb8873db31bde63f0f2d5ab4ba4d6170eccf0c435d0d99461dc7cd2eb4095b262a0d0dde74e1f410092853fdc25f797f996dce57a19ea658061d239c392fcc8b8b4ce6d1419ed01896873d75ce6687ae47d8bbf90821d41bb7451205e7d6d4280c0139f3d946b2e3a663f2b84ca9729572ceb471547121a1d0b2c15bad011b1075e5b8d1bacaa65298a57e82806e8e5780294633a413f68e27478d926e666791b43ecbda5eede95f6e7180e148558bbbb177a8061abc7060988f012aecfec43965a3e1eecde4a66a06cb3d19cb52cf04fc58603b4944a00ce749ec2b9935519554e8bb8e050a0263c7d7a2f1aa4de4eb016715ac0ec4df790d1b683194ce8f037fad377df30aa1a72efca945ccf18ff7b685291f64fd5d1b0c2c2b4994c4609076e5899d0780abfb7354dc0abd3032d6e57c84b44f1026db01d1a8960d6fa82e2db3120b390a90defcaaf4c4d7d44611f194fb370c052465ab4ab336d3ea8a2d3a91233e18962b14740e4324b66efb9c5996f9ba8d524fee658ccf1dbe638d18f73bd015e1995ce9b996cd81a50eb7fa4775a499ddd0b1cbc393d340cbc34c052f5637b4e32332f188e21c19891bd4d5adb485fa43053ad69d92b634bbcbe62486680b59febe4a075b83c30f08640969bb8484df9e008af68bf679561fab42abaa5f17188b5f95a2f8d78e9d77db474dcf655914420a9b8e76c63c8a1c04a7bf19a72e1aab749c14151577cd20f9151b26761c96a4d044dfecc4f9815203a604d6cb50603dfc2c51a537fbac02011c9d4789a04e8fe0a95c147d37a0466b7cb4fe46372bc535bc44b566825f92eba553d4a44670381f992ae2d93dc9d38614229964702df4f245349306ff6e83355a76fc46d5804cb2dd48db413df72d129425a966746e9b81635917b98a927d38e32685c69372b387f26307dd3207b0719943472d47e637aee848520109a1a7537294ddeb503fd6b83fea379ae704f05e43e0d6e7a85f41f5e8e1398f4a02dd2e6058f33ad95fca1f5f1ab91ddf711123757f4e73553fa94552229c0978f9c4ad02c2d5f093bb2c81edbdea8569fd04de6cfb8b9a3fb7022b6a0afff7a885e0a8bf5937c1ae49d71cd434a3163f64cce4327bbf0864e97a4a3b4baa2adec4d32108a25c360699a4de08149a916294e2549771850318a65992437033b76fe1ee2b567d1c14f246efa5aeca601e98172d21ef24010b21397adac6c7278c1e0aba637ecaa7c383d52a520d5161be4f9432e4c5d05c86e4dd01f7ad509cb84bfa2760e97aa12e1bc47ec25d652ac04f9702256610da98d1cd7d4366ee0efca20adbf7838ad7436553eb5c1394930637dc8b3180ac25012969d501ccb3f97abf9e72ebfa9c77d0a135b190e44e6e09ad09666b465894c34fbbf9270818b0879e8580c91ebcf5f30d330f5a1016b56f4a44bc11b232190ca576df5e73769f069ff318d8b41aaf119582bd3d01089cb52b6350c6cc46c1421bac07212330b8672647c8d54deeff44e702e90541c6412381fe6f15ccb302744f92f93a8001eb292ed96f29a167d6de185ab1f520ba3770418be595ea70254b2e9dba8bb9c4dfd7ebb811433d159a1da1c60abfb9b38c210d700e61685495f724c1d157a4b2885c6b52954e810d5afcd574bdaa53c2ced4599265a415e8c0d859e0f93b0712cbad20e283a7783ab420080aec166e48c74cc67591f0191cee48715a453090a79b9274ba11e5a87df3fa81751bb249a8f43671edb10710a403eb3e3db615e9fc07f89b2a424992cc1e27360342eb8b10f6e38f4ff7190c65ea3cd944e2f8a36317bf10f1972ea5901d6a4c7b2e1e49aa10870a8f515cb88a015870d678a61e3b97e7b80992b11fc0809ba2e5cb663bdd4e98d9376a3d549c61558390473c27ddcfba1d45ab72d8a2a3952f7b14e7f76b87542632b8db242d0115961a861cff1fb1dff52233a5ee2131d39405ba8fc05ddb1e3cb79c43befd1dfe061c11450a63dd6ae5e0911704c58a9c91c99fda6b3f44eaf04da62dbf061072a32e06011b87793db547bdbc2231fcb21e4985a805673063c44d0372cb7946d65a83e4b3de95d4e55681d90fbac0e0721d9cad5381f165eb26a69fd6b60404d8d8836dc903e6604031994d9b81b1d21fafbdff147a14bd57909d50a8596c64f0f5b346a8d9990c98ed6a467aa3e4a94f90c5a0f68d36694e9b9b2218dbcb9147d3217dfbd14224cf257d7a4bf92f5ba28d22675df58c4445f11f74d90ab483d0569b0dd47fec65ec1d590188fa49906e8993eb5852dd4c1afed9575ea4f1ae490c0fda885d977126473f0a6cf6d43e9698545888249cd4dc4346e900ebb0644c809c27ddc079c40166048dea32be410401ef21520c4c865e6855f55eca0639d92f8a0320db566872c45f77489495e528cd552426bb52f7bbc89bdda82d477c2b50d9d53f6ce43f1b1cd59041886696e79d64439e666ab6e25665e2416350b80533eff351050a4dd13dbcf520e41101d94c952dc08bd1babad2973d6283418a2bffa9f8072646c1dd391344c8e30e8d6dfbe1cab4f1a0e5d30e7e5a5f97922c1baad5f6319d28c8de09ac81ca96cfc613bcefd4c6a4c67996bcd7848aeffd1b9ae04438515afd85df6f336806a529dcb9d4988698e575cff43b15730deee4866ab36b8b8ebb699d5d0b9608fcefc15cfac43b2d23326e1e7cb5989cc3f7f72caf6d10fa77c3bc848de5d5f708c06c4b06324c0262bb0e119e39d142e1869313c595492b4930dc07a3a414c8cd006d9c69544371fb8b63ab8fa57c3b9c7596ab7c43547123466d32ecddfc41ccca5f1b11310a68959c47037bd3b8194f3ea6659d04aeaa4e0144d59cc2e77ce706eeec49ced3c95e9049f53e1fe4e9b427f484a40853974848050e700190535f9480f4a9758551fe6e56aa862a3d86104229e5e7f0e094a84ac6863c54e78e152078054ab7572978220214ef84a88338cf9aa79e9629b8d8ad0406aa300a72053bc21ccb57df58b2651754157dc0dcc2730a19d16d1a416032f20ebd5f828f16f298341630546119c425b738f92eaee4c88109301c4136ff66573d44f92fe496f3529abad1d46eef04070175ac5aae01bd443da2a13f21824f21fa2ff83a5a3d2b17029c5880a17d277df6067dfc736cbfafb6a8782fcbcf93fd89f2cfb0e93271b42c44d09cdc96bf1a4a7532c7fd2c7c2eac9bad58e8280f61496a8060a24b0d80aa668d2601b69a88a23ef2b74546ed3fc71bd4d2f4a5b5f9bcb99e962c7e4a0c1d51fa2c7a539a3fc0"}, {0x85, 0x0, "a711ab45824ac4bee2ad72c65bbb7e0e76d911824c337efb1200a8dca23629f165d87d3839aaa92f8270d352ab7ac86749d074f434c4ea44a968bed9416d6df547c6ed1c7450e67ef927f48e29c289c0d1007715b337cf320118c51c3cbae127a91fb3deec2685fe418d03c0e57af844b38e95c51ff108dac5e0eefa1b7dbad493"}, {0xe, 0x0, "26c8ec89e771a9156154"}, {0x3e, 0x0, "28d806f81f1536446b484921b281b607e40e5de6c4da019c86f9632e1baa7be3a653fe3db1793e8b6c73e0299d639a55ca139f5243a8304b2ad0"}, {0xe2, 0x0, "e8b0bba43720ff823bc34229df21453fb0b86f3192a22c4752ba8546b48aa91c5f46ce800860896136da32a214f68961a56b50c0c0cc2c9ed44daa02e0c222dc50ebe06105e629467e750bbdb4dc761531f681803fe89d6ac41e1e30df52224b0c02093a7977aff236952ef05ccd757c48cb0c3249b8d9c06995cd01763c6f63a1c54e55d5a4ad1fcbafd3cbeab7e868f548df19f887541904cacf019fae696a36159ea700567c886868b3c7de5b2c2cefd8c9b6dfcc8a1e058d83f696b0da445a56bd8bdf419e653186d7d45e446a6b2c7c880af807dc74b8d4823ae156"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd8, 0xb, "2f4a6ac1e5374bc7bd1aa5b9567bf5726e70026733c458356fc3ba17a753b9548afa2c8d03d66ad61e09320ac53150f8bc96006e40e2bd9dc0513697af89a8aa43c62644f56b32214b2a15617e92535811200ca356403a59fd820210db0a425e65d27a26308c5ecf353914efc24e50a9a621c0183d5f42033c33ad1c09e2268f220a640c70a76ef61e01a8be3335314d89631379fd7a1f6fa9c21ea7720a8fe59ea11674132182f1ad66833103486a08db4abe4aa5fc3a349c7443f21aa064f6502ebc35d91ce7a215e0442118d4a8280231d0fc"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1d0, 0xe, 0x0, 0x1, [{0x87, 0x0, "cbbc84cc4f9541d5b6b3d4cfc827ba47a9d5d65a1ea2fbae8922bd23192e9afc2b599535b5d88f673f61865ee24f288e1e4f7bfd6bb9c5f56b9a457511f028449676203f563f958ba7a18fc46369eb4e572601e8a5fef60f2b29db68956304df2220c298c581ceaf1d5c8a8a44303c2a5560a0e616c89f295313f7d1dec485003641b9"}, {0x25, 0x0, "5453833b8d89359013ee656b467ff0de4b10c2d18b6ce84aa039829ff2bcab6540"}, {0x4d, 0x0, "a750199619c4cd3dec82b11fbc976828bc05277086dbc5dbf983df749ea8643248a3f63735fed2dc8dc889172c8ee97ee60773261c126b2b1ef582dab70b28156e5e9c87fc68f4a51f"}, {0xcb, 0x0, "debd31212dc90dcf982cfd0d662bf95e0e615a74f9072be76e15e496aa5a60f49b77fa863160be3e50668215a71177d728e3fe9b9bd9c2ff6bca76376895de0fc74b02f06d7a7ca7ed43827cd53724637a9f741fda46516499adfc216be93ff4f6e941c0ad9c916d142187010832064f206ae53fc078e974a22e7fa232bc595eba8f9bfd0f8dac67a4306d597fce086a3f4ec7ed34fa99ef4a53df28c9a80dd8c587b5c293ea583b8a50b2fba37d60ba8d216d578b82f7205f44f34314c968df6d3f70ec4684c9"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xad, 0xb, "8834605b68abdfd947dd095eeab6fd0e36ad6fd3839605330bf17d8ad867d6340b3efe45d368204e9ed83bfe6401462d327a7ace44f6f387f54dde4ef3cb155041d1ab1fa7e87c785b4ba47f70bbdefdaf77ce871b891d94d599159af2c569cfe636442b2e9af2dbc4a9752f48766e2856a03375b8c165154c0f984f3c3d0611f81cfe88c0cbdd98c760f69c73ddf0f0ed223fdb5e12a0fadb82b3d440b9071cb030ea9683f6af100f"}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b91a3cade31e"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x1d44}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x44000a00) (async, rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (rerun: 32) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) (async, rerun: 64) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, @phonet={0x23, 0xd, 0x7c, 0x4}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xfff6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)='hsr0\x00', 0xc, 0x9}) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 18.324166919s ago: executing program 5 (id=3121): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d0000008058", 0x6}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 18.309885478s ago: executing program 5 (id=3122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x1, &(0x7f00000008c0)=@raw=[@exit], 0x0, 0x1dff7095, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x10, 0x7000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b00)=[{0x2, 0x2, 0x10, 0x6}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r2 = socket$inet(0x2, 0x1, 0x8) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x0, @random="e20b2e3cc763"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_bond\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x46, 0x0, 0x7ff, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0xfd, 0x29, 0x0, @private=0xa010102, @multicast1, {[@noop]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0xa8, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 18.033577904s ago: executing program 5 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_WEIGHT={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x97, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58f00610600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYBLOB="6002fffd907800"], 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) 17.974268446s ago: executing program 5 (id=3128): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x10000001}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x9cb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x500}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x10000001}) (async) close(r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x9cb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x500}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) (async) 17.78818742s ago: executing program 5 (id=3132): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 17.776500885s ago: executing program 5 (id=3133): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xfffffffffffe0506}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$nci(r2, &(0x7f0000000200)=@DATA={0x0, 0x0, 0x0, 0x0, 0xd, "a90e38ef454b7c07e0ea5794b9678741125a6b846480e0ebf885fa36678e62da013e9d02abc32f7d6750fdd01849b0ad23deba8cfbfa249997defbf451ebcf2ee55cff93c7064eba0a7833560ebf3bf2e0fb5a3b5495faa6ce754832e3173ae2b1e1bb55056b8f34dbebc7c4cdd96fd2a0edcd1e7237be917e4c5ec0727c339ec8bce895c887672e"}, 0x8b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000300)) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)=0x81, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xbc, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x67, 0x2a, [@gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x81, @device_a, 0x2, @value=@broadcast, 0x8, 0x1efa, @broadcast, 0x3}}, @challenge={0x10, 0x1, 0x8b}, @random_vendor={0xdd, 0x2f, "b0b76961b1810fd613191f94c9c6faa5082076d6e9f13b795338d96700595c5f7b2854f67407f3638a06508b433527"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb6d6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x290, "7a626f2a60e9", @long="56e10220c6567f4bcff2aed3e9a3d3b5"}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4800}, 0x10) splice(r3, &(0x7f0000000780)=0x7, r3, &(0x7f00000007c0)=0x7, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040080) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000940)=0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000980)) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000f40)={0x7, &(0x7f0000000e40)=[{0x4, 0xe, &(0x7f00000009c0)="6b8f54b1e827ebb68a19963cf962", 0x1}, {0x3, 0x98, &(0x7f0000000a00)="781f0adb68846e09c14212c7e011f1eebdd4a9aabb2d40f212b1bc48fcc87ef616a9bc08016656661678b95200a3224110c882516d5e21ee24feae3debf4c582a56b026e9024056b9660694515f3b58c98f6409a5764b542daf3456d1079c53a896e8fc969837c055d9549a35e0b193d6339a6770b9b40500600a79961d480e678ffc72e3fa0e34e729ac7d51060503980cabdfa0c06afc7", 0x0, 0x1}, {0x5, 0xb0, &(0x7f0000000ac0)="f98fd2b3046f7aa0f1d88612a30a382303678c9b14d7340358151e795ba400a0463fa728bda6f7f2a69a755d9b4e4c0cdc3a959cb8823b403cbe1617cea99772f08c8896194e035e0f0f40a661a468bbb241834b31b26d8db101565ac19f0c16193835a9ecc68e643edcdad458b920b61111cadb7f88bd9e20e496b72cdadf55b58e2cc9e79479cef55d53a0659f01c0e239c2de34b56fce832a3b6a9cfdc33f240eeb542e89bae673568e0fd5238afc", 0x1, 0x1}, {0xe4b, 0xeb, &(0x7f0000000b80)="70f3180f5e3203df941042a4d3be4c4dab1e2d723d16628a0ed8f81484f880cd1162e8b846721bc6184dd11e5b9ada8e00c3dbdb6ee133ce7521b471e66af9699d6b86bd9ad348a5fc9272b5d3c553005e3006b9e8dc487da25f9c1ee415acc178c33a811f1f1081d6a59e299dde98f344c0978d2584a30a2252c331f069f0e355d3ce2d067e11c0df13bb0135edc54bd1cf9ae2e1f76897ca380849a5c98ae141215465d5a1205fcb541364de14181c58412c67ea52def2378c6f0fc41bf8421995ae5f13faa5619f262e0901a5e3a69e59576fba97d3236bbf30ba50eae7ceef4cf7caf269307b61d425", 0x0, 0x1}, {0x3ff, 0x59, &(0x7f0000000c80)="9294be7dc4adb02cf96eff81c382a26be3218470a7b8efe18d5548ad9b9c11a9fa39d4c407fe1ed0957e262b0c60455636721d7f7c4f4ddc7dc91787c887def524c6313bf845d9cf91fa7a290f0f7819262945edaf0b7cff82"}, {0x7f, 0x12, &(0x7f0000000d00)="d2263f82231a6b385e351cac6812250f0106", 0x1, 0x1}, {0x4, 0xfd, &(0x7f0000000d40)="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", 0x1, 0x1}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x9, 0x6, "6f06b3413d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "a43f4e0b92fe06ff84a61e5b7ebb8cfd50ab62e39a06a5f7cf930b36bbd031cfe4e1b6f76563d45b228480110ff83dfcafdd3cc3bb3f48c810c1d8d4b3b896c90f57bb6ecfa9a83079344f8dd920650989422ecd2448094b4e60bdaea17265624e5e7e7c5c2d473498a396383b0f48060a227398d066873a553a3c890796b46e79c8d0bc58af9aa25db39e4fe3486ba9dbed79dd5918614d314d748cba7feb5d72c6d3bb00c6d81f4289f692c9b65e8243d2d3b252d5806cac6b642d04dde781397cae0594dbb3e2f406ee1dcc27203530d93dd879ed1d5c21260bde911183b2911862c386f8f102bcb7dc5cd3fd8d779a154f6dad81e23160"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x194}, 0x1, 0x0, 0x0, 0x10044048}, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000001200)=0x5a1d, 0x8) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f0000001240), &(0x7f0000001280)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 16.84030041s ago: executing program 6 (id=3139): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x8, 0x0, 0x8000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r4}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xd, 0x6}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x8}, 0x28) socket$kcm(0x2, 0xa, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 16.802772494s ago: executing program 34 (id=2980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000025c0)={0x1d44, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x28c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x41}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x25c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "a0df2def4567e6f0255a91cb53985cb7f87e8a8a4076879e0de587e5734d99e6da0e6f780828569d639f267169dfc94a05a1d123eb692265abb07317a7baee12af8fd6348c65d8f1110a422a07de44eee282d82d0e9a89f5d3b1b8e4a07186c2ab85d4ec05e39057ef0ecfb37512fdb9644ab369358c7f3056482463148577dc7560b45cd6aa3bbcb943424f35b130f334e05b9b04b56e45f3aee101a8ddc41d8c2b70f0186ce6c918a118f1548766cf4eeffee61ca61961efc7ca026844d0376ebf2df763bb65f9918455e9b36475ec63e8f07d2d45c414fc0ef8f1de484fd02d7d88b86cb92a68ba10c91c3a95748a54c450cd2760031515ffb6d019087c"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3a4ada4b2350"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf}]}, @NL80211_ATTR_NAN_FUNC={0x160, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x12c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xfe}, @NL80211_NAN_SRF_BF={0x103, 0x2, "a16d4d7cb47cfa2cbf2932233d47d632228b08363f5c8a60ad2744bb4c1022e6919e827c0011338d02be7db20abf672f7033b44652d1f00756b2849b92857ff13fdbf3fa35b96db9604161c43b51c14a42f0253898d834662fcbe2f36562d28b8415cc6e87af4d36ffcb317c45d1a35002f16ec1770a6ff7dad69508d8b11d0e3a991b449040799403dd082c0b1710fa09a968e207c96c043a541dedaf8bc1d4c26fdb1a3d590e480c4a245887e7e7f917dc6a3accf23033cc12b0597e1f03e7be8952b5fbf82ec3dc4dabded2e3ab1d4121dcc42afd5a902b65ea21f3954dcffc7198b18922b15a4fa1d551af0337fba09ee8bf111c8a65dc31cd2647aff4"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xc}]}, @NL80211_ATTR_NAN_FUNC={0x2ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x21, 0xb, "6365fb0bb4bdc6e018ee0bc7dfe275ee9a3f2d2c20cd3b83548b1857b1"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x81}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0x1678, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6, 0xb, "f784"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1304, 0xe, 0x0, 0x1, [{0x33, 0x0, "664f38353ba1a2e574eb9b68a794be4bbba06ee936dcc8156b68b596f01d82d4c4321686b7ef3c667bf208d67ec5a0"}, {0x71, 0x0, "8876d6eb4abdf805c57b1d9ace415abd67cdd8743d5644e973c8fbfc8e76a761012c5c7a00d81296b01383d8315490b78396413b4ab0f3c2c273b055e6edd711ba21369374a8640bb7e1fc0937dcfbe78a3e54e73edd1de8178f3903aa08ff13621b6b868930bcb4435267e823"}, {0x41, 0x0, "1a1c2ff074de58de3a24f307068fb31389275976412fbd79dfb4621a48eecbd9a4f9246e5b0a3f13b386f34981b4cb18d95582b0ad9c9b10d56d1f1eff"}, {0x53, 0x0, "8efa27fca8e70e90716e0b5f673df4719873b76a04670849a6cdb230fec9e967dc7dc83c18f806626c8d2d7ab12707e23c1bb4c964d04895fa2d449a453cb0f36669f1eca15498b4c69d2917deef89"}, {0x1004, 0x0, "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"}, {0x85, 0x0, "a711ab45824ac4bee2ad72c65bbb7e0e76d911824c337efb1200a8dca23629f165d87d3839aaa92f8270d352ab7ac86749d074f434c4ea44a968bed9416d6df547c6ed1c7450e67ef927f48e29c289c0d1007715b337cf320118c51c3cbae127a91fb3deec2685fe418d03c0e57af844b38e95c51ff108dac5e0eefa1b7dbad493"}, {0xe, 0x0, "26c8ec89e771a9156154"}, {0x3e, 0x0, "28d806f81f1536446b484921b281b607e40e5de6c4da019c86f9632e1baa7be3a653fe3db1793e8b6c73e0299d639a55ca139f5243a8304b2ad0"}, {0xe2, 0x0, "e8b0bba43720ff823bc34229df21453fb0b86f3192a22c4752ba8546b48aa91c5f46ce800860896136da32a214f68961a56b50c0c0cc2c9ed44daa02e0c222dc50ebe06105e629467e750bbdb4dc761531f681803fe89d6ac41e1e30df52224b0c02093a7977aff236952ef05ccd757c48cb0c3249b8d9c06995cd01763c6f63a1c54e55d5a4ad1fcbafd3cbeab7e868f548df19f887541904cacf019fae696a36159ea700567c886868b3c7de5b2c2cefd8c9b6dfcc8a1e058d83f696b0da445a56bd8bdf419e653186d7d45e446a6b2c7c880af807dc74b8d4823ae156"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd8, 0xb, "2f4a6ac1e5374bc7bd1aa5b9567bf5726e70026733c458356fc3ba17a753b9548afa2c8d03d66ad61e09320ac53150f8bc96006e40e2bd9dc0513697af89a8aa43c62644f56b32214b2a15617e92535811200ca356403a59fd820210db0a425e65d27a26308c5ecf353914efc24e50a9a621c0183d5f42033c33ad1c09e2268f220a640c70a76ef61e01a8be3335314d89631379fd7a1f6fa9c21ea7720a8fe59ea11674132182f1ad66833103486a08db4abe4aa5fc3a349c7443f21aa064f6502ebc35d91ce7a215e0442118d4a8280231d0fc"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1d0, 0xe, 0x0, 0x1, [{0x87, 0x0, "cbbc84cc4f9541d5b6b3d4cfc827ba47a9d5d65a1ea2fbae8922bd23192e9afc2b599535b5d88f673f61865ee24f288e1e4f7bfd6bb9c5f56b9a457511f028449676203f563f958ba7a18fc46369eb4e572601e8a5fef60f2b29db68956304df2220c298c581ceaf1d5c8a8a44303c2a5560a0e616c89f295313f7d1dec485003641b9"}, {0x25, 0x0, "5453833b8d89359013ee656b467ff0de4b10c2d18b6ce84aa039829ff2bcab6540"}, {0x4d, 0x0, "a750199619c4cd3dec82b11fbc976828bc05277086dbc5dbf983df749ea8643248a3f63735fed2dc8dc889172c8ee97ee60773261c126b2b1ef582dab70b28156e5e9c87fc68f4a51f"}, {0xcb, 0x0, "debd31212dc90dcf982cfd0d662bf95e0e615a74f9072be76e15e496aa5a60f49b77fa863160be3e50668215a71177d728e3fe9b9bd9c2ff6bca76376895de0fc74b02f06d7a7ca7ed43827cd53724637a9f741fda46516499adfc216be93ff4f6e941c0ad9c916d142187010832064f206ae53fc078e974a22e7fa232bc595eba8f9bfd0f8dac67a4306d597fce086a3f4ec7ed34fa99ef4a53df28c9a80dd8c587b5c293ea583b8a50b2fba37d60ba8d216d578b82f7205f44f34314c968df6d3f70ec4684c9"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xad, 0xb, "8834605b68abdfd947dd095eeab6fd0e36ad6fd3839605330bf17d8ad867d6340b3efe45d368204e9ed83bfe6401462d327a7ace44f6f387f54dde4ef3cb155041d1ab1fa7e87c785b4ba47f70bbdefdaf77ce871b891d94d599159af2c569cfe636442b2e9af2dbc4a9752f48766e2856a03375b8c165154c0f984f3c3d0611f81cfe88c0cbdd98c760f69c73ddf0f0ed223fdb5e12a0fadb82b3d440b9071cb030ea9683f6af100f"}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b91a3cade31e"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x1d44}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x44000a00) (async, rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (rerun: 32) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) (async, rerun: 64) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, @phonet={0x23, 0xd, 0x7c, 0x4}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xfff6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)='hsr0\x00', 0xc, 0x9}) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 16.432806109s ago: executing program 1 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="008005004800080005004ac000d70065000007069078ac14d87f000001441c2f91ffffffff000000000a0101010000000aac14143d00000000000713c60a010102ac1414bb640101020a010102863cffffffff070b4d75a5a28facd5b0c3070a257660e1a5ee31dd0705da00f806073ca7dccfdd0208acbbf3cf2a0d000d4579a3c109c7a9fb66420b441443f1ac1e010100000007ffffffff00000005440cb46000000100000c0000000000000000000000000000000000000100004e2100004e240000000200000000000000020000000300000000000000"], 0xe1) (async) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="008005004800080005004ac000d70065000007069078ac14d87f000001441c2f91ffffffff000000000a0101010000000aac14143d00000000000713c60a010102ac1414bb640101020a010102863cffffffff070b4d75a5a28facd5b0c3070a257660e1a5ee31dd0705da00f806073ca7dccfdd0208acbbf3cf2a0d000d4579a3c109c7a9fb66420b441443f1ac1e010100000007ffffffff00000005440cb46000000100000c0000000000000000000000000000000000000100004e2100004e240000000200000000000000020000000300000000000000"], 0xe1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x5) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="17f1824117f8e31fac4a43a36479e623fbfcbb88399396fffffffffffffffff308e8d5", 0x23}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18}], 0x18, 0x4000801}], 0x1, 0x40) (async) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="17f1824117f8e31fac4a43a36479e623fbfcbb88399396fffffffffffffffff308e8d5", 0x23}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="840000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000082040200640012800b000100697036746e6c000054000280140003002001000000000000000000000000000114000200fc02000000000000000000000000000014000300fe8000000000000000000000000000aa0400130008000100", @ANYRES32], 0x84}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0204000000000000000000000000000002001000000000030000000000286700030005000000000002000000ac1414000000000000000000030006"], 0x50}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) close(r4) (async) close(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000200)='THAWED\x00', 0x7) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYRES64], 0x44}}, 0x200000d0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYRES64], 0x44}}, 0x200000d0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180), 0x2, r10}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180), 0x2, r10}, 0x38) 16.388107127s ago: executing program 6 (id=3146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16.251696068s ago: executing program 6 (id=3147): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\f\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782581000000002020207b1af8ff00000000bf0000000007010000f8ffffffb702000008000000b70200004000000085000000060000001811000051a471b8d6e0a8e375e779e5b1bbb9b45f336f5e15431c8b80469dce55bd439b2a8b81a1e28e9fee5612d735ad1a83668f7696e5d34b782f5baf6894127e19d8f9d2c9", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r1}) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000640)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000010425bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="4840000028240100140012800b0001006272696467650000040002800a0001000000000000000000371bd4e3cc7df2e28236b13b1d32eadba4d99536f91e9337fbfaf38ab4a4594f08b2eb57707e9e0c453ef5a6ae586764853dcdd8a3be218f6c7444cc14beb76bb93cb2e1b4ba20e0556993f97640039c28383cd972a9490275e1614e0ab9b9cd0a90b79c6602c30b2e5fd5a1f60811966f646ca8732103a9967aa86c52c8da828e2b1ec1475d495ea5b9e0bd1d42ff7c2efe570230c8a749b99779c394ba06019cfe6f08ae378b34f0d86fa6f23b4c"], 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = socket(0xf, 0x1, 0x7fff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x7, 0xffff, 0x4006, 0xc0, 0x4, 0x9, 0x7, 0x4, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000300)=r7, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.24353892s ago: executing program 1 (id=3148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4001) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r3, 0xffffe000) (async) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xe0}, 0x1, 0x0, 0x0, 0x24088844}, 0x8d4) (async) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/60) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x3, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r7, 0x29, 0x23, &(0x7f0000000400)="3eaa9c07b89294215393a51226e6eedd5c6a311a60aa410f186c329bc1c424e9bf3520a59dd61b06aa636a4ae7e2ccae34ca9ddfcf5a24825d3973c06daaee12e65aa27354253569f56f", 0x4a) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e0007e03dd65193b0d0af078de13c629efddfb6c575963f86ddf06712d60009113b6317e8", 0x25}, {&(0x7f0000000100)="09cff0d513397aba2d02c69e166d17f6fef84a6c972f929bd7711105ed22e8b95278dba0549bed73bf9a", 0x2a}], 0x2) 16.0260611s ago: executing program 6 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x1, &(0x7f00000008c0)=@raw=[@exit], 0x0, 0x1dff7095, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x10, 0x7000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b00)=[{0x2, 0x2, 0x10, 0x6}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r2 = socket$inet(0x2, 0x1, 0x8) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x0, @random="e20b2e3cc763"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 'veth1_to_bond\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x46, 0x0, 0x7ff, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0xfd, 0x29, 0x0, @private=0xa010102, @multicast1, {[@noop]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0xa8, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 15.948108267s ago: executing program 1 (id=3152): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x22, 0x0, &(0x7f0000000140)="259a53f271a76d2608004c6588a8d6dc03d5cc2ac8547d548a6d5672ad26812311ae", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 15.863283959s ago: executing program 0 (id=3154): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x38}, 0x2}, 0x0) 15.755916746s ago: executing program 1 (id=3155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="170000000200", 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xfffffffffffffe2e}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x18, 0x5a, 0x30d, 0x0, 0x3, "", [@generic="3373619d52"]}, 0x18}], 0x1}, 0x0) (async) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) unshare(0x2c020400) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r6], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7, 0x0}, 0x20) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100340012800e0001006970366772657461700000002000028008000100", @ANYRES32=0x0, @ANYBLOB="1400070000000000000000000000ffffac1e0001080004009331003a00"], 0x5c}}, 0x4000) 15.755195967s ago: executing program 0 (id=3156): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'pimreg1\x00', &(0x7f0000000280)=@ethtool_eee={0x44, 0x2000000, 0x86, 0x0, 0x9, 0x100, 0xe, 0x3b5, [0x9, 0x8]}}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x3) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e34, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x42}, 0xfffffffffffffea6) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000140)=0xc770, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000)="b9e092dfd79f4775e06d5b9d0c0bff59430fec69894931fdd601862618b9f2e422e29c1a1ed791371b4ff045ef6e856a5ddc5917abb4653261b6f2f3784ff75bf31a2cd0c7e4cdda", &(0x7f0000000080)=@udp6=r6, 0x1}, 0x20) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x131101, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x3) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x4, 0x1}, 0x10) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8000) 15.711818917s ago: executing program 6 (id=3157): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x800) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(0x3) 15.69142559s ago: executing program 1 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff4, 0xb13b, 0x2ab7, 0x8000, 0x1, 0xa, 0x2, 0xc4]}}]}]}]}, 0x3c}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) unshare(0x6020400) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) unshare(0x2020000) (async) close(0x3) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x140b, 0x2, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x854}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) close(r6) 15.632149081s ago: executing program 0 (id=3159): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) (async, rerun: 32) unshare(0x10000000) (rerun: 32) gettid() (async) socket$key(0xf, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ecf1000010000108000000007297b5f7dc72f5d1", @ANYRES32=r5, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a010100573303"], 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x4000000, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="020700000600"/16], 0x10}}, 0x8000) (async, rerun: 64) unshare(0x68040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) close(0x3) 15.564091077s ago: executing program 6 (id=3160): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r5) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r9, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)={0x30, 0x48, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0xd, 0xbf, 0x0, 0x1, [@generic="cb1e91ded6cf5da77a"]}]}]}, 0x30}}, 0x2000c800) 15.470947922s ago: executing program 0 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000040400000900000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffe5, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000003940)=""/4107, 0x100b}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/225, 0xe1}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/212, 0xd4}], 0x6}, 0x80000002}], 0x4, 0x6000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x10, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000020000000000", @ANYRES32], 0x50) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_GROUP={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000080000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r9}, 0x94) 15.313039207s ago: executing program 1 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 15.267677749s ago: executing program 0 (id=3163): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@bridge_delvlan={0x64, 0x71, 0x100, 0x60bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xa74}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x64}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x80) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_newrule={0x60, 0x20, 0x10, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x8}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080d5}, 0x40004) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, &(0x7f00000007c0)) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x3e, 0x6, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) 15.11039396s ago: executing program 0 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000d06010100000000000000000700000305000100070000000e0003006269746d61703a697000000005000500010000006e22c90744ec022117119a48aa2ad97c03c741081263c9b505dfc58695b7adc2fa7695edaae97f55069223bbd3735011a5f4bf0efbf2c329cd9e0228aa81fe88fce236eacaa5c9eb8ced1fa7c2d7be90c4733e4c3e48"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x80000000000000, 0x2, 0x2}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0) 2.528588377s ago: executing program 35 (id=3133): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xfffffffffffe0506}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$nci(r2, &(0x7f0000000200)=@DATA={0x0, 0x0, 0x0, 0x0, 0xd, "a90e38ef454b7c07e0ea5794b9678741125a6b846480e0ebf885fa36678e62da013e9d02abc32f7d6750fdd01849b0ad23deba8cfbfa249997defbf451ebcf2ee55cff93c7064eba0a7833560ebf3bf2e0fb5a3b5495faa6ce754832e3173ae2b1e1bb55056b8f34dbebc7c4cdd96fd2a0edcd1e7237be917e4c5ec0727c339ec8bce895c887672e"}, 0x8b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000300)) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)=0x81, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xbc, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x67, 0x2a, [@gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x81, @device_a, 0x2, @value=@broadcast, 0x8, 0x1efa, @broadcast, 0x3}}, @challenge={0x10, 0x1, 0x8b}, @random_vendor={0xdd, 0x2f, "b0b76961b1810fd613191f94c9c6faa5082076d6e9f13b795338d96700595c5f7b2854f67407f3638a06508b433527"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb6d6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x290, "7a626f2a60e9", @long="56e10220c6567f4bcff2aed3e9a3d3b5"}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4800}, 0x10) splice(r3, &(0x7f0000000780)=0x7, r3, &(0x7f00000007c0)=0x7, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040080) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000940)=0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000980)) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000f40)={0x7, &(0x7f0000000e40)=[{0x4, 0xe, &(0x7f00000009c0)="6b8f54b1e827ebb68a19963cf962", 0x1}, {0x3, 0x98, &(0x7f0000000a00)="781f0adb68846e09c14212c7e011f1eebdd4a9aabb2d40f212b1bc48fcc87ef616a9bc08016656661678b95200a3224110c882516d5e21ee24feae3debf4c582a56b026e9024056b9660694515f3b58c98f6409a5764b542daf3456d1079c53a896e8fc969837c055d9549a35e0b193d6339a6770b9b40500600a79961d480e678ffc72e3fa0e34e729ac7d51060503980cabdfa0c06afc7", 0x0, 0x1}, {0x5, 0xb0, &(0x7f0000000ac0)="f98fd2b3046f7aa0f1d88612a30a382303678c9b14d7340358151e795ba400a0463fa728bda6f7f2a69a755d9b4e4c0cdc3a959cb8823b403cbe1617cea99772f08c8896194e035e0f0f40a661a468bbb241834b31b26d8db101565ac19f0c16193835a9ecc68e643edcdad458b920b61111cadb7f88bd9e20e496b72cdadf55b58e2cc9e79479cef55d53a0659f01c0e239c2de34b56fce832a3b6a9cfdc33f240eeb542e89bae673568e0fd5238afc", 0x1, 0x1}, {0xe4b, 0xeb, &(0x7f0000000b80)="70f3180f5e3203df941042a4d3be4c4dab1e2d723d16628a0ed8f81484f880cd1162e8b846721bc6184dd11e5b9ada8e00c3dbdb6ee133ce7521b471e66af9699d6b86bd9ad348a5fc9272b5d3c553005e3006b9e8dc487da25f9c1ee415acc178c33a811f1f1081d6a59e299dde98f344c0978d2584a30a2252c331f069f0e355d3ce2d067e11c0df13bb0135edc54bd1cf9ae2e1f76897ca380849a5c98ae141215465d5a1205fcb541364de14181c58412c67ea52def2378c6f0fc41bf8421995ae5f13faa5619f262e0901a5e3a69e59576fba97d3236bbf30ba50eae7ceef4cf7caf269307b61d425", 0x0, 0x1}, {0x3ff, 0x59, &(0x7f0000000c80)="9294be7dc4adb02cf96eff81c382a26be3218470a7b8efe18d5548ad9b9c11a9fa39d4c407fe1ed0957e262b0c60455636721d7f7c4f4ddc7dc91787c887def524c6313bf845d9cf91fa7a290f0f7819262945edaf0b7cff82"}, {0x7f, 0x12, &(0x7f0000000d00)="d2263f82231a6b385e351cac6812250f0106", 0x1, 0x1}, {0x4, 0xfd, &(0x7f0000000d40)="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", 0x1, 0x1}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x9, 0x6, "6f06b3413d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "a43f4e0b92fe06ff84a61e5b7ebb8cfd50ab62e39a06a5f7cf930b36bbd031cfe4e1b6f76563d45b228480110ff83dfcafdd3cc3bb3f48c810c1d8d4b3b896c90f57bb6ecfa9a83079344f8dd920650989422ecd2448094b4e60bdaea17265624e5e7e7c5c2d473498a396383b0f48060a227398d066873a553a3c890796b46e79c8d0bc58af9aa25db39e4fe3486ba9dbed79dd5918614d314d748cba7feb5d72c6d3bb00c6d81f4289f692c9b65e8243d2d3b252d5806cac6b642d04dde781397cae0594dbb3e2f406ee1dcc27203530d93dd879ed1d5c21260bde911183b2911862c386f8f102bcb7dc5cd3fd8d779a154f6dad81e23160"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x194}, 0x1, 0x0, 0x0, 0x10044048}, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000001200)=0x5a1d, 0x8) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f0000001240), &(0x7f0000001280)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 524.38184ms ago: executing program 36 (id=3160): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r5) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r9, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)={0x30, 0x48, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0xd, 0xbf, 0x0, 0x1, [@generic="cb1e91ded6cf5da77a"]}]}]}, 0x30}}, 0x2000c800) 25.142571ms ago: executing program 37 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000d06010100000000000000000700000305000100070000000e0003006269746d61703a697000000005000500010000006e22c90744ec022117119a48aa2ad97c03c741081263c9b505dfc58695b7adc2fa7695edaae97f55069223bbd3735011a5f4bf0efbf2c329cd9e0228aa81fe88fce236eacaa5c9eb8ced1fa7c2d7be90c4733e4c3e48"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x80000000000000, 0x2, 0x2}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0) 0s ago: executing program 38 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) kernel console output (not intermixed with test programs): .198915][T11359] vlan3: entered allmulticast mode [ 275.255932][T11357] block nbd1: server does not support multiple connections per device. [ 275.304056][T11357] block nbd1: shutting down sockets [ 275.542851][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'. [ 275.621122][T11375] tipc: Enabling of bearer rejected, failed to enable media [ 275.689199][T11377] netlink: 'syz.0.1438': attribute type 13 has an invalid length. [ 276.227236][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 276.288844][T11397] syzkaller1: entered promiscuous mode [ 276.306895][T11397] syzkaller1: entered allmulticast mode [ 276.545887][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 276.570093][T11402] team0: No ports can be present during mode change [ 276.597490][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 276.609015][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 276.666128][T11402] vlan0: entered promiscuous mode [ 276.683944][T11408] tipc: Enabled bearer , priority 0 [ 276.714962][ T30] audit: type=1804 audit(1758879215.256:5): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1446" name="cgroup.controllers" dev="tmpfs" ino=1376 res=1 errno=0 [ 276.793630][ T30] audit: type=1800 audit(1758879215.266:6): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1446" name="cgroup.controllers" dev="tmpfs" ino=1376 res=0 errno=0 [ 276.849218][T11413] xfrm0: entered promiscuous mode [ 276.914320][T11413] xfrm0: entered allmulticast mode [ 277.029362][T11418] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 277.086653][T11423] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 277.114747][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1448'. [ 277.179646][T11423] netlink: 'syz.3.1448': attribute type 2 has an invalid length. [ 277.190874][T11423] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 277.198832][T11423] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1448'. [ 277.795705][ T5946] tipc: Node number set to 1229200575 [ 277.830749][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 277.853000][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 278.090327][T11449] bridge_slave_1: left allmulticast mode [ 278.096409][T11449] bridge_slave_1: left promiscuous mode [ 278.102235][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.125819][T11449] bridge_slave_0: left allmulticast mode [ 278.143143][T11449] bridge_slave_0: left promiscuous mode [ 278.153564][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.483130][T11463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1458'. [ 278.850230][T11485] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1463'. [ 279.065479][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1469'. [ 279.241249][T11506] netlink: 'syz.0.1470': attribute type 13 has an invalid length. [ 279.506529][T11511] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 279.735995][T11519] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 280.011478][T11533] hsr0: entered promiscuous mode [ 280.028824][T11533] hsr0: entered allmulticast mode [ 280.033884][T11533] hsr_slave_0: entered allmulticast mode [ 280.637420][T11562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.181462][T11612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.712259][T11612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.819677][T11612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.133396][T11636] netlink: 'syz.1.1505': attribute type 13 has an invalid length. [ 283.211608][T11638] __nla_validate_parse: 9 callbacks suppressed [ 283.211625][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 283.321643][ T78] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.364345][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.397020][ T3528] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.425717][ T3528] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.538765][T11649] netlink: 'syz.4.1508': attribute type 83 has an invalid length. [ 283.568245][T11649] openvswitch: netlink: EtherType 50a is less than min 600 [ 283.610723][T11649] netlink: 'syz.4.1508': attribute type 10 has an invalid length. [ 283.642529][T11649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1508'. [ 283.663605][T11652] netlink: 'syz.4.1508': attribute type 1 has an invalid length. [ 283.704310][T11652] netlink: 'syz.4.1508': attribute type 4 has an invalid length. [ 283.960638][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 284.211733][T11681] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1516'. [ 284.269318][T11681] netlink: 'syz.2.1516': attribute type 27 has an invalid length. [ 284.312272][T11684] netlink: 'syz.3.1517': attribute type 13 has an invalid length. [ 284.343410][T11684] netlink: 'syz.3.1517': attribute type 17 has an invalid length. [ 284.909658][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.947707][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.965856][T11681] xfrm0: left promiscuous mode [ 284.974282][T11681] xfrm0: left allmulticast mode [ 284.998047][T11681] hsr0: left promiscuous mode [ 285.002773][T11681] hsr0: left allmulticast mode [ 285.009118][T11681] hsr_slave_0: left allmulticast mode [ 285.207109][T11681] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 285.214537][T11681] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 285.386518][T11684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.475864][ T154] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.494641][ T154] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.525948][ T154] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.548840][ T154] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.584001][ T154] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.603712][ T154] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.623903][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1519'. [ 285.628789][T11709] netlink: 'syz.3.1524': attribute type 12 has an invalid length. [ 285.649093][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1523'. [ 285.660248][ T154] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.678897][ T154] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.705107][ T154] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.745370][ T154] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.768979][ T154] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.791296][ T154] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.807287][T11722] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1523'. [ 285.836556][T11713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1523'. [ 286.039158][T11733] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 286.191620][T11733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.345516][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 286.394818][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.409122][T11742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.427427][T11742] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.466165][T11742] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 286.601466][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.631132][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.833489][T11767] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 287.424014][T11774] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 287.452352][T11774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1536'. [ 288.449188][T11819] __nla_validate_parse: 2 callbacks suppressed [ 288.449207][T11819] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1551'. [ 288.887750][T11839] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 288.902668][T11839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1555'. [ 288.929517][T11841] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 288.941920][T11841] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1555'. [ 289.123700][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1558'. [ 289.159683][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 289.245168][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1558'. [ 289.266508][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1558'. [ 289.301360][T11860] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.447498][T11872] team0: Caught tx_queue_len zero misconfig [ 289.477527][T11875] dummy0: entered promiscuous mode [ 289.483199][T11875] dummy0: entered allmulticast mode [ 289.495285][T11875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1565'. [ 289.697616][T11887] syz_tun: entered allmulticast mode [ 289.721975][T11896] netlink: 'syz.3.1572': attribute type 10 has an invalid length. [ 289.742935][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 289.808944][T11903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1573'. [ 289.930593][T11907] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 289.966648][T11909] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 290.027017][T11909] bond4: (slave bridge4): making interface the new active one [ 290.035619][T11909] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 290.259540][T11931] netlink: 'syz.3.1583': attribute type 11 has an invalid length. [ 290.483385][T11885] syz_tun: left allmulticast mode [ 290.918708][T11969] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 291.004431][T11971] dvmrp8: entered allmulticast mode [ 291.072132][T11979] netlink: 'syz.3.1594': attribute type 23 has an invalid length. [ 291.527525][T11996] tipc: Enabled bearer , priority 0 [ 291.580252][T11999] syzkaller0: entered promiscuous mode [ 291.625825][T11999] syzkaller0: entered allmulticast mode [ 291.655320][T11970] dvmrp8: left allmulticast mode [ 291.798675][T11999] tipc: Resetting bearer [ 291.843082][T11994] tipc: Resetting bearer [ 291.924829][T11994] tipc: Disabling bearer [ 292.242619][T12019] syzkaller1: entered promiscuous mode [ 292.248547][T12019] syzkaller1: entered allmulticast mode [ 292.750604][T12033] IPv6: addrconf: prefix option has invalid lifetime [ 293.590080][T12067] __nla_validate_parse: 6 callbacks suppressed [ 293.590099][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 293.651337][T12072] tc_dump_action: action bad kind [ 293.688490][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1618'. [ 294.040206][T12094] netlink: 'syz.0.1624': attribute type 16 has an invalid length. [ 294.048890][T12094] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1624'. [ 294.356527][T12111] netlink: 'syz.4.1629': attribute type 13 has an invalid length. [ 294.379424][T12111] netlink: 'syz.4.1629': attribute type 17 has an invalid length. [ 294.406215][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.422356][T12111] tipc: Resetting bearer [ 294.437356][T12111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.629026][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'. [ 295.638794][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 295.638869][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 295.650027][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 295.667500][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 295.814052][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 296.007232][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 296.024366][T12160] tipc: Enabled bearer , priority 0 [ 296.033522][T12160] syzkaller0: entered promiscuous mode [ 296.039242][T12160] syzkaller0: entered allmulticast mode [ 296.060179][T12160] tipc: Resetting bearer [ 296.096769][T12160] tipc: Resetting bearer [ 296.123177][T12160] tipc: Disabling bearer [ 296.464274][T12181] sctp: [Deprecated]: syz.1.1649 (pid 12181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.464274][T12181] Use struct sctp_sack_info instead [ 297.337465][T12206] geneve3: entered promiscuous mode [ 297.371380][T12206] geneve3: entered allmulticast mode [ 297.436959][ T78] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.455676][ T78] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.471541][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.537049][T12220] atomic_op ffff888023e6e198 conn xmit_atomic 0000000000000000 [ 297.537181][ T78] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.588744][T12226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.672066][T12229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.756246][T12226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.769055][T12230] nftables ruleset with unbound set [ 298.189913][T12236] 8021q: VLANs not supported on caif0 [ 299.018252][T12273] tipc: Enabled bearer , priority 0 [ 299.025840][T12273] syzkaller0: entered promiscuous mode [ 299.032240][T12273] syzkaller0: entered allmulticast mode [ 299.069998][T12273] tipc: Resetting bearer [ 299.094695][T12272] tipc: Resetting bearer [ 299.154943][T12272] tipc: Disabling bearer [ 299.192127][T12280] pim6reg1: entered promiscuous mode [ 299.200476][T12280] pim6reg1: entered allmulticast mode [ 299.211334][T12278] netlink: 'syz.2.1674': attribute type 4 has an invalid length. [ 299.225350][T12278] netlink: 'syz.2.1674': attribute type 4 has an invalid length. [ 299.367578][T12293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.426003][T12298] __nla_validate_parse: 11 callbacks suppressed [ 299.426022][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 299.565089][T12298] team0 (unregistering): Port device team_slave_0 removed [ 299.579391][T12298] team0 (unregistering): Port device team_slave_1 removed [ 299.589134][T12298] team0 (unregistering): Port device bridge3 removed [ 299.729741][T12312] IPVS: Scheduler module ip_vs_sip not found [ 299.873659][T12321] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 299.891249][T12321] macsec1: entered promiscuous mode [ 299.899292][T12321] ip6gretap0: entered promiscuous mode [ 299.909893][T12321] macsec1: entered allmulticast mode [ 299.924974][T12321] ip6gretap0: entered allmulticast mode [ 300.242738][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1689'. [ 300.382684][T12338] ip6tnl0: Caught tx_queue_len zero misconfig [ 300.444877][T12343] team0: Device ipip0 is of different type [ 300.466277][T12346] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1692'. [ 300.590530][T12348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1693'. [ 300.625353][T12351] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 300.752496][T12352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1693'. [ 301.325583][T12373] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1698'. [ 301.380107][T12360] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1698'. [ 301.702182][T12385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1704'. [ 301.906873][ T30] audit: type=1800 audit(1758879240.466:7): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1700" name="memory.events" dev="tmpfs" ino=1626 res=0 errno=0 [ 301.952623][T12394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1706'. [ 302.618170][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 303.409220][T12446] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 303.835783][T12476] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 304.007884][T12484] netlink: 'syz.2.1731': attribute type 1 has an invalid length. [ 304.053554][T12484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.191366][T12484] veth3: entered promiscuous mode [ 304.210529][T12484] bond4: (slave veth3): Enslaving as an active interface with a down link [ 304.242614][T12486] erspan0: entered allmulticast mode [ 304.256147][ T30] audit: type=1800 audit(1758879242.816:8): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1726" name="memory.events" dev="tmpfs" ino=1667 res=0 errno=0 [ 304.265576][T12486] bond4: (slave erspan0): making interface the new active one [ 304.308338][T12486] erspan0: entered promiscuous mode [ 304.326544][T12486] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 304.418538][T12494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.437449][T12494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.514623][T12494] batadv0 (unregistering): left promiscuous mode [ 304.618899][T12501] __nla_validate_parse: 6 callbacks suppressed [ 304.618919][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 304.701159][ T3500] tipc: Subscription rejected, illegal request [ 304.712719][T12506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1736'. [ 304.841567][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.877390][T12512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.915023][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 305.159128][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 305.278085][T12537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1747'. [ 305.896870][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 305.904733][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 305.960658][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 308.314602][T12606] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 308.324253][T12606] nbd: error processing sock list [ 308.355420][T12606] block nbd1: shutting down sockets [ 308.568272][T12633] veth0_to_bond: entered allmulticast mode [ 308.758097][T12643] erspan0: left allmulticast mode [ 308.797594][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.820796][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.828981][T12643] dummy0: left promiscuous mode [ 308.833847][T12643] dummy0: left allmulticast mode [ 308.843072][T12643] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.925997][ T5979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.421004][ T6117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.429117][ T6117] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.480125][T12674] bond0: (slave dummy0): Releasing backup interface [ 309.495859][T12674] batman_adv: batadv0: Adding interface: dummy0 [ 309.508433][T12674] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.537591][T12674] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 309.594983][T12679] Bluetooth: MGMT ver 1.23 [ 309.636020][T12679] block nbd1: shutting down sockets [ 309.699532][T12689] netlink: 'syz.0.1787': attribute type 1 has an invalid length. [ 309.748345][T12689] __nla_validate_parse: 2 callbacks suppressed [ 309.748363][T12689] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1787'. [ 309.867063][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 309.952353][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 310.000507][T12704] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1793'. [ 310.023700][T12704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1793'. [ 310.231257][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 310.290019][T12724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.339840][T12729] netlink: 'syz.3.1799': attribute type 5 has an invalid length. [ 310.566444][ T3570] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.585201][ T3570] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.627958][ T5928] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.725792][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 310.735508][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 310.751568][T12751] netlink: 'syz.4.1804': attribute type 18 has an invalid length. [ 310.763210][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 310.773015][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 310.782424][T12751] netlink: 'syz.4.1804': attribute type 18 has an invalid length. [ 310.793281][T12751] netlink: 'syz.4.1804': attribute type 18 has an invalid length. [ 311.200275][T12774] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 311.279449][T12774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.309316][T12783] IPVS: Unknown mcast interface: vetN1_macvtap [ 311.329382][T12778] tipc: Enabled bearer , priority 0 [ 311.344634][T12783] batadv_slave_1: entered promiscuous mode [ 311.376237][T12778] syzkaller0: entered promiscuous mode [ 311.382148][T12778] syzkaller0: entered allmulticast mode [ 311.394572][T12783] batadv_slave_1: left promiscuous mode [ 311.447850][T12778] tipc: Resetting bearer [ 311.505273][T12777] tipc: Resetting bearer [ 311.565201][T12777] tipc: Disabling bearer [ 311.717648][T12798] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.263109][T12806] tipc: Resetting bearer [ 312.301161][T12806] veth0_to_bond: left allmulticast mode [ 312.308600][T12806] batadv_slave_0: left promiscuous mode [ 312.316105][T12806] ..0·: left allmulticast mode [ 312.320990][T12806] hsr_slave_0: left allmulticast mode [ 312.326846][T12806] hsr_slave_1: left allmulticast mode [ 312.334990][T12806] vlan0: left promiscuous mode [ 312.385208][T12806] veth5: left promiscuous mode [ 312.396902][T12806] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 312.411055][T12806] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 312.419820][T12806] macsec0: left promiscuous mode [ 312.425999][T12806] macsec0: left allmulticast mode [ 312.487511][T12806] gre1: left promiscuous mode [ 312.496987][T12806] gre1: left allmulticast mode [ 312.556618][T12811] ip6gre1: entered allmulticast mode [ 312.571590][ T3500] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.591386][ T3500] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.608702][T12815] xfrm1: entered promiscuous mode [ 312.613980][T12815] xfrm1: entered allmulticast mode [ 312.632427][ T3500] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.642392][ T3500] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.886198][T12830] tipc: Enabling of bearer rejected, already enabled [ 313.136692][T12836] tipc: Resetting bearer [ 314.474437][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.479263][T12876] bond0: entered promiscuous mode [ 314.499368][T12876] bond_slave_0: entered promiscuous mode [ 314.514820][T12876] bond_slave_1: entered promiscuous mode [ 314.562003][T12876] bond0: left promiscuous mode [ 314.583747][T12876] bond_slave_0: left promiscuous mode [ 314.590129][T12876] bond_slave_1: left promiscuous mode [ 314.612431][T12879] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 314.811896][T12891] __nla_validate_parse: 24 callbacks suppressed [ 314.811932][T12891] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1842'. [ 314.980256][T12900] netlink: 'syz.2.1845': attribute type 10 has an invalid length. [ 314.998999][T12900] team0: Port device geneve1 added [ 315.009395][ T3500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.047825][ T3500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.053297][T12900] netlink: 'syz.2.1845': attribute type 17 has an invalid length. [ 315.074608][T12900] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1845'. [ 315.074673][ T3500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.177748][ T3500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.817859][T12935] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1854'. [ 315.827353][T12935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.854704][ T6115] erspan0: left promiscuous mode [ 315.983784][T12938] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1855'. [ 316.061275][T12942] bond1: option mode: unable to set because the bond device has slaves [ 316.435317][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 316.454247][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 316.750167][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 316.827418][T12979] veth57: entered promiscuous mode [ 317.120329][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.231614][T13010] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 317.241770][T13010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.285784][T13010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 317.294738][T13008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1878'. [ 317.335499][T13001] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 317.343436][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1877'. [ 317.360222][T13014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1879'. [ 317.374455][T13001] batadv0: entered promiscuous mode [ 317.380282][T13001] batadv0: entered allmulticast mode [ 317.404541][T13001] bond0: (slave batadv0): Releasing backup interface [ 317.463245][T13001] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 318.462587][T13041] netlink: 'syz.3.1886': attribute type 25 has an invalid length. [ 318.490231][T13041] netlink: 'syz.3.1886': attribute type 25 has an invalid length. [ 318.759687][T13057] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 319.047012][T13070] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 319.056855][T13070] wlan1: mtu less than device minimum [ 319.062256][T13070] : (slave wlan1): Error -22 calling dev_set_mtu [ 319.070415][T13069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.230854][T13081] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 319.660636][T13102] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 319.790385][T13109] tipc: Enabled bearer , priority 0 [ 319.826182][T13106] tipc: Enabling of bearer rejected, already enabled [ 319.857054][T13112] syzkaller0: entered promiscuous mode [ 319.863185][T13112] syzkaller0: entered allmulticast mode [ 319.913514][T13114] __nla_validate_parse: 8 callbacks suppressed [ 319.913532][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 319.915625][T13106] tipc: Resetting bearer [ 319.967687][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1911'. [ 320.067083][T13106] tipc: Resetting bearer [ 320.150734][T13106] tipc: Disabling bearer [ 320.279780][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 320.312239][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 320.471517][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 320.497072][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 320.899530][T13176] tipc: Failed to clone mcast rcv buffer [ 321.120286][T13186] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 321.159724][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1928'. [ 321.319789][T13193] bond0: (slave bond_slave_0): Releasing backup interface [ 321.331725][T13193] bond0: (slave bond_slave_1): Releasing backup interface [ 321.344526][T13193] team0: Port device team_slave_0 removed [ 321.355938][T13193] team0: Port device team_slave_1 removed [ 321.362563][T13193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.373759][T13193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.382547][T13193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.426434][T13193] netlink: 'syz.4.1931': attribute type 10 has an invalid length. [ 321.739294][T13216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1937'. [ 321.798978][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 321.950167][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 322.016803][T13232] openvswitch: netlink: Duplicate or invalid key (type 0). [ 322.031149][T13232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.138137][T13242] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 322.234889][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.496141][T13223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.855803][T13272] syzkaller1: entered allmulticast mode [ 324.221730][T13322] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 325.308742][T13361] __nla_validate_parse: 8 callbacks suppressed [ 325.308762][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 325.631850][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 325.655836][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'. [ 325.668397][T13366] netlink: 'syz.4.1977': attribute type 19 has an invalid length. [ 325.689087][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 325.930610][T13395] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 326.105858][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 326.218783][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 326.706640][T13425] sctp: [Deprecated]: syz.2.1994 (pid 13425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.706640][T13425] Use struct sctp_sack_info instead [ 326.723470][T13426] sctp: [Deprecated]: syz.2.1994 (pid 13426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.723470][T13426] Use struct sctp_sack_info instead [ 326.925160][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1996'. [ 327.791707][T13457] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 327.850483][T13457] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 327.961740][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 328.029461][T13468] macsec1: entered allmulticast mode [ 328.079723][T13468] bridge0: entered allmulticast mode [ 328.136022][T13468] bridge0: port 1(macsec1) entered blocking state [ 328.184747][T13468] bridge0: port 1(macsec1) entered disabled state [ 328.287416][T13468] bridge0: left allmulticast mode [ 328.569996][T13489] netlink: 'syz.0.2007': attribute type 9 has an invalid length. [ 328.595612][T13489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2007'. [ 329.353360][T13522] syzkaller1: entered promiscuous mode [ 329.364175][T13522] syzkaller1: entered allmulticast mode [ 329.510630][T13525] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 329.651489][T13538] sctp: [Deprecated]: syz.0.2023 (pid 13538) Use of int in max_burst socket option. [ 329.651489][T13538] Use struct sctp_assoc_value instead [ 329.687660][T13538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2023'. [ 329.726607][T13538] sctp: [Deprecated]: syz.0.2023 (pid 13538) Use of int in max_burst socket option. [ 329.726607][T13538] Use struct sctp_assoc_value instead [ 330.527592][T13570] __nla_validate_parse: 1 callbacks suppressed [ 330.527610][T13570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2031'. [ 330.671650][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 330.688196][T13581] netlink: 'syz.0.2032': attribute type 2 has an invalid length. [ 330.783222][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 330.796592][T13575] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2034'. [ 330.805848][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2034'. [ 331.109880][T13602] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2038'. [ 331.284248][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 331.587177][T13607] netlink: 'syz.0.2039': attribute type 4 has an invalid length. [ 331.708910][T13612] veth0: entered promiscuous mode [ 331.737156][T13614] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 331.750693][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 331.763691][T13614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2040'. [ 331.806550][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 332.175383][T13614] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 332.462387][T13633] netlink: 'syz.3.2047': attribute type 10 has an invalid length. [ 332.556575][T13633] team0: Port device dummy0 added [ 332.663492][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2046'. [ 333.780939][T13674] netlink: 'syz.1.2058': attribute type 4 has an invalid length. [ 334.011858][T13685] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 334.133610][T13687] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 334.825303][ T30] audit: type=1800 audit(1758879273.376:9): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2060" name="memory.events" dev="tmpfs" ino=1949 res=0 errno=0 [ 335.197618][T13724] tipc: Enabled bearer , priority 0 [ 335.288678][T13724] syzkaller0: entered promiscuous mode [ 335.294386][T13724] syzkaller0: entered allmulticast mode [ 335.300596][T13724] tipc: Resetting bearer [ 335.368201][T13723] tipc: Resetting bearer [ 336.637860][T13723] tipc: Disabling bearer [ 336.753823][T13757] netlink: 'syz.3.2076': attribute type 2 has an invalid length. [ 336.930016][T13762] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 337.261385][T13784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.290945][T13787] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 337.299501][T13784] lo: Caught tx_queue_len zero misconfig [ 337.329826][T13784] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 337.351425][T13789] __nla_validate_parse: 13 callbacks suppressed [ 337.351511][T13789] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2087'. [ 337.595412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.604350][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.717719][T13802] syzkaller1: entered promiscuous mode [ 337.727171][T13802] syzkaller1: entered allmulticast mode [ 337.750915][T13800] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2090'. [ 337.879656][T13809] tipc: Enabled bearer , priority 0 [ 337.905094][T13809] syzkaller0: entered promiscuous mode [ 337.922951][T13809] syzkaller0: entered allmulticast mode [ 337.972768][T13809] tipc: Resetting bearer [ 337.992329][T13808] tipc: Resetting bearer [ 338.101709][T13808] tipc: Disabling bearer [ 338.159346][T13820] netlink: 'syz.0.2099': attribute type 1 has an invalid length. [ 338.306727][T13825] gretap2: entered promiscuous mode [ 338.918758][T13859] veth0_to_bridge: entered promiscuous mode [ 339.222577][T13875] batadv_slave_1: entered promiscuous mode [ 339.272463][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 339.283960][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 339.289475][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 339.295266][T13878] netlink: 'syz.1.2112': attribute type 14 has an invalid length. [ 339.310832][T13878] netlink: 'syz.1.2112': attribute type 12 has an invalid length. [ 339.423448][T13874] batadv_slave_1: left promiscuous mode [ 339.560870][T13882] netlink: 'syz.1.2113': attribute type 12 has an invalid length. [ 339.663400][T13884] dvmrp8: entered allmulticast mode [ 339.746884][T13889] netlink: 'syz.3.2115': attribute type 23 has an invalid length. [ 339.887321][T13893] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 339.914489][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 339.931490][T13891] netlink: 'syz.1.2117': attribute type 7 has an invalid length. [ 339.939437][T13891] netlink: 'syz.1.2117': attribute type 8 has an invalid length. [ 339.969069][T13894] netlink: 'syz.4.2118': attribute type 4 has an invalid length. [ 340.304685][T13911] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2123'. [ 340.450623][T13883] dvmrp8: left allmulticast mode [ 340.707681][T13931] IPVS: Scheduler module ip_vs_sip not found [ 341.193771][T13940] bond4: entered promiscuous mode [ 341.206167][T13940] bond4: entered allmulticast mode [ 341.211937][T13940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.387451][T13940] bond4 (unregistering): Released all slaves [ 341.648484][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 341.704512][T13949] tipc: Enabling of bearer rejected, failed to enable media [ 342.162316][T13974] delete_channel: no stack [ 343.494970][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.505340][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.515779][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.523758][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.531869][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.625667][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.636344][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.644726][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.653848][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.661734][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.873190][T13996] netlink: 'syz.0.2144': attribute type 21 has an invalid length. [ 343.894724][T13996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2144'. [ 343.924305][T13996] netlink: 'syz.0.2144': attribute type 4 has an invalid length. [ 343.937914][T13996] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2144'. [ 344.392601][T14006] geneve2: entered promiscuous mode [ 344.639082][T13987] chnl_net:caif_netlink_parms(): no params data found [ 344.676437][T14009] vlan0: entered promiscuous mode [ 344.681500][T14009] bond0: entered promiscuous mode [ 344.992921][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.009005][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.016877][T13987] bridge_slave_0: entered allmulticast mode [ 345.027765][T13987] bridge_slave_0: entered promiscuous mode [ 345.040044][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.054437][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.061851][T13987] bridge_slave_1: entered allmulticast mode [ 345.070798][T13987] bridge_slave_1: entered promiscuous mode [ 345.201129][T13991] chnl_net:caif_netlink_parms(): no params data found [ 345.228045][T13987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.252125][T13987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.316322][T14028] dvmrp0: left allmulticast mode [ 345.389518][T13987] team0: Port device team_slave_0 added [ 345.410459][T14034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 345.445776][T13987] team0: Port device team_slave_1 added [ 345.557301][T14028] 8021q: adding VLAN 0 to HW filter on device  [ 345.568658][T14028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.597927][ T5880] Bluetooth: hci1: command tx timeout [ 345.666040][T13987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.674797][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.675935][ T5880] Bluetooth: hci3: command tx timeout [ 345.703424][T13987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.751823][T13987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.769192][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.799802][T13987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.812180][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.820266][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.828025][T13991] bridge_slave_0: entered allmulticast mode [ 345.839105][T13991] bridge_slave_0: entered promiscuous mode [ 345.902668][T13991] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.924866][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.932152][T13991] bridge_slave_1: entered allmulticast mode [ 345.949424][T13991] bridge_slave_1: entered promiscuous mode [ 345.967629][T13987] hsr_slave_0: entered promiscuous mode [ 345.977474][T13987] hsr_slave_1: entered promiscuous mode [ 345.984621][T13987] debugfs: 'hsr0' already exists in 'hsr' [ 345.990442][T13987] Cannot create hsr debugfs directory [ 346.018247][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 346.097113][T13991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.135000][T14059] validate_nla: 1 callbacks suppressed [ 346.135016][T14059] netlink: 'syz.1.2162': attribute type 4 has an invalid length. [ 346.177333][T13991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.189107][T14061] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2163'. [ 346.291866][T13991] team0: Port device team_slave_0 added [ 346.321202][T13991] team0: Port device team_slave_1 added [ 346.601711][T13991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.614693][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.656294][T13991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.718413][T13991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.726120][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.752274][T13991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.951664][T13991] hsr_slave_0: entered promiscuous mode [ 346.963426][T13991] hsr_slave_1: entered promiscuous mode [ 346.973722][T13991] debugfs: 'hsr0' already exists in 'hsr' [ 346.980059][T13991] Cannot create hsr debugfs directory [ 346.990105][T14089] netlink: 'syz.4.2171': attribute type 23 has an invalid length. [ 347.131090][T13987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.191422][T13987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.225808][T13987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.289707][T14104] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 347.296386][T13987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.675913][ T5880] Bluetooth: hci1: command tx timeout [ 347.708314][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 347.745944][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.755646][ T5880] Bluetooth: hci3: command tx timeout [ 347.843513][T14125] macvtap1: entered promiscuous mode [ 347.856898][T14125] erspan0: entered promiscuous mode [ 347.862283][T14125] macvtap1: entered allmulticast mode [ 347.894145][T14125] erspan0: entered allmulticast mode [ 347.908763][T13991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 347.950503][T13991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.968914][T13991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.991779][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.016440][T13991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.065173][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.072375][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.110667][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.117910][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.516279][T13987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.774369][T13991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.828923][T13991] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.887474][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.894850][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.942369][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.949594][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.993727][T13991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.008469][T13991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.354498][ T5880] Bluetooth: hci0: command tx timeout [ 349.370501][T13987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.762791][ T5880] Bluetooth: hci1: command tx timeout [ 349.834339][ T5880] Bluetooth: hci3: command tx timeout [ 349.903371][T13991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.238091][T14179] netlink: 'syz.4.2188': attribute type 21 has an invalid length. [ 350.249289][T14177] netlink: 'syz.0.2187': attribute type 4 has an invalid length. [ 350.283330][T14179] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2188'. [ 350.299738][T14177] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2187'. [ 350.358026][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'. [ 350.436527][T14176] delete_channel: no stack [ 350.605773][T13991] veth0_vlan: entered promiscuous mode [ 350.611958][T14188] tipc: Enabled bearer , priority 0 [ 350.641717][T14187] tipc: Disabling bearer [ 350.700478][T13987] veth0_vlan: entered promiscuous mode [ 350.733436][T13991] veth1_vlan: entered promiscuous mode [ 350.791699][T13987] veth1_vlan: entered promiscuous mode [ 350.851839][T14195] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 350.900811][T13991] veth0_macvtap: entered promiscuous mode [ 351.029738][T13991] veth1_macvtap: entered promiscuous mode [ 351.136547][T13987] veth0_macvtap: entered promiscuous mode [ 351.153022][T13991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.190803][T13991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.224487][ T3528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.281667][ T3528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.314241][ T3528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.323475][T13987] veth1_macvtap: entered promiscuous mode [ 351.360118][ T3528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.422940][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 351.500457][T13987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.545511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.563657][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.597161][T14215] delete_channel: no stack [ 351.613720][T13987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.641715][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.652591][T14214] delete_channel: no stack [ 351.654263][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.658293][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.675225][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.683297][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.728338][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.773769][T14224] netlink: 'syz.1.2198': attribute type 13 has an invalid length. [ 351.793450][T14224] netlink: 'syz.1.2198': attribute type 17 has an invalid length. [ 351.840806][ T5880] Bluetooth: hci1: command tx timeout [ 351.872447][T14224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.914956][ T5880] Bluetooth: hci3: command tx timeout [ 351.980036][T14231] netlink: 16386 bytes leftover after parsing attributes in process `syz.6.2150'. [ 351.998076][T14234] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2200'. [ 352.022888][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 352.104935][T14238] netlink: 'syz.6.2202': attribute type 1 has an invalid length. [ 352.267377][T14241] tipc: Resetting bearer [ 352.309735][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.328308][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.405053][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.417036][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.481459][T14247] bond0: entered allmulticast mode [ 352.509049][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2207'. [ 352.530140][T14254] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2208'. [ 352.547014][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2207'. [ 353.093024][T14282] sctp: [Deprecated]: syz.5.2214 (pid 14282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.093024][T14282] Use struct sctp_sack_info instead [ 353.298938][T14286] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 353.538549][T14300] netlink: 'syz.6.2219': attribute type 16 has an invalid length. [ 353.547051][T14300] netlink: 'syz.6.2219': attribute type 17 has an invalid length. [ 353.765509][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.773292][T14300] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.897715][T14300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.915159][T14300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.109727][ T3500] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.143244][ T3500] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.210316][ T3500] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.226325][ T3500] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.071912][T14353] netlink: 'syz.6.2234': attribute type 15 has an invalid length. [ 355.390818][T14359] __nla_validate_parse: 6 callbacks suppressed [ 355.390837][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2235'. [ 355.967301][T14372] netlink: 'syz.0.2238': attribute type 4 has an invalid length. [ 355.970251][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.031255][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.097125][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.196183][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.284008][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.374056][T14382] netlink: 'syz.6.2243': attribute type 1 has an invalid length. [ 356.384920][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.397831][T14382] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2243'. [ 356.473445][T14388] netlink: 'syz.1.2244': attribute type 6 has an invalid length. [ 356.482606][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.568531][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 356.619585][T14395] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 356.769273][T14404] nbd: must specify at least one socket [ 356.807921][T14395] bond0: (slave gretap2): making interface the new active one [ 356.838221][T14395] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 357.000463][T14411] veth0_to_team: Caught tx_queue_len zero misconfig [ 357.025184][T14411] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 357.493222][T14430] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.647791][T14430] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.732026][T14430] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.822432][T14430] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.967467][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.012616][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.053154][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.174531][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.324658][T14505] lo speed is unknown, defaulting to 1000 [ 359.332120][T14505] lo speed is unknown, defaulting to 1000 [ 359.464571][T14505] lo speed is unknown, defaulting to 1000 [ 359.559472][T14505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 359.830256][T14505] lo speed is unknown, defaulting to 1000 [ 359.937629][T14505] lo speed is unknown, defaulting to 1000 [ 359.958325][T14505] lo speed is unknown, defaulting to 1000 [ 360.020247][T14534] netlink: 'syz.6.2284': attribute type 4 has an invalid length. [ 360.079679][T14505] lo speed is unknown, defaulting to 1000 [ 360.127067][T14534] netlink: 'syz.6.2284': attribute type 4 has an invalid length. [ 360.317447][ T30] audit: type=1800 audit(1758879298.876:10): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2280" name="memory.events" dev="tmpfs" ino=2239 res=0 errno=0 [ 360.625325][T14505] lo speed is unknown, defaulting to 1000 [ 360.706768][T14554] tipc: Enabled bearer , priority 0 [ 360.746897][T14522] lo speed is unknown, defaulting to 1000 [ 360.797499][T14505] lo speed is unknown, defaulting to 1000 [ 360.873437][T14554] tipc: Disabling bearer [ 360.890596][T14559] __nla_validate_parse: 11 callbacks suppressed [ 360.890614][T14559] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2288'. [ 360.909991][T14505] lo speed is unknown, defaulting to 1000 [ 361.001496][T14505] lo speed is unknown, defaulting to 1000 [ 361.362942][T14569] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2291'. [ 361.835598][ T3500] wlan1: Trigger new scan to find an IBSS to join [ 362.342956][T14581] lo speed is unknown, defaulting to 1000 [ 362.779693][T14590] 8021q: VLANs not supported on gre0 [ 362.791205][T14590] 8021q: VLANs not supported on gre0 [ 363.010907][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'. [ 363.187618][T14602] netlink: 'syz.6.2301': attribute type 10 has an invalid length. [ 363.206511][T14605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2302'. [ 363.234885][T14602] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 363.424540][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2304'. [ 363.639570][T14618] lo speed is unknown, defaulting to 1000 [ 363.653495][T14623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2308'. [ 363.679169][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 363.694053][T14628] IPv6: Can't replace route, no match found [ 363.717892][ T30] audit: type=1800 audit(1758879302.276:11): pid=14628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2307" name="memory.events" dev="tmpfs" ino=174 res=0 errno=0 [ 363.922705][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2313'. [ 363.943216][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 363.991670][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2312'. [ 364.201124][T14651] lo speed is unknown, defaulting to 1000 [ 365.014283][T14703] netlink: zone id is out of range [ 365.024873][T14703] netlink: zone id is out of range [ 365.054484][T14703] netlink: get zone limit has 8 unknown bytes [ 365.094443][T14696] lo speed is unknown, defaulting to 1000 [ 365.155834][T14708] netlink: 'syz.5.2328': attribute type 1 has an invalid length. [ 365.376672][T14697] vlan2: entered allmulticast mode [ 365.381831][T14697] veth1: entered allmulticast mode [ 365.777250][T14725] tipc: Started in network mode [ 365.782260][T14725] tipc: Node identity 6a8c60c51c32, cluster identity 4711 [ 365.804577][T14725] tipc: Enabled bearer , priority 0 [ 365.839767][T14725] syzkaller0: entered promiscuous mode [ 365.848451][ T3500] wlan1: Trigger new scan to find an IBSS to join [ 365.862352][T14725] syzkaller0: entered allmulticast mode [ 365.955862][T14725] tipc: Resetting bearer [ 365.995030][T14724] tipc: Resetting bearer [ 366.084794][T14724] tipc: Disabling bearer [ 366.152504][T14742] __nla_validate_parse: 3 callbacks suppressed [ 366.152522][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 366.182455][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 366.347148][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2338'. [ 366.382562][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 366.551951][T14740] veth0_to_bond: left allmulticast mode [ 366.560584][T14740] vlan0: left promiscuous mode [ 366.568451][T14740] veth3: left promiscuous mode [ 366.573457][T14740] hsr1: left promiscuous mode [ 366.579253][T14740] macvlan2: left promiscuous mode [ 366.584880][T14740] bridge3: left promiscuous mode [ 366.589947][T14740] bridge3: left allmulticast mode [ 366.595361][T14740] bridge4: left promiscuous mode [ 366.600416][T14740] bridge4: left allmulticast mode [ 366.605831][T14740] macvtap1: left allmulticast mode [ 366.624267][T14740] geneve3: left promiscuous mode [ 366.629517][T14740] geneve3: left allmulticast mode [ 366.701266][ T6115] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.716166][ T6115] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.734317][ T6115] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.767792][ T6115] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.777398][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.857230][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 366.868377][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 366.925841][T14769] bridge_slave_0: left allmulticast mode [ 366.931528][T14769] bridge_slave_0: left promiscuous mode [ 366.959985][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.972521][T14769] bridge_slave_1: left allmulticast mode [ 366.976439][T14777] netlink: 'syz.5.2342': attribute type 10 has an invalid length. [ 366.995518][T14769] bridge_slave_1: left promiscuous mode [ 367.001332][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.030738][T14769] bond0: (slave bond_slave_0): Releasing backup interface [ 367.043435][T14769] bond0: (slave bond_slave_1): Releasing backup interface [ 367.057799][T14769] team0: Port device team_slave_0 removed [ 367.068659][T14769] team0: Port device team_slave_1 removed [ 367.076255][T14769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.076552][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.083937][T14769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.110468][T14769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.118537][T14769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.128124][T14769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.145249][ T43] lo speed is unknown, defaulting to 1000 [ 367.231970][T14777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 367.362030][T14802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2348'. [ 367.911022][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2357'. [ 368.014616][T14835] syzkaller1: entered promiscuous mode [ 368.020229][T14835] syzkaller1: entered allmulticast mode [ 368.035721][T14838] IPVS: Error connecting to the multicast addr [ 368.212497][T14848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.226180][T14848] bridge0: port 1(bond1) entered blocking state [ 368.236120][T14848] bridge0: port 1(bond1) entered disabled state [ 368.244773][T14848] bond1: entered allmulticast mode [ 368.260353][T14848] bond1: entered promiscuous mode [ 368.275842][T14848] bridge0: port 1(bond1) entered blocking state [ 368.282494][T14848] bridge0: port 1(bond1) entered forwarding state [ 368.303220][ T3528] bridge0: port 1(bond1) entered disabled state [ 368.370216][T14856] team_slave_1: Caught tx_queue_len zero misconfig [ 368.440809][T14858] lo speed is unknown, defaulting to 1000 [ 368.458953][ T43] IPVS: starting estimator thread 0... [ 368.554300][T14865] IPVS: using max 33 ests per chain, 79200 per kthread [ 368.564006][T14867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2366'. [ 368.639834][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2367'. [ 369.257750][T14907] netlink: 'syz.5.2378': attribute type 11 has an invalid length. [ 369.291665][T14911] netlink: 'syz.0.2380': attribute type 16 has an invalid length. [ 369.302844][T14911] netlink: 'syz.0.2380': attribute type 1 has an invalid length. [ 369.387962][T14903] block nbd1: server does not support multiple connections per device. [ 369.396581][T14903] block nbd1: shutting down sockets [ 369.594285][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 369.666780][T14926] bond1: left allmulticast mode [ 369.671776][T14926] bond1: left promiscuous mode [ 369.678104][T14926] bridge0: port 1(bond1) entered disabled state [ 370.141908][T14937] syzkaller1: entered promiscuous mode [ 370.151067][T14937] syzkaller1: entered allmulticast mode [ 370.199984][T14942] nbd: must specify a size in bytes for the device [ 370.317378][T14954] netlink: 'syz.6.2391': attribute type 2 has an invalid length. [ 370.327392][T14953] netlink: 'syz.6.2391': attribute type 2 has an invalid length. [ 370.729592][T14976] lo speed is unknown, defaulting to 1000 [ 370.762910][T14977] netlink: 'syz.0.2394': attribute type 5 has an invalid length. [ 370.813343][T14986] netlink: 'syz.5.2399': attribute type 1 has an invalid length. [ 370.865636][T14986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.930963][T14989] bond2: (slave ip6gretap1): making interface the new active one [ 370.971015][T14989] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 371.220614][T14994] lo speed is unknown, defaulting to 1000 [ 371.496625][T15017] __nla_validate_parse: 13 callbacks suppressed [ 371.496645][T15017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2408'. [ 371.526436][T15017] veth1: Caught tx_queue_len zero misconfig [ 371.637962][T15026] netlink: 'syz.5.2411': attribute type 4 has an invalid length. [ 371.794028][T15038] tc_dump_action: action bad kind [ 371.805393][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 371.821111][T15040] tc_dump_action: action bad kind [ 371.869852][T15033] lo speed is unknown, defaulting to 1000 [ 372.067031][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2420'. [ 372.092596][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2419'. [ 372.136641][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 372.319911][T15063] netlink: 'syz.1.2423': attribute type 2 has an invalid length. [ 372.531789][T15067] netlink: 201916 bytes leftover after parsing attributes in process `syz.6.2425'. [ 372.752220][T15073] lo speed is unknown, defaulting to 1000 [ 372.951249][T15080] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2429'. [ 372.981547][T15074] lo speed is unknown, defaulting to 1000 [ 373.005995][T15081] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2429'. [ 373.205401][T15086] tipc: Enabled bearer , priority 0 [ 373.215146][T15086] syzkaller0: entered promiscuous mode [ 373.224534][T15086] syzkaller0: entered allmulticast mode [ 373.311762][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2431'. [ 373.348783][T15088] lo speed is unknown, defaulting to 1000 [ 373.476470][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e94000: rx timeout, send abort [ 373.488059][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e94000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.544752][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880314b0800: rx timeout, send abort [ 373.553277][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880314b0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.653119][T15096] tipc: Resetting bearer [ 373.692912][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 373.908374][T15109] netlink: 'syz.6.2438': attribute type 13 has an invalid length. [ 373.922641][T15109] netlink: 'syz.6.2438': attribute type 17 has an invalid length. [ 374.137217][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.148391][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.187683][T15109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.227631][T15114] syz_tun: entered allmulticast mode [ 374.272862][T15110] dvmrp8: entered allmulticast mode [ 374.298194][T15085] tipc: Resetting bearer [ 374.330500][T15110] netlink: 'syz.0.2436': attribute type 23 has an invalid length. [ 374.348378][T15085] tipc: Disabling bearer [ 374.491202][T15123] lo speed is unknown, defaulting to 1000 [ 374.526798][ T49] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.539491][ T49] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.595706][ T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.612508][T15136] netlink: 'syz.4.2442': attribute type 2 has an invalid length. [ 374.650955][ T49] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.661882][T15135] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 374.668722][T15107] syz_tun: left allmulticast mode [ 374.683062][T15107] dvmrp8: left allmulticast mode [ 375.056710][T15153] lo speed is unknown, defaulting to 1000 [ 375.410119][T15172] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 375.511540][T15185] ip6gre1: entered promiscuous mode [ 375.986368][T15205] tipc: Started in network mode [ 375.991272][T15205] tipc: Node identity 6ea1573274c9, cluster identity 4711 [ 376.000281][T15205] tipc: Enabled bearer , priority 0 [ 376.015964][T15198] lo speed is unknown, defaulting to 1000 [ 376.040951][T15205] syzkaller0: entered promiscuous mode [ 376.077146][T15205] syzkaller0: entered allmulticast mode [ 376.363182][T15225] tipc: Resetting bearer [ 376.451654][T15204] tipc: Resetting bearer [ 376.476216][T15204] tipc: Disabling bearer [ 376.485941][ T5880] block nbd1: Receive control failed (result -11) [ 376.726866][T15250] __nla_validate_parse: 8 callbacks suppressed [ 376.726886][T15250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2470'. [ 376.751375][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 376.763243][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2470'. [ 376.772355][T15250] validate_nla: 1 callbacks suppressed [ 376.772371][T15250] netlink: 'syz.6.2470': attribute type 11 has an invalid length. [ 376.862949][T15254] veth0: entered promiscuous mode [ 376.957833][T15251] lo speed is unknown, defaulting to 1000 [ 377.174329][T15269] lo speed is unknown, defaulting to 1000 [ 377.283367][T15278] netlink: 'syz.4.2479': attribute type 3 has an invalid length. [ 377.332190][T15280] netlink: 'syz.4.2479': attribute type 3 has an invalid length. [ 377.359660][T15254] veth0: left promiscuous mode [ 377.368388][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2478'. [ 377.400541][T15279] tc_dump_action: action bad kind [ 377.457188][T15285] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.548390][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 377.722354][T15293] lo speed is unknown, defaulting to 1000 [ 378.425314][T15324] lo speed is unknown, defaulting to 1000 [ 378.447512][T15325] lo speed is unknown, defaulting to 1000 [ 378.519373][T15331] lo speed is unknown, defaulting to 1000 [ 378.630511][T15345] Bluetooth: MGMT ver 1.23 [ 379.147139][T15341] lo speed is unknown, defaulting to 1000 [ 379.192454][T15361] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 379.213949][T15361] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 379.227916][T15361] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2496'. [ 379.470137][T15371] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 379.476968][T15374] tipc: Enabled bearer , priority 0 [ 379.484512][T15374] syzkaller0: entered promiscuous mode [ 379.489998][T15374] syzkaller0: entered allmulticast mode [ 379.677429][T15373] tipc: Resetting bearer [ 379.739721][T15373] tipc: Disabling bearer [ 379.784645][T15387] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2503'. [ 379.787335][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 379.803180][T15384] syz_tun: entered promiscuous mode [ 379.830506][T15375] lo speed is unknown, defaulting to 1000 [ 379.840600][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 379.854542][T15383] syz_tun: left promiscuous mode [ 379.993336][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 380.714575][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 380.714574][ T5880] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 380.832453][T15426] netlink: 'syz.5.2516': attribute type 1 has an invalid length. [ 380.840813][T15426] netlink: 'syz.5.2516': attribute type 11 has an invalid length. [ 380.929514][T15431] tipc: Enabled bearer , priority 0 [ 380.937198][T15431] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 380.944798][T15431] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 380.975988][T15431] tipc: Resetting bearer [ 381.971082][T15493] __nla_validate_parse: 7 callbacks suppressed [ 381.971102][T15493] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2534'. [ 381.990390][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2535'. [ 382.243913][T15506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2537'. [ 382.255089][T15510] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2538'. [ 382.293734][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2538'. [ 382.802126][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2544'. [ 383.202299][T15555] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2547'. [ 383.248765][T15555] netlink: 'syz.6.2547': attribute type 10 has an invalid length. [ 383.257607][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2547'. [ 383.275167][ T5876] Bluetooth: hci3: command 0x0405 tx timeout [ 383.383205][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.407108][T15558] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 383.430957][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2548'. [ 383.431665][T15558] bond0: (slave gre0): Error -95 calling set_mac_address [ 383.520776][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 383.535385][T15570] netlink: 'syz.0.2552': attribute type 1 has an invalid length. [ 383.572916][T15570] netlink: 'syz.0.2552': attribute type 2 has an invalid length. [ 383.995543][T15589] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 384.209384][T15600] lo speed is unknown, defaulting to 1000 [ 384.430347][ T30] audit: type=1800 audit(1758879322.986:12): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2559" name="memory.events" dev="tmpfs" ino=2862 res=0 errno=0 [ 385.227041][T15643] tipc: Enabled bearer , priority 0 [ 385.245597][T15643] syzkaller0: entered promiscuous mode [ 385.261341][T15643] syzkaller0: entered allmulticast mode [ 385.299127][T15643] tipc: Resetting bearer [ 385.307709][T15642] tipc: Resetting bearer [ 385.353307][T15642] tipc: Disabling bearer [ 385.548532][T15660] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 385.811018][T15672] netlink: 'syz.4.2577': attribute type 10 has an invalid length. [ 385.965146][T15678] netlink: 'syz.5.2579': attribute type 4 has an invalid length. [ 386.165111][T15680] syz_tun: entered allmulticast mode [ 386.178633][T15680] dvmrp8: entered allmulticast mode [ 386.203362][T15682] netlink: 'syz.0.2581': attribute type 15 has an invalid length. [ 386.240105][ T3570] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 386.249341][T15682] netlink: 'syz.0.2581': attribute type 15 has an invalid length. [ 386.254242][ T3570] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 386.280060][T15680] lo speed is unknown, defaulting to 1000 [ 386.285994][ T3570] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 386.376058][T15679] syz_tun: left allmulticast mode [ 386.381234][T15679] dvmrp8: left allmulticast mode [ 386.440401][ T3570] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 386.556038][T15688] netlink: 'syz.4.2582': attribute type 1 has an invalid length. [ 386.691987][T15688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.004355][T15719] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 387.016912][T15723] __nla_validate_parse: 12 callbacks suppressed [ 387.016930][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2593'. [ 387.090194][T15719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.123497][T15735] netlink: 'syz.0.2594': attribute type 21 has an invalid length. [ 387.131636][T15735] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2594'. [ 387.178596][T15736] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2594'. [ 387.216495][T15730] bond3: (slave veth3): Enslaving as an active interface with a down link [ 387.237814][T15735] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2594'. [ 387.278191][T15719] gretap1: entered promiscuous mode [ 387.300288][T15719] bond3: (slave gretap1): making interface the new active one [ 387.318622][T15719] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 387.339887][T15734] macvlan2: entered promiscuous mode [ 387.345540][T15734] macvlan2: entered allmulticast mode [ 387.355048][T15734] bond3: entered promiscuous mode [ 387.375925][T15734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.404367][T15734] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 387.451480][T15734] bond3: left promiscuous mode [ 387.632869][T15742] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 387.670811][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'. [ 387.727086][T15742] macsec1: entered allmulticast mode [ 387.774921][T15742] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 387.887918][T15759] wg1: entered promiscuous mode [ 387.892818][T15759] wg1: entered allmulticast mode [ 387.925041][T15752] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2601'. [ 387.964904][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2601'. [ 388.069327][T15768] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 388.193714][T15769] lo speed is unknown, defaulting to 1000 [ 388.504371][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2609'. [ 388.567313][T15791] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2609'. [ 388.615298][T15788] Can't find ip_set type hash:n [ 389.184437][T15824] xfrm0: Caught tx_queue_len zero misconfig [ 389.939941][T15851] lo speed is unknown, defaulting to 1000 [ 390.182108][T15865] lo speed is unknown, defaulting to 1000 [ 390.210047][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2628'. [ 391.088971][T15913] geneve4: entered promiscuous mode [ 391.168538][T15915] lo speed is unknown, defaulting to 1000 [ 391.800423][T11688] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 391.815609][T11688] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 391.866606][T11688] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 392.076654][T15965] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 392.094354][T15965] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 392.305207][T15973] __nla_validate_parse: 4 callbacks suppressed [ 392.305226][T15973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2659'. [ 392.435569][T15973] bond5: entered promiscuous mode [ 392.505219][T15973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.630077][T15980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2658'. [ 392.721107][T15992] tipc: Enabled bearer , priority 0 [ 392.730566][T15991] tipc: Disabling bearer [ 393.061380][T16009] tipc: Enabled bearer , priority 0 [ 393.069631][T16009] syzkaller0: entered promiscuous mode [ 393.075722][T16009] syzkaller0: entered allmulticast mode [ 393.102561][T16009] tipc: Resetting bearer [ 393.112921][T16008] tipc: Resetting bearer [ 393.136926][T16008] tipc: Disabling bearer [ 393.313851][T16022] batman_adv: batadv0: Adding interface: macvlan3 [ 393.322616][T16022] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.348266][T16022] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 393.470944][T16036] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 393.534027][T16039] lo speed is unknown, defaulting to 1000 [ 393.666345][T16049] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2678'. [ 393.720596][T16049] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2678'. [ 393.990343][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2684'. [ 394.116233][T16068] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2685'. [ 394.125682][T16068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'. [ 394.131904][T16039] geneve0: entered promiscuous mode [ 394.211970][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2687'. [ 394.265883][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2687'. [ 394.348104][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2687'. [ 394.653195][T16104] tipc: New replicast peer: 172.20.20.187 [ 394.663528][T16104] tipc: Enabled bearer , priority 10 [ 394.993035][T16115] IPVS: Scheduler module ip_vs_sip not found [ 395.314885][T16132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.388334][T16137] nftables ruleset with unbound chain [ 395.422251][T16137] bond4: (slave batadv1): Opening slave failed [ 395.515494][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 395.627451][T16150] bridge0: entered allmulticast mode [ 395.633773][T16150] bridge_slave_1: left allmulticast mode [ 395.642189][T16150] bridge_slave_1: left promiscuous mode [ 395.648998][T16150] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.672531][T16150] bridge_slave_0: left allmulticast mode [ 395.715417][T16150] bridge_slave_0: left promiscuous mode [ 395.721244][T16150] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.778265][T11692] tipc: Node number set to 1992188101 [ 395.785577][T16150] bridge0 (unregistering): left allmulticast mode [ 395.862891][T16158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.911663][T16153] lo speed is unknown, defaulting to 1000 [ 396.167069][T16172] bond0: (slave rose0): Enslaving as an active interface with an up link [ 396.355480][T16191] validate_nla: 1 callbacks suppressed [ 396.355499][T16191] netlink: 'syz.1.2717': attribute type 1 has an invalid length. [ 396.506855][T16191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.515069][T16196] syzkaller0: entered promiscuous mode [ 396.543850][T16196] syzkaller0: entered allmulticast mode [ 396.715358][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 396.721573][ T5880] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 397.269990][T16225] netlink: 'syz.6.2727': attribute type 1 has an invalid length. [ 397.339967][T16225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.345727][T16233] __nla_validate_parse: 11 callbacks suppressed [ 397.345746][T16233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2729'. [ 397.362002][T16225] bond1: (slave geneve0): making interface the new active one [ 397.363537][T16225] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 397.383611][T16232] netlink: 'syz.0.2730': attribute type 1 has an invalid length. [ 397.395406][ T3500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.410651][ T3500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.435914][T16241] netlink: 'syz.6.2727': attribute type 4 has an invalid length. [ 397.465961][T16236] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 397.467811][T16225] bond1: entered promiscuous mode [ 397.485179][T16225] geneve0: entered promiscuous mode [ 397.650944][T16232] 8021q: adding VLAN 0 to HW filter on device bond6 [ 397.658902][ T3500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.685675][ T154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.723867][T16248] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 397.823189][T16259] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2732'. [ 397.832772][T16260] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2732'. [ 398.006289][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'. [ 398.090574][T16259] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 398.106656][T16259] bond0 (unregistering): Released all slaves [ 398.153779][T16278] tap0: tun_chr_ioctl cmd 1074025681 [ 398.322033][T16292] batadv_slave_0: entered promiscuous mode [ 398.340233][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 398.352141][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2740'. [ 398.418806][T16296] lo speed is unknown, defaulting to 1000 [ 398.468530][T16300] !: renamed from dummy0 (while UP) [ 398.553084][T16304] macsec0: entered allmulticast mode [ 398.603997][T16304] syzkaller0: entered promiscuous mode [ 398.614322][T16304] syzkaller0: entered allmulticast mode [ 398.641713][T16300] lo speed is unknown, defaulting to 1000 [ 399.035419][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.595647][T16340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2753'. [ 399.615563][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2753'. [ 399.700324][T16346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2758'. [ 399.906708][T16355] lo speed is unknown, defaulting to 1000 [ 400.191160][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2763'. [ 400.313722][T16372] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 400.473389][T16378] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 400.479411][T16378] dvmrp1: linktype set to 773 [ 400.574689][T16378] dvmrp1: tun_chr_ioctl cmd 1074296322 [ 400.876396][T16398] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 400.976604][T16409] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 401.015156][T16410] !: renamed from dummy0 (while UP) [ 401.232808][T16431] netlink: 'syz.1.2770': attribute type 3 has an invalid length. [ 401.254738][T16431] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 401.372817][T16421] lo speed is unknown, defaulting to 1000 [ 401.531807][T16439] netlink: 'syz.0.2778': attribute type 12 has an invalid length. [ 401.883881][T16433] lo speed is unknown, defaulting to 1000 [ 402.479382][T16478] lo speed is unknown, defaulting to 1000 [ 402.490178][T16477] lo speed is unknown, defaulting to 1000 [ 402.591035][T16482] __nla_validate_parse: 6 callbacks suppressed [ 402.591054][T16482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2784'. [ 403.123242][T16506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 403.262571][T16513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2794'. [ 403.316328][ T6016] IPVS: starting estimator thread 0... [ 403.402093][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2795'. [ 403.412601][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2795'. [ 403.424204][T16519] IPVS: using max 32 ests per chain, 76800 per kthread [ 403.426724][T16522] lo speed is unknown, defaulting to 1000 [ 403.586118][T16531] lo speed is unknown, defaulting to 1000 [ 404.069316][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2806'. [ 404.071734][T16549] dvmrp11: entered allmulticast mode [ 404.141299][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2806'. [ 404.190010][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2805'. [ 405.062367][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.077000][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.085619][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.098191][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.106289][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.154475][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2817'. [ 405.169343][ T154] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.182105][ T154] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 405.194018][ T154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.213922][T16590] lo speed is unknown, defaulting to 1000 [ 405.260744][ T154] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.270899][ T154] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 405.280757][ T154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.311684][T16597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.370220][ T154] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.381581][ T154] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 405.393397][ T154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.465226][ T154] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.476145][ T154] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 405.486233][ T154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.679398][T16590] chnl_net:caif_netlink_parms(): no params data found [ 405.696669][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 406.011452][ T154] bond2 (unregistering): (slave gretap1): Releasing active interface [ 406.285739][ T154] bond4 (unregistering): (slave bridge4): Releasing active interface [ 406.340609][ T154] bond1 (unregistering): Released all slaves [ 406.378509][ T154] bond0 (unregistering): Released all slaves [ 406.502327][ T154] bond2 (unregistering): Released all slaves [ 406.515443][ T154] bond3 (unregistering): Released all slaves [ 406.529989][ T154] bond4 (unregistering): Released all slaves [ 406.659934][ T154] bond5 (unregistering): Released all slaves [ 406.762658][ T154] bond6 (unregistering): Released all slaves [ 406.981363][T16619] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.059078][ T154] tipc: Disabling bearer [ 407.082362][ T154] tipc: Disabling bearer [ 407.103516][ T154] tipc: Left network mode [ 407.159940][T16619] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.194749][ T5876] Bluetooth: hci2: command tx timeout [ 407.256181][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.263426][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.271446][T16590] bridge_slave_0: entered allmulticast mode [ 407.279886][T16590] bridge_slave_0: entered promiscuous mode [ 407.297703][T16619] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.319044][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.326556][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.333951][T16590] bridge_slave_1: entered allmulticast mode [ 407.341582][T16590] bridge_slave_1: entered promiscuous mode [ 407.395911][T16619] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.447821][T16650] lo speed is unknown, defaulting to 1000 [ 407.503488][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.523793][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.683159][T16590] team0: Port device team_slave_0 added [ 407.694419][T16590] team0: Port device team_slave_1 added [ 407.831724][ T3528] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.855834][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2833'. [ 407.910750][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.918864][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.957524][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.023927][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.041789][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.088949][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.100879][ T3500] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.111772][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.159922][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.198108][T16665] tipc: Enabling of bearer rejected, failed to enable media [ 408.231382][T16665] netlink: 'syz.5.2835': attribute type 4 has an invalid length. [ 408.251935][T16665] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2835'. [ 408.370531][T16590] hsr_slave_0: entered promiscuous mode [ 408.379313][T16590] hsr_slave_1: entered promiscuous mode [ 408.386470][T16590] debugfs: 'hsr0' already exists in 'hsr' [ 408.393166][T16590] Cannot create hsr debugfs directory [ 408.582582][ T154] hsr_slave_0: left promiscuous mode [ 408.600948][ T154] hsr_slave_1: left promiscuous mode [ 408.660196][ T154] veth1_vlan: left allmulticast mode [ 408.674762][ T154] veth1_vlan: left promiscuous mode [ 408.680656][ T154] veth0_vlan: left promiscuous mode [ 409.284640][ T5876] Bluetooth: hci2: command tx timeout [ 409.359331][ T154] team0 (unregistering): Port device macvlan0 removed [ 410.366931][T16694] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 410.377525][T16694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 410.389228][T16694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 410.568079][T16714] netlink: 'syz.6.2846': attribute type 12 has an invalid length. [ 410.578057][T16714] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2846'. [ 410.643932][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 410.741823][T16716] netlink: 'syz.6.2846': attribute type 12 has an invalid length. [ 410.752457][T16716] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2846'. [ 410.954402][T16726] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 411.003869][ T154] IPVS: stop unused estimator thread 0... [ 411.360579][ T5876] Bluetooth: hci2: command tx timeout [ 411.585195][T16749] netlink: 'syz.6.2853': attribute type 1 has an invalid length. [ 411.638987][T16751] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2854'. [ 411.649090][T16590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.690467][T16749] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 411.708345][T16749] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 411.750287][T16590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.776755][T16751] siw: device registration error -23 [ 411.822077][T16753] gretap1: entered promiscuous mode [ 411.857967][T16755] netlink: 'syz.1.2855': attribute type 5 has an invalid length. [ 411.882694][T16590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.915581][T16590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.019852][T16767] macvlan2: entered promiscuous mode [ 412.046856][T16767] macvlan2: entered allmulticast mode [ 412.053281][T16767] bond2: entered promiscuous mode [ 412.066066][T16767] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.088797][T16767] bond2: left promiscuous mode [ 412.294620][T16590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.340503][T16590] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.373935][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.381165][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.395282][T16773] netlink: 'syz.5.2858': attribute type 12 has an invalid length. [ 412.449232][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.456566][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.946403][T16793] netlink: 'syz.6.2864': attribute type 303 has an invalid length. [ 413.040011][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.095082][T16796] block nbd2: server does not support multiple connections per device. [ 413.144706][T16796] block nbd2: shutting down sockets [ 413.211174][T16801] lo speed is unknown, defaulting to 1000 [ 413.237487][T16590] veth0_vlan: entered promiscuous mode [ 413.316164][T16590] veth1_vlan: entered promiscuous mode [ 413.434486][ T5876] Bluetooth: hci2: command tx timeout [ 413.716853][T16824] netlink: 'syz.6.2870': attribute type 1 has an invalid length. [ 413.738249][T16590] veth0_macvtap: entered promiscuous mode [ 413.757577][T16824] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2870'. [ 413.782129][T16590] veth1_macvtap: entered promiscuous mode [ 413.952261][T16824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.963885][T16824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.975689][T16824] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 413.988652][T16824] bond0 (unregistering): Released all slaves [ 414.017023][T16820] syzkaller1: entered promiscuous mode [ 414.022556][T16820] syzkaller1: entered allmulticast mode [ 414.148385][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.178970][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.268631][ T3570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.292803][ T3570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.397472][ T3570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.419857][T16843] lo speed is unknown, defaulting to 1000 [ 414.426962][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.629487][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.645500][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.699786][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.723554][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.867648][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 414.927881][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 415.099502][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2810'. [ 415.147111][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.215427][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.264323][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.300081][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.338187][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.377114][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2882'. [ 415.458177][T16892] netlink: 'syz.6.2883': attribute type 4 has an invalid length. [ 415.514495][ T5876] Bluetooth: hci2: command tx timeout [ 416.198309][T16883] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 416.213732][ T9] lo speed is unknown, defaulting to 1000 [ 416.223808][ T9] syz2: Port: 1 Link DOWN [ 416.565005][T16917] veth1_macvtap: left promiscuous mode [ 416.668336][T16918] delete_channel: no stack [ 424.646246][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.712071][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.787664][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.847795][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.947958][ T13] veth0_to_bond: left allmulticast mode [ 424.953518][ T13] veth0_to_bond: left promiscuous mode [ 424.960427][ T13] bridge3: port 1(veth0_to_bond) entered disabled state [ 425.056731][ T13] ip6gretap0 (unregistering): left allmulticast mode [ 425.187287][ T13] bond4 (unregistering): (slave erspan0): Releasing active interface [ 425.270913][ T13] dvmrp8 (unregistering): left allmulticast mode [ 425.295226][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 425.316397][ T13] team0: Port device geneve1 removed [ 426.781130][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.793199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.806443][ T13] bond0 (unregistering): Released all slaves [ 426.820887][ T13] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 426.829282][ T13] bond1 (unregistering): Released all slaves [ 426.926934][ T13] bond2 (unregistering): Released all slaves [ 427.018389][ T13] bond3 (unregistering): Released all slaves [ 427.110551][ T13] bond4 (unregistering): (slave veth3): Releasing active interface [ 427.120141][ T13] bond4 (unregistering): Released all slaves [ 427.215889][ T13] bond5 (unregistering): Released all slaves [ 427.319365][ T13] : left promiscuous mode [ 427.364681][ T13] tipc: Disabling bearer [ 427.377632][ T13] tipc: Left network mode [ 427.692314][ T13] hsr_slave_0: left promiscuous mode [ 427.698371][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.706611][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.714232][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 427.757206][ T13] pimreg3 (unregistering): left allmulticast mode [ 428.021177][ T13] team0 (unregistering): Port device team_slave_1 removed [ 428.058155][ T13] team0 (unregistering): Port device team_slave_0 removed [ 428.666029][ T13] IPVS: stop unused estimator thread 0... [ 456.416470][T16978] __nla_validate_parse: 35 callbacks suppressed [ 456.416489][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2905'. [ 456.447667][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 456.489757][T16975] lo speed is unknown, defaulting to 1000 [ 456.588284][T16980] geneve1: Caught tx_queue_len zero misconfig [ 456.638734][T16978] netlink: 'syz.1.2905': attribute type 7 has an invalid length. [ 456.651501][T16978] netlink: 'syz.1.2905': attribute type 7 has an invalid length. [ 456.832976][T16989] syzkaller0: entered promiscuous mode [ 456.844885][T16994] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2912'. [ 456.870949][T16989] syzkaller0: entered allmulticast mode [ 456.943048][T16994] siw: device registration error -23 [ 460.317062][T16991] Set syz1 is full, maxelem 65536 reached [ 460.490656][T17033] lo speed is unknown, defaulting to 1000 [ 460.616722][T17040] netlink: 'syz.4.2921': attribute type 83 has an invalid length. [ 460.621492][T17048] netlink: 'syz.6.2922': attribute type 13 has an invalid length. [ 460.642560][T17048] netlink: 'syz.6.2922': attribute type 17 has an invalid length. [ 460.958514][T17048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.136149][T17049] lo speed is unknown, defaulting to 1000 [ 461.305787][T17057] netlink: 'syz.0.2923': attribute type 10 has an invalid length. [ 461.363804][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2923'. [ 461.420943][T17057] dummy0: entered promiscuous mode [ 461.465699][T17057] bridge0: port 3(dummy0) entered blocking state [ 461.494537][T17057] bridge0: port 3(dummy0) entered disabled state [ 461.501177][T17057] dummy0: entered allmulticast mode [ 461.509431][T17057] bridge0: port 3(dummy0) entered blocking state [ 461.515931][T17057] bridge0: port 3(dummy0) entered forwarding state [ 461.885866][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2928'. [ 464.273106][T17107] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 464.465869][T17082] tipc: Started in network mode [ 464.480161][T17082] tipc: Node identity 6afb3d37858e, cluster identity 4711 [ 464.488225][T17082] tipc: Enabled bearer , priority 0 [ 464.496454][T17088] syzkaller0: entered promiscuous mode [ 464.502110][T17088] syzkaller0: entered allmulticast mode [ 464.532964][T17097] tipc: Resetting bearer [ 464.544566][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'. [ 464.564409][T17098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2933'. [ 464.585525][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'. [ 464.619830][T17098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2933'. [ 464.639807][T17120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2937'. [ 464.655859][T17081] tipc: Resetting bearer [ 464.706548][T17081] tipc: Disabling bearer [ 464.807096][T17124] lo speed is unknown, defaulting to 1000 [ 465.562900][T17159] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2950'. [ 465.629534][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 465.704290][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 465.752064][T17175] netlink: 'syz.4.2952': attribute type 19 has an invalid length. [ 465.912518][T17183] lo speed is unknown, defaulting to 1000 [ 465.947548][T17189] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 466.002947][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2960'. [ 466.145259][T17197] veth4: entered allmulticast mode [ 466.258131][T17200] lo speed is unknown, defaulting to 1000 [ 466.637583][T17224] netlink: 'syz.6.2965': attribute type 10 has an invalid length. [ 466.948579][T17240] __nla_validate_parse: 3 callbacks suppressed [ 466.948598][T17240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2971'. [ 466.979976][T17243] siw: device registration error -23 [ 467.058700][T17243] netlink: 'syz.6.2972': attribute type 4 has an invalid length. [ 467.268904][T17261] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2978'. [ 467.378636][T17262] lo speed is unknown, defaulting to 1000 [ 467.417093][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.432321][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.441105][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.449725][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.463232][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.471843][T17268] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 467.674187][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 468.039777][T17297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2987'. [ 468.121838][T17299] lo speed is unknown, defaulting to 1000 [ 468.280765][T17311] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2990'. [ 468.539141][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'. [ 468.571103][T17308] lo speed is unknown, defaulting to 1000 [ 468.904241][T17341] Bluetooth: MGMT ver 1.23 [ 469.120008][T17348] tipc: Cannot configure node identity twice [ 469.145545][T17355] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 469.452696][T17365] lo speed is unknown, defaulting to 1000 [ 469.489203][T17371] lo speed is unknown, defaulting to 1000 [ 469.648550][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3004'. [ 469.760768][T17386] tipc: Enabled bearer , priority 0 [ 469.768643][T17386] syzkaller0: entered promiscuous mode [ 469.776011][T17386] syzkaller0: entered allmulticast mode [ 469.811375][T17388] netlink: 'syz.0.3008': attribute type 9 has an invalid length. [ 469.820226][T17386] tipc: Resetting bearer [ 469.828251][T17385] tipc: Resetting bearer [ 469.843766][T17385] tipc: Disabling bearer [ 469.916830][T17390] tipc: Enabled bearer , priority 0 [ 469.962842][T17390] syzkaller0: entered promiscuous mode [ 469.968461][T17390] syzkaller0: entered allmulticast mode [ 469.974699][T17390] tipc: Resetting bearer [ 469.989362][T17389] tipc: Resetting bearer [ 470.105788][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3011'. [ 470.974213][ T5921] tipc: Node number set to 4017438007 [ 471.822909][T17389] tipc: Disabling bearer [ 471.915950][T17396] lo speed is unknown, defaulting to 1000 [ 472.099664][T17419] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3014'. [ 472.165148][T17422] 8021q: VLANs not supported on lo [ 472.185007][T17415] lo speed is unknown, defaulting to 1000 [ 472.211567][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3015'. [ 472.246496][T17425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.258206][T17425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3015'. [ 472.387429][T17435] validate_nla: 2 callbacks suppressed [ 472.387448][T17435] netlink: 'syz.5.3020': attribute type 15 has an invalid length. [ 472.577934][T17446] lo speed is unknown, defaulting to 1000 [ 472.892974][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 472.939994][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 472.966392][T17458] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3025'. [ 472.983990][T17458] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 472.998863][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 473.059691][T17459] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3024'. [ 473.170011][T17467] batadv_slave_1: entered promiscuous mode [ 473.178266][T17464] lo speed is unknown, defaulting to 1000 [ 473.191423][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3027'. [ 473.306462][T17466] batadv_slave_1: left promiscuous mode [ 473.594374][T17488] tun0: tun_chr_ioctl cmd 2148045848 [ 473.616468][T17488] tun0: tun_chr_ioctl cmd 21731 [ 473.729999][T17494] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3034'. [ 473.776639][T17493] lo speed is unknown, defaulting to 1000 [ 474.191189][T17517] IPVS: length: 191 != 8 [ 474.195689][T17517] IPVS: length: 191 != 8 [ 474.199970][T17517] IPVS: length: 191 != 8 [ 474.204519][T17517] IPVS: length: 191 != 8 [ 474.208850][T17517] IPVS: length: 191 != 8 [ 474.213109][T17517] IPVS: length: 191 != 8 [ 474.217481][T17517] IPVS: length: 191 != 8 [ 474.221819][T17517] IPVS: length: 191 != 8 [ 474.226878][T17517] IPVS: length: 191 != 8 [ 474.231181][T17517] IPVS: length: 191 != 8 [ 474.235737][T17517] IPVS: length: 191 != 8 [ 474.240115][T17517] IPVS: length: 191 != 8 [ 474.244546][T17517] IPVS: length: 191 != 8 [ 474.248953][T17517] IPVS: length: 191 != 8 [ 474.253312][T17517] IPVS: length: 191 != 8 [ 474.257954][T17517] IPVS: length: 191 != 8 [ 474.262358][T17517] IPVS: length: 191 != 8 [ 474.266884][T17517] IPVS: length: 191 != 8 [ 474.271596][T17517] IPVS: length: 191 != 8 [ 474.278144][T17517] IPVS: length: 191 != 8 [ 474.288755][T17517] IPVS: length: 191 != 8 [ 474.293230][T17517] IPVS: length: 191 != 8 [ 474.318421][T17517] IPVS: length: 191 != 8 [ 474.322816][T17517] IPVS: length: 191 != 8 [ 474.329654][T17517] IPVS: length: 191 != 8 [ 474.334706][T17517] IPVS: length: 191 != 8 [ 474.360021][T17517] IPVS: length: 191 != 8 [ 474.366012][T17517] IPVS: length: 191 != 8 [ 474.370399][T17517] IPVS: length: 191 != 8 [ 474.375735][T17517] IPVS: length: 191 != 8 [ 474.380065][T17517] IPVS: length: 191 != 8 [ 474.384699][T17517] IPVS: length: 191 != 8 [ 474.389027][T17517] IPVS: length: 191 != 8 [ 474.393346][T17517] IPVS: length: 191 != 8 [ 474.399948][T17517] IPVS: length: 191 != 8 [ 474.404351][T17517] IPVS: length: 191 != 8 [ 474.408720][T17517] IPVS: length: 191 != 8 [ 474.413101][T17517] IPVS: length: 191 != 8 [ 474.417529][T17517] IPVS: length: 191 != 8 [ 474.421848][T17517] IPVS: length: 191 != 8 [ 474.426389][T17517] IPVS: length: 191 != 8 [ 474.430713][T17517] IPVS: length: 191 != 8 [ 474.435077][T17517] IPVS: length: 191 != 8 [ 474.439435][T17517] IPVS: length: 191 != 8 [ 474.448878][T17517] IPVS: length: 191 != 8 [ 474.455854][T17517] IPVS: length: 191 != 8 [ 474.460415][T17517] IPVS: length: 191 != 8 [ 474.465973][T17517] IPVS: length: 191 != 8 [ 474.470317][T17517] IPVS: length: 191 != 8 [ 474.480143][T17517] IPVS: length: 191 != 8 [ 474.494432][T17517] IPVS: length: 191 != 8 [ 474.498828][T17517] IPVS: length: 191 != 8 [ 474.513241][T17517] IPVS: length: 191 != 8 [ 474.521764][T17517] IPVS: length: 191 != 8 [ 474.536294][T17517] IPVS: length: 191 != 8 [ 474.549732][T17517] IPVS: length: 191 != 8 [ 474.557152][T17517] IPVS: length: 191 != 8 [ 474.561422][T17517] IPVS: length: 191 != 8 [ 474.571637][T17517] IPVS: length: 191 != 8 [ 474.576309][T17517] IPVS: length: 191 != 8 [ 474.581942][T17517] IPVS: length: 191 != 8 [ 474.597307][T17517] IPVS: length: 191 != 8 [ 474.603120][T17517] IPVS: length: 191 != 8 [ 474.609403][T17517] IPVS: length: 191 != 8 [ 474.613804][T17517] IPVS: length: 191 != 8 [ 474.759498][T17540] lo speed is unknown, defaulting to 1000 [ 475.035762][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.078115][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.583703][T17586] batman_adv: batadv0: Adding interface: macvtap1 [ 475.590393][T17586] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.616922][T17586] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 475.641156][T17587] batman_adv: batadv0: Adding interface: macvtap2 [ 475.647883][T17587] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.673714][T17587] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 475.808676][T17594] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 475.968483][ T78] syzkaller0: tun_net_xmit 76 [ 475.970199][T17603] syzkaller0: create flow: hash 141030797 index 1 [ 475.982799][ T78] syzkaller0: tun_net_xmit 48 [ 475.994560][ T5921] syzkaller0: tun_net_xmit 76 [ 476.105835][T17601] syzkaller0: delete flow: hash 141030797 index 1 [ 477.754577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.793263][T17613] lo speed is unknown, defaulting to 1000 [ 477.834841][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 477.964842][T17626] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 477.972610][T17626] __nla_validate_parse: 8 callbacks suppressed [ 477.972626][T17626] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3076'. [ 478.018442][T17628] netlink: 'syz.5.3075': attribute type 10 has an invalid length. [ 478.036067][T17628] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3075'. [ 478.078684][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 478.087211][T17632] syz_tun: entered allmulticast mode [ 478.098029][T17632] siw: device registration error -23 [ 478.124293][T17632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.192612][T17632] syz_tun: left allmulticast mode [ 478.395650][T17644] syzkaller0: entered promiscuous mode [ 478.405600][T17639] nbd2: detected capacity change from 0 to 127 [ 478.405707][T17644] syzkaller0: entered allmulticast mode [ 478.428867][ T5876] block nbd2: Receive control failed (result -32) [ 478.687113][T17664] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3084'. [ 478.861659][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3088'. [ 479.079055][T17683] lo speed is unknown, defaulting to 1000 [ 479.134490][T17688] tipc: Can't bind to reserved service type 1 [ 479.155147][T17688] netlink: 'syz.5.3092': attribute type 39 has an invalid length. [ 479.186245][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 479.209825][T17692] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3092'. [ 479.226579][T17692] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3092'. [ 479.235883][T17692] netlink: 'syz.5.3092': attribute type 5 has an invalid length. [ 479.243745][T17692] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3092'. [ 479.257507][T17693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3093'. [ 480.208216][T17743] netlink: 'syz.1.3107': attribute type 13 has an invalid length. [ 480.216409][T17743] netlink: 'syz.1.3107': attribute type 11 has an invalid length. [ 480.288584][T17746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.292108][T17739] lo speed is unknown, defaulting to 1000 [ 480.295852][T17746] IPv6: NLM_F_CREATE should be set when creating new route [ 480.689422][T17768] ÿ: renamed from bond_slave_0 [ 481.905703][T17847] geneve2: entered promiscuous mode [ 481.910921][T17847] geneve2: entered allmulticast mode [ 482.312199][T17817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 482.318733][T17817] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 482.346426][T17817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.352476][T17817] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 482.363263][T17817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 482.369886][T17817] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 482.405092][T17817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 482.411721][T17817] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 482.743274][T17857] lo speed is unknown, defaulting to 1000 [ 482.988030][T17872] __nla_validate_parse: 10 callbacks suppressed [ 482.988051][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 483.579567][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3155'. [ 483.588864][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3155'. [ 483.598194][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3155'. [ 483.609432][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'. [ 483.823059][T17928] netlink: 'syz.6.3160': attribute type 6 has an invalid length. [ 483.860949][T17928] netlink: 'syz.6.3160': attribute type 12 has an invalid length. [ 483.868886][T17928] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.3160'. [ 483.941522][T17930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.048560][T17935] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 484.048821][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 484.132167][T17937] netlink: 'syz.1.3162': attribute type 10 has an invalid length. [ 547.516282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.715116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.514554][ T31] INFO: task kworker/0:6:5946 blocked for more than 143 seconds. [ 643.522407][ T31] Not tainted syzkaller #0 [ 643.527496][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.536228][ T31] task:kworker/0:6 state:D stack:21752 pid:5946 tgid:5946 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 643.548369][ T31] Workqueue: events rfkill_sync_work [ 643.553705][ T31] Call Trace: [ 643.557108][ T31] [ 643.560051][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 643.564769][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 643.571711][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 643.577479][ T31] ? __pfx___schedule+0x10/0x10 [ 643.582379][ T31] ? schedule+0x91/0x360 [ 643.586763][ T31] schedule+0x165/0x360 [ 643.590947][ T31] schedule_preempt_disabled+0x13/0x30 [ 643.596614][ T31] __mutex_lock+0x7e6/0x1350 [ 643.601222][ T31] ? __mutex_lock+0x5bb/0x1350 [ 643.606063][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 643.627911][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 643.633036][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.654174][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 643.660306][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 643.685734][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 643.691512][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 643.696703][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 643.702460][ T31] rfkill_set_block+0x1d2/0x440 [ 643.707489][ T31] rfkill_sync_work+0x114/0x200 [ 643.712370][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 643.718296][ T31] process_scheduled_works+0xae1/0x17b0 [ 643.723964][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.730190][ T31] worker_thread+0x8a0/0xda0 [ 643.734893][ T31] kthread+0x70e/0x8a0 [ 643.738975][ T31] ? __pfx_worker_thread+0x10/0x10 [ 643.744117][ T31] ? __pfx_kthread+0x10/0x10 [ 643.748715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.753911][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.759271][ T31] ? __pfx_kthread+0x10/0x10 [ 643.763900][ T31] ret_from_fork+0x439/0x7d0 [ 643.768594][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 643.773713][ T31] ? __switch_to_asm+0x39/0x70 [ 643.778589][ T31] ? __switch_to_asm+0x33/0x70 [ 643.783377][ T31] ? __pfx_kthread+0x10/0x10 [ 643.788133][ T31] ret_from_fork_asm+0x1a/0x30 [ 643.792924][ T31] [ 643.796313][ T31] INFO: task kworker/0:9:11688 blocked for more than 143 seconds. [ 643.804344][ T31] Not tainted syzkaller #0 [ 643.809283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.818043][ T31] task:kworker/0:9 state:D stack:24296 pid:11688 tgid:11688 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 643.830137][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 643.837133][ T31] Call Trace: [ 643.840560][ T31] [ 643.843489][ T31] __schedule+0x1798/0x4cc0 [ 643.848366][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 643.853767][ T31] ? __pfx___schedule+0x10/0x10 [ 643.858760][ T31] ? schedule+0x91/0x360 [ 643.863027][ T31] schedule+0x165/0x360 [ 643.867348][ T31] schedule_preempt_disabled+0x13/0x30 [ 643.872829][ T31] __mutex_lock+0x7e6/0x1350 [ 643.877451][ T31] ? __mutex_lock+0x5bb/0x1350 [ 643.882231][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 643.888803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 643.893852][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 643.899648][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 643.905506][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 643.911579][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 643.917458][ T31] process_scheduled_works+0xae1/0x17b0 [ 643.923011][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.929151][ T31] worker_thread+0x8a0/0xda0 [ 643.933753][ T31] kthread+0x70e/0x8a0 [ 643.938003][ T31] ? __pfx_worker_thread+0x10/0x10 [ 643.943131][ T31] ? __pfx_kthread+0x10/0x10 [ 643.947976][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.953200][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.958434][ T31] ? __pfx_kthread+0x10/0x10 [ 643.963014][ T31] ret_from_fork+0x439/0x7d0 [ 643.968036][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 643.973165][ T31] ? __switch_to_asm+0x39/0x70 [ 643.977987][ T31] ? __switch_to_asm+0x33/0x70 [ 643.982761][ T31] ? __pfx_kthread+0x10/0x10 [ 643.987392][ T31] ret_from_fork_asm+0x1a/0x30 [ 643.992173][ T31] [ 643.995293][ T31] INFO: task syz.5.3133:17826 blocked for more than 143 seconds. [ 644.003089][ T31] Not tainted syzkaller #0 [ 644.011978][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.020666][ T31] task:syz.5.3133 state:D stack:25096 pid:17826 tgid:17826 ppid:13987 task_flags:0x400040 flags:0x00004004 [ 644.032811][ T31] Call Trace: [ 644.036146][ T31] [ 644.039068][ T31] __schedule+0x1798/0x4cc0 [ 644.043564][ T31] ? validate_chain+0x897/0x2140 [ 644.048575][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.053437][ T31] ? __pfx___schedule+0x10/0x10 [ 644.058321][ T31] ? schedule+0x91/0x360 [ 644.062574][ T31] schedule+0x165/0x360 [ 644.066785][ T31] schedule_timeout+0x9a/0x270 [ 644.071544][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 644.076986][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.082176][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.087426][ T31] ? wait_for_completion+0x267/0x5d0 [ 644.092725][ T31] wait_for_completion+0x2bf/0x5d0 [ 644.097869][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 644.103493][ T31] ? __flush_work+0xd2/0xbc0 [ 644.108112][ T31] ? __flush_work+0xd2/0xbc0 [ 644.112691][ T31] __flush_work+0x9b9/0xbc0 [ 644.117253][ T31] ? __flush_work+0xd2/0xbc0 [ 644.121844][ T31] ? __pfx___flush_work+0x10/0x10 [ 644.126893][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 644.132180][ T31] ? __pfx___cancel_work+0x10/0x10 [ 644.137323][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 644.142948][ T31] __cancel_work_sync+0xbe/0x110 [ 644.147910][ T31] rfkill_unregister+0x92/0x220 [ 644.152748][ T31] nfc_unregister_device+0x96/0x2a0 [ 644.158173][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 644.163921][ T31] virtual_ncidev_close+0x56/0x90 [ 644.168996][ T31] __fput+0x44c/0xa70 [ 644.172971][ T31] task_work_run+0x1d1/0x260 [ 644.177587][ T31] ? __pfx_task_work_run+0x10/0x10 [ 644.182694][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 644.188195][ T31] exit_to_user_mode_loop+0xec/0x110 [ 644.193495][ T31] do_syscall_64+0x2bd/0x3b0 [ 644.198195][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.203437][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.209535][ T31] ? clear_bhb_loop+0x60/0xb0 [ 644.214265][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.220161][ T31] RIP: 0033:0x7f8cf178eec9 [ 644.224639][ T31] RSP: 002b:00007ffc87114778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 644.233103][ T31] RAX: 0000000000000000 RBX: 00007f8cf19e7da0 RCX: 00007f8cf178eec9 [ 644.241152][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 644.249265][ T31] RBP: 00007f8cf19e7da0 R08: 0000000000000228 R09: 0000001e87114a6f [ 644.257285][ T31] R10: 00000000003ffbb4 R11: 0000000000000246 R12: 0000000000075c65 [ 644.265293][ T31] R13: 00007f8cf19e6090 R14: ffffffffffffffff R15: 00007ffc87114890 [ 644.273382][ T31] [ 644.276473][ T31] INFO: task syz-executor:17888 blocked for more than 144 seconds. [ 644.284447][ T31] Not tainted syzkaller #0 [ 644.289385][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.298112][ T31] task:syz-executor state:D stack:28040 pid:17888 tgid:17888 ppid:1 task_flags:0x400040 flags:0x00004000 [ 644.310062][ T31] Call Trace: [ 644.313361][ T31] [ 644.316573][ T31] __schedule+0x1798/0x4cc0 [ 644.321114][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.326077][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.330944][ T31] ? __pfx___schedule+0x10/0x10 [ 644.335914][ T31] ? schedule+0x91/0x360 [ 644.340154][ T31] schedule+0x165/0x360 [ 644.344365][ T31] schedule_preempt_disabled+0x13/0x30 [ 644.349838][ T31] __mutex_lock+0x7e6/0x1350 [ 644.354476][ T31] ? __mutex_lock+0x5bb/0x1350 [ 644.359254][ T31] ? rfkill_register+0x37/0x8e0 [ 644.364148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 644.369180][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 644.374531][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 644.379921][ T31] ? device_initialize+0x24b/0x440 [ 644.385058][ T31] rfkill_register+0x37/0x8e0 [ 644.389726][ T31] hci_register_dev+0x3f5/0x890 [ 644.394682][ T31] vhci_create_device+0x39c/0x650 [ 644.399740][ T31] vhci_write+0x3ce/0x4a0 [ 644.404152][ T31] vfs_write+0x5c9/0xb30 [ 644.408406][ T31] ? __pfx_vhci_write+0x10/0x10 [ 644.413239][ T31] ? __pfx_vfs_write+0x10/0x10 [ 644.418035][ T31] ? count_memcg_event_mm+0x21/0x260 [ 644.423319][ T31] ksys_write+0x145/0x250 [ 644.427668][ T31] ? __pfx_ksys_write+0x10/0x10 [ 644.432643][ T31] ? do_syscall_64+0xbe/0x3b0 [ 644.437443][ T31] do_syscall_64+0xfa/0x3b0 [ 644.441933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.447168][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.453219][ T31] ? clear_bhb_loop+0x60/0xb0 [ 644.457928][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.463805][ T31] RIP: 0033:0x7fbdc778d940 [ 644.468928][ T31] RSP: 002b:00007ffc3f6deba8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 644.477361][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbdc778d940 [ 644.485464][ T31] RDX: 0000000000000002 RSI: 00007ffc3f6debba RDI: 00000000000000ca [ 644.493442][ T31] RBP: 00007fbdc79e67b8 R08: 0000000000000000 R09: 00007fbdc851d6c0 [ 644.501760][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 644.509770][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 644.517773][ T31] [ 644.520816][ T31] INFO: task syz.6.3160:17928 blocked for more than 144 seconds. [ 644.528677][ T31] Not tainted syzkaller #0 [ 644.533597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.542286][ T31] task:syz.6.3160 state:D stack:24712 pid:17928 tgid:17927 ppid:13991 task_flags:0x400140 flags:0x00004006 [ 644.554500][ T31] Call Trace: [ 644.557790][ T31] [ 644.560710][ T31] __schedule+0x1798/0x4cc0 [ 644.565308][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.570154][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.575051][ T31] ? __pfx___schedule+0x10/0x10 [ 644.579912][ T31] ? schedule+0x91/0x360 [ 644.584216][ T31] schedule+0x165/0x360 [ 644.588392][ T31] schedule_preempt_disabled+0x13/0x30 [ 644.593842][ T31] __mutex_lock+0x7e6/0x1350 [ 644.598466][ T31] ? __mutex_lock+0x5bb/0x1350 [ 644.603241][ T31] ? rfkill_register+0x37/0x8e0 [ 644.608182][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 644.613222][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 644.618230][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 644.624615][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 644.629975][ T31] ? __queue_delayed_work+0x212/0x2d0 [ 644.635549][ T31] rfkill_register+0x37/0x8e0 [ 644.640230][ T31] wiphy_register+0x2231/0x2aa0 [ 644.645116][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 644.650307][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 644.656399][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 644.661854][ T31] ? ieee80211_register_hw+0x1421/0x40a0 [ 644.667508][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 644.673303][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 644.679664][ T31] ? __hrtimer_setup+0x187/0x210 [ 644.684631][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 644.690430][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 644.696178][ T31] ? __pfx__printk+0x10/0x10 [ 644.700790][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 644.706874][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 644.712402][ T31] ? __sock_sendmsg+0x219/0x270 [ 644.720261][ T31] ? ____sys_sendmsg+0x505/0x830 [ 644.725305][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 644.730459][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 644.736429][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 644.742036][ T31] ? __nla_parse+0x40/0x60 [ 644.746505][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 644.752833][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 644.758443][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 644.764538][ T31] ? bpf_lsm_capable+0x9/0x20 [ 644.769204][ T31] ? security_capable+0x7e/0x2e0 [ 644.774194][ T31] genl_rcv_msg+0x60e/0x790 [ 644.778759][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.783776][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 644.789347][ T31] ? __asan_memcpy+0x40/0x70 [ 644.793922][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 644.799862][ T31] netlink_rcv_skb+0x208/0x470 [ 644.804734][ T31] ? __lock_acquire+0xab9/0xd20 [ 644.809575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.814631][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.819918][ T31] ? down_read+0x1ad/0x2e0 [ 644.824710][ T31] genl_rcv+0x28/0x40 [ 644.828702][ T31] netlink_unicast+0x82f/0x9e0 [ 644.833456][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 644.838869][ T31] ? netlink_sendmsg+0x642/0xb30 [ 644.843796][ T31] ? skb_put+0x11b/0x210 [ 644.848092][ T31] netlink_sendmsg+0x805/0xb30 [ 644.852959][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.858276][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 644.863394][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.869148][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.874697][ T31] __sock_sendmsg+0x219/0x270 [ 644.879758][ T31] ____sys_sendmsg+0x505/0x830 [ 644.884597][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.889931][ T31] ? import_iovec+0x74/0xa0 [ 644.894480][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 644.899168][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.904457][ T31] ? __fget_files+0x2a/0x420 [ 644.909058][ T31] ? __fget_files+0x3a0/0x420 [ 644.913814][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 644.918778][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.924269][ T31] ? rcu_is_watching+0x15/0xb0 [ 644.929039][ T31] ? do_syscall_64+0xbe/0x3b0 [ 644.933698][ T31] do_syscall_64+0xfa/0x3b0 [ 644.938229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.943424][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.949569][ T31] ? clear_bhb_loop+0x60/0xb0 [ 644.954379][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.960274][ T31] RIP: 0033:0x7fca7ad8eec9 [ 644.964863][ T31] RSP: 002b:00007fca7bc7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.973282][ T31] RAX: ffffffffffffffda RBX: 00007fca7afe5fa0 RCX: 00007fca7ad8eec9 [ 644.981337][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 644.989463][ T31] RBP: 00007fca7ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.997604][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.005887][ T31] R13: 00007fca7afe6038 R14: 00007fca7afe5fa0 R15: 00007ffdfb583dc8 [ 645.013896][ T31] [ 645.017023][ T31] INFO: task syz.6.3160:17931 blocked for more than 144 seconds. [ 645.025326][ T31] Not tainted syzkaller #0 [ 645.030269][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.038968][ T31] task:syz.6.3160 state:D stack:27944 pid:17931 tgid:17927 ppid:13991 task_flags:0x400040 flags:0x00004004 [ 645.051142][ T31] Call Trace: [ 645.054468][ T31] [ 645.057391][ T31] __schedule+0x1798/0x4cc0 [ 645.061890][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.066788][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.071626][ T31] ? __pfx___schedule+0x10/0x10 [ 645.076542][ T31] ? schedule+0x91/0x360 [ 645.080772][ T31] schedule+0x165/0x360 [ 645.085031][ T31] schedule_preempt_disabled+0x13/0x30 [ 645.090473][ T31] __mutex_lock+0x7e6/0x1350 [ 645.095102][ T31] ? __mutex_lock+0x5bb/0x1350 [ 645.099877][ T31] ? genl_rcv_msg+0x10d/0x790 [ 645.104573][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 645.109591][ T31] ? stack_trace_save+0x9c/0xe0 [ 645.114735][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 645.120109][ T31] ? radix_tree_lookup+0x240/0x290 [ 645.125256][ T31] genl_rcv_msg+0x10d/0x790 [ 645.129748][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.134712][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.139750][ T31] netlink_rcv_skb+0x208/0x470 [ 645.144539][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.149407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.154507][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.159803][ T31] ? down_read+0x1ad/0x2e0 [ 645.164270][ T31] genl_rcv+0x28/0x40 [ 645.168258][ T31] netlink_unicast+0x82f/0x9e0 [ 645.173010][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 645.178335][ T31] ? netlink_sendmsg+0x642/0xb30 [ 645.183252][ T31] ? skb_put+0x11b/0x210 [ 645.187516][ T31] netlink_sendmsg+0x805/0xb30 [ 645.192277][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.197867][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.202840][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.208272][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.213577][ T31] __sock_sendmsg+0x219/0x270 [ 645.218407][ T31] ____sys_sendmsg+0x505/0x830 [ 645.223197][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.228667][ T31] ? import_iovec+0x74/0xa0 [ 645.233161][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 645.237872][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.243164][ T31] ? __fget_files+0x2a/0x420 [ 645.247782][ T31] ? __fget_files+0x3a0/0x420 [ 645.252453][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 645.257443][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.262892][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 645.268192][ T31] ? do_syscall_64+0xbe/0x3b0 [ 645.272858][ T31] do_syscall_64+0xfa/0x3b0 [ 645.277912][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.283218][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.289366][ T31] ? clear_bhb_loop+0x60/0xb0 [ 645.294135][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.300038][ T31] RIP: 0033:0x7fca7ad8eec9 [ 645.304489][ T31] RSP: 002b:00007fca7bc5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.312895][ T31] RAX: ffffffffffffffda RBX: 00007fca7afe6090 RCX: 00007fca7ad8eec9 [ 645.320937][ T31] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 000000000000000a [ 645.328971][ T31] RBP: 00007fca7ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.337156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.345233][ T31] R13: 00007fca7afe6128 R14: 00007fca7afe6090 R15: 00007ffdfb583dc8 [ 645.353228][ T31] [ 645.356409][ T31] INFO: task syz.1.3162:17935 blocked for more than 145 seconds. [ 645.364440][ T31] Not tainted syzkaller #0 [ 645.369479][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.378248][ T31] task:syz.1.3162 state:D stack:24744 pid:17935 tgid:17933 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 645.390235][ T31] Call Trace: [ 645.393506][ T31] [ 645.396510][ T31] __schedule+0x1798/0x4cc0 [ 645.401038][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.405976][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.411059][ T31] ? __pfx___schedule+0x10/0x10 [ 645.415997][ T31] ? schedule+0x91/0x360 [ 645.420236][ T31] schedule+0x165/0x360 [ 645.424453][ T31] schedule_preempt_disabled+0x13/0x30 [ 645.429938][ T31] __mutex_lock+0x7e6/0x1350 [ 645.435152][ T31] ? __mutex_lock+0x5bb/0x1350 [ 645.439945][ T31] ? genl_rcv_msg+0x10d/0x790 [ 645.444831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 645.449855][ T31] ? stack_trace_save+0x9c/0xe0 [ 645.454778][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 645.460156][ T31] ? radix_tree_lookup+0x240/0x290 [ 645.465304][ T31] genl_rcv_msg+0x10d/0x790 [ 645.469794][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.474724][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.479790][ T31] netlink_rcv_skb+0x208/0x470 [ 645.484640][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.489530][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.494632][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.499941][ T31] ? down_read+0x1ad/0x2e0 [ 645.504490][ T31] genl_rcv+0x28/0x40 [ 645.508503][ T31] netlink_unicast+0x82f/0x9e0 [ 645.513267][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 645.518592][ T31] ? netlink_sendmsg+0x642/0xb30 [ 645.523521][ T31] ? skb_put+0x11b/0x210 [ 645.527885][ T31] netlink_sendmsg+0x805/0xb30 [ 645.532674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.538070][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.543023][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.548321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.553590][ T31] __sock_sendmsg+0x219/0x270 [ 645.558459][ T31] __sys_sendto+0x3bd/0x520 [ 645.562950][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 645.568035][ T31] ? count_memcg_event_mm+0x21/0x260 [ 645.573315][ T31] ? exc_page_fault+0x76/0xf0 [ 645.578037][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 645.583322][ T31] __x64_sys_sendto+0xde/0x100 [ 645.588111][ T31] do_syscall_64+0xfa/0x3b0 [ 645.592627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.597868][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.604007][ T31] ? clear_bhb_loop+0x60/0xb0 [ 645.608799][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.614776][ T31] RIP: 0033:0x7fa86df90d5c [ 645.619203][ T31] RSP: 002b:00007fa86ee2fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 645.627639][ T31] RAX: ffffffffffffffda RBX: 00007fa86ee2ffc0 RCX: 00007fa86df90d5c [ 645.635671][ T31] RDX: 0000000000000020 RSI: 00007fa86ee30010 RDI: 000000000000000b [ 645.643650][ T31] RBP: 0000000000000000 R08: 00007fa86ee2ff14 R09: 000000000000000c [ 645.651703][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 645.659796][ T31] R13: 00007fa86ee2ff68 R14: 00007fa86ee30010 R15: 0000000000000000 [ 645.668081][ T31] [ 645.671118][ T31] INFO: task syz.1.3162:17937 blocked for more than 145 seconds. [ 645.679644][ T31] Not tainted syzkaller #0 [ 645.684614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.693293][ T31] task:syz.1.3162 state:D stack:24776 pid:17937 tgid:17933 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 645.705311][ T31] Call Trace: [ 645.708599][ T31] [ 645.711518][ T31] __schedule+0x1798/0x4cc0 [ 645.716062][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.720909][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.725971][ T31] ? __pfx___schedule+0x10/0x10 [ 645.730820][ T31] ? schedule+0x91/0x360 [ 645.735097][ T31] schedule+0x165/0x360 [ 645.739269][ T31] schedule_preempt_disabled+0x13/0x30 [ 645.744760][ T31] __mutex_lock+0x7e6/0x1350 [ 645.749342][ T31] ? __mutex_lock+0x5bb/0x1350 [ 645.754160][ T31] ? genl_rcv_msg+0x10d/0x790 [ 645.758865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 645.763895][ T31] ? stack_trace_save+0x9c/0xe0 [ 645.768879][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 645.774515][ T31] ? radix_tree_lookup+0x240/0x290 [ 645.779656][ T31] genl_rcv_msg+0x10d/0x790 [ 645.784264][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.789117][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.794194][ T31] netlink_rcv_skb+0x208/0x470 [ 645.798991][ T31] ? __lock_acquire+0xab9/0xd20 [ 645.803842][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.808948][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.814276][ T31] ? down_read+0x1ad/0x2e0 [ 645.818680][ T31] genl_rcv+0x28/0x40 [ 645.822644][ T31] netlink_unicast+0x82f/0x9e0 [ 645.827510][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 645.832799][ T31] ? netlink_sendmsg+0x642/0xb30 [ 645.837880][ T31] ? skb_put+0x11b/0x210 [ 645.842153][ T31] netlink_sendmsg+0x805/0xb30 [ 645.846970][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.852243][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.857215][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.862488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.867809][ T31] __sock_sendmsg+0x219/0x270 [ 645.872476][ T31] __sys_sendto+0x3bd/0x520 [ 645.876990][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 645.882016][ T31] ? fd_install+0x97/0x540 [ 645.886623][ T31] ? fd_install+0x30d/0x540 [ 645.891134][ T31] __x64_sys_sendto+0xde/0x100 [ 645.895946][ T31] do_syscall_64+0xfa/0x3b0 [ 645.900440][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.905686][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.911738][ T31] ? clear_bhb_loop+0x60/0xb0 [ 645.916472][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.922375][ T31] RIP: 0033:0x7fa86df90d5c [ 645.926841][ T31] RSP: 002b:00007fa86ee0eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 645.935411][ T31] RAX: ffffffffffffffda RBX: 00007fa86ee0efc0 RCX: 00007fa86df90d5c [ 645.943368][ T31] RDX: 0000000000000020 RSI: 00007fa86ee0f010 RDI: 0000000000000011 [ 645.951450][ T31] RBP: 0000000000000000 R08: 00007fa86ee0ef14 R09: 000000000000000c [ 645.959446][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011 [ 645.967474][ T31] R13: 00007fa86ee0ef68 R14: 00007fa86ee0f010 R15: 0000000000000000 [ 645.975489][ T31] [ 645.978509][ T31] INFO: task syz.0.3164:17943 blocked for more than 145 seconds. [ 645.986267][ T31] Not tainted syzkaller #0 [ 645.991182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.000120][ T31] task:syz.0.3164 state:D stack:24328 pid:17943 tgid:17942 ppid:16590 task_flags:0x400140 flags:0x00004004 [ 646.012143][ T31] Call Trace: [ 646.015451][ T31] [ 646.018379][ T31] __schedule+0x1798/0x4cc0 [ 646.022882][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.027808][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.032690][ T31] ? __pfx___schedule+0x10/0x10 [ 646.037597][ T31] ? schedule+0x91/0x360 [ 646.041836][ T31] schedule+0x165/0x360 [ 646.046067][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.051546][ T31] __mutex_lock+0x7e6/0x1350 [ 646.056176][ T31] ? __mutex_lock+0x5bb/0x1350 [ 646.060935][ T31] ? rfkill_register+0x37/0x8e0 [ 646.066292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.071315][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 646.076803][ T31] ? device_initialize+0x24b/0x440 [ 646.081968][ T31] rfkill_register+0x37/0x8e0 [ 646.086824][ T31] nfc_register_device+0x14a/0x320 [ 646.091977][ T31] nci_register_device+0x87f/0x9d0 [ 646.097154][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 646.102804][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 646.108356][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 646.113751][ T31] virtual_ncidev_open+0x129/0x1a0 [ 646.118919][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 646.124600][ T31] misc_open+0x2b9/0x330 [ 646.128837][ T31] chrdev_open+0x4c9/0x5e0 [ 646.133243][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.138238][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 646.144601][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.149532][ T31] do_dentry_open+0x950/0x13f0 [ 646.154353][ T31] vfs_open+0x3b/0x340 [ 646.158511][ T31] ? path_openat+0x2ecd/0x3830 [ 646.163280][ T31] path_openat+0x2ee5/0x3830 [ 646.167910][ T31] ? arch_stack_walk+0xfc/0x150 [ 646.172756][ T31] ? stack_depot_save_flags+0x40/0x860 [ 646.178243][ T31] ? __pfx_path_openat+0x10/0x10 [ 646.183163][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.189296][ T31] do_filp_open+0x1fa/0x410 [ 646.193787][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.198661][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 646.203680][ T31] ? _raw_spin_unlock+0x28/0x50 [ 646.209011][ T31] ? alloc_fd+0x64c/0x6c0 [ 646.213352][ T31] do_sys_openat2+0x121/0x1c0 [ 646.218314][ T31] ? __se_sys_futex+0x36f/0x400 [ 646.223262][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.228509][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 646.233724][ T31] ? rcu_is_watching+0x15/0xb0 [ 646.238531][ T31] __x64_sys_openat+0x138/0x170 [ 646.243391][ T31] do_syscall_64+0xfa/0x3b0 [ 646.247970][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.253184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.259263][ T31] ? clear_bhb_loop+0x60/0xb0 [ 646.263927][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.269850][ T31] RIP: 0033:0x7f0181f8eec9 [ 646.274389][ T31] RSP: 002b:00007f0182e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.282808][ T31] RAX: ffffffffffffffda RBX: 00007f01821e5fa0 RCX: 00007f0181f8eec9 [ 646.290838][ T31] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 646.298853][ T31] RBP: 00007f0182011f91 R08: 0000000000000000 R09: 0000000000000000 [ 646.306908][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.315160][ T31] R13: 00007f01821e6038 R14: 00007f01821e5fa0 R15: 00007ffdc403d778 [ 646.323152][ T31] [ 646.326361][ T31] INFO: task syz-executor:17951 blocked for more than 146 seconds. [ 646.334506][ T31] Not tainted syzkaller #0 [ 646.339439][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.348160][ T31] task:syz-executor state:D stack:27240 pid:17951 tgid:17951 ppid:1 task_flags:0x400040 flags:0x00004000 [ 646.360201][ T31] Call Trace: [ 646.363485][ T31] [ 646.366449][ T31] __schedule+0x1798/0x4cc0 [ 646.370949][ T31] ? kasan_save_free_info+0x46/0x50 [ 646.376210][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.381070][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.385949][ T31] ? __pfx___schedule+0x10/0x10 [ 646.390795][ T31] ? schedule+0x91/0x360 [ 646.395183][ T31] schedule+0x165/0x360 [ 646.399347][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.404889][ T31] __mutex_lock+0x7e6/0x1350 [ 646.409484][ T31] ? __mutex_lock+0x5bb/0x1350 [ 646.414295][ T31] ? misc_open+0x51/0x330 [ 646.418630][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.423645][ T31] misc_open+0x51/0x330 [ 646.427850][ T31] chrdev_open+0x4c9/0x5e0 [ 646.432259][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.437372][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 646.443706][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.448692][ T31] do_dentry_open+0x950/0x13f0 [ 646.453466][ T31] vfs_open+0x3b/0x340 [ 646.457554][ T31] ? path_openat+0x2ecd/0x3830 [ 646.462309][ T31] path_openat+0x2ee5/0x3830 [ 646.466944][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 646.472399][ T31] ? count_memcg_event_mm+0x21/0x260 [ 646.478238][ T31] ? __pfx_path_openat+0x10/0x10 [ 646.483191][ T31] ? __pfx___up_read+0x10/0x10 [ 646.488683][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 646.494000][ T31] do_filp_open+0x1fa/0x410 [ 646.498523][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.503364][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 646.508941][ T31] ? _raw_spin_unlock+0x28/0x50 [ 646.513826][ T31] ? alloc_fd+0x64c/0x6c0 [ 646.518396][ T31] do_sys_openat2+0x121/0x1c0 [ 646.523130][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.528471][ T31] ? fd_install+0x97/0x540 [ 646.532915][ T31] ? fd_install+0x30d/0x540 [ 646.537458][ T31] __x64_sys_openat+0x138/0x170 [ 646.542315][ T31] do_syscall_64+0xfa/0x3b0 [ 646.546865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.552097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.558428][ T31] ? clear_bhb_loop+0x60/0xb0 [ 646.563211][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.569227][ T31] RIP: 0033:0x7f56d878d691 [ 646.573641][ T31] RSP: 002b:00007ffd3ee21b20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 646.582077][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f56d878d691 [ 646.590091][ T31] RDX: 0000000000000002 RSI: 00007f56d881299a RDI: 00000000ffffff9c [ 646.598114][ T31] RBP: 00007f56d881299a R08: 0000000000000000 R09: 00007f56d951d6c0 [ 646.606125][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 646.615049][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 646.623054][ T31] [ 646.626246][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 646.635372][ T31] INFO: task syz-executor:17953 blocked for more than 146 seconds. [ 646.643277][ T31] Not tainted syzkaller #0 [ 646.648464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.657336][ T31] task:syz-executor state:D stack:27240 pid:17953 tgid:17953 ppid:1 task_flags:0x400040 flags:0x00004000 [ 646.669464][ T31] Call Trace: [ 646.672745][ T31] [ 646.675722][ T31] __schedule+0x1798/0x4cc0 [ 646.680262][ T31] ? kasan_save_free_info+0x46/0x50 [ 646.685513][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.690358][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.695353][ T31] ? __pfx___schedule+0x10/0x10 [ 646.700212][ T31] ? schedule+0x91/0x360 [ 646.704499][ T31] schedule+0x165/0x360 [ 646.708664][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.714299][ T31] __mutex_lock+0x7e6/0x1350 [ 646.718912][ T31] ? __mutex_lock+0x5bb/0x1350 [ 646.723689][ T31] ? misc_open+0x51/0x330 [ 646.728528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.733607][ T31] misc_open+0x51/0x330 [ 646.737892][ T31] chrdev_open+0x4c9/0x5e0 [ 646.742305][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.747336][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 646.753705][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 646.758679][ T31] do_dentry_open+0x950/0x13f0 [ 646.763457][ T31] vfs_open+0x3b/0x340 [ 646.767727][ T31] ? path_openat+0x2ecd/0x3830 [ 646.772485][ T31] path_openat+0x2ee5/0x3830 [ 646.777106][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 646.782566][ T31] ? count_memcg_event_mm+0x21/0x260 [ 646.787923][ T31] ? __pfx_path_openat+0x10/0x10 [ 646.792853][ T31] ? __pfx___up_read+0x10/0x10 [ 646.797761][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 646.803099][ T31] do_filp_open+0x1fa/0x410 [ 646.807696][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.812565][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 646.817639][ T31] ? _raw_spin_unlock+0x28/0x50 [ 646.822579][ T31] ? alloc_fd+0x64c/0x6c0 [ 646.826958][ T31] do_sys_openat2+0x121/0x1c0 [ 646.831625][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.836847][ T31] ? fd_install+0x97/0x540 [ 646.841251][ T31] ? fd_install+0x30d/0x540 [ 646.845795][ T31] __x64_sys_openat+0x138/0x170 [ 646.850652][ T31] do_syscall_64+0xfa/0x3b0 [ 646.855229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.860458][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.866645][ T31] ? clear_bhb_loop+0x60/0xb0 [ 646.871357][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.877522][ T31] RIP: 0033:0x7fa6f538d691 [ 646.882031][ T31] RSP: 002b:00007ffe84a09510 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 646.890499][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa6f538d691 [ 646.898509][ T31] RDX: 0000000000000002 RSI: 00007fa6f541299a RDI: 00000000ffffff9c [ 646.906511][ T31] RBP: 00007fa6f541299a R08: 0000000000000000 R09: 00007fa6f611d6c0 [ 646.914576][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 646.922556][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 646.930589][ T31] [ 646.933595][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 646.942627][ T31] INFO: task syz-executor:17956 blocked for more than 146 seconds. [ 646.950629][ T31] Not tainted syzkaller #0 [ 646.955590][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.964345][ T31] task:syz-executor state:D stack:27240 pid:17956 tgid:17956 ppid:1 task_flags:0x400040 flags:0x00004000 [ 646.976426][ T31] Call Trace: [ 646.979699][ T31] [ 646.982616][ T31] __schedule+0x1798/0x4cc0 [ 646.987363][ T31] ? kasan_save_free_info+0x46/0x50 [ 646.992672][ T31] ? __lock_acquire+0xab9/0xd20 [ 646.997594][ T31] ? __lock_acquire+0xab9/0xd20 [ 647.002542][ T31] ? __pfx___schedule+0x10/0x10 [ 647.007443][ T31] ? schedule+0x91/0x360 [ 647.011674][ T31] schedule+0x165/0x360 [ 647.015999][ T31] schedule_preempt_disabled+0x13/0x30 [ 647.021470][ T31] __mutex_lock+0x7e6/0x1350 [ 647.026089][ T31] ? __mutex_lock+0x5bb/0x1350 [ 647.030842][ T31] ? misc_open+0x51/0x330 [ 647.035199][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 647.040216][ T31] misc_open+0x51/0x330 [ 647.044445][ T31] chrdev_open+0x4c9/0x5e0 [ 647.048877][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 647.053802][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 647.060190][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 647.065203][ T31] do_dentry_open+0x950/0x13f0 [ 647.069987][ T31] vfs_open+0x3b/0x340 [ 647.074120][ T31] ? path_openat+0x2ecd/0x3830 [ 647.078894][ T31] path_openat+0x2ee5/0x3830 [ 647.083574][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 647.089107][ T31] ? count_memcg_event_mm+0x21/0x260 [ 647.094589][ T31] ? __pfx_path_openat+0x10/0x10 [ 647.099519][ T31] ? __pfx___up_read+0x10/0x10 [ 647.104333][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 647.109614][ T31] do_filp_open+0x1fa/0x410 [ 647.114160][ T31] ? __lock_acquire+0xab9/0xd20 [ 647.119025][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 647.124044][ T31] ? _raw_spin_unlock+0x28/0x50 [ 647.129010][ T31] ? alloc_fd+0x64c/0x6c0 [ 647.133369][ T31] do_sys_openat2+0x121/0x1c0 [ 647.138076][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.143258][ T31] ? fd_install+0x97/0x540 [ 647.147701][ T31] ? fd_install+0x30d/0x540 [ 647.152194][ T31] __x64_sys_openat+0x138/0x170 [ 647.157065][ T31] do_syscall_64+0xfa/0x3b0 [ 647.161552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.166840][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.172902][ T31] ? clear_bhb_loop+0x60/0xb0 [ 647.177614][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.183505][ T31] RIP: 0033:0x7f58ca98d691 [ 647.187960][ T31] RSP: 002b:00007ffcb4144580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 647.196447][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f58ca98d691 [ 647.205052][ T31] RDX: 0000000000000002 RSI: 00007f58caa1299a RDI: 00000000ffffff9c [ 647.213463][ T31] RBP: 00007f58caa1299a R08: 0000000000000000 R09: 00007f58cb71d6c0 [ 647.221571][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 647.229624][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 647.237634][ T31] [ 647.240642][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 647.249792][ T31] INFO: task syz-executor:17957 blocked for more than 147 seconds. [ 647.257713][ T31] Not tainted syzkaller #0 [ 647.262634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.271669][ T31] task:syz-executor state:D stack:27672 pid:17957 tgid:17957 ppid:1 task_flags:0x400040 flags:0x00004000 [ 647.283692][ T31] Call Trace: [ 647.287077][ T31] [ 647.290029][ T31] __schedule+0x1798/0x4cc0 [ 647.294595][ T31] ? kasan_save_free_info+0x46/0x50 [ 647.299801][ T31] ? __lock_acquire+0xab9/0xd20 [ 647.304710][ T31] ? __lock_acquire+0xab9/0xd20 [ 647.309575][ T31] ? __pfx___schedule+0x10/0x10 [ 647.314702][ T31] ? schedule+0x91/0x360 [ 647.318974][ T31] schedule+0x165/0x360 [ 647.323127][ T31] schedule_preempt_disabled+0x13/0x30 [ 647.328706][ T31] __mutex_lock+0x7e6/0x1350 [ 647.333329][ T31] ? __mutex_lock+0x5bb/0x1350 [ 647.338187][ T31] ? misc_open+0x51/0x330 [ 647.342511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 647.347603][ T31] misc_open+0x51/0x330 [ 647.351759][ T31] chrdev_open+0x4c9/0x5e0 [ 647.357182][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 647.362132][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 647.368516][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 647.373474][ T31] do_dentry_open+0x950/0x13f0 [ 647.378310][ T31] vfs_open+0x3b/0x340 [ 647.382395][ T31] ? path_openat+0x2ecd/0x3830 [ 647.387209][ T31] path_openat+0x2ee5/0x3830 [ 647.391801][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 647.397327][ T31] ? count_memcg_event_mm+0x21/0x260 [ 647.402614][ T31] ? __pfx_path_openat+0x10/0x10 [ 647.407688][ T31] ? __pfx___up_read+0x10/0x10 [ 647.412440][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 647.417797][ T31] do_filp_open+0x1fa/0x410 [ 647.422311][ T31] ? __lock_acquire+0xab9/0xd20 [ 647.427396][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 647.432425][ T31] ? _raw_spin_unlock+0x28/0x50 [ 647.437295][ T31] ? alloc_fd+0x64c/0x6c0 [ 647.441620][ T31] do_sys_openat2+0x121/0x1c0 [ 647.446332][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.451518][ T31] ? fd_install+0x97/0x540 [ 647.455985][ T31] ? fd_install+0x30d/0x540 [ 647.460478][ T31] __x64_sys_openat+0x138/0x170 [ 647.465459][ T31] do_syscall_64+0xfa/0x3b0 [ 647.469945][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.475165][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.481241][ T31] ? clear_bhb_loop+0x60/0xb0 [ 647.485946][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.491821][ T31] RIP: 0033:0x7f339e38d691 [ 647.496350][ T31] RSP: 002b:00007ffdbede2550 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 647.504814][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f339e38d691 [ 647.512784][ T31] RDX: 0000000000000002 RSI: 00007f339e41299a RDI: 00000000ffffff9c [ 647.521323][ T31] RBP: 00007f339e41299a R08: 0000000000000000 R09: 00007f339f11d6c0 [ 647.529362][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 647.537495][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 647.546247][ T31] [ 647.549274][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 647.558408][ T31] [ 647.558408][ T31] Showing all locks held in the system: [ 647.566626][ T31] 1 lock held by khungtaskd/31: [ 647.571465][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 647.581367][ T31] 2 locks held by getty/5627: [ 647.586095][ T31] #0: ffff8880337ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 647.595958][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 647.606110][ T31] 4 locks held by kworker/0:6/5946: [ 647.611294][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 647.622282][ T31] #1: ffffc90004d77bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 647.634808][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 647.645138][ T31] #3: ffff88802fd9d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 647.654897][ T31] 3 locks held by kworker/0:9/11688: [ 647.660174][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 647.671184][ T31] #1: ffffc9001bddfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 647.684814][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 647.696308][ T31] 2 locks held by syz.4.2980/17268: [ 647.701527][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 647.709807][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 647.720146][ T31] 1 lock held by syz.5.3133/17826: [ 647.725328][ T31] #0: ffff88802fd9d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 647.735126][ T31] 2 locks held by syz-executor/17888: [ 647.740479][ T31] #0: ffff888076212118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 647.750552][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 647.760677][ T31] 3 locks held by syz.6.3160/17928: [ 647.765952][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 647.774222][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 647.783219][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 647.793177][ T31] 2 locks held by syz.6.3160/17931: [ 647.798381][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 647.806609][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 647.815641][ T31] 2 locks held by syz.1.3162/17935: [ 647.820857][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 647.829174][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 647.838203][ T31] 2 locks held by syz.1.3162/17937: [ 647.843383][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 647.851628][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 647.860756][ T31] 3 locks held by syz.0.3164/17943: [ 647.866140][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.874642][ T31] #1: ffff8880522d2100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 647.884326][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 647.894333][ T31] 1 lock held by syz-executor/17951: [ 647.899619][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.908107][ T31] 1 lock held by syz-executor/17953: [ 647.913454][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.921960][ T31] 1 lock held by syz-executor/17956: [ 647.927291][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.935792][ T31] 1 lock held by syz-executor/17957: [ 647.941080][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.949620][ T31] 1 lock held by syz-executor/17959: [ 647.954928][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.963380][ T31] 1 lock held by syz-executor/17961: [ 647.968706][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.977324][ T31] 1 lock held by syz-executor/17965: [ 647.982674][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 647.991176][ T31] 1 lock held by syz-executor/17966: [ 647.996493][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.005026][ T31] 1 lock held by syz-executor/17967: [ 648.010291][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.018767][ T31] 1 lock held by syz-executor/17969: [ 648.024027][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.032535][ T31] 1 lock held by syz-executor/17971: [ 648.037842][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.046308][ T31] 1 lock held by syz-executor/17975: [ 648.051571][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.060045][ T31] 1 lock held by syz-executor/17976: [ 648.065378][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.073856][ T31] 1 lock held by syz-executor/17977: [ 648.079289][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 648.088090][ T31] [ 648.090411][ T31] ============================================= [ 648.090411][ T31] [ 648.098875][ T31] NMI backtrace for cpu 1 [ 648.098891][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 648.098902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.098909][ T31] Call Trace: [ 648.098914][ T31] [ 648.098919][ T31] dump_stack_lvl+0x189/0x250 [ 648.098937][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.098949][ T31] ? __pfx__printk+0x10/0x10 [ 648.098968][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 648.098985][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 648.098999][ T31] ? __pfx__printk+0x10/0x10 [ 648.099014][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 648.099031][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 648.099046][ T31] watchdog+0xf93/0xfe0 [ 648.099062][ T31] ? watchdog+0x1de/0xfe0 [ 648.099077][ T31] kthread+0x70e/0x8a0 [ 648.099092][ T31] ? __pfx_watchdog+0x10/0x10 [ 648.099103][ T31] ? __pfx_kthread+0x10/0x10 [ 648.099116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.099130][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.099145][ T31] ? __pfx_kthread+0x10/0x10 [ 648.099157][ T31] ret_from_fork+0x439/0x7d0 [ 648.099168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 648.099180][ T31] ? __switch_to_asm+0x39/0x70 [ 648.099191][ T31] ? __switch_to_asm+0x33/0x70 [ 648.099203][ T31] ? __pfx_kthread+0x10/0x10 [ 648.099214][ T31] ret_from_fork_asm+0x1a/0x30 [ 648.099234][ T31] [ 648.099239][ T31] Sending NMI from CPU 1 to CPUs 0: [ 648.244265][ C0] NMI backtrace for cpu 0 [ 648.244281][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 648.244300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.244311][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 648.244340][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 648.244355][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 648.244370][ C0] RAX: 9ad3b5c8c0d5d600 RBX: ffffffff81968528 RCX: 9ad3b5c8c0d5d600 [ 648.244383][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 648.244394][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 648.244407][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2f230 [ 648.244419][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 648.244430][ C0] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 648.244444][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.244455][ C0] CR2: 00005641c322d4d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 648.244470][ C0] Call Trace: [ 648.244477][ C0] [ 648.244484][ C0] default_idle+0x13/0x20 [ 648.244501][ C0] default_idle_call+0x74/0xb0 [ 648.244521][ C0] do_idle+0x1e8/0x510 [ 648.244548][ C0] ? __pfx_do_idle+0x10/0x10 [ 648.244580][ C0] cpu_startup_entry+0x44/0x60 [ 648.244603][ C0] rest_init+0x2de/0x300 [ 648.244628][ C0] start_kernel+0x3a9/0x410 [ 648.244649][ C0] x86_64_start_reservations+0x24/0x30 [ 648.244672][ C0] x86_64_start_kernel+0x143/0x1c0 [ 648.244694][ C0] common_startup_64+0x13e/0x147 [ 648.244722][ C0] [ 648.245319][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 648.426305][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 648.435404][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.445447][ T31] Call Trace: [ 648.448716][ T31] [ 648.451636][ T31] dump_stack_lvl+0x99/0x250 [ 648.456222][ T31] ? __asan_memcpy+0x40/0x70 [ 648.460809][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.466087][ T31] ? __pfx__printk+0x10/0x10 [ 648.470689][ T31] vpanic+0x281/0x750 [ 648.474663][ T31] ? __pfx_vpanic+0x10/0x10 [ 648.479160][ T31] ? preempt_schedule+0xae/0xc0 [ 648.484011][ T31] ? preempt_schedule_common+0x83/0xd0 [ 648.489474][ T31] panic+0xb9/0xc0 [ 648.493185][ T31] ? __pfx_panic+0x10/0x10 [ 648.497591][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 648.502960][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 648.509107][ T31] watchdog+0xfd2/0xfe0 [ 648.513292][ T31] ? watchdog+0x1de/0xfe0 [ 648.517618][ T31] kthread+0x70e/0x8a0 [ 648.521685][ T31] ? __pfx_watchdog+0x10/0x10 [ 648.526352][ T31] ? __pfx_kthread+0x10/0x10 [ 648.530930][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.536122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.541313][ T31] ? __pfx_kthread+0x10/0x10 [ 648.545893][ T31] ret_from_fork+0x439/0x7d0 [ 648.550471][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 648.555694][ T31] ? __switch_to_asm+0x39/0x70 [ 648.560458][ T31] ? __switch_to_asm+0x33/0x70 [ 648.565249][ T31] ? __pfx_kthread+0x10/0x10 [ 648.569842][ T31] ret_from_fork_asm+0x1a/0x30 [ 648.574630][ T31] [ 648.577917][ T31] Kernel Offset: disabled [ 648.582273][ T31] Rebooting in 86400 seconds..