last executing test programs: 24.662517979s ago: executing program 3 (id=2296): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYRESHEX=r2, @ANYRES16=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$tipc(r9, &(0x7f0000000580)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r3}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e19b95d02ff4280860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000340), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r12 = accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) bind$unix(r12, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 24.377120734s ago: executing program 3 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x2, 0x0, 0xb}, 0xffffffffffffffa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x2, 0x0, 0xb}, 0xffffffffffffffa4) 24.246668893s ago: executing program 3 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2020600) socket(0x10, 0x803, 0x0) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000006bed00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x52d673fb}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7ff}]}}}]}, 0x50}}, 0x28048810) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) socket(0x10, 0x803, 0x0) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) 23.261578435s ago: executing program 3 (id=2312): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xca, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000da37a4e72a94f4c424ca7c0a4444", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000000f8ffffffb703000008000000b70400000000000085000000030000009502000000000000d3407bf2a70ac93ef4d256ba2ab9e58867e42a73ea45a013734ce74a53cf48c0c08d03e4e3f47b65077e5a4916fb32f130d71f40526560ac77ac2efab4b414794ee7d95b0e12f07db12273fea3990ce280f8e170c712e140e1bd7475f8f10ae26f3fba5e74502e2caf290e130b34712a56577c651368c9e26d80553a1b186586c561fb797e30f104072db314c3fb19102c0100"/218], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) syz_emit_ethernet(0x3a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004586002c0067000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="684035a344618be6ab1850a2"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x2}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f00000010c0)=ANY=[@ANYBLOB="0800080005800200b6e71400020045b00faa00680000030690780a010100e00000014e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfb8) bind$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 22.972217952s ago: executing program 3 (id=2317): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001f40)={r2, 0x93, "dde8009883769f041ec56074de45942d72529c1a3d52af88c54c784767986f2f43e701f1eff67049e8d00b8c1a37488e0c654b7d7886239b701a7ddc5cf05ed371d9c068ff89897524b67f04fadd58327a6d4f10290a4f648463afff389be560e90e724504617bd875cfdecb21b280a7de928dec5657510b369e91f58deea70235cbb1a0bd471b23c5294811d469db44509a44"}, &(0x7f0000002000)=0x9b) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)) bind$tipc(r3, &(0x7f0000002040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b8cb8712030000003dca2e4dbf13026c66eb37cb95deff1881e0923a36f6670000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x1500) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000500), 0x0}, 0x20) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000100000000e571deae81dc488930ef9c80080006000000000008000e00c635000076d245f798c0db1a08451ee4f79e74999457a10b1f9bea469b70b3f611e942315e850642fd05874a2ed0caf9be8be1d4306f0aed577189b21229452fbf7c7e31de104bdca6d012c3494b04e9394e3b7eb6a10cf3b232088629a63937105146ebddeb3bed088b60d5c7b02f0e2878d6972fbe9a6d64c57fd96099efd297d85394c70a94e7bed6"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4010) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r11) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) 22.794621869s ago: executing program 3 (id=2319): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x731f}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb74805e9d6195b13}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0xf4, &(0x7f0000000100)=""/244, 0x41000, 0x40, '\x00', r0, @tracing=0x18, r1, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=[{0x3, 0x1, 0x10, 0x6}, {0x2, 0x1, 0x7, 0x6}, {0x1, 0x2, 0xe, 0x1}, {0x2, 0x2, 0xe, 0xb}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x4, 0xe, 0x7}], 0x10, 0x5001}, 0x94) r3 = socket(0x1e, 0xa, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000440), 0x4) r4 = accept$nfc_llcp(r3, 0x0, &(0x7f0000000480)) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)={0xefc2, 0x6, 0x5, 0x0, 0x0, [{{r1}, 0x9}, {{r1}, 0x3ab7}, {{r4}, 0xff}, {{r3}, 0x4a60}, {{r3}, 0x7}]}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r2, 0x80721000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4a00001}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x1f0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "41d6fe9d3266c27f1d24a01007ac2cbacea9a0b00442be2137899bd080cf5a3ccbc440073b69f91dae2d1fdcc7a345c1e47cff2117148211b64a00fd4cdb288628ecdbe84faf5a3a4eeddbfdfec6ef53b019dd6557a2f78642760c515e255455815087cb6529ca3f1ac79163b4172d72efcdad02cfd54577b8cff486ce09dd9a290a9ee301093025816e7fe4e58acf17aa5fc90fb39487aba947c3b0dd1fdd1c996aaa2c2314ce42ea068d4e0a7b53a8dc981efe068dbfbdacc36c85ad72f4bbe3981af36c22033a049bfe11594308110f94cb037408f2f20bd95e7fc0f512482858a30950c57bc4d945d810"}, @NFTA_OBJ_USERDATA={0xa3, 0x8, "bb4d1e5fc547778cd5c20a3867966368ee831e6dc4d58cc062903daa05f65dc7566533e6b95ac3870ef1fe0ce1305a5d5bea521350db8cccdb8b81829b8f089c427bfa58b4ac26d52b459a4f8039f5ed8a2d5f444d3b8b9c59d5cb2c7a42eadf45b73eb3b55217b3afccf09133a99bfd68519029c746fc7553c990995f7ae755690a8f4e7039a4bb0fbf473656110f97a8c0497596d704440293dd37ef82d6"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "ac0083028beca7e44bfcd6d69f2ee4f9df576a4d4b03f278fec3a4d017715c3eba4a61ec19c2c2354811b6ab02d4a858c33a6de91cfdd71c20e5c87a1eda02dc9cfd21f42c6ebbe1d71c9c0bb42c12a20eaac04b13d7c19c0158980debfe726bb87702939d2cb4d86d50418712ab7abdd0daf327ba5bf9aa5fdc4a4b01aa10b16050e2cdf52323cd6523baef90d204acfc9d588082b204091ad21131aebd435a2ce1d70291ddbb6460db5ebfdc5ff8ba8f0afdd42148da0024b08229415ae2c0c17f4145b7b20c60f2d3e8aa730fcbb5a527f58b75e21076522494f5b664f2ee287bbbf21a68f0aa5b57eb9a3e6d8a7311a3f838b3de"}]}, @NFT_MSG_DELTABLE={0x1ac, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "58d28bd8e98537950d1d10293364c186900a6c374144386423dbd7baceca1797ed4591331894610119b967dbdab93aa63654be618dec1dbd5876a5be5c6dc0fd6a8a2bb859227383c61c0285420fbf9c5f0d029196b77d31d85c0935a64abba3761b12ae0da6beaca011d90daabfadea7bd183a906bdf4940f474b6bdad92852b5025d3bef49e2054abc18668861bb3db6ffd988c52dc0"}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "e49b38beaea794e8c57a226052dc612bf438b5fcdf24819653c43f7d9fec55a8ecef1c44028862e17459b310699736b4cba981529c9a6911ee22030bf044fa13d443f18acaa91095229de8eb1a758dffebaa4ec10379103a32a7798142837e3422ec2d87b303c739e4611f02b5615726ad06853dcc6b2f53d38398ff960fedd734d8f8ec482682a3315227e6111fcb85761a6c969d556d857e7efff0d588c0a334588038305a5eafe04a2b"}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "297d2d3962196d865b88b903ddda1dab9ad179ba0899"}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5d4}, 0x1, 0x0, 0x0, 0x44048081}, 0x8000) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x80000000, 0x7}, {0xc, 0x5, 0x6}, {0x9, 0x4, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000ec0)=""/255, 0x67, 0xff, 0x1, 0x9}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', r0, r1, 0x3, 0x1, 0x5}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0xffffff0a, '\x00', r0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x15, 0x2176, 0x101, 0xe4cf, 0x20000, 0xffffffffffffffff, 0x6, '\x00', r0, r7, 0x3, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x8, 0x0, &(0x7f0000000d00), &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x47, &(0x7f0000000d80)=""/71, 0x41000, 0x2c, '\x00', r8, @cgroup_skb, r9, 0x8, &(0x7f0000001000)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0x6, 0x2, 0x6}, 0x10, r10, r2, 0x9, &(0x7f0000001500)=[r11, r12, 0x1, 0xffffffffffffffff, r13, r3], &(0x7f0000001540)=[{0x3, 0x1, 0xb}, {0x3, 0x1, 0x5, 0x2}, {0x4, 0x1, 0xa, 0xcef8ea6ccd9f72d8}, {0x0, 0x1, 0xe, 0xb}, {0x2, 0x3, 0x1, 0x2}, {0x2, 0x4, 0x10}, {0x2, 0x5, 0xf, 0xb}, {0x1, 0x1, 0xf, 0xa}, {0x5, 0x4, 0x0, 0xa}], 0x10, 0x5}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r14, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x64, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xfffffffa, 0x3}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$TUNSETVNETLE(r17, 0x400454dc, &(0x7f00000018c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001940)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001a40)=0xe8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ac0)='cpuacct.usage_sys\x00', 0x0, 0x0) 17.258937299s ago: executing program 2 (id=2376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) 17.137888262s ago: executing program 2 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 16.868162093s ago: executing program 2 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x10}, 0xe) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e26, 0x6, @loopback, 0xa}]}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x83e00, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={r2}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r2, 0x6}, &(0x7f0000000480)=0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@fwd={0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x5c, 0x0, 0x3}, 0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x4b}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 16.782693095s ago: executing program 0 (id=2384): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000fa"], 0xe) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000002020102000000000000000002000005240002801400018008000100ffffffff08000200ac1414bb0c0002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x8, 0xc4, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010101, {[@noop, @noop, @cipso={0x86, 0x15, 0x1, [{0x5, 0xf, "a7c36a32a1552f5c408b690678"}]}, @rr={0x7, 0x27, 0x3f, [@remote, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @empty, @remote, @loopback, @multicast2]}]}}, {{0x4e23, 0x4e23, 0x41424344, r14, 0x0, 0x0, 0xf, 0x4, 0x6, 0x0, 0xfffe, {[@exp_fastopen={0xfe, 0xb, 0xf989, "7f769eadfe0765"}, @fastopen={0x22, 0x2}, @generic={0x8, 0x6, "d7b6339f"}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x9, "2dec6ebea9ecbf"}, @generic={0x8, 0x3, "a7"}, @exp_fastopen={0xfe, 0x5, 0xf989, 'R'}]}}, {"d4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6eee35a24dc2f9bbdd112446c89c7ee983995e2b4c482"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x594, 0xecf, 0xb98, 0x99b]}) syz_emit_ethernet(0x374, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080049300366006400000e2f9078ac1414bbe000000186060000000394040000863300000001000a867f3c34d21c35ba0012b1d37aa9f0535bc4259ae863ae6fb2d4070200020504b83d02099152a1ca9f0c75940400004434af537f000001fffffabae000000100000956640101000000001000000000000000016401010000000002e000000100000004071b4dffffffffe00000017f000001ffffffffac141435ffffffff0c20880b00d700020001000911075017e65bbd8fa16798efa87268dee4a7195429f61b546c00807a550af2318f9e6f3a5695d8572a55052b77a40b739ce13ad8dcc1e8365cd3bbf1e8546b01ca1e18347006741802ce8be1d2522845bed7f9fc0a7301ab768e345ccbaae141f8554416c08a89103f877340e6bbe96b29f389ec7bd16ab2d9eb7708616f613f0b2de9f8ced87675746e9fdddd28f033ffc51a286c11d71070dcd3279475067879c9184a00d2a283c6d113485cb2f15ba399abce87029bbf32103672f799d7b1040258c04704e91bcd895e671224d9502209616ef07f5500000800be6ed16cfb1bd8653bdb441dfbe0c056af74674ec2b43a6b2e55298ce5e76a6ce07723813037e60ca40750dc8e7d4ab131f578194b1ff2aa13bc4be10bf95b584b7be39da9f70dc30ac1d8566f254a97acf02ae3f554a935dfb48e8428df4bc788faceba233949cdf5f111887148c1331f09a8270bc42f5756c4e725818414ce9c119f04f4c88e92aa4410215eeea46b94d9f1321620492596296b6efc396a29bc2d132e7150fa2bf8d9c4ada9b56d83313671f8d48a43d969480da07424f9d5090086dd0bda97b9d994ab6111a3f5911637b6d2feab3b79726f74ecff7f68a32b76bd689ecbb0c727615098b86052a90e8ac071b2b93c166ed650daf9f04b99ec691dfdb13a32d6e5e760c550dd9681feef803336b79d07284ef1a52fcd782e6a988cd40f1f61d450ac105d4c3e95308d07c070a0b60a8af0f1c5080088be0000000310f734030100000000000006080022eb0000000021fb410102000000000000030001b50b08006558000000034e09ec01a39b0869acf3aeb8ee4d81c4a2d16384d886176431f315dfc331ab00939adc86c30ff04577530a326f164579df7262233a3b2723bc56e672630d5dd5c23d5e5376b9235cd05e60b6d4633e352fa62e65af6cab1fdf6602a40d87daa668963e70fa8fecf872cfe9ff"], 0x0) 16.715002204s ago: executing program 2 (id=2385): r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000070000e50500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x7}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0x68}}, 0x4004040) 16.353835815s ago: executing program 1 (id=2390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbff040000000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x24, 0x0, &(0x7f00000003c0)="051c5e0eb3111ee1a48bd5cd0e200a8866d3c39dee7cc07c781c1215b91b11bbfe855c00", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{0x0, 0xb}], 0x1}}], 0x2, 0x4000) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0040000000000000000000000096cf8c0ec5f100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083d581953f7930d95500000055090100200000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df3"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xff800000, r10, 0x4}, 0x38) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) 16.295327251s ago: executing program 0 (id=2391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 2) 16.259416041s ago: executing program 0 (id=2392): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000005ff"], 0x0, 0x3e, 0x0, 0x1, 0x7ff}, 0x28) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.191199692s ago: executing program 4 (id=2393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 16.16670231s ago: executing program 0 (id=2394): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x18}}, 0x18}}, 0x24080) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 16.14731128s ago: executing program 4 (id=2395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40000001300010400000000000000007f0000010000000000000000fe02000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000800080000000000"], 0xc4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x4000, r6, 0xbe, '\x00', 0x0, r7, 0x5, 0x2, 0x4, 0xb}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f0000000480), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) unshare(0x22020600) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r11, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r10, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf3e6f7b9e18d729eb65d6e61bc29380e282347311220f54c7b52c3760a194a7a74f9aa418ce", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r10, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r12}, 0x4) 16.06728491s ago: executing program 0 (id=2396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket(0x200000000000011, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200b20b4482dcef22ad00050060ffffffd532ffff8adbe9b525128f7654a5"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x138, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'ip_vti0\x00', 'gretap0\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x3, 0x8, 0x1, 0x4, 0x3], 0x4, 0x4}}}, @common=@icmp={{0x28}, {0x1d, 'u=', 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xfffd, 0x7, [0xb, 0x31, 0x25, 0x28, 0x18, 0x11, 0x9, 0x1f, 0x1, 0xe, 0x1a, 0xe, 0x24, 0x33, 0xa, 0x1f], 0x1, 0x0, 0x45}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @multicast2, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'ipvlan1\x00', {0xff}, {}, 0x16, 0x1, 0x40}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x819, 0x8, 0x1, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x44, 0x7, 0xea, 0x2, 0x6, 0x7, 0x7f, 0x40, 0x18}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000004253ac5d7d9715df7000002000000040000000000000100"/37], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r6}, 0xc) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r8, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000040)={r10, 0xb}, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) 16.066274876s ago: executing program 4 (id=2397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d71cdb7a9820638bc395f036ce16e1108", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/112, 0x70}], 0x1}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000b4d4f985000000800000000000040000800800028009000000eaeff2f6a67c5e662b0387016ef228ce0baaa109efe81667b6c01d2d7f10c0ce5b93ee086538139b108ebc2f090000001881483c5033eff4112286ab4cbbd899252f6804a94f93798a4d241c1ac087f89721f0bbabc77063176e47576c82cce8a52488e007012091"], 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800a358bb8ac0b505000000de7c243a97755b38000000dc94b9ca9d53754ffb343b36bfbdab41d78faa88f0ecac3d2c37e9fd067279957ff12790fde645efc819f9e3ec"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x44000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400004e6e03fb0300000000000000000a00000000000000049f9e000800010001000000467b01d8c552becde8a45667f91ac92e6f69ee8d94fc36fc674dea728adc2d578ceb48379ff4b66a9b042c14a678590be1c6666311f64208124e151c139840f9432c8a581fd301c8c9ff2a06882c952a834140081e999af99c"], 0x24}}, 0x0) 16.057777894s ago: executing program 0 (id=2398): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="13000000020203", 0x7}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xb95, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8820) 16.00677918s ago: executing program 4 (id=2399): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000050000000000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) unshare(0x2c060000) unshare(0x2c020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @private}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xfc, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8, 0x7800, 0x82e, 0x1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000040)={@remote, r10}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@private1}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 15.862082533s ago: executing program 2 (id=2400): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {0x3}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c000000e52c0fa926bdf000fcdb08000000000000000c00020000002de2115622c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20004000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x1411, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x30}}, 0x40000) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0x11) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000000000000a5976ac6acd41fd800000000000000"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000300100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000a84a6ed9e6315a4000000030300"/24], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x11) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x58}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x44}}, 0x2000c800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.722542804s ago: executing program 2 (id=2401): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x247f, @loopback, 0xe5f8}}}, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/425], 0xec) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x3c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xfff, 0xf5, 0x1, 0x5, 0x2, 0x1, 0x2}}}]}]}]}}]}, 0x8c}}, 0x20040054) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4ac60024", @ANYRES16=r11, @ANYBLOB="00032dbd7000fcdbdf25040000001400020070696d36726567310000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000002020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="08040000", @ANYRES16=r11, @ANYBLOB="10002bbd7000fedbdf25010000000900010073797a30000000000900010073797a32000000000900010073797a30000000000900030073797a32000000000900030073797a32000000000900010073797a30000000000900030073797a3200000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008850}, 0x10) 15.706986092s ago: executing program 4 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 3) 15.408116589s ago: executing program 4 (id=2403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 15.303045316s ago: executing program 1 (id=2404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.301799325s ago: executing program 1 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 15.263130215s ago: executing program 1 (id=2406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 15.182770112s ago: executing program 1 (id=2407): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="110127bd700043da37c317000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @loopback, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x28}, 0x1000c0c0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x800, 0x29de, 0x7fff}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000700)={r4, 0x8}, &(0x7f0000000740)=0x8) (async) shutdown(r0, 0x2000000) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffc, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x8, 0x6c2, 0x64, 0x7, 0x29, 0xc, 0xd0, @remote, @empty}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r5 = socket$kcm(0x10, 0x7, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00b800978fa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000001f11de02d8e076a60d7b97a68f394c3b659ad639de2918ee48fa440ef0ca192d0ef536028e76cf8468d1c877ab97675c816eb363c88e110f0399afc7146c46b24b5f9cf2ef1befbe2eb42a8b81cd51a936e44a0b50fa64233c3930643d87290fa116e8877612112680081a827145e6fab672a8d4035097716a14f8722db39009f7f439ebb49c5acfc961"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060900000000000007000305000090f22725cc", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2, &(0x7f0000000540)=r7}, 0x20) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4040801) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000940)=0xfce4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={r11}, 0x8) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000780)=r11, 0x4) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0xc5, 0xe3, &(0x7f00000002c0)="542b4b2345224772d7729a27b9649b26ab9d72db009d5db68d4cf31d5bd732d4b93c679a6cd573bacb2233a726f8c475ba0ccb3fee0dd597b6b367cd10a46dde211e1dd7f7a4900666b553cdc0b6a306eb35fea60ec8cd7ebae4d5dbb4fc231526a8e38c34e74b1604967638d56c55e043973ba515bbf19c26b7793bceba97ad18750362209a00fa8cc1d63c2d3a54ba8d5c62669275cdc9522648ceae08b31613d00f9d04db086b13acbe192cbab9a09f1e8bceb35858eba13fac9175dea8304be54a2b1a", &(0x7f00000003c0)=""/227, 0x1ff, 0x0, 0x14, 0x7a, &(0x7f00000004c0)="74c289e9de067931e81bf40161bcfb68885162b7", &(0x7f0000000500)="a54f7fa1198874b5272d1d53af801c008f9c88a81beb6d1552d78e8bcc554d13a646d5c6b900fe961c04530bba07134a7b1025a2568dde190521c90eef3809fad01af44606a5f24fc55c707d0a2c3ad1a4502fd16c188ba40fc6c9cd4ad35a6592c1b19de6cfbb4f3b8ced6a4dc2cf2356252efcc84bc3aa8fe6", 0x0, 0x0, 0xa}, 0x50) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.18228546s ago: executing program 1 (id=2408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) read(r0, &(0x7f00000004c0)=""/138, 0x8a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'netpci0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 7.160566391s ago: executing program 32 (id=2319): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x731f}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb74805e9d6195b13}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0xf4, &(0x7f0000000100)=""/244, 0x41000, 0x40, '\x00', r0, @tracing=0x18, r1, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=[{0x3, 0x1, 0x10, 0x6}, {0x2, 0x1, 0x7, 0x6}, {0x1, 0x2, 0xe, 0x1}, {0x2, 0x2, 0xe, 0xb}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x4, 0xe, 0x7}], 0x10, 0x5001}, 0x94) r3 = socket(0x1e, 0xa, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000440), 0x4) r4 = accept$nfc_llcp(r3, 0x0, &(0x7f0000000480)) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)={0xefc2, 0x6, 0x5, 0x0, 0x0, [{{r1}, 0x9}, {{r1}, 0x3ab7}, {{r4}, 0xff}, {{r3}, 0x4a60}, {{r3}, 0x7}]}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r2, 0x80721000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4a00001}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x1f0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "41d6fe9d3266c27f1d24a01007ac2cbacea9a0b00442be2137899bd080cf5a3ccbc440073b69f91dae2d1fdcc7a345c1e47cff2117148211b64a00fd4cdb288628ecdbe84faf5a3a4eeddbfdfec6ef53b019dd6557a2f78642760c515e255455815087cb6529ca3f1ac79163b4172d72efcdad02cfd54577b8cff486ce09dd9a290a9ee301093025816e7fe4e58acf17aa5fc90fb39487aba947c3b0dd1fdd1c996aaa2c2314ce42ea068d4e0a7b53a8dc981efe068dbfbdacc36c85ad72f4bbe3981af36c22033a049bfe11594308110f94cb037408f2f20bd95e7fc0f512482858a30950c57bc4d945d810"}, @NFTA_OBJ_USERDATA={0xa3, 0x8, "bb4d1e5fc547778cd5c20a3867966368ee831e6dc4d58cc062903daa05f65dc7566533e6b95ac3870ef1fe0ce1305a5d5bea521350db8cccdb8b81829b8f089c427bfa58b4ac26d52b459a4f8039f5ed8a2d5f444d3b8b9c59d5cb2c7a42eadf45b73eb3b55217b3afccf09133a99bfd68519029c746fc7553c990995f7ae755690a8f4e7039a4bb0fbf473656110f97a8c0497596d704440293dd37ef82d6"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "ac0083028beca7e44bfcd6d69f2ee4f9df576a4d4b03f278fec3a4d017715c3eba4a61ec19c2c2354811b6ab02d4a858c33a6de91cfdd71c20e5c87a1eda02dc9cfd21f42c6ebbe1d71c9c0bb42c12a20eaac04b13d7c19c0158980debfe726bb87702939d2cb4d86d50418712ab7abdd0daf327ba5bf9aa5fdc4a4b01aa10b16050e2cdf52323cd6523baef90d204acfc9d588082b204091ad21131aebd435a2ce1d70291ddbb6460db5ebfdc5ff8ba8f0afdd42148da0024b08229415ae2c0c17f4145b7b20c60f2d3e8aa730fcbb5a527f58b75e21076522494f5b664f2ee287bbbf21a68f0aa5b57eb9a3e6d8a7311a3f838b3de"}]}, @NFT_MSG_DELTABLE={0x1ac, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "58d28bd8e98537950d1d10293364c186900a6c374144386423dbd7baceca1797ed4591331894610119b967dbdab93aa63654be618dec1dbd5876a5be5c6dc0fd6a8a2bb859227383c61c0285420fbf9c5f0d029196b77d31d85c0935a64abba3761b12ae0da6beaca011d90daabfadea7bd183a906bdf4940f474b6bdad92852b5025d3bef49e2054abc18668861bb3db6ffd988c52dc0"}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "e49b38beaea794e8c57a226052dc612bf438b5fcdf24819653c43f7d9fec55a8ecef1c44028862e17459b310699736b4cba981529c9a6911ee22030bf044fa13d443f18acaa91095229de8eb1a758dffebaa4ec10379103a32a7798142837e3422ec2d87b303c739e4611f02b5615726ad06853dcc6b2f53d38398ff960fedd734d8f8ec482682a3315227e6111fcb85761a6c969d556d857e7efff0d588c0a334588038305a5eafe04a2b"}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "297d2d3962196d865b88b903ddda1dab9ad179ba0899"}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5d4}, 0x1, 0x0, 0x0, 0x44048081}, 0x8000) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x80000000, 0x7}, {0xc, 0x5, 0x6}, {0x9, 0x4, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000ec0)=""/255, 0x67, 0xff, 0x1, 0x9}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', r0, r1, 0x3, 0x1, 0x5}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0xffffff0a, '\x00', r0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x15, 0x2176, 0x101, 0xe4cf, 0x20000, 0xffffffffffffffff, 0x6, '\x00', r0, r7, 0x3, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x8, 0x0, &(0x7f0000000d00), &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x47, &(0x7f0000000d80)=""/71, 0x41000, 0x2c, '\x00', r8, @cgroup_skb, r9, 0x8, &(0x7f0000001000)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0x6, 0x2, 0x6}, 0x10, r10, r2, 0x9, &(0x7f0000001500)=[r11, r12, 0x1, 0xffffffffffffffff, r13, r3], &(0x7f0000001540)=[{0x3, 0x1, 0xb}, {0x3, 0x1, 0x5, 0x2}, {0x4, 0x1, 0xa, 0xcef8ea6ccd9f72d8}, {0x0, 0x1, 0xe, 0xb}, {0x2, 0x3, 0x1, 0x2}, {0x2, 0x4, 0x10}, {0x2, 0x5, 0xf, 0xb}, {0x1, 0x1, 0xf, 0xa}, {0x5, 0x4, 0x0, 0xa}], 0x10, 0x5}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r14, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x64, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xfffffffa, 0x3}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$TUNSETVNETLE(r17, 0x400454dc, &(0x7f00000018c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001940)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001a40)=0xe8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001ac0)='cpuacct.usage_sys\x00', 0x0, 0x0) 135.552429ms ago: executing program 33 (id=2398): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="13000000020203", 0x7}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xb95, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8820) 107.379516ms ago: executing program 34 (id=2408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'gretap0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) read(r0, &(0x7f00000004c0)=""/138, 0x8a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'netpci0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 55.574002ms ago: executing program 35 (id=2401): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x247f, @loopback, 0xe5f8}}}, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0900e400abae6957129433b8e21d050ed8dc1fd906d32a83a1191d18b452fb7ae35a95719dd2bf60155a2a580076d3b2c957149dc200e69cf0788b7db0c28faaa07a18136c45a8abbdeb4a43ad92b468707e2cc81c7f14d5ae33a96204a97d4a8558d82cdd6d6150c697351e90718583226de62b4b8e9ceda3da28d2c15979ae5d6767cad4d7555ee6aa8b2b9bad3a310935063335893c75f3fd59be217a0d2a31279476e0dad91ebc7d6705261d87b391f0aa8a3668237eddc87e78d8f52a0a78def28ca20fab78fd346122d252204fd46cb51d4ae68502005d9a35c3b403fae5874d2c581b0d4407a0d040763d55a836dbf556a760f6d47f02ee72f65b91312f568f10a63aabc14904c578f41def1c385093d26bdb949f32bcfd17387431e6ef21f66c45102c9cb9fe62a4efb6a4e2ba279a926eb4e395cf20b12be1d8d6dcdc3f19b9f501d41168340b7d22599969bd594371c4340aef9bc76919d44b747b114b7d5afee0bcf38b70c4078e2e52ac109f81164af2b7ae6fbd98b345a8ec3526bc0b325014f8988c48571e39f031a53b71b26e1c0b91106e00"/425], 0xec) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x3c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xfff, 0xf5, 0x1, 0x5, 0x2, 0x1, 0x2}}}]}]}]}}]}, 0x8c}}, 0x20040054) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4ac60024", @ANYRES16=r11, @ANYBLOB="00032dbd7000fcdbdf25040000001400020070696d36726567310000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000002020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) r13 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="08040000", @ANYRES16=r11, @ANYBLOB="10002bbd7000fedbdf25010000000900010073797a30000000000900010073797a32000000000900010073797a30000000000900030073797a32000000000900030073797a32000000000900010073797a30000000000900030073797a3200000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008850}, 0x10) 0s ago: executing program 36 (id=2403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) kernel console output (not intermixed with test programs): [ 116.680065][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 116.751701][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 116.783172][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 116.784117][ T7473] : entered promiscuous mode [ 116.848092][ T7479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 116.867958][ T7479] netlink: 'syz.0.394': attribute type 29 has an invalid length. [ 117.037658][ T7484] netlink: 6 bytes leftover after parsing attributes in process `syz.2.395'. [ 117.062373][ T7484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.238612][ T7500] syzkaller1: entered promiscuous mode [ 117.244128][ T7500] syzkaller1: entered allmulticast mode [ 117.823103][ T7510] netlink: zone id is out of range [ 117.834050][ T7510] netlink: zone id is out of range [ 118.500310][ T7533] netlink: 56 bytes leftover after parsing attributes in process `syz.3.405'. [ 118.635487][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 118.764349][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 118.825012][ T30] audit: type=1800 audit(1765254393.791:2): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.410" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=443 res=0 errno=0 [ 118.873161][ T30] audit: type=1804 audit(1765254393.791:3): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.410" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=443 res=1 errno=0 [ 118.945211][ T7551] Cannot find add_set index 2 as target [ 119.022443][ T7559] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 119.093983][ T7559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.172422][ T7562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.185364][ T7562] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.216920][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 119.236461][ T7562] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 119.283036][ T7559] gretap1: entered promiscuous mode [ 119.315480][ T7569] x_tables: duplicate underflow at hook 1 [ 119.338897][ T7559] bond3: (slave gretap1): making interface the new active one [ 119.349919][ T7559] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 119.373355][ T7566] macvlan2: entered promiscuous mode [ 119.391780][ T7566] macvlan2: entered allmulticast mode [ 119.441438][ T7566] bond3: entered promiscuous mode [ 119.475408][ T7566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.489226][ T7566] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 119.503885][ T7566] bond3: left promiscuous mode [ 119.963600][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 120.314748][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 120.793650][ T7593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.948764][ T7631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.978224][ T7631] bond1: (slave sit3): The slave device specified does not support setting the MAC address [ 121.020264][ T7631] bond1: (slave sit3): Error -95 calling set_mac_address [ 121.155904][ T7644] Cannot find del_set index 1 as target [ 122.075084][ T7689] __nla_validate_parse: 1 callbacks suppressed [ 122.075102][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 122.102264][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 122.275511][ T7696] bridge_slave_0: left allmulticast mode [ 122.322022][ T7696] bridge_slave_0: left promiscuous mode [ 122.357957][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'. [ 122.394659][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.397664][ T7697] netlink: 64 bytes leftover after parsing attributes in process `syz.0.439'. [ 122.413956][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 122.489065][ T7696] bond0: (slave bond_slave_0): Releasing backup interface [ 122.557968][ T7696] bond0: (slave bond_slave_1): Releasing backup interface [ 122.610893][ T7696] team0: Failed to send options change via netlink (err -105) [ 122.631122][ T7696] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 122.662524][ T7696] team0: Port device team_slave_0 removed [ 122.689411][ T7696] team0: Failed to send options change via netlink (err -105) [ 122.717651][ T7696] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 122.730470][ T7696] team0: Port device team_slave_1 removed [ 122.739494][ T7696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.747955][ T7696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.761376][ T7696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.770882][ T7696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.778066][ T7712] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 122.787557][ T7712] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 122.799155][ T7696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.816401][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'. [ 123.108268][ T7719] netlink: 6964 bytes leftover after parsing attributes in process `syz.1.443'. [ 123.138594][ T7719] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.511701][ T7744] netlink: 'syz.1.447': attribute type 2 has an invalid length. [ 124.580831][ T7779] netlink: 128 bytes leftover after parsing attributes in process `syz.3.459'. [ 124.617432][ T7775] bond2: option xmit_hash_policy: invalid value (10) [ 124.651687][ T7775] bond2 (unregistering): Released all slaves [ 124.982503][ T7788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.461'. [ 125.002794][ T7788] sctp: [Deprecated]: syz.0.461 (pid 7788) Use of int in maxseg socket option. [ 125.002794][ T7788] Use struct sctp_assoc_value instead [ 125.221298][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 125.817312][ T7822] netlink: 'syz.4.473': attribute type 13 has an invalid length. [ 126.116786][ T7826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.174871][ T7614] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.202649][ T7614] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.252486][ T7614] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.283313][ T7614] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.173691][ T7887] __nla_validate_parse: 6 callbacks suppressed [ 128.173707][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 128.211576][ T7884] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 128.224530][ T7884] bond3 (unregistering): Released all slaves [ 128.798739][ T7921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.501'. [ 128.824917][ T7921] macvlan0: entered promiscuous mode [ 128.830816][ T7921] macvlan0: entered allmulticast mode [ 128.907179][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'. [ 128.939307][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.502'. [ 128.962604][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 129.034170][ T7928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.147647][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 129.392019][ T7940] tipc: Started in network mode [ 129.397864][ T7940] tipc: Node identity baffe442686d, cluster identity 4711 [ 129.405968][ T7940] tipc: Enabled bearer , priority 0 [ 129.422645][ T7940] syzkaller0: entered promiscuous mode [ 129.429436][ T7940] syzkaller0: entered allmulticast mode [ 129.504766][ T7940] tipc: Resetting bearer [ 129.532288][ T7939] tipc: Resetting bearer [ 129.564968][ T7939] tipc: Disabling bearer [ 129.572737][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 129.588470][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 129.641901][ T7945] batman_adv: batadv0: Interface deactivated: dummy0 [ 129.658953][ T7945] batman_adv: batadv0: Removing interface: dummy0 [ 129.830654][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 129.836570][ T7949] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 129.844541][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 129.958210][ T7951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.099923][ T7951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.250179][ T7951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.382382][ T7951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.614296][ T7629] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.672974][ T7629] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.714840][ T7629] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.725438][ T8001] ip6_vti0: Caught tx_queue_len zero misconfig [ 130.775694][ T7629] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.801462][ T8005] veth0: entered promiscuous mode [ 131.126307][ T8019] netlink: 'syz.3.529': attribute type 13 has an invalid length. [ 131.179110][ T1339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.189073][ T8019] netlink: 'syz.3.529': attribute type 13 has an invalid length. [ 131.197077][ T1339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.290501][ T1339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.309498][ T1339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.550018][ T8002] veth0: left promiscuous mode [ 131.945991][ T8040] syzkaller0: entered promiscuous mode [ 131.956137][ T8040] syzkaller0: entered allmulticast mode [ 132.063530][ T8048] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 132.761317][ T8091] tipc: Started in network mode [ 132.774582][ T8091] tipc: Node identity 6a4c62a56a63, cluster identity 4711 [ 132.798474][ T8091] tipc: Enabled bearer , priority 0 [ 132.903565][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937830][ T8094] syzkaller0: entered promiscuous mode [ 132.943394][ T8094] syzkaller0: entered allmulticast mode [ 132.949745][ T8094] tipc: Resetting bearer [ 132.969570][ T8087] tipc: Resetting bearer [ 134.224392][ T8087] tipc: Disabling bearer [ 134.257191][ T8098] tipc: Started in network mode [ 134.282453][ T8098] tipc: Node identity a64068806e64, cluster identity 4711 [ 134.297818][ T8098] tipc: Enabled bearer , priority 0 [ 134.305169][ T8099] syzkaller0: entered promiscuous mode [ 134.316843][ T8099] syzkaller0: entered allmulticast mode [ 134.337674][ T8110] tunl0: Caught tx_queue_len zero misconfig [ 134.365699][ T8111] tipc: Resetting bearer [ 134.376864][ T9] tipc: Node number set to 3105445 [ 134.467008][ T8111] tipc: Resetting bearer [ 134.491447][ T8111] tipc: Disabling bearer [ 134.568799][ T8121] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 134.581146][ T8121] __nla_validate_parse: 43 callbacks suppressed [ 134.581163][ T8121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.559'. [ 134.650403][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 135.605540][ T8154] batadv_slave_1: entered promiscuous mode [ 135.704538][ T8155] batadv_slave_1: left promiscuous mode [ 135.721476][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 135.775453][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 135.806506][ T8170] netlink: 'syz.2.573': attribute type 29 has an invalid length. [ 135.815424][ T8170] netlink: 'syz.2.573': attribute type 29 has an invalid length. [ 135.845089][ T8166] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 135.862336][ T8166] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 135.951904][ T8176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.953865][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 136.006215][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.018683][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.030737][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.193512][ T8195] pim6reg1: entered promiscuous mode [ 136.205988][ T8195] pim6reg1: entered allmulticast mode [ 136.498321][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 136.828587][ T8213] netlink: 'syz.0.581': attribute type 3 has an invalid length. [ 136.854826][ T7629] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.866993][ T7629] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.877133][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 136.886224][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 136.906513][ T7629] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.925540][ T7629] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.363038][ T8224] tipc: Enabling of bearer rejected, failed to enable media [ 137.711765][ T8242] syzkaller0: entered promiscuous mode [ 137.718331][ T8242] syzkaller0: entered allmulticast mode [ 137.802135][ T8248] xt_connbytes: Forcing CT accounting to be enabled [ 137.812998][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 137.843071][ T8252] xt_hashlimit: invalid rate [ 137.995622][ T8248] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.189911][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 138.330269][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 138.544328][ T8279] bond3: (slave veth3): Enslaving as an active interface with a down link [ 138.626896][ T8273] bond3: (slave ip6gretap1): making interface the new active one [ 138.648928][ T8273] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.739363][ T8281] macvlan0: entered promiscuous mode [ 138.754197][ T8281] macvlan0: entered allmulticast mode [ 138.769793][ T8281] bond4: (slave macvlan0): Opening slave failed [ 138.793892][ T8297] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 138.871243][ T8296] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 138.909993][ T8296] bond4 (unregistering): Released all slaves [ 139.121951][ T8297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.423809][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.953758][ T8333] pimreg: tun_chr_ioctl cmd 1074812117 [ 140.560230][ T8355] batman_adv: batadv0: Adding interface: dummy0 [ 140.569801][ T8355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.609728][ T8355] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 140.634296][ T8356] __nla_validate_parse: 5 callbacks suppressed [ 140.634312][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 140.727662][ T8358] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 140.745770][ T8362] netlink: 176 bytes leftover after parsing attributes in process `syz.3.621'. [ 140.777253][ T8358] netlink: 248 bytes leftover after parsing attributes in process `syz.1.619'. [ 140.852093][ T8359] syzkaller1: entered promiscuous mode [ 140.858347][ T8359] syzkaller1: entered allmulticast mode [ 141.143897][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 141.153104][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'. [ 141.192329][ T8383] dummy0: entered promiscuous mode [ 141.205318][ T8383] macsec1: entered allmulticast mode [ 141.220783][ T8383] dummy0: entered allmulticast mode [ 141.241756][ T8383] dummy0: left allmulticast mode [ 141.253033][ T8383] dummy0: left promiscuous mode [ 141.331790][ T8394] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 141.593824][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 141.812965][ T8405] netlink: 64 bytes leftover after parsing attributes in process `syz.4.634'. [ 141.841493][ T8408] sctp: [Deprecated]: syz.0.635 (pid 8408) Use of int in maxseg socket option. [ 141.841493][ T8408] Use struct sctp_assoc_value instead [ 142.035000][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 142.081117][ T8421] netlink: 7 bytes leftover after parsing attributes in process `syz.4.638'. [ 142.332866][ T8434] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 142.344176][ T8435] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 142.358452][ T8437] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 142.374966][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 142.438485][ T8435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.557521][ T8438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.608460][ T8444] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 142.630848][ T8453] team0: Caught tx_queue_len zero misconfig [ 142.763264][ T8444] xt_cgroup: invalid path, errno=-2 [ 142.942114][ T8471] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 143.090771][ T8477] nbd: must specify at least one socket [ 143.373800][ T7715] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x1 [ 143.430214][ T7715] hid-generic 0005:0C45:1010.0001: ignoring exceeding usage max [ 143.444485][ T8495] netlink: 'syz.3.657': attribute type 12 has an invalid length. [ 143.459861][ T7715] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x4 [ 143.494446][ T7715] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x5 [ 143.540062][ T7715] hid-generic 0005:0C45:1010.0001: hidraw0: BLUETOOTH HID v0.c3 Device [syz0] on aa:aa:aa:aa:aa:aa [ 144.107450][ T8522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.128296][ T8524] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 145.023339][ T8559] macvlan1: entered promiscuous mode [ 145.031217][ T8559] ipvlan0: entered promiscuous mode [ 145.040278][ T8559] ipvlan0: left promiscuous mode [ 145.045574][ T8559] macvlan1: left promiscuous mode [ 145.135954][ T8561] pimreg: entered allmulticast mode [ 145.146250][ T8561] pimreg: left allmulticast mode [ 145.338272][ T8575] bond0: Caught tx_queue_len zero misconfig [ 145.515486][ T8585] tipc: Enabled bearer , priority 0 [ 145.557837][ T8585] syzkaller0: entered promiscuous mode [ 145.563345][ T8585] syzkaller0: entered allmulticast mode [ 145.600855][ T8585] block nbd0: Unsupported socket: should be TCP or UNIX. [ 145.650492][ T8585] tipc: Resetting bearer [ 145.683772][ T8592] tipc: Enabling of bearer rejected, already enabled [ 145.785818][ T8595] tipc: Resetting bearer [ 145.829604][ T8595] tipc: Disabling bearer [ 146.047760][ T8616] __nla_validate_parse: 45 callbacks suppressed [ 146.047778][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 146.116556][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 146.155371][ T8616] syzkaller0: entered promiscuous mode [ 146.160494][ T8619] IPVS: Scheduler module ip_vs_sip not found [ 146.167748][ T8616] syzkaller0: entered allmulticast mode [ 146.175050][ T8626] sctp: [Deprecated]: syz.2.694 (pid 8626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.175050][ T8626] Use struct sctp_sack_info instead [ 146.255944][ T8632] netlink: 'syz.2.694': attribute type 33 has an invalid length. [ 146.264389][ T8632] netlink: 152 bytes leftover after parsing attributes in process `syz.2.694'. [ 146.309956][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 146.321748][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 146.438895][ T8645] netlink: 'syz.4.697': attribute type 2 has an invalid length. [ 146.446553][ T8645] netlink: 'syz.4.697': attribute type 8 has an invalid length. [ 146.454902][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.697'. [ 146.702631][ T8656] bridge_slave_0: left promiscuous mode [ 146.708880][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.752577][ T8656] bridge_slave_1: left allmulticast mode [ 146.768439][ T8656] bridge_slave_1: left promiscuous mode [ 146.784102][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.825675][ T8656] bond0: (slave bond_slave_0): Releasing backup interface [ 146.838561][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 146.859264][ T8656] bond0: (slave bond_slave_1): Releasing backup interface [ 146.885340][ T8656] team0: Port device team_slave_0 removed [ 146.908975][ T8656] team0: Port device team_slave_1 removed [ 146.917499][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.925326][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.934658][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.942574][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.950813][ T8671] netlink: 'syz.2.701': attribute type 32 has an invalid length. [ 146.952226][ T8656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.959099][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 147.198736][ T8671] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 147.422494][ T8679] gretap1: entered allmulticast mode [ 147.550093][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 147.571728][ T8695] tipc: Enabling of bearer rejected, failed to enable media [ 148.055804][ T8728] ipvlan2: entered promiscuous mode [ 148.159310][ T8728] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.220231][ T8731] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 148.431393][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'. [ 148.597113][ T8749] tipc: Enabled bearer , priority 0 [ 148.620358][ T8715] lec:lec_atm_close: lec0: Shut down! [ 148.643277][ T8731] tipc: Resetting bearer [ 148.653119][ T8730] tipc: Disabling bearer [ 148.892028][ T8758] pim6reg1: entered promiscuous mode [ 148.910751][ T8758] pim6reg1: entered allmulticast mode [ 148.978411][ T8758] syzkaller0: entered promiscuous mode [ 148.984586][ T8758] syzkaller0: entered allmulticast mode [ 149.298699][ T8781] tipc: Enabled bearer , priority 0 [ 149.346422][ T8781] tipc: Disabling bearer [ 149.363107][ T8770] tipc: Enabled bearer , priority 0 [ 149.428768][ T8770] syzkaller0: entered promiscuous mode [ 149.434417][ T8770] syzkaller0: entered allmulticast mode [ 149.487551][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.003504][ T8817] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 150.925692][ T8782] tipc: Resetting bearer [ 150.944248][ T8769] tipc: Resetting bearer [ 150.985574][ T8769] tipc: Disabling bearer [ 150.998812][ T7716] tipc: Node number set to 1852708337 [ 151.112423][ T8834] netlink: 'syz.1.740': attribute type 5 has an invalid length. [ 151.130203][ T8838] netlink: 'syz.4.742': attribute type 39 has an invalid length. [ 151.317090][ T8852] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:0 [ 151.474516][ T8858] tipc: Started in network mode [ 151.486005][ T8858] tipc: Node identity aa3a9b7613a1, cluster identity 4711 [ 151.504813][ T8858] tipc: Enabled bearer , priority 0 [ 151.537704][ T8861] syzkaller0: entered promiscuous mode [ 151.546272][ T8861] syzkaller0: entered allmulticast mode [ 151.597859][ T8867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.624461][ T8858] tipc: Resetting bearer [ 151.636608][ T8869] __nla_validate_parse: 4 callbacks suppressed [ 151.663339][ T8869] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.752'. [ 151.677001][ T8856] tipc: Resetting bearer [ 151.711446][ T8856] tipc: Disabling bearer [ 151.813391][ T8873] x_tables: duplicate underflow at hook 1 [ 151.850128][ T8873] No such timeout policy "syz1" [ 151.899831][ T8873] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.925956][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 152.016592][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 152.048989][ T8873] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.235593][ T8873] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.333002][ T8873] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.443379][ T8900] netlink: 'syz.1.761': attribute type 3 has an invalid length. [ 152.455609][ T8900] netlink: 666 bytes leftover after parsing attributes in process `syz.1.761'. [ 152.599634][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.610826][ T8907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.764'. [ 152.635746][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.810825][ T1339] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.855298][ T1339] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.966466][ T8874] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.207527][ T8874] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.303971][ T8874] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.358134][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 153.428300][ T8874] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.465927][ T8925] tipc: Enabled bearer , priority 0 [ 153.526306][ T8930] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 153.576193][ T8932] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 153.585382][ T8925] netlink: 19 bytes leftover after parsing attributes in process `syz.4.769'. [ 153.626191][ T8930] !©9: entered promiscuous mode [ 153.634269][ T8932] !©9: left promiscuous mode [ 153.763773][ T8924] tipc: Disabling bearer [ 153.926847][ T8948] tipc: New replicast peer: 255.255.255.255 [ 153.943586][ T8948] tipc: Enabled bearer , priority 10 [ 153.984074][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 154.270278][ T8959] netlink: 440 bytes leftover after parsing attributes in process `syz.1.776'. [ 154.620286][ T8972] syzkaller0: entered promiscuous mode [ 154.625871][ T8972] syzkaller0: entered allmulticast mode [ 154.684476][ T8972] tipc: Enabled bearer , priority 0 [ 154.852172][ T8980] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 154.880990][ T8980] : entered promiscuous mode [ 155.094239][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 155.411233][ T8971] tipc: Resetting bearer [ 155.589722][ T8971] tipc: Disabling bearer [ 156.000893][ T9002] tipc: Enabled bearer , priority 0 [ 156.008814][ T9002] syzkaller0: entered promiscuous mode [ 156.014301][ T9002] syzkaller0: entered allmulticast mode [ 156.057555][ T9002] tipc: Resetting bearer [ 156.077999][ T9001] tipc: Resetting bearer [ 156.133453][ T9001] tipc: Disabling bearer [ 156.317203][ T9023] Bluetooth: MGMT ver 1.23 [ 156.735034][ T9047] __nla_validate_parse: 1 callbacks suppressed [ 156.735051][ T9047] netlink: 160 bytes leftover after parsing attributes in process `syz.3.799'. [ 156.802095][ T9053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.800'. [ 156.878170][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.800'. [ 156.945465][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 156.973772][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 156.996938][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 157.338696][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.811'. [ 157.356983][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.811'. [ 157.474401][ T9059] xt_hashlimit: size too large, truncated to 1048576 [ 157.484188][ T9059] xt_hashlimit: max too large, truncated to 1048576 [ 157.521134][ T9059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.610524][ T6042] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.646189][ T6042] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.689950][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.781895][ T6042] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.034122][ T9123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 158.210753][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 158.372836][ T9135] veth0_to_team: entered promiscuous mode [ 158.984880][ T9159] netlink: 292 bytes leftover after parsing attributes in process `syz.3.828'. [ 159.033919][ T9159] netlink: 'syz.3.828': attribute type 30 has an invalid length. [ 159.201735][ T9170] openvswitch: netlink: Message has 8 unknown bytes. [ 159.404217][ T9180] sctp: [Deprecated]: syz.1.835 (pid 9180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.404217][ T9180] Use struct sctp_sack_info instead [ 159.455119][ T9181] IPVS: set_ctl: invalid protocol: 135 172.20.20.62:20002 [ 159.723186][ T9191] tipc: Enabling of bearer rejected, failed to enable media [ 159.873604][ T9198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.061811][ T9210] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 160.091470][ T9210] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 160.172238][ T9218] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 160.216070][ T9218] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.279180][ T9218] bond6: (slave ip6gretap3): making interface the new active one [ 160.293090][ T9218] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 160.371454][ T9218] veth3: entered promiscuous mode [ 160.381217][ T9218] bond6: (slave veth3): Enslaving as an active interface with a down link [ 160.394489][ T9227] erspan0: entered allmulticast mode [ 160.404690][ T9227] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 160.484035][ T9218] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.529192][ T9227] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.568714][ T9240] siw: device registration error -23 [ 160.578620][ T1339] bond6: (slave erspan0): link status definitely down, disabling slave [ 160.589124][ T1339] ip6gretap3: entered promiscuous mode [ 160.643067][ T9248] sctp: [Deprecated]: syz.4.854 (pid 9248) Use of int in max_burst socket option. [ 160.643067][ T9248] Use struct sctp_assoc_value instead [ 160.780283][ T9256] syzkaller0: entered promiscuous mode [ 160.785794][ T9256] syzkaller0: entered allmulticast mode [ 161.393387][ T9261] sctp: [Deprecated]: syz.3.858 (pid 9261) Use of int in max_burst socket option. [ 161.393387][ T9261] Use struct sctp_assoc_value instead [ 161.564931][ T9267] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 162.124351][ T9289] __nla_validate_parse: 9 callbacks suppressed [ 162.124368][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 162.230690][ T9270] gretap1: entered allmulticast mode [ 162.255144][ T9285] ip6tnl0: Caught tx_queue_len zero misconfig [ 162.493947][ T9298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.866'. [ 162.542944][ T9300] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 162.717548][ T9310] pimreg: entered allmulticast mode [ 162.719740][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 162.757140][ T9310] pimreg: left allmulticast mode [ 162.898285][ T9289] syz.0.864 (9289) used greatest stack depth: 15008 bytes left [ 162.900527][ T9314] pimreg: entered allmulticast mode [ 162.948377][ T10] IPVS: starting estimator thread 0... [ 162.995375][ T9315] pimreg: left allmulticast mode [ 163.036822][ T9324] IPVS: using max 38 ests per chain, 91200 per kthread [ 163.167722][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 163.186948][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 163.215384][ T9336] netlink: 'syz.2.876': attribute type 18 has an invalid length. [ 163.241164][ T9340] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 163.379883][ T9349] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 163.653471][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.883'. [ 163.808940][ T9362] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 163.837865][ T9362] bridge3: entered allmulticast mode [ 163.897504][ T7614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.932555][ T7614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.011404][ T9377] netlink: 88 bytes leftover after parsing attributes in process `syz.0.887'. [ 164.118438][ T9378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.881'. [ 164.129050][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'. [ 164.181836][ T9347] bond5: option miimon: invalid value (18446744073709551607) [ 164.241385][ T9347] bond5: option miimon: allowed values 0 - 2147483647 [ 164.291137][ T9347] bond5 (unregistering): Released all slaves [ 164.483279][ T9390] syzkaller1: entered promiscuous mode [ 164.496006][ T9390] syzkaller1: entered allmulticast mode [ 164.954944][ T9419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.898'. [ 165.064279][ T9423] pim6reg1: entered allmulticast mode [ 165.439868][ T9450] macvtap0: entered promiscuous mode [ 165.445377][ T9450] macvtap0: entered allmulticast mode [ 165.453528][ T9450] dummy0: entered allmulticast mode [ 165.459407][ T9450] dummy0: entered promiscuous mode [ 165.466036][ T9450] team0: Device macvtap0 failed to register rx_handler [ 165.474700][ T9450] dummy0: left allmulticast mode [ 165.479990][ T9450] dummy0: left promiscuous mode [ 166.786365][ T9519] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 166.978562][ T9521] delete_channel: no stack [ 167.218610][ T9542] __nla_validate_parse: 5 callbacks suppressed [ 167.218628][ T9542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.933'. [ 167.224252][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 167.349097][ T9544] macvlan2: entered allmulticast mode [ 167.356918][ T9544] veth1_vlan: entered allmulticast mode [ 167.365308][ T9544] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 167.621450][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 167.676788][ T9556] hsr_slave_0: left promiscuous mode [ 167.683156][ T9556] hsr_slave_1: left promiscuous mode [ 167.765365][ T9562] Unsupported ieee802154 address type: 0 [ 167.959859][ T9574] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 168.121129][ T9579] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.137695][ T9584] netlink: 'syz.0.941': attribute type 6 has an invalid length. [ 168.159655][ T9579] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 168.240843][ T9580] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.258004][ T9580] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 168.500191][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 168.625781][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 168.696503][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 169.491271][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 170.151963][ T9663] netlink: 277 bytes leftover after parsing attributes in process `syz.0.961'. [ 170.321979][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 170.490258][ T9683] netlink: 'syz.0.969': attribute type 6 has an invalid length. [ 170.512556][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 170.543438][ T9687] openvswitch: netlink: Flow actions attr not present in new flow. [ 170.622980][ T9687] netlink: 'syz.4.968': attribute type 16 has an invalid length. [ 171.507695][ T9723] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 171.696893][ T6042] ip6gretap3: left promiscuous mode [ 172.241925][ T9762] __nla_validate_parse: 5 callbacks suppressed [ 172.241946][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 172.504959][ T9781] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.996'. [ 172.754502][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.997'. [ 172.769299][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 172.792559][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.997'. [ 172.801951][ T9794] syzkaller0: entered promiscuous mode [ 172.807705][ T9794] syzkaller0: entered allmulticast mode [ 173.224277][ T9802] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 173.659387][ T9814] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 173.710488][ T9814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.754841][ T9814] veth5: entered promiscuous mode [ 173.767826][ T9814] erspan0: entered allmulticast mode [ 173.841880][ T9814] bond5: (slave erspan0): making interface the new active one [ 173.854360][ T9832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.867640][ T9833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.889870][ T9814] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 173.957721][ T9834] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 174.202424][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 174.839395][ T9874] bridge0: entered promiscuous mode [ 174.844665][ T9874] bridge0: entered allmulticast mode [ 174.947429][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1021'. [ 175.507952][ T9908] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1030'. [ 175.544095][ T9910] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.564562][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 175.585513][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.825629][ T9929] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 176.802103][ T9989] bridge0: port 1(erspan0) entered blocking state [ 176.828505][ T9989] bridge0: port 1(erspan0) entered disabled state [ 176.847909][ T9989] erspan0: entered allmulticast mode [ 176.864660][ T9989] erspan0: entered promiscuous mode [ 176.877625][ T9989] bridge0: port 1(erspan0) entered blocking state [ 176.884304][ T9989] bridge0: port 1(erspan0) entered forwarding state [ 176.932495][ T9996] tipc: Enabled bearer , priority 0 [ 177.002347][T10000] syzkaller0: entered promiscuous mode [ 177.009989][T10000] syzkaller0: entered allmulticast mode [ 177.019644][T10003] netlink: 'syz.3.1052': attribute type 12 has an invalid length. [ 177.041024][T10000] tipc: Resetting bearer [ 177.078058][T10000] tipc: Disabling bearer [ 177.378795][T10022] __nla_validate_parse: 5 callbacks suppressed [ 177.378812][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 177.479361][T10033] netlink: 'syz.0.1061': attribute type 2 has an invalid length. [ 177.522972][T10033] !©9: entered promiscuous mode [ 177.531894][T10043] netlink: 'syz.0.1061': attribute type 2 has an invalid length. [ 177.542526][T10043] !©9: left promiscuous mode [ 177.593643][T10033] netlink: 'syz.0.1061': attribute type 29 has an invalid length. [ 177.647784][T10048] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 177.821217][T10065] syzkaller0: entered promiscuous mode [ 177.845462][T10065] syzkaller0: entered allmulticast mode [ 177.959335][T10072] syzkaller0: entered promiscuous mode [ 177.969791][T10072] syzkaller0: entered allmulticast mode [ 178.072440][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 178.093591][T10077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.111668][T10077] batadv_slave_0: entered promiscuous mode [ 178.137171][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 178.191321][T10081] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1074'. [ 178.200585][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 178.598486][T10099] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 178.620050][T10098] syzkaller0: entered promiscuous mode [ 178.625558][T10098] syzkaller0: entered allmulticast mode [ 178.648759][T10098] tipc: Enabled bearer , priority 0 [ 178.657584][T10096] tipc: Resetting bearer [ 178.688645][T10096] tipc: Disabling bearer [ 178.836551][T10108] tipc: Enabled bearer , priority 0 [ 178.852707][T10108] syzkaller0: entered promiscuous mode [ 178.858347][T10108] syzkaller0: entered allmulticast mode [ 178.883190][T10108] netlink: 'syz.3.1082': attribute type 21 has an invalid length. [ 178.901719][T10108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1082'. [ 178.975612][T10119] vlan0: entered allmulticast mode [ 178.983784][T10119] bridge_slave_0: entered allmulticast mode [ 178.997017][T10119] bridge0: port 1(vlan0) entered blocking state [ 179.003459][T10119] bridge0: port 1(vlan0) entered disabled state [ 179.012005][T10119] vlan0: entered promiscuous mode [ 179.017587][T10119] bridge_slave_0: entered promiscuous mode [ 179.033231][T10108] tipc: Resetting bearer [ 179.034515][T10119] netlink: 'syz.0.1085': attribute type 5 has an invalid length. [ 179.057035][T10107] tipc: Resetting bearer [ 179.074204][T10107] tipc: Disabling bearer [ 179.095092][T10119] ip6erspan0: entered promiscuous mode [ 179.225145][T10132] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 179.276563][T10133] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 179.306272][T10132] batman_adv: batadv0: Removing interface: dummy0 [ 179.345827][T10133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.494470][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1095'. [ 179.514131][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 179.619954][T10156] netlink: 212188 bytes leftover after parsing attributes in process `syz.1.1096'. [ 179.940572][T10183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'. [ 180.482905][T10211] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 180.562760][T10210] 8021q: VLANs not supported on vxcan0 [ 180.618818][T10213] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.900995][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.941227][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.959792][T10214] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.024180][T10214] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.262426][T10228] veth0_virt_wifi: renamed from veth0_vlan [ 181.350623][T10248] syzkaller0: entered promiscuous mode [ 181.373502][T10248] syzkaller0: entered allmulticast mode [ 181.453361][T10251] syzkaller0: entered promiscuous mode [ 181.459786][T10251] syzkaller0: entered allmulticast mode [ 181.534417][T10251] macsec1: entered promiscuous mode [ 181.776932][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 182.319950][T10292] netlink: 'syz.2.1133': attribute type 49 has an invalid length. [ 183.100285][T10315] __nla_validate_parse: 23 callbacks suppressed [ 183.100302][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 183.128389][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 183.157085][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 183.168726][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1139'. [ 183.251026][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 183.300028][T10327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1142'. [ 183.382164][T10323] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 183.668220][T10351] netlink: 7076 bytes leftover after parsing attributes in process `syz.1.1150'. [ 183.677852][T10351] openvswitch: netlink: Flow key attr not present in new flow. [ 183.699651][T10351] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1150'. [ 183.711878][T10354] netlink: 'syz.0.1152': attribute type 11 has an invalid length. [ 183.790927][T10359] bond0: (slave erspan0): Opening slave failed [ 183.829806][T10359] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.862851][T10364] vetè0_virt_wif: Caught tx_queue_len zero misconfig [ 183.975457][T10370] geneve2: entered promiscuous mode [ 183.985672][ T7629] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.994419][ T7629] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.025460][ T7629] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.047024][ T7629] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.832202][T10407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1170'. [ 185.188362][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 185.413797][T10433] netlink: 'syz.1.1179': attribute type 2 has an invalid length. [ 185.602770][T10436] openvswitch: netlink: IP tunnel dst address not specified [ 186.164630][T10451] syzkaller0: entered promiscuous mode [ 186.183015][T10451] syzkaller0: entered allmulticast mode [ 186.990647][T10458] syzkaller1: entered promiscuous mode [ 187.013470][T10458] syzkaller1: entered allmulticast mode [ 187.190496][T10469] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.217697][T10471] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.525264][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.585715][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.662944][T10490] syzkaller0: entered promiscuous mode [ 188.685133][T10490] syzkaller0: entered allmulticast mode [ 188.693580][T10499] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 188.724205][T10500] __nla_validate_parse: 2 callbacks suppressed [ 188.724222][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 188.747427][T10490] tipc: Enabled bearer , priority 0 [ 188.905945][T10508] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1198'. [ 188.929296][T10508] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1198'. [ 188.954397][T10508] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1198'. [ 189.278470][T10504] tipc: Resetting bearer [ 189.356479][T10514] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 189.394146][T10504] tipc: Disabling bearer [ 189.424187][T10514] bond0: (slave dummy0): Releasing backup interface [ 189.972868][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 190.108776][T10532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.149546][T10536] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 190.167095][T10532] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.698609][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888045536800: rx timeout, send abort [ 191.208102][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888045536800: abort rx timeout. Force session deactivation [ 191.307113][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 191.307179][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 191.378356][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 194.340725][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.850385][T10553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.880385][T10551] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1206'. [ 251.885151][T10554] netlink: 'syz.2.1208': attribute type 8 has an invalid length. [ 251.890717][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 252.067189][T10571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1210'. [ 252.089111][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 252.107857][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 252.141053][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 252.252420][T10583] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 252.262924][T10583] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.1214'. [ 252.757998][T10610] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 252.814757][T10610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.856941][T10610] bond4: (slave gretap1): making interface the new active one [ 252.866062][T10610] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 253.001436][T10625] bond0: (slave erspan0): Opening slave failed [ 253.011827][T10624] bond0: (slave erspan0): Opening slave failed [ 253.103921][T10627] tipc: Enabled bearer , priority 0 [ 253.161902][T10627] syzkaller0: entered promiscuous mode [ 253.171436][T10627] syzkaller0: entered allmulticast mode [ 253.261295][T10627] tipc: Resetting bearer [ 253.279895][T10632] netlink: 'syz.2.1230': attribute type 21 has an invalid length. [ 253.323350][T10632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1230'. [ 253.333961][T10640] netlink: 'syz.2.1230': attribute type 6 has an invalid length. [ 253.383562][T10637] team_slave_0: left promiscuous mode [ 253.396417][T10637] team_slave_0: left allmulticast mode [ 253.458995][T10637] team0 (unregistering): Port device team_slave_0 removed [ 253.484746][T10637] team_slave_1: left promiscuous mode [ 253.500648][T10637] team_slave_1: left allmulticast mode [ 253.530030][T10637] team0 (unregistering): Port device team_slave_1 removed [ 253.886964][T10623] tipc: Resetting bearer [ 253.906266][T10623] tipc: Disabling bearer [ 253.939537][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 253.952341][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1237'. [ 254.107842][T10668] netlink: 'syz.0.1240': attribute type 21 has an invalid length. [ 254.809996][T10710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.792622][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003820][T10761] netlink: 'syz.2.1260': attribute type 16 has an invalid length. [ 256.034036][T10761] netlink: 'syz.2.1260': attribute type 17 has an invalid length. [ 256.118960][T10761] bridge0: port 1(erspan0) entered disabled state [ 256.494688][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.514476][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.731446][ T50] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.741269][ T50] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.750772][ T50] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.765089][ T50] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.773991][ T50] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.782888][ T50] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.840054][ T50] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.857022][ T50] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.931392][T10772] __nla_validate_parse: 6 callbacks suppressed [ 256.931410][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 257.303334][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1270'. [ 257.364367][T10796] vlan2: entered promiscuous mode [ 257.369854][T10796] bond0: entered promiscuous mode [ 257.374900][T10796] bond_slave_0: entered promiscuous mode [ 257.385418][T10796] bond_slave_1: entered promiscuous mode [ 257.391417][T10796] batadv0: entered promiscuous mode [ 257.417708][T10796] vlan2: entered allmulticast mode [ 257.423652][T10796] bond0: entered allmulticast mode [ 257.437873][T10796] bond_slave_0: entered allmulticast mode [ 257.448928][T10796] bond_slave_1: entered allmulticast mode [ 257.463721][T10796] batadv0: entered allmulticast mode [ 257.836090][T10832] batadv_slave_1: entered promiscuous mode [ 257.861626][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'. [ 257.877328][T10832] Bluetooth: MGMT ver 1.23 [ 257.884041][T10826] batadv_slave_1: left promiscuous mode [ 257.985530][T10849] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 257.994989][T10849] bridge4: entered allmulticast mode [ 258.701231][T10868] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1289'. [ 258.725758][T10871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'. [ 258.965149][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 258.973479][T10888] netlink: 'syz.1.1297': attribute type 16 has an invalid length. [ 258.983249][T10888] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1297'. [ 258.998651][T10883] tipc: Enabled bearer , priority 0 [ 259.016177][T10883] syzkaller0: entered promiscuous mode [ 259.022256][T10883] syzkaller0: entered allmulticast mode [ 259.095389][T10883] veth1_vlan: mtu less than device minimum [ 259.128139][T10882] tipc: Resetting bearer [ 259.192282][T10882] tipc: Disabling bearer [ 259.395398][T10912] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1300'. [ 259.418059][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 259.511186][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 261.095713][ T9] IPVS: starting estimator thread 0... [ 261.122325][T10977] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 261.196829][T10978] IPVS: using max 33 ests per chain, 79200 per kthread [ 261.346274][T10977] bond5: entered promiscuous mode [ 261.361702][T10977] bond5: entered allmulticast mode [ 261.392567][T10977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.546055][T10979] macvlan0: entered promiscuous mode [ 261.552374][T10979] macvlan0: entered allmulticast mode [ 261.583762][T10979] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 262.008947][T11000] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.168908][T11002] tipc: Enabled bearer , priority 0 [ 262.179744][T11002] syzkaller0: entered promiscuous mode [ 262.187867][T11002] syzkaller0: entered allmulticast mode [ 262.263908][T11002] tipc: Resetting bearer [ 262.288564][T11001] tipc: Resetting bearer [ 262.312055][T11001] tipc: Disabling bearer [ 262.331379][T11004] __nla_validate_parse: 3 callbacks suppressed [ 262.331397][T11004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1321'. [ 262.597550][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 262.865006][T11031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1329'. [ 262.881822][T11031] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1329'. [ 262.915349][T11038] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 262.916803][T11031] netlink: 'syz.2.1329': attribute type 5 has an invalid length. [ 262.926600][T11040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.934954][T11031] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1329'. [ 263.696426][T11050] Can't find ip_set type hash:ngt [ 263.825649][T11055] bridge4: entered promiscuous mode [ 263.869711][T11055] bridge4: entered allmulticast mode [ 264.425029][T11085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1343'. [ 264.542001][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 264.584022][T11100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1346'. [ 264.593091][T11103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 264.606213][T11096] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 264.617597][T11096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 264.631508][T11096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 264.646054][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1346'. [ 264.657778][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 264.746743][T11107] x_tables: duplicate underflow at hook 3 [ 265.044883][T11141] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 265.055214][T11142] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 265.210354][T11144] 8021q: VLANs not supported on ip6tnl0 [ 265.408061][T11144] tc_dump_action: action bad kind [ 266.114202][T11188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.150703][T11189] tc_dump_action: action bad kind [ 266.297803][T11197] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 266.306257][T11195] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 266.698797][T11221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.381524][T11268] __nla_validate_parse: 12 callbacks suppressed [ 267.381541][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 267.405942][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 267.858344][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 268.016752][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 268.041947][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 268.196497][T11300] wireguard0: entered promiscuous mode [ 268.258268][T11300] wireguard0: entered allmulticast mode [ 268.398134][T11308] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 268.556510][T11320] openvswitch: netlink: Message has 572 unknown bytes. [ 268.563678][T11320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.765595][T11332] veth1_vlan: left allmulticast mode [ 268.858103][T11337] geneve2: entered promiscuous mode [ 268.869186][T10838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.964681][T10838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 268.992291][T10838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.066301][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 269.076560][T11353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1406'. [ 269.077676][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 269.155760][T10838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 269.189877][T11349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1406'. [ 269.317137][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.344412][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.575355][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.668497][T11369] netlink: 'syz.1.1411': attribute type 4 has an invalid length. [ 269.893374][T11367] delete_channel: no stack [ 270.158542][T11395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1413'. [ 317.220832][ T1302] aoe: packet could not be sent on wlan0. consider increasing tx_queue_len [ 317.229915][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.542320][T11470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 332.733786][T11477] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1420'. [ 332.743836][T11477] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1420'. [ 332.812425][T11496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1425'. [ 332.827787][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 332.949359][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 333.029912][T11513] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1428'. [ 333.095726][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 333.829447][T11557] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1436'. [ 333.872698][T11557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.971996][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 334.799639][T11610] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 334.831197][T11610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.889997][ T5999] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 334.922494][ T5999] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 334.943881][ T5999] bond0: now running without any active interface! [ 335.075837][T11639] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 335.438499][T11650] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 335.930632][T11671] syzkaller0: entered promiscuous mode [ 335.941172][T11671] syzkaller0: entered allmulticast mode [ 336.196606][T11677] vlan3: entered allmulticast mode [ 336.211922][T11677] veth1: entered allmulticast mode [ 337.266416][T11709] syz.1.1477: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.309236][T11709] CPU: 0 UID: 0 PID: 11709 Comm: syz.1.1477 Not tainted syzkaller #0 PREEMPT(full) [ 337.309260][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.309277][T11709] Call Trace: [ 337.309287][T11709] [ 337.309295][T11709] dump_stack_lvl+0x189/0x250 [ 337.309321][T11709] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 337.309346][T11709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.309364][T11709] ? __pfx__printk+0x10/0x10 [ 337.309386][T11709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.309410][T11709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 337.309442][T11709] warn_alloc+0x214/0x310 [ 337.309471][T11709] ? __pfx_warn_alloc+0x10/0x10 [ 337.309502][T11709] ? __get_vm_area_node+0x28f/0x300 [ 337.309523][T11709] ? hash_netport_create+0x358/0xfe0 [ 337.309548][T11709] __vmalloc_node_range_noprof+0x690/0x12d0 [ 337.309570][T11709] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 337.309619][T11709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.309642][T11709] ? hash_netport_create+0x358/0xfe0 [ 337.309664][T11709] ? rcu_is_watching+0x15/0xb0 [ 337.309683][T11709] ? hash_netport_create+0x358/0xfe0 [ 337.309701][T11709] __kvmalloc_node_noprof+0x670/0x910 [ 337.309725][T11709] ? hash_netport_create+0x358/0xfe0 [ 337.309742][T11709] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 337.309760][T11709] ? hash_netport_create+0x2fe/0xfe0 [ 337.309786][T11709] hash_netport_create+0x358/0xfe0 [ 337.309815][T11709] ? __nla_parse+0x40/0x60 [ 337.309835][T11709] ? __pfx_hash_netport_create+0x10/0x10 [ 337.309858][T11709] ip_set_create+0xa97/0x1940 [ 337.309881][T11709] ? ip_set_create+0x4a2/0x1940 [ 337.309916][T11709] ? __pfx_ip_set_create+0x10/0x10 [ 337.309976][T11709] nfnetlink_rcv_msg+0xb4d/0x1130 [ 337.309999][T11709] ? unwind_get_return_address+0x4d/0x90 [ 337.310017][T11709] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 337.310038][T11709] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 337.310080][T11709] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 337.310161][T11709] netlink_rcv_skb+0x208/0x470 [ 337.310179][T11709] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 337.310207][T11709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.310236][T11709] ? bpf_lsm_capable+0x9/0x20 [ 337.310252][T11709] ? security_capable+0x7e/0x2e0 [ 337.310282][T11709] nfnetlink_rcv+0x282/0x2590 [ 337.310306][T11709] ? __local_bh_enable_ip+0x12d/0x1c0 [ 337.310323][T11709] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 337.310345][T11709] ? __dev_queue_xmit+0x289/0x3140 [ 337.310359][T11709] ? __dev_queue_xmit+0x289/0x3140 [ 337.310378][T11709] ? __dev_queue_xmit+0x1955/0x3140 [ 337.310393][T11709] ? do_syscall_64+0xfa/0xf80 [ 337.310422][T11709] ? __dev_queue_xmit+0x289/0x3140 [ 337.310445][T11709] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 337.310474][T11709] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.310500][T11709] ? ref_tracker_free+0x63a/0x7d0 [ 337.310520][T11709] ? __asan_memcpy+0x40/0x70 [ 337.310538][T11709] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.310575][T11709] ? skb_clone+0x246/0x3a0 [ 337.310595][T11709] ? __netlink_deliver_tap+0x807/0x850 [ 337.310611][T11709] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.310635][T11709] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.310660][T11709] netlink_unicast+0x82f/0x9e0 [ 337.310693][T11709] ? __pfx_netlink_unicast+0x10/0x10 [ 337.310718][T11709] ? netlink_sendmsg+0x642/0xb30 [ 337.310732][T11709] ? skb_put+0x11b/0x210 [ 337.310758][T11709] netlink_sendmsg+0x805/0xb30 [ 337.310784][T11709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.310803][T11709] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.310820][T11709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.310839][T11709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.310856][T11709] __sock_sendmsg+0x21c/0x270 [ 337.310879][T11709] ____sys_sendmsg+0x505/0x820 [ 337.310909][T11709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.310942][T11709] ? import_iovec+0x74/0xa0 [ 337.310968][T11709] ___sys_sendmsg+0x21f/0x2a0 [ 337.310994][T11709] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.311025][T11709] ? futex_wake+0x4b2/0x560 [ 337.311072][T11709] ? __fget_files+0x2a/0x420 [ 337.311086][T11709] ? __fget_files+0x3a0/0x420 [ 337.311120][T11709] __x64_sys_sendmsg+0x19b/0x260 [ 337.311147][T11709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.311188][T11709] ? do_syscall_64+0xbe/0xf80 [ 337.311211][T11709] do_syscall_64+0xfa/0xf80 [ 337.311232][T11709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.311248][T11709] ? clear_bhb_loop+0x60/0xb0 [ 337.311269][T11709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.311285][T11709] RIP: 0033:0x7ff51b78f749 [ 337.311312][T11709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.311326][T11709] RSP: 002b:00007ff51c5e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.311344][T11709] RAX: ffffffffffffffda RBX: 00007ff51b9e5fa0 RCX: 00007ff51b78f749 [ 337.311358][T11709] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 000000000000000a [ 337.311369][T11709] RBP: 00007ff51b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.311379][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.311388][T11709] R13: 00007ff51b9e6038 R14: 00007ff51b9e5fa0 R15: 00007fffc46b5bb8 [ 337.311414][T11709] [ 337.313733][T11709] Mem-Info: [ 337.463576][T11725] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 337.476953][T11709] active_anon:8395 inactive_anon:0 isolated_anon:0 [ 337.476953][T11709] active_file:3082 inactive_file:39961 isolated_file:0 [ 337.476953][T11709] unevictable:768 dirty:78 writeback:0 [ 337.476953][T11709] slab_reclaimable:11670 slab_unreclaimable:136055 [ 337.476953][T11709] mapped:29180 shmem:1355 pagetables:1075 [ 337.476953][T11709] sec_pagetables:0 bounce:0 [ 337.476953][T11709] kernel_misc_reclaimable:0 [ 337.476953][T11709] free:1285727 free_pcp:14110 free_cma:0 [ 337.883010][T11709] Node 0 active_anon:33480kB inactive_anon:0kB active_file:12328kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116720kB dirty:312kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13544kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 337.952516][T11709] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.004689][T11709] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.052398][T11709] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 338.059488][T11709] Node 0 DMA32 free:1236632kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33308kB inactive_anon:0kB active_file:12328kB inactive_file:159640kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:40100kB local_pcp:20960kB free_cma:0kB [ 338.093031][T11709] lowmem_reserve[]: 0 0 0 0 0 [ 338.195760][T11709] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.225502][T11709] lowmem_reserve[]: 0 0 0 0 0 [ 338.230484][T11709] Node 1 Normal free:3893828kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15428kB local_pcp:6816kB free_cma:0kB [ 338.263259][T11709] lowmem_reserve[]: 0 0 0 0 0 [ 338.268116][T11709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.281768][T11709] Node 0 DMA32: 1653*4kB (UME) 764*8kB (UME) 501*16kB (UME) 333*32kB (UME) 158*64kB (UME) 218*128kB (UM) 148*256kB (UME) 82*512kB (UME) 49*1024kB (UM) 3*2048kB (UM) 252*4096kB (UM) = 1237796kB [ 338.305955][T11709] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.327171][T11709] Node 1 Normal: 155*4kB (U) 41*8kB (UME) 33*16kB (UME) 76*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3893828kB [ 338.352345][T11709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.362420][T11709] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 338.372044][T11709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.383324][T11709] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 338.416249][T11709] 44394 total pagecache pages [ 338.428071][T11709] 0 pages in swap cache [ 338.440685][T11709] Free swap = 124996kB [ 338.449430][T11709] Total swap = 124996kB [ 338.458112][T11709] 2097051 pages RAM [ 338.466448][T11709] 0 pages HighMem/MovableOnly [ 338.473421][T11740] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 338.481448][T11709] 424280 pages reserved [ 338.486520][T11709] 0 pages cma reserved [ 338.493035][ T5842] Bluetooth: hci3: link tx timeout [ 338.501237][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.512710][ T5844] Bluetooth: hci3: link tx timeout [ 338.526748][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.534473][ T5844] Bluetooth: hci3: link tx timeout [ 338.539749][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.656173][T11745] netlink: 'syz.1.1486': attribute type 27 has an invalid length. [ 338.665690][T11748] xt_connbytes: Forcing CT accounting to be enabled [ 338.687566][T11749] __nla_validate_parse: 11 callbacks suppressed [ 338.687585][T11749] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1485'. [ 338.751665][T11751] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1488'. [ 339.149631][T11753] delete_channel: no stack [ 339.289970][T11796] Bluetooth: MGMT ver 1.23 [ 339.322039][T11796] geneve3: entered promiscuous mode [ 339.361145][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 339.372047][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.388750][T11801] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 339.517423][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.536004][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.579640][T11803] bond6: (slave bridge6): making interface the new active one [ 339.657415][T11803] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 339.746135][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.387861][T11836] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1508'. [ 340.466807][T11839] IPv4: Oversized IP packet from 127.202.26.0 [ 340.587322][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 340.631241][T11849] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1514'. [ 340.650811][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 341.948032][T11902] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1528'. [ 342.115981][T11909] netlink: 584 bytes leftover after parsing attributes in process `syz.0.1528'. [ 342.361059][T11913] netlink: 'syz.2.1531': attribute type 5 has an invalid length. [ 342.369575][T11913] netlink: 'syz.2.1531': attribute type 5 has an invalid length. [ 342.377492][T11913] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 342.385520][T11913] netlink: 'syz.2.1531': attribute type 1 has an invalid length. [ 342.493517][T11913] IPVS: Scheduler module ip_vs_ not found [ 342.545443][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 342.596434][T11917] netlink: 'syz.1.1532': attribute type 4 has an invalid length. [ 342.614713][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 342.685892][T11925] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 342.705080][T11925] netlink: 'syz.4.1536': attribute type 4 has an invalid length. [ 342.772818][T11928] bond0: (slave rose0): Enslaving as an active interface with an up link [ 342.804647][T11931] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 343.039184][T11941] tipc: Enabling of bearer rejected, failed to enable media [ 343.337007][T11957] syz_tun: entered allmulticast mode [ 343.351147][T11956] syz_tun: left allmulticast mode [ 343.472721][T11969] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 343.574189][T11969] bond7: entered promiscuous mode [ 343.602765][T11983] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20002 [ 343.611786][T11969] bond7: entered allmulticast mode [ 343.627199][T11969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.673933][T11977] erspan1: entered allmulticast mode [ 343.686087][T11977] bond7: (slave erspan1): making interface the new active one [ 343.695296][T11977] erspan1: entered promiscuous mode [ 343.703416][T11977] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 343.765743][T11996] __nla_validate_parse: 9 callbacks suppressed [ 343.765760][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 343.812760][T11996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.062405][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.094493][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.128663][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.149975][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.175333][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.192391][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.203536][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.215267][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 344.230808][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 344.411014][ T6039] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.436298][ T6039] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.454360][ T6039] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.470556][ T6039] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.632372][T12042] bridge0: left promiscuous mode [ 344.637543][T12042] bridge0: left allmulticast mode [ 344.650253][T12042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.681216][T12044] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 344.699517][T12044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 344.742280][T12044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 345.006305][T12064] sctp: [Deprecated]: syz.1.1573 (pid 12064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.006305][T12064] Use struct sctp_sack_info instead [ 345.135898][T12071] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.145751][T12072] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.320576][T12079] tipc: Enabling of bearer rejected, failed to enable media [ 345.413922][T12082] netlink: 'syz.2.1578': attribute type 2 has an invalid length. [ 345.435636][T12082] !: entered promiscuous mode [ 346.317202][T12111] netlink: 'syz.2.1584': attribute type 4 has an invalid length. [ 348.180551][T12157] syz_tun: entered allmulticast mode [ 348.258077][T12157] syz_tun (unregistering): left allmulticast mode [ 348.889002][T12192] __nla_validate_parse: 26 callbacks suppressed [ 348.889022][T12192] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1617'. [ 349.194847][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 349.204323][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 349.619753][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 349.779109][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 350.397125][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1654'. [ 350.727784][T12296] ip6gretap1: entered allmulticast mode [ 350.757251][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 350.767308][T12298] syz_tun: refused to change device tx_queue_len [ 351.499815][T12345] validate_nla: 64 callbacks suppressed [ 351.499835][T12345] netlink: 'syz.4.1687': attribute type 3 has an invalid length. [ 351.610085][T12352] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1690'. [ 352.022852][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 352.032915][T12374] veth1_macvtap: left promiscuous mode [ 352.293167][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'. [ 353.975780][T12514] netlink: 'syz.4.1765': attribute type 12 has an invalid length. [ 353.985669][T12514] netlink: 'syz.4.1765': attribute type 29 has an invalid length. [ 353.993763][T12514] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 354.001915][T12514] netlink: 'syz.4.1765': attribute type 2 has an invalid length. [ 354.010305][T12514] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 354.021163][T12516] __nla_validate_parse: 7 callbacks suppressed [ 354.021182][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1767'. [ 354.022110][T12514] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1765'. [ 354.029535][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 354.156879][T12516] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 354.171849][T12516] bond7 (unregistering): Released all slaves [ 354.283477][T12530] syz_tun: entered allmulticast mode [ 354.300649][T12529] syz_tun: left allmulticast mode [ 354.574919][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1783'. [ 355.138075][T12591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1801'. [ 355.183928][T12591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1801'. [ 355.432506][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 355.495063][T12618] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1813'. [ 355.534836][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1815'. [ 355.729599][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 356.136980][T12662] bridge3: entered allmulticast mode [ 356.169615][T12661] bridge3: left allmulticast mode [ 356.547717][T12684] syzkaller0: entered allmulticast mode [ 356.827361][T12713] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 356.836363][T12713] netlink: 'syz.2.1857': attribute type 2 has an invalid length. [ 358.157979][T12726] wg0: Caught tx_queue_len zero misconfig [ 358.699393][T12764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.714273][T12755] syzkaller0: entered allmulticast mode [ 360.828306][T12828] __nla_validate_parse: 1 callbacks suppressed [ 360.828327][T12828] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1906'. [ 361.104748][T12843] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1911'. [ 361.147693][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 361.227919][T12848] syzkaller0: entered allmulticast mode [ 361.401395][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1914'. [ 361.480000][T12859] warn_alloc: 1 callbacks suppressed [ 361.480020][T12859] syz.0.1916: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.511073][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.0.1916 Not tainted syzkaller #0 PREEMPT(full) [ 361.511098][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.511109][T12859] Call Trace: [ 361.511115][T12859] [ 361.511122][T12859] dump_stack_lvl+0x189/0x250 [ 361.511153][T12859] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 361.511177][T12859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.511192][T12859] ? __pfx__printk+0x10/0x10 [ 361.511211][T12859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.511233][T12859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.511261][T12859] warn_alloc+0x214/0x310 [ 361.511286][T12859] ? __pfx_warn_alloc+0x10/0x10 [ 361.511313][T12859] ? __get_vm_area_node+0x28f/0x300 [ 361.511331][T12859] ? xskq_create+0xbf/0x170 [ 361.511351][T12859] __vmalloc_node_range_noprof+0x690/0x12d0 [ 361.511394][T12859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.511414][T12859] ? __kasan_kmalloc+0x93/0xb0 [ 361.511439][T12859] vmalloc_user_noprof+0xad/0xf0 [ 361.511464][T12859] ? xskq_create+0xbf/0x170 [ 361.511492][T12859] xskq_create+0xbf/0x170 [ 361.511511][T12859] xsk_init_queue+0xb0/0x110 [ 361.511529][T12859] xsk_setsockopt+0x57b/0x8d0 [ 361.511547][T12859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.511566][T12859] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.511591][T12859] ? aa_sock_opt_perm+0xff/0x1a0 [ 361.511610][T12859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 361.511626][T12859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.511640][T12859] do_sock_setsockopt+0x17c/0x1b0 [ 361.511662][T12859] __x64_sys_setsockopt+0x13f/0x1b0 [ 361.511685][T12859] do_syscall_64+0xfa/0xf80 [ 361.511702][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.511716][T12859] ? clear_bhb_loop+0x60/0xb0 [ 361.511733][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.511745][T12859] RIP: 0033:0x7f5690b8f749 [ 361.511759][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.511770][T12859] RSP: 002b:00007f5691994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.511786][T12859] RAX: ffffffffffffffda RBX: 00007f5690de6090 RCX: 00007f5690b8f749 [ 361.511796][T12859] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 361.511804][T12859] RBP: 00007f5690c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 361.511812][T12859] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 361.511820][T12859] R13: 00007f5690de6128 R14: 00007f5690de6090 R15: 00007ffca9c92f38 [ 361.511846][T12859] [ 361.511852][T12859] Mem-Info: [ 361.768911][T12859] active_anon:8428 inactive_anon:0 isolated_anon:0 [ 361.768911][T12859] active_file:3082 inactive_file:39971 isolated_file:0 [ 361.768911][T12859] unevictable:768 dirty:177 writeback:0 [ 361.768911][T12859] slab_reclaimable:12121 slab_unreclaimable:138097 [ 361.768911][T12859] mapped:32253 shmem:1355 pagetables:1228 [ 361.768911][T12859] sec_pagetables:0 bounce:0 [ 361.768911][T12859] kernel_misc_reclaimable:0 [ 361.768911][T12859] free:1280107 free_pcp:17106 free_cma:0 [ 361.814969][T12859] Node 0 active_anon:33712kB inactive_anon:0kB active_file:12328kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129012kB dirty:708kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13872kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.854358][T12859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.885655][T12859] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.915855][T12859] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 361.921873][T12859] Node 0 DMA32 free:1211240kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33712kB inactive_anon:0kB active_file:12328kB inactive_file:159680kB unevictable:1536kB writepending:708kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:52852kB local_pcp:23208kB free_cma:0kB [ 361.975647][T12859] lowmem_reserve[]: 0 0 0 0 0 [ 361.987568][T12859] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.032059][T12859] lowmem_reserve[]: 0 0 0 0 0 [ 362.037013][T12859] Node 1 Normal free:3893828kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15436kB local_pcp:8616kB free_cma:0kB [ 362.076362][T12859] lowmem_reserve[]: 0 0 0 0 0 [ 362.095283][T12859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.129591][T12859] Node 0 DMA32: 2684*4kB (UME) 1311*8kB (UME) 771*16kB (UME) 1*32kB (M) 347*64kB (UME) 467*128kB (UME) 271*256kB (UM) 126*512kB (UM) 31*1024kB (UME) 6*2048kB (UME) 224*4096kB (M) = 1211000kB [ 362.148591][T12859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.160318][T12859] Node 1 Normal: 155*4kB (U) 41*8kB (UME) 33*16kB (UME) 76*32kB (UME) 26*64kB (UME) 7*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3893828kB [ 362.182863][T12859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.192746][T12859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.202212][T12859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.212021][T12859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.221774][T12859] 44404 total pagecache pages [ 362.226463][T12859] 0 pages in swap cache [ 362.230685][T12859] Free swap = 124996kB [ 362.234937][T12859] Total swap = 124996kB [ 362.239247][T12859] 2097051 pages RAM [ 362.243061][T12859] 0 pages HighMem/MovableOnly [ 362.248899][T12859] 424280 pages reserved [ 362.253117][T12859] 0 pages cma reserved [ 363.376590][T12846] siw: device registration error -23 [ 363.379732][T12858] vxcan3: entered allmulticast mode [ 363.409158][T12860] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.562573][T12872] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 363.605939][T12872] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.620351][T12874] pimreg: entered allmulticast mode [ 363.677405][T12879] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.686359][T12879] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.700318][T12879] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 363.906603][T12872] veth1: entered promiscuous mode [ 363.929801][T12872] bond8: (slave veth1): Enslaving as an active interface with a down link [ 363.960973][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1922'. [ 364.638874][T12914] syzkaller0: entered allmulticast mode [ 365.053736][T12949] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1937'. [ 365.067539][T12949] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.285066][T12962] xt_addrtype: ipv6 does not support BROADCAST matching [ 366.259590][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 366.627070][T12969] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1942'. [ 366.782337][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 366.898576][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'. [ 367.107120][T12993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.157403][T12993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.175708][T12993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.548502][T12993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.559290][T12993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.571391][T12993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.857643][T12993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.882691][T12993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.904632][T12993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.159244][T12993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.186820][T12993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.216892][T12993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.296906][T13014] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 368.319664][T13014] veth0_macvtap: left promiscuous mode [ 368.352474][T13014] team0: Device veth0_macvtap failed to register rx_handler [ 368.770822][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 368.880128][ T61] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.906807][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 368.931513][ T61] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.042767][ T7629] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.072444][ T7629] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.088195][ T7629] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.134381][ T7629] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.156824][ T7629] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.182491][ T7629] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.353524][ T143] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.383121][ T143] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.401480][ T143] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.514041][T13062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.514419][T13061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.527712][T13063] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1968'. [ 370.067460][T13095] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1977'. [ 370.662509][T13129] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.679251][T13129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.689647][T13129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.865059][T13129] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.903042][T13129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.913973][T13129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 371.100995][T13129] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.116528][T13129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 371.143688][T13129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.364832][T13129] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.374874][T13129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 374.384805][T13129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.421152][T13170] netlink: 'syz.2.1993': attribute type 3 has an invalid length. [ 374.430993][T13170] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1993'. [ 374.506124][T13173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1994'. [ 374.567418][T13173] ipvlan0: entered promiscuous mode [ 374.623819][ T5999] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.638023][ T5999] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.659008][ T5999] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.765359][ T7627] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.777297][ T7627] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.797493][ T7627] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.857821][ T7627] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.866057][ T7627] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.900023][ T7627] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.952028][T13189] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1999'. [ 374.979522][ T7627] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.000852][ T7627] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 375.009321][ T7627] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.919833][T13243] ¾x9ÿ: renamed from bridge_slave_0 [ 375.960785][T13241] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 375.981306][T13241] nbd: error processing sock list [ 376.002542][T13241] siw: device registration error -23 [ 376.178417][T13245] bond8: option all_slaves_active: invalid value (13) [ 376.191093][T13245] bond8 (unregistering): Released all slaves [ 376.374671][T13231] Cannot find add_set index 2 as target [ 376.780343][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2022'. [ 377.089179][T13282] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2025'. [ 377.116856][T13282] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 377.280711][T13294] sctp: [Deprecated]: syz.3.2026 (pid 13294) Use of int in maxseg socket option. [ 377.280711][T13294] Use struct sctp_assoc_value instead [ 377.554103][T13299] syzkaller0: entered promiscuous mode [ 377.566897][T13299] syzkaller0: entered allmulticast mode [ 377.800342][T13305] bridge3: entered allmulticast mode [ 377.841610][T13304] bridge3: left allmulticast mode [ 378.059765][T13312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2033'. [ 378.445327][T13334] siw: device registration error -23 [ 378.560088][T13343] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 378.583778][T13343] netlink: 'syz.3.2042': attribute type 2 has an invalid length. [ 378.689706][T13348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2043'. [ 378.739209][T13349] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2043'. [ 378.790048][T13354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 378.968105][T13366] tipc: Enabling of bearer rejected, failed to enable media [ 379.094170][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 379.104355][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 379.114942][T13370] netlink: 'syz.1.2048': attribute type 13 has an invalid length. [ 379.455075][T13394] vlan0: entered promiscuous mode [ 379.620492][T13403] __nla_validate_parse: 1 callbacks suppressed [ 379.620512][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2059'. [ 379.738360][T13407] tipc: Enabling of bearer rejected, failed to enable media [ 379.759960][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 379.916856][T13414] tipc: Invalid UDP bearer configuration [ 379.917113][T13414] tipc: Enabling of bearer rejected, failed to enable media [ 380.662506][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 380.684020][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 380.871657][T13429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2067'. [ 380.891251][T13446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.898927][T13446] IPv6: NLM_F_CREATE should be set when creating new route [ 380.906151][T13446] IPv6: NLM_F_CREATE should be set when creating new route [ 380.918914][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2071'. [ 381.017137][T13429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2067'. [ 381.584702][T13481] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 381.742081][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 381.752426][T13498] syzkaller1: entered allmulticast mode [ 382.063287][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 382.074610][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 382.084011][T13516] netlink: 'syz.4.2090': attribute type 5 has an invalid length. [ 382.518525][T13538] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 382.537252][T13539] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 382.714175][T13538] !: entered promiscuous mode [ 382.774477][T13539] !: left promiscuous mode [ 383.302074][T13578] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.801989][T13591] netlink: 'syz.1.2115': attribute type 6 has an invalid length. [ 384.980244][T13650] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 385.021198][T13650] __nla_validate_parse: 5 callbacks suppressed [ 385.021220][T13650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 385.048556][T13650] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 385.238199][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 385.586388][T13671] netlink: 'syz.0.2139': attribute type 11 has an invalid length. [ 386.025151][T13685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2141'. [ 386.229509][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 386.251666][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 386.281434][T13704] bond8: entered promiscuous mode [ 386.286978][T13704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.411565][T13720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2150'. [ 386.566050][T13704] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.577072][T13704] bond9: entered promiscuous mode [ 386.582767][T13704] bond8: (slave bond9): Enslaving as an active interface with an up link [ 386.620291][T13728] erspan0: left allmulticast mode [ 386.650849][T13728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.718285][T13731] netlink: 'syz.3.2153': attribute type 1 has an invalid length. [ 386.821448][T13731] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.832908][T13746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 386.838927][T13733] syzkaller1: entered promiscuous mode [ 386.847678][T13733] syzkaller1: entered allmulticast mode [ 386.904535][T13740] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.912087][T13740] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 386.915289][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2159'. [ 386.928358][T13740] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 387.004990][T13745] veth9: entered allmulticast mode [ 387.016153][T13745] bond9: (slave veth9): Enslaving as an active interface with a down link [ 387.067425][T13756] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 387.460605][T10833] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.502249][T10833] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.535078][T10833] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.559795][T10833] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.033429][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 388.044385][T13813] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2175'. [ 388.517881][T13856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.640494][T13859] bond8: option lacp_active: invalid value (8) [ 388.662005][T13859] bond8 (unregistering): Released all slaves [ 388.867687][T13875] syzkaller0: entered promiscuous mode [ 388.880387][T13875] syzkaller0: entered allmulticast mode [ 389.345868][T13903] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 389.439540][T13903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.452225][T13904] can: request_module (can-proto-0) failed. [ 389.589351][T13917] netlink: 'syz.1.2197': attribute type 1 has an invalid length. [ 389.660868][T13920] netlink: 'syz.0.2196': attribute type 9 has an invalid length. [ 389.697894][T13909] bond7 (unregistering): Released all slaves [ 389.753121][T13902] syzkaller0: entered promiscuous mode [ 389.766825][T13902] syzkaller0: entered allmulticast mode [ 391.500679][T13913] bond8: (slave geneve2): making interface the new active one [ 391.508770][T13913] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 391.595748][T13933] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 391.599141][ T3733] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 391.634371][ T3733] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 391.690259][ T3733] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 391.720306][ T3733] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 391.787744][T13944] __nla_validate_parse: 4 callbacks suppressed [ 391.787765][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 391.852764][T13941] tipc: Enabled bearer , priority 0 [ 391.897363][T13948] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.2205'. [ 391.922337][T13948] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 391.937264][T13962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 392.208713][T13934] tipc: Disabling bearer [ 392.439167][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'. [ 392.646361][T13996] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2216'. [ 392.655732][T13996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2216'. [ 392.665080][T13996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2216'. [ 392.671271][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 392.868073][T14005] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2220'. [ 392.868417][T14003] : entered promiscuous mode [ 392.993748][T14014] tipc: Enabled bearer , priority 0 [ 393.014649][T14014] syzkaller0: entered promiscuous mode [ 393.027762][T14014] syzkaller0: entered allmulticast mode [ 393.092205][T14014] tipc: Resetting bearer [ 393.107230][T14014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2224'. [ 393.126466][T14014] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 393.165924][T14013] tipc: Resetting bearer [ 393.243792][T14013] tipc: Disabling bearer [ 393.329508][T14027] syzkaller0: entered promiscuous mode [ 393.335024][T14027] syzkaller0: entered allmulticast mode [ 393.395754][T14027] netlink: 'syz.2.2227': attribute type 16 has an invalid length. [ 393.416845][T14027] netlink: 'syz.2.2227': attribute type 17 has an invalid length. [ 393.487775][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.502100][T14027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.702840][T14026] netlink: 'syz.4.2228': attribute type 10 has an invalid length. [ 394.479979][T14079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.487292][T14079] IPv6: NLM_F_CREATE should be set when creating new route [ 394.494587][T14079] IPv6: NLM_F_CREATE should be set when creating new route [ 394.501864][T14079] IPv6: NLM_F_CREATE should be set when creating new route [ 395.391312][T14026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 395.576050][T14083] tipc: Enabling of bearer rejected, already enabled [ 395.589393][T14083] netlink: 'syz.0.2242': attribute type 4 has an invalid length. [ 395.728209][T14087] veth1_to_bond: entered allmulticast mode [ 395.819069][T14087] veth1_to_bond: left allmulticast mode [ 395.829248][T14091] nbd: must specify at least one socket [ 395.863855][T14091] nbd: must specify at least one socket [ 395.997149][T14107] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 396.241735][T14117] SET target dimension over the limit! [ 396.728334][T14146] bridge4: port 1(veth5) entered blocking state [ 396.734815][T14146] bridge4: port 1(veth5) entered disabled state [ 396.750710][T14146] veth5: entered allmulticast mode [ 396.762881][T14146] veth5: entered promiscuous mode [ 396.799502][T14146] __nla_validate_parse: 13 callbacks suppressed [ 396.799520][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 396.893435][T14139] bridge4: port 2(veth7) entered blocking state [ 396.905823][T14139] bridge4: port 2(veth7) entered disabled state [ 396.923305][T14139] veth7: entered allmulticast mode [ 396.945369][T14139] veth7: entered promiscuous mode [ 397.261463][T14170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.387812][T14170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.423188][T14190] netlink: 'syz.1.2270': attribute type 62 has an invalid length. [ 397.432097][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 397.486178][T14170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.508017][T14194] macsec1: entered promiscuous mode [ 397.513453][T14194] macsec1: entered allmulticast mode [ 397.560873][T14170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.570509][T14196] netlink: get zone limit has 4 unknown bytes [ 397.592334][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 397.655643][T14199] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2273'. [ 397.702209][ T143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 397.742721][T10833] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 397.769499][T10833] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 397.799410][T10833] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 397.864274][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 397.983131][T14214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2279'. [ 398.028504][T14220] netlink: 'syz.3.2280': attribute type 1 has an invalid length. [ 398.382044][T14240] netlink: 'syz.1.2286': attribute type 13 has an invalid length. [ 399.037745][T14288] netlink: 'syz.1.2299': attribute type 33 has an invalid length. [ 399.074667][T14288] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2299'. [ 399.115437][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 399.279786][T14300] syzkaller1: entered promiscuous mode [ 399.296788][T14300] syzkaller1: entered allmulticast mode [ 399.388776][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 400.226561][T14321] lo: entered allmulticast mode [ 400.234663][T14320] lo: left allmulticast mode [ 400.277330][T14324] macvtap1: entered promiscuous mode [ 400.282664][T14324] batadv0: entered promiscuous mode [ 400.318335][T14324] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 400.329939][T14324] batadv0: left promiscuous mode [ 400.358196][T14329] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2312'. [ 401.153086][T14377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.491644][T14386] syzkaller0: entered allmulticast mode [ 403.529827][T14429] 8021q: VLANs not supported on caif0 [ 403.569433][T14429] 8021q: VLANs not supported on sit0 [ 403.587405][T14423] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 403.649228][T14436] macsec1: entered promiscuous mode [ 403.654595][T14436] hsr0: entered promiscuous mode [ 403.662345][T14436] hsr0: left promiscuous mode [ 403.951060][T14463] netlink: 'syz.1.2342': attribute type 13 has an invalid length. [ 403.961697][T14463] __nla_validate_parse: 1 callbacks suppressed [ 403.961716][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 403.987871][T14459] vlan0: entered promiscuous mode [ 403.992955][T14459] geneve1: entered promiscuous mode [ 404.029493][T14459] vlan0: entered allmulticast mode [ 404.034792][T14459] geneve1: entered allmulticast mode [ 404.112397][T14475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2345'. [ 404.146977][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 404.156757][T14475] macvlan0: entered allmulticast mode [ 404.162212][T14475] veth1_vlan: entered allmulticast mode [ 404.558279][T14502] bridge0: entered promiscuous mode [ 404.567161][T14502] bridge0: port 3(macvtap0) entered blocking state [ 404.575877][T14502] bridge0: port 3(macvtap0) entered disabled state [ 404.583864][T14502] macvtap0: entered allmulticast mode [ 404.589624][T14502] bridge0: entered allmulticast mode [ 404.603138][T14502] macvtap0: left allmulticast mode [ 404.609879][T14502] bridge0: left allmulticast mode [ 404.617876][T14502] bridge0: left promiscuous mode [ 404.880135][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 404.913107][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'. [ 405.014735][T14513] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 405.085312][T14513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.188562][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2358'. [ 405.555430][T14539] syzkaller0: entered promiscuous mode [ 405.561803][T14539] syzkaller0: entered allmulticast mode [ 405.613993][T14539] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2365'. [ 405.809730][T14552] batadv_slave_0: Caught tx_queue_len zero misconfig [ 406.041534][T14568] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 406.145000][T14571] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 406.165936][T14571] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2375'. [ 406.254912][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'. [ 406.309494][T14578] FAULT_INJECTION: forcing a failure. [ 406.309494][T14578] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 406.348326][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.1.2378 Not tainted syzkaller #0 PREEMPT(full) [ 406.348351][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.348364][T14578] Call Trace: [ 406.348373][T14578] [ 406.348381][T14578] dump_stack_lvl+0x189/0x250 [ 406.348404][T14578] ? __pfx____ratelimit+0x10/0x10 [ 406.348424][T14578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.348440][T14578] ? __pfx__printk+0x10/0x10 [ 406.348461][T14578] ? __might_fault+0xb0/0x130 [ 406.348490][T14578] should_fail_ex+0x414/0x560 [ 406.348514][T14578] _copy_from_user+0x2d/0xb0 [ 406.348536][T14578] ___sys_sendmsg+0x158/0x2a0 [ 406.348562][T14578] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.348591][T14578] ? rcu_read_lock_any_held+0xb3/0x120 [ 406.348638][T14578] ? __fget_files+0x2a/0x420 [ 406.348652][T14578] ? __fget_files+0x3a0/0x420 [ 406.348678][T14578] __x64_sys_sendmsg+0x19b/0x260 [ 406.348702][T14578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.348733][T14578] ? __pfx_ksys_write+0x10/0x10 [ 406.348755][T14578] ? do_syscall_64+0xbe/0xf80 [ 406.348778][T14578] do_syscall_64+0xfa/0xf80 [ 406.348798][T14578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.348821][T14578] ? clear_bhb_loop+0x60/0xb0 [ 406.348840][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.348854][T14578] RIP: 0033:0x7ff51b78f749 [ 406.348869][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.348883][T14578] RSP: 002b:00007ff51c5e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.348901][T14578] RAX: ffffffffffffffda RBX: 00007ff51b9e5fa0 RCX: 00007ff51b78f749 [ 406.348914][T14578] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 406.348924][T14578] RBP: 00007ff51c5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 406.348934][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.348942][T14578] R13: 00007ff51b9e6038 R14: 00007ff51b9e5fa0 R15: 00007fffc46b5bb8 [ 406.348970][T14578] [ 406.632659][T14592] sctp: [Deprecated]: syz.2.2382 (pid 14592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.632659][T14592] Use struct sctp_sack_info instead [ 406.802136][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 406.882841][T14617] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 407.010980][T14621] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 407.021178][T14621] bond11: (slave batadv1): making interface the new active one [ 407.029844][T14621] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 407.055919][T14605] xt_TCPMSS: Only works on TCP SYN packets [ 407.232622][T14638] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 407.253447][T14638] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 407.773243][T14666] FAULT_INJECTION: forcing a failure. [ 407.773243][T14666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.789395][T14666] CPU: 1 UID: 0 PID: 14666 Comm: syz.4.2402 Not tainted syzkaller #0 PREEMPT(full) [ 407.789425][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.789436][T14666] Call Trace: [ 407.789442][T14666] [ 407.789448][T14666] dump_stack_lvl+0x189/0x250 [ 407.789471][T14666] ? __pfx____ratelimit+0x10/0x10 [ 407.789492][T14666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.789509][T14666] ? __pfx__printk+0x10/0x10 [ 407.789531][T14666] ? __might_fault+0xb0/0x130 [ 407.789561][T14666] should_fail_ex+0x414/0x560 [ 407.789590][T14666] _copy_from_iter+0x1cd/0x1630 [ 407.789614][T14666] ? __build_skb_around+0x22d/0x3c0 [ 407.789640][T14666] ? __pfx__copy_from_iter+0x10/0x10 [ 407.789655][T14666] ? __alloc_skb+0x2f1/0x430 [ 407.789677][T14666] ? __pfx___alloc_skb+0x10/0x10 [ 407.789700][T14666] ? netlink_sendmsg+0x642/0xb30 [ 407.789715][T14666] ? skb_put+0x11b/0x210 [ 407.789740][T14666] netlink_sendmsg+0x6b2/0xb30 [ 407.789767][T14666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.789787][T14666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.789803][T14666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.789823][T14666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.789839][T14666] __sock_sendmsg+0x21c/0x270 [ 407.789860][T14666] ____sys_sendmsg+0x505/0x820 [ 407.789888][T14666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.789919][T14666] ? import_iovec+0x74/0xa0 [ 407.789942][T14666] ___sys_sendmsg+0x21f/0x2a0 [ 407.789965][T14666] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.789991][T14666] ? rcu_read_lock_any_held+0xb3/0x120 [ 407.790035][T14666] ? __fget_files+0x2a/0x420 [ 407.790049][T14666] ? __fget_files+0x3a0/0x420 [ 407.790073][T14666] __x64_sys_sendmsg+0x19b/0x260 [ 407.790096][T14666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.790125][T14666] ? __pfx_ksys_write+0x10/0x10 [ 407.790148][T14666] ? do_syscall_64+0xbe/0xf80 [ 407.790170][T14666] do_syscall_64+0xfa/0xf80 [ 407.790189][T14666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.790204][T14666] ? clear_bhb_loop+0x60/0xb0 [ 407.790222][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.790237][T14666] RIP: 0033:0x7f4a50b8f749 [ 407.790251][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.790265][T14666] RSP: 002b:00007f4a51ac9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.790283][T14666] RAX: ffffffffffffffda RBX: 00007f4a50de5fa0 RCX: 00007f4a50b8f749 [ 407.790296][T14666] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 407.790306][T14666] RBP: 00007f4a51ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 407.790316][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.790326][T14666] R13: 00007f4a50de6038 R14: 00007f4a50de5fa0 R15: 00007ffdff415e98 [ 407.790354][T14666] [ 408.215113][T14680] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 529.216790][T14720] Bluetooth: hci3: command 0x0405 tx timeout [ 555.296920][ T31] INFO: task kworker/0:2:179 blocked for more than 143 seconds. [ 555.304621][ T31] Not tainted syzkaller #0 [ 555.309787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.318503][ T31] task:kworker/0:2 state:D stack:22936 pid:179 tgid:179 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 555.330649][ T31] Workqueue: events rfkill_sync_work [ 555.336010][ T31] Call Trace: [ 555.339335][ T31] [ 555.342259][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 555.346962][ T31] ? __pfx___schedule+0x10/0x10 [ 555.352056][ T31] ? schedule+0x91/0x360 [ 555.356905][ T31] schedule+0x165/0x360 [ 555.361091][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.366570][ T31] __mutex_lock+0x7e6/0x1350 [ 555.371545][ T31] ? __mutex_lock+0x5bb/0x1350 [ 555.376899][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 555.382263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 555.387444][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 555.392832][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.399102][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 555.405448][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 555.411502][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 555.416679][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 555.422415][ T31] rfkill_set_block+0x1d2/0x440 [ 555.427367][ T31] rfkill_sync_work+0x114/0x200 [ 555.432229][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 555.438030][ T31] process_scheduled_works+0xad1/0x1770 [ 555.443622][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.466739][ T31] worker_thread+0x8a0/0xda0 [ 555.471413][ T31] kthread+0x711/0x8a0 [ 555.475504][ T31] ? __pfx_worker_thread+0x10/0x10 [ 555.507032][ T31] ? __pfx_kthread+0x10/0x10 [ 555.511684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.521523][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 555.526868][ T31] ? __pfx_kthread+0x10/0x10 [ 555.531467][ T31] ret_from_fork+0x599/0xb30 [ 555.536046][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.541214][ T31] ? __switch_to_asm+0x39/0x70 [ 555.545981][ T31] ? __switch_to_asm+0x33/0x70 [ 555.550830][ T31] ? __pfx_kthread+0x10/0x10 [ 555.555421][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.560388][ T31] [ 555.563514][ T31] INFO: task kworker/0:4:5910 blocked for more than 143 seconds. [ 555.571281][ T31] Not tainted syzkaller #0 [ 555.576256][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.584956][ T31] task:kworker/0:4 state:D stack:22080 pid:5910 tgid:5910 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 555.597401][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 555.604142][ T31] Call Trace: [ 555.607720][ T31] [ 555.610678][ T31] __schedule+0x14bc/0x5000 [ 555.615229][ T31] ? __pfx___schedule+0x10/0x10 [ 555.620136][ T31] ? schedule+0x91/0x360 [ 555.624370][ T31] schedule+0x165/0x360 [ 555.628560][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.634008][ T31] __mutex_lock+0x7e6/0x1350 [ 555.638637][ T31] ? __mutex_lock+0x5bb/0x1350 [ 555.643403][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 555.649701][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 555.654727][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 555.660619][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 555.666364][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 555.672470][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 555.678225][ T31] process_scheduled_works+0xad1/0x1770 [ 555.683804][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.689874][ T31] worker_thread+0x8a0/0xda0 [ 555.694471][ T31] kthread+0x711/0x8a0 [ 555.698721][ T31] ? __pfx_worker_thread+0x10/0x10 [ 555.703851][ T31] ? __pfx_kthread+0x10/0x10 [ 555.708719][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.713928][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 555.719195][ T31] ? __pfx_kthread+0x10/0x10 [ 555.723772][ T31] ret_from_fork+0x599/0xb30 [ 555.728620][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.733765][ T31] ? __switch_to_asm+0x39/0x70 [ 555.738660][ T31] ? __switch_to_asm+0x33/0x70 [ 555.743434][ T31] ? __pfx_kthread+0x10/0x10 [ 555.748079][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.752840][ T31] [ 555.755901][ T31] INFO: task syz.3.2319:14358 blocked for more than 143 seconds. [ 555.763923][ T31] Not tainted syzkaller #0 [ 555.768897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.777786][ T31] task:syz.3.2319 state:D stack:25784 pid:14358 tgid:14358 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 555.790322][ T31] Call Trace: [ 555.793631][ T31] [ 555.796556][ T31] __schedule+0x14bc/0x5000 [ 555.801182][ T31] ? stack_trace_save+0x9c/0xe0 [ 555.806040][ T31] ? __pfx___schedule+0x10/0x10 [ 555.810959][ T31] ? schedule+0x91/0x360 [ 555.815214][ T31] schedule+0x165/0x360 [ 555.819414][ T31] schedule_timeout+0x9a/0x270 [ 555.824202][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 555.829666][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.834856][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 555.840311][ T31] ? wait_for_completion+0x267/0x5d0 [ 555.845610][ T31] wait_for_completion+0x2bf/0x5d0 [ 555.850786][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 555.856441][ T31] ? __flush_work+0xd2/0xbc0 [ 555.861226][ T31] ? __flush_work+0xd2/0xbc0 [ 555.865844][ T31] __flush_work+0x9b9/0xbc0 [ 555.870479][ T31] ? __flush_work+0xd2/0xbc0 [ 555.875075][ T31] ? __pfx___flush_work+0x10/0x10 [ 555.880272][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 555.885569][ T31] ? __pfx___cancel_work+0x10/0x10 [ 555.890736][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 555.896369][ T31] ? __cancel_work_sync+0x5c/0x110 [ 555.901850][ T31] __cancel_work_sync+0xbe/0x110 [ 555.907029][ T31] rfkill_unregister+0x92/0x220 [ 555.911882][ T31] nfc_unregister_device+0x96/0x2a0 [ 555.917134][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 555.922856][ T31] virtual_ncidev_close+0x56/0x90 [ 555.928025][ T31] __fput+0x44c/0xa70 [ 555.932031][ T31] task_work_run+0x1d4/0x260 [ 555.936904][ T31] ? __pfx_task_work_run+0x10/0x10 [ 555.942030][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 555.947627][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 555.953090][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 555.958536][ T31] ? rcu_is_watching+0x15/0xb0 [ 555.963532][ T31] do_syscall_64+0x2e3/0xf80 [ 555.968299][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.974355][ T31] ? clear_bhb_loop+0x60/0xb0 [ 555.979109][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.985005][ T31] RIP: 0033:0x7fec5378f749 [ 555.989580][ T31] RSP: 002b:00007ffd413497a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 555.998210][ T31] RAX: 0000000000000000 RBX: 0000000000061d01 RCX: 00007fec5378f749 [ 556.007074][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 556.015174][ T31] RBP: 00007fec539e7da0 R08: 0000000000000001 R09: 0000001e41349a9f [ 556.023226][ T31] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007fec539e5fac [ 556.031242][ T31] R13: 00007fec539e5fa0 R14: ffffffffffffffff R15: 00007ffd413498c0 [ 556.039300][ T31] [ 556.042373][ T31] INFO: task syz.0.2398:14650 blocked for more than 144 seconds. [ 556.050166][ T31] Not tainted syzkaller #0 [ 556.055113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.067811][ T31] task:syz.0.2398 state:D stack:27240 pid:14650 tgid:14648 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 556.079805][ T31] Call Trace: [ 556.083073][ T31] [ 556.085989][ T31] __schedule+0x14bc/0x5000 [ 556.090562][ T31] ? __pfx___schedule+0x10/0x10 [ 556.095409][ T31] ? schedule+0x91/0x360 [ 556.099693][ T31] schedule+0x165/0x360 [ 556.103920][ T31] schedule_preempt_disabled+0x13/0x30 [ 556.109633][ T31] __mutex_lock+0x7e6/0x1350 [ 556.114229][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.119055][ T31] ? rfkill_fop_open+0x12d/0x820 [ 556.123992][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.129058][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 556.134336][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 556.139779][ T31] rfkill_fop_open+0x12d/0x820 [ 556.144557][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 556.149888][ T31] misc_open+0x2d5/0x350 [ 556.154147][ T31] chrdev_open+0x4cc/0x5e0 [ 556.158747][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.163681][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 556.170048][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.174979][ T31] do_dentry_open+0x7ce/0x1420 [ 556.179825][ T31] vfs_open+0x3b/0x340 [ 556.183908][ T31] ? path_openat+0x33f3/0x3dd0 [ 556.188696][ T31] path_openat+0x340e/0x3dd0 [ 556.193288][ T31] ? do_sys_openat2+0xbc/0x200 [ 556.198078][ T31] ? __x64_sys_openat+0x138/0x170 [ 556.203087][ T31] ? __pfx_path_openat+0x10/0x10 [ 556.208289][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.213255][ T31] do_filp_open+0x1fa/0x410 [ 556.217811][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 556.222835][ T31] ? _raw_spin_unlock+0x28/0x50 [ 556.227713][ T31] ? alloc_fd+0x64c/0x6c0 [ 556.232039][ T31] do_sys_openat2+0x121/0x200 [ 556.236763][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.241957][ T31] ? rcu_is_watching+0x15/0xb0 [ 556.246761][ T31] __x64_sys_openat+0x138/0x170 [ 556.251604][ T31] do_syscall_64+0xfa/0xf80 [ 556.256097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.262355][ T31] ? clear_bhb_loop+0x60/0xb0 [ 556.267055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.272932][ T31] RIP: 0033:0x7f5690b8f749 [ 556.277384][ T31] RSP: 002b:00007f56919b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.285799][ T31] RAX: ffffffffffffffda RBX: 00007f5690de5fa0 RCX: 00007f5690b8f749 [ 556.293801][ T31] RDX: 000000000006ad01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 556.301807][ T31] RBP: 00007f5690c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.309915][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.317922][ T31] R13: 00007f5690de6038 R14: 00007f5690de5fa0 R15: 00007ffca9c92f38 [ 556.325893][ T31] [ 556.329014][ T31] INFO: task syz.2.2401:14664 blocked for more than 144 seconds. [ 556.336827][ T31] Not tainted syzkaller #0 [ 556.341768][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.350564][ T31] task:syz.2.2401 state:D stack:28152 pid:14664 tgid:14663 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 556.362896][ T31] Call Trace: [ 556.366172][ T31] [ 556.369143][ T31] __schedule+0x14bc/0x5000 [ 556.373683][ T31] ? __pfx___schedule+0x10/0x10 [ 556.378567][ T31] ? schedule+0x91/0x360 [ 556.382804][ T31] schedule+0x165/0x360 [ 556.386985][ T31] schedule_preempt_disabled+0x13/0x30 [ 556.392441][ T31] __mutex_lock+0x7e6/0x1350 [ 556.397073][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.402011][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.407064][ T31] ? misc_open+0x51/0x350 [ 556.411428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.416459][ T31] misc_open+0x51/0x350 [ 556.420839][ T31] chrdev_open+0x4cc/0x5e0 [ 556.425255][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.430216][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 556.436538][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.441514][ T31] do_dentry_open+0x7ce/0x1420 [ 556.446379][ T31] vfs_open+0x3b/0x340 [ 556.450500][ T31] ? path_openat+0x33f3/0x3dd0 [ 556.455275][ T31] path_openat+0x340e/0x3dd0 [ 556.460088][ T31] ? do_sys_openat2+0xbc/0x200 [ 556.464850][ T31] ? __x64_sys_openat+0x138/0x170 [ 556.469999][ T31] ? __pfx_path_openat+0x10/0x10 [ 556.474970][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.480010][ T31] do_filp_open+0x1fa/0x410 [ 556.484566][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 556.489664][ T31] ? _raw_spin_unlock+0x28/0x50 [ 556.494523][ T31] ? alloc_fd+0x64c/0x6c0 [ 556.499580][ T31] do_sys_openat2+0x121/0x200 [ 556.504294][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.509681][ T31] ? rcu_is_watching+0x15/0xb0 [ 556.514442][ T31] __x64_sys_openat+0x138/0x170 [ 556.519391][ T31] do_syscall_64+0xfa/0xf80 [ 556.523899][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.530017][ T31] ? clear_bhb_loop+0x60/0xb0 [ 556.534691][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.540655][ T31] RIP: 0033:0x7effbd58f749 [ 556.545070][ T31] RSP: 002b:00007effbe4cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.553524][ T31] RAX: ffffffffffffffda RBX: 00007effbd7e5fa0 RCX: 00007effbd58f749 [ 556.561678][ T31] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 556.569686][ T31] RBP: 00007effbd613f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.577694][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.585650][ T31] R13: 00007effbd7e6038 R14: 00007effbd7e5fa0 R15: 00007ffccdc4efd8 [ 556.593659][ T31] [ 556.596736][ T31] INFO: task syz.4.2403:14671 blocked for more than 144 seconds. [ 556.604447][ T31] Not tainted syzkaller #0 [ 556.609866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.618621][ T31] task:syz.4.2403 state:D stack:28152 pid:14671 tgid:14670 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 556.630583][ T31] Call Trace: [ 556.633893][ T31] [ 556.636879][ T31] __schedule+0x14bc/0x5000 [ 556.641436][ T31] ? __pfx___schedule+0x10/0x10 [ 556.646307][ T31] ? schedule+0x91/0x360 [ 556.650614][ T31] schedule+0x165/0x360 [ 556.654759][ T31] schedule_preempt_disabled+0x13/0x30 [ 556.660378][ T31] __mutex_lock+0x7e6/0x1350 [ 556.664959][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.669937][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.674738][ T31] ? misc_open+0x51/0x350 [ 556.679128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.684162][ T31] misc_open+0x51/0x350 [ 556.688389][ T31] chrdev_open+0x4cc/0x5e0 [ 556.692801][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.697771][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 556.704097][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.709204][ T31] do_dentry_open+0x7ce/0x1420 [ 556.713968][ T31] vfs_open+0x3b/0x340 [ 556.718082][ T31] ? path_openat+0x33f3/0x3dd0 [ 556.722853][ T31] path_openat+0x340e/0x3dd0 [ 556.727490][ T31] ? do_sys_openat2+0xbc/0x200 [ 556.732254][ T31] ? __x64_sys_openat+0x138/0x170 [ 556.737319][ T31] ? __pfx_path_openat+0x10/0x10 [ 556.742255][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.747227][ T31] do_filp_open+0x1fa/0x410 [ 556.751742][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 556.757097][ T31] ? _raw_spin_unlock+0x28/0x50 [ 556.761967][ T31] ? alloc_fd+0x64c/0x6c0 [ 556.766327][ T31] do_sys_openat2+0x121/0x200 [ 556.771059][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.776246][ T31] ? exc_page_fault+0x82/0x100 [ 556.781082][ T31] __x64_sys_openat+0x138/0x170 [ 556.785925][ T31] do_syscall_64+0xfa/0xf80 [ 556.790464][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.796712][ T31] ? clear_bhb_loop+0x60/0xb0 [ 556.801413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.807456][ T31] RIP: 0033:0x7f4a50b8f749 [ 556.811856][ T31] RSP: 002b:00007f4a51ac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.820685][ T31] RAX: ffffffffffffffda RBX: 00007f4a50de5fa0 RCX: 00007f4a50b8f749 [ 556.828724][ T31] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 556.836777][ T31] RBP: 00007f4a50c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.844759][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.852782][ T31] R13: 00007f4a50de6038 R14: 00007f4a50de5fa0 R15: 00007ffdff415e98 [ 556.860913][ T31] [ 556.863966][ T31] INFO: task syz.4.2403:14673 blocked for more than 144 seconds. [ 556.871739][ T31] Not tainted syzkaller #0 [ 556.876710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.885376][ T31] task:syz.4.2403 state:D stack:28152 pid:14673 tgid:14670 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 556.897520][ T31] Call Trace: [ 556.900816][ T31] [ 556.903735][ T31] __schedule+0x14bc/0x5000 [ 556.911393][ T31] ? __pfx___schedule+0x10/0x10 [ 556.916269][ T31] ? schedule+0x91/0x360 [ 556.920595][ T31] schedule+0x165/0x360 [ 556.924764][ T31] schedule_preempt_disabled+0x13/0x30 [ 556.930295][ T31] __mutex_lock+0x7e6/0x1350 [ 556.934897][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 556.939887][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.944659][ T31] ? misc_open+0x51/0x350 [ 556.949171][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.954238][ T31] misc_open+0x51/0x350 [ 556.958483][ T31] chrdev_open+0x4cc/0x5e0 [ 556.962913][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.967873][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 556.974211][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 556.979848][ T31] do_dentry_open+0x7ce/0x1420 [ 556.984661][ T31] vfs_open+0x3b/0x340 [ 556.989208][ T31] ? path_openat+0x33f3/0x3dd0 [ 556.993988][ T31] path_openat+0x340e/0x3dd0 [ 556.998654][ T31] ? do_sys_openat2+0xbc/0x200 [ 557.003419][ T31] ? __x64_sys_openat+0x138/0x170 [ 557.008470][ T31] ? __pfx_path_openat+0x10/0x10 [ 557.013396][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.018342][ T31] do_filp_open+0x1fa/0x410 [ 557.022833][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 557.027922][ T31] ? _raw_spin_unlock+0x28/0x50 [ 557.032776][ T31] ? alloc_fd+0x64c/0x6c0 [ 557.037123][ T31] do_sys_openat2+0x121/0x200 [ 557.041787][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.047005][ T31] ? rcu_is_watching+0x15/0xb0 [ 557.051774][ T31] __x64_sys_openat+0x138/0x170 [ 557.056842][ T31] do_syscall_64+0xfa/0xf80 [ 557.061424][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.067572][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.072271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.078212][ T31] RIP: 0033:0x7f4a50b8f749 [ 557.082629][ T31] RSP: 002b:00007f4a51aa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.091292][ T31] RAX: ffffffffffffffda RBX: 00007f4a50de6090 RCX: 00007f4a50b8f749 [ 557.099412][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 557.107406][ T31] RBP: 00007f4a50c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.115369][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.123382][ T31] R13: 00007f4a50de6128 R14: 00007f4a50de6090 R15: 00007ffdff415e98 [ 557.131388][ T31] [ 557.134407][ T31] INFO: task syz.4.2403:14678 blocked for more than 145 seconds. [ 557.142357][ T31] Not tainted syzkaller #0 [ 557.147448][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.156145][ T31] task:syz.4.2403 state:D stack:26920 pid:14678 tgid:14670 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 557.168145][ T31] Call Trace: [ 557.171435][ T31] [ 557.174440][ T31] __schedule+0x14bc/0x5000 [ 557.179027][ T31] ? __pfx___schedule+0x10/0x10 [ 557.183924][ T31] ? schedule+0x91/0x360 [ 557.188179][ T31] schedule+0x165/0x360 [ 557.192325][ T31] schedule_preempt_disabled+0x13/0x30 [ 557.197915][ T31] __mutex_lock+0x7e6/0x1350 [ 557.202508][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.207703][ T31] ? __mutex_lock+0x5bb/0x1350 [ 557.212493][ T31] ? misc_open+0x51/0x350 [ 557.216861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 557.221906][ T31] misc_open+0x51/0x350 [ 557.226052][ T31] chrdev_open+0x4cc/0x5e0 [ 557.230510][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.235454][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 557.241926][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.246948][ T31] do_dentry_open+0x7ce/0x1420 [ 557.251714][ T31] vfs_open+0x3b/0x340 [ 557.255767][ T31] ? path_openat+0x33f3/0x3dd0 [ 557.260563][ T31] path_openat+0x340e/0x3dd0 [ 557.265182][ T31] ? do_sys_openat2+0xbc/0x200 [ 557.270006][ T31] ? __x64_sys_openat+0x138/0x170 [ 557.275017][ T31] ? __pfx_path_openat+0x10/0x10 [ 557.279973][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.284912][ T31] do_filp_open+0x1fa/0x410 [ 557.289437][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 557.294493][ T31] ? _raw_spin_unlock+0x28/0x50 [ 557.299403][ T31] ? alloc_fd+0x64c/0x6c0 [ 557.303745][ T31] do_sys_openat2+0x121/0x200 [ 557.308465][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.313652][ T31] ? exc_page_fault+0x82/0x100 [ 557.318563][ T31] __x64_sys_openat+0x138/0x170 [ 557.323410][ T31] do_syscall_64+0xfa/0xf80 [ 557.328029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.334079][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.338808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.344907][ T31] RIP: 0033:0x7f4a50b8f749 [ 557.349353][ T31] RSP: 002b:00007f4a51a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.357804][ T31] RAX: ffffffffffffffda RBX: 00007f4a50de6180 RCX: 00007f4a50b8f749 [ 557.365780][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 557.373764][ T31] RBP: 00007f4a50c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.382238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.390343][ T31] R13: 00007f4a50de6218 R14: 00007f4a50de6180 R15: 00007ffdff415e98 [ 557.398355][ T31] [ 557.401442][ T31] INFO: task syz.4.2403:14683 blocked for more than 145 seconds. [ 557.409411][ T31] Not tainted syzkaller #0 [ 557.414332][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.423027][ T31] task:syz.4.2403 state:D stack:28152 pid:14683 tgid:14670 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 557.435105][ T31] Call Trace: [ 557.438398][ T31] [ 557.441321][ T31] __schedule+0x14bc/0x5000 [ 557.445825][ T31] ? __pfx___schedule+0x10/0x10 [ 557.450756][ T31] ? schedule+0x91/0x360 [ 557.455019][ T31] schedule+0x165/0x360 [ 557.459188][ T31] schedule_preempt_disabled+0x13/0x30 [ 557.464635][ T31] __mutex_lock+0x7e6/0x1350 [ 557.469235][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.474172][ T31] ? __mutex_lock+0x5bb/0x1350 [ 557.478982][ T31] ? misc_open+0x51/0x350 [ 557.483308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 557.488358][ T31] misc_open+0x51/0x350 [ 557.492504][ T31] chrdev_open+0x4cc/0x5e0 [ 557.497052][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.502133][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 557.508557][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.513498][ T31] do_dentry_open+0x7ce/0x1420 [ 557.518315][ T31] vfs_open+0x3b/0x340 [ 557.522377][ T31] ? path_openat+0x33f3/0x3dd0 [ 557.527146][ T31] path_openat+0x340e/0x3dd0 [ 557.531738][ T31] ? do_sys_openat2+0xbc/0x200 [ 557.536481][ T31] ? __x64_sys_openat+0x138/0x170 [ 557.541784][ T31] ? __pfx_path_openat+0x10/0x10 [ 557.546767][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.551721][ T31] do_filp_open+0x1fa/0x410 [ 557.556217][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 557.561273][ T31] ? _raw_spin_unlock+0x28/0x50 [ 557.566467][ T31] ? alloc_fd+0x64c/0x6c0 [ 557.570859][ T31] do_sys_openat2+0x121/0x200 [ 557.575554][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.580800][ T31] ? rcu_is_watching+0x15/0xb0 [ 557.585577][ T31] __x64_sys_openat+0x138/0x170 [ 557.590442][ T31] do_syscall_64+0xfa/0xf80 [ 557.594965][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.601252][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.605936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.611951][ T31] RIP: 0033:0x7f4a50b8f749 [ 557.616368][ T31] RSP: 002b:00007f4a51a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.624849][ T31] RAX: ffffffffffffffda RBX: 00007f4a50de6270 RCX: 00007f4a50b8f749 [ 557.632878][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 557.640925][ T31] RBP: 00007f4a50c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.649057][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.657693][ T31] R13: 00007f4a50de6308 R14: 00007f4a50de6270 R15: 00007ffdff415e98 [ 557.665665][ T31] [ 557.668736][ T31] INFO: task syz.1.2408:14687 blocked for more than 145 seconds. [ 557.676451][ T31] Not tainted syzkaller #0 [ 557.681455][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.690208][ T31] task:syz.1.2408 state:D stack:28152 pid:14687 tgid:14686 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 557.702175][ T31] Call Trace: [ 557.705512][ T31] [ 557.708479][ T31] __schedule+0x14bc/0x5000 [ 557.713103][ T31] ? __pfx___schedule+0x10/0x10 [ 557.718005][ T31] ? schedule+0x91/0x360 [ 557.722263][ T31] schedule+0x165/0x360 [ 557.726407][ T31] schedule_preempt_disabled+0x13/0x30 [ 557.731893][ T31] __mutex_lock+0x7e6/0x1350 [ 557.736474][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.741432][ T31] ? __mutex_lock+0x5bb/0x1350 [ 557.746209][ T31] ? misc_open+0x51/0x350 [ 557.750603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 557.755657][ T31] misc_open+0x51/0x350 [ 557.759969][ T31] chrdev_open+0x4cc/0x5e0 [ 557.764384][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.769353][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 557.775670][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 557.780686][ T31] do_dentry_open+0x7ce/0x1420 [ 557.785460][ T31] vfs_open+0x3b/0x340 [ 557.789555][ T31] ? path_openat+0x33f3/0x3dd0 [ 557.794319][ T31] path_openat+0x340e/0x3dd0 [ 557.798928][ T31] ? do_sys_openat2+0xbc/0x200 [ 557.803674][ T31] ? __x64_sys_openat+0x138/0x170 [ 557.808754][ T31] ? __pfx_path_openat+0x10/0x10 [ 557.813711][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 557.818681][ T31] do_filp_open+0x1fa/0x410 [ 557.823185][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 557.828239][ T31] ? _raw_spin_unlock+0x28/0x50 [ 557.833078][ T31] ? alloc_fd+0x64c/0x6c0 [ 557.837440][ T31] do_sys_openat2+0x121/0x200 [ 557.842105][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.847318][ T31] ? exc_page_fault+0x82/0x100 [ 557.852158][ T31] __x64_sys_openat+0x138/0x170 [ 557.857728][ T31] do_syscall_64+0xfa/0xf80 [ 557.862416][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.868679][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.873354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.879276][ T31] RIP: 0033:0x7ff51b78f749 [ 557.883676][ T31] RSP: 002b:00007ff51c5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.892105][ T31] RAX: ffffffffffffffda RBX: 00007ff51b9e5fa0 RCX: 00007ff51b78f749 [ 557.900117][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 557.908135][ T31] RBP: 00007ff51b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.916184][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.924177][ T31] R13: 00007ff51b9e6038 R14: 00007ff51b9e5fa0 R15: 00007fffc46b5bb8 [ 557.932188][ T31] [ 557.935197][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 557.945026][ T31] [ 557.945026][ T31] Showing all locks held in the system: [ 557.952890][ T31] 1 lock held by khungtaskd/31: [ 557.958922][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 557.968871][ T31] 4 locks held by kworker/0:2/179: [ 557.973989][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 557.985296][ T31] #1: ffffc90002f87b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 557.997780][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 558.008094][ T31] #3: ffff8880446dd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 558.018024][ T31] 5 locks held by kworker/u8:14/3733: [ 558.023400][ T31] 2 locks held by getty/5593: [ 558.028144][ T31] #0: ffff88814db150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 558.037991][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 558.048206][ T31] 3 locks held by kworker/0:4/5910: [ 558.053472][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 558.064636][ T31] #1: ffffc900044cfb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 558.078170][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 558.089699][ T31] 4 locks held by kworker/u8:16/6039: [ 558.095075][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 558.105060][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 558.114155][ T31] #2: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 558.123193][ T31] #3: ffffffff99a21250 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 558.133524][ T31] 1 lock held by syz.3.2319/14358: [ 558.138722][ T31] #0: ffff8880446dd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 558.148542][ T31] 2 locks held by syz.0.2398/14650: [ 558.153728][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.162391][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 558.172577][ T31] 1 lock held by syz.2.2401/14664: [ 558.179246][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.187878][ T31] 1 lock held by syz.4.2403/14671: [ 558.192985][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.201473][ T31] 1 lock held by syz.4.2403/14673: [ 558.206568][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.215587][ T31] 1 lock held by syz.4.2403/14678: [ 558.220733][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.229218][ T31] 1 lock held by syz.4.2403/14683: [ 558.234318][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.242878][ T31] 1 lock held by syz.1.2408/14687: [ 558.248021][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.256447][ T31] 1 lock held by syz.1.2408/14689: [ 558.261796][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.270256][ T31] 1 lock held by syz.1.2408/14690: [ 558.275341][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.283802][ T31] 1 lock held by syz-executor/14695: [ 558.289180][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.297670][ T31] 1 lock held by syz-executor/14700: [ 558.302943][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.311626][ T31] 1 lock held by syz-executor/14701: [ 558.317026][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.325506][ T31] 1 lock held by syz-executor/14702: [ 558.331146][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.339694][ T31] 1 lock held by syz-executor/14703: [ 558.344969][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.353682][ T31] 1 lock held by syz-executor/14708: [ 558.359197][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.367679][ T31] 1 lock held by syz-executor/14713: [ 558.372964][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.381521][ T31] 1 lock held by syz-executor/14714: [ 558.386851][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.395285][ T31] 1 lock held by syz-executor/14715: [ 558.400676][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.409309][ T31] 1 lock held by syz-executor/14716: [ 558.414589][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.423099][ T31] 1 lock held by syz-executor/14722: [ 558.428405][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.437083][ T31] 1 lock held by syz-executor/14727: [ 558.442425][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.450969][ T31] 1 lock held by syz-executor/14728: [ 558.456245][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.464844][ T31] 1 lock held by syz-executor/14729: [ 558.470160][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.478655][ T31] 1 lock held by syz-executor/14730: [ 558.483922][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 558.492401][ T31] [ 558.494723][ T31] ============================================= [ 558.494723][ T31] [ 558.503397][ T31] NMI backtrace for cpu 1 [ 558.503411][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 558.503423][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.503429][ T31] Call Trace: [ 558.503434][ T31] [ 558.503440][ T31] dump_stack_lvl+0x189/0x250 [ 558.503457][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.503467][ T31] ? __pfx__printk+0x10/0x10 [ 558.503486][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 558.503498][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 558.503509][ T31] ? __pfx__printk+0x10/0x10 [ 558.503523][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 558.503538][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 558.503549][ T31] watchdog+0xf3c/0xf80 [ 558.503564][ T31] ? watchdog+0x1e2/0xf80 [ 558.503578][ T31] kthread+0x711/0x8a0 [ 558.503591][ T31] ? __pfx_watchdog+0x10/0x10 [ 558.503602][ T31] ? __pfx_kthread+0x10/0x10 [ 558.503614][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.503625][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 558.503636][ T31] ? __pfx_kthread+0x10/0x10 [ 558.503648][ T31] ret_from_fork+0x599/0xb30 [ 558.503663][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 558.503682][ T31] ? __switch_to_asm+0x39/0x70 [ 558.503692][ T31] ? __switch_to_asm+0x33/0x70 [ 558.503702][ T31] ? __pfx_kthread+0x10/0x10 [ 558.503713][ T31] ret_from_fork_asm+0x1a/0x30 [ 558.503732][ T31] [ 558.503736][ T31] Sending NMI from CPU 1 to CPUs 0: [ 558.649505][ C0] NMI backtrace for cpu 0 [ 558.649522][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 558.649540][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.649551][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 558.649576][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 558.649590][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 558.649605][ C0] RAX: 530747553ef7e000 RBX: ffffffff8197438a RCX: 530747553ef7e000 [ 558.649618][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 558.649629][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 558.649641][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 558.649653][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 558.649665][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 558.649677][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.649688][ C0] CR2: 000055d532ae5168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 558.649703][ C0] Call Trace: [ 558.649711][ C0] [ 558.649717][ C0] default_idle+0x13/0x20 [ 558.649740][ C0] default_idle_call+0x73/0xb0 [ 558.649765][ C0] do_idle+0x1ea/0x520 [ 558.649781][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 558.649803][ C0] ? __pfx_do_idle+0x10/0x10 [ 558.649822][ C0] ? do_idle+0x4f3/0x520 [ 558.649840][ C0] cpu_startup_entry+0x44/0x60 [ 558.649856][ C0] rest_init+0x2de/0x300 [ 558.649872][ C0] start_kernel+0x3ae/0x410 [ 558.649889][ C0] x86_64_start_reservations+0x24/0x30 [ 558.649910][ C0] x86_64_start_kernel+0x143/0x1c0 [ 558.649938][ C0] common_startup_64+0x13e/0x147 [ 558.649964][ C0]