last executing test programs: 20m49.885272989s ago: executing program 0 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000100), 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000102010800000000000000000a000000060001802c00018014000378bbb9d9151a53ca2f5311df090408000000000000000000000400fc0200000000000000000000000000000c000280050001000000f40e137ddef645d1b84106f09a85ef3308fcfe6a8dca75719cca1cf58d4b79943d53d24bdd898831baa45b34e2693dafcfa88b2b93068ff595ce86ec7d4d00000000000000000000e6393d67"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) r6 = socket$kcm(0x2a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB], 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb16}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010044}, 0x20004810) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) r10 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r6, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800af70300aaaaaaaaaabb000008000300030000000a000400acaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x24000080) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=@gettaction={0x60, 0x32, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xb0}, 0x2000d091) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100061040096cac08fbc5365df00000083df48092de6419d336d7d9b073f50407d19ae50bf0b5bb00778cba2e3fb65504ebf7c9efece57161991e0360e66625cf816ef8a69d99bd0d439da7ce017704ed7bf92f15170b90d9ed7fd856d805c599f921fe2e4a42aef9d1da415427a3e049e9aefddac512f6d8fe77e98db5c7fa8f6644b05ccd248124d2c51934a5e3f808dbc623d0e65adb56494027a04bc17a6875b0175091fefa542daf5cc248632abbbe4519497ab73b47075eb13d054a2a339562e3b63310450fde238b2c9aaf457784865", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 20m49.40186233s ago: executing program 0 (id=663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000240)="48e8", 0x2) (async) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000004c0)=0x1, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="b5f04b23cda8", 'ip6gre0\x00'}}, 0x1e) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 20m49.11108284s ago: executing program 0 (id=668): syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x4}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x240040d0}, 0x8810) 20m48.995191606s ago: executing program 0 (id=671): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2004408d}, 0x60001) 20m48.971496124s ago: executing program 0 (id=672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x1}}) unshare(0x6a040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r4, 0x4}, 0x38) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000005000000bca900000000000035090100000000009500000000f228131e000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000008000007080000f8ffffffbfa400000700000000000000f008000000182200"/136, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 20m48.606524788s ago: executing program 0 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca4b5e", 0x10}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f6", 0x16}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000180)="5d80ceff4aa6dc5f710e030012002c892af8d26c5b59c0fcaa9e7ded20f3f510298d882a02450dcf19b423bba93888062ffdf407ea5116f5fd2d2a836f74d39e4625de7b63a6a39ab47d1f635bdc4708df3b1c76cd098f394cdc286f7890d3", 0x5f}], 0x1, 0x0, 0x0, 0x4}, 0x2400c084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000100)) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0xba01, 0x0, 0x4}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xfff}, 0x56) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00c5e83c6a9800cc168200c3e8e8ed36e71802", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf250e0000000c0002800800038004000180"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c0108"], 0x1d8}}, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080025000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a0069ae26bd70000000000900000000ff0000040000000005001a"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 20m48.144514035s ago: executing program 32 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca4b5e", 0x10}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f6", 0x16}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000180)="5d80ceff4aa6dc5f710e030012002c892af8d26c5b59c0fcaa9e7ded20f3f510298d882a02450dcf19b423bba93888062ffdf407ea5116f5fd2d2a836f74d39e4625de7b63a6a39ab47d1f635bdc4708df3b1c76cd098f394cdc286f7890d3", 0x5f}], 0x1, 0x0, 0x0, 0x4}, 0x2400c084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000100)) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0xba01, 0x0, 0x4}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xfff}, 0x56) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00c5e83c6a9800cc168200c3e8e8ed36e71802", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf250e0000000c0002800800038004000180"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c0108"], 0x1d8}}, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080025000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a0069ae26bd70000000000900000000ff0000040000000005001a"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 30.26201761s ago: executing program 1 (id=8985): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x16}}, 0x5d) close(0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 30.067037074s ago: executing program 1 (id=8986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) unshare(0x62040200) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x53}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f00000000c0), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 27.97868615s ago: executing program 5 (id=9008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) splice(r0, &(0x7f0000000700)=0x468, r1, &(0x7f0000000740)=0x9, 0x5, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup@'}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a06030000000000000000000000000014000780080012400000000005001500ff00000010000300686173683a69702c6d616300050005000200000005000400000000000900020073797a31000000000500010007000000"], 0x5c}}, 0x40000) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6393}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f0000000c80)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/166, 0xa6}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005"], 0x1ec}}, 0x0) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r8}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f00000000c0), &(0x7f0000000300)=r0}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 26.600066981s ago: executing program 1 (id=9015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x3e, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x65}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 26.598540427s ago: executing program 5 (id=9016): r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000200)=0x54) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x4, @rand_addr=0x64010101, 0x4e21, 0x7, 'fo\x00', 0x1, 0x2, 0x20}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x101, &(0x7f0000000680)=""/257, 0x40f00, 0x48}, 0x94) 26.450490031s ago: executing program 5 (id=9018): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x3e, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x65}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (fail_nth: 3) 26.369213893s ago: executing program 1 (id=9019): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0xd6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x0, 0xe}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x2710, @ANYBLOB="0000000001", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000600007ffffffe0007000000000008000500", @ANYRES32=r7], 0x4c}}, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x6338, 0x4) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0x2dff}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x3c}, 0x0, @in=@loopback, 0x0, 0x3, 0x3, 0xfd, 0x0, 0x1}}, 0xe8) close(r9) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r10, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r10, &(0x7f0000001580)=""/119, 0x77, 0x40002032, 0x0, 0x0) getsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000280)=""/168, &(0x7f0000000400)=0xa8) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x5, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "bbb2d34b9d1ae270"}}, 0x48}}, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}}, 0xfffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e27, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x2e, 0xf080, 0x4}, 0x9c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) 26.314744343s ago: executing program 5 (id=9021): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'wg1\x00', 0xff80}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0xffe0}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "30e3b3943b40a435f9ef4d24981b5f01"}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xd}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x6}]}}]}, 0x90}}, 0x20040054) 26.270452454s ago: executing program 4 (id=9023): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x4a4d00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x14) socket(0x2, 0x80805, 0x0) socket$kcm(0x23, 0x2, 0x0) socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@getsa={0x1e0, 0x12, 0x3, 0x70bd2a, 0x25dfdbfc, {@in6=@remote, 0x4d6, 0x2, 0x32}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, @in6=@private2, 0x6c, 0x4, 0x0, 0x3503, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in6=@empty}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e24, 0x0, 0x4e22, 0x1, 0x2, 0x0, 0xa0, 0x73}, {0x2, 0x20000, 0x7, 0x2, 0x7fff, 0x9, 0x7fffffffffffffff, 0x8}, {0x101, 0xde, 0x9, 0xd0e}, 0x800, 0x6e6bb5, 0x0, 0x0, 0x2, 0x3}}, @etimer_thresh={0x8, 0xc, 0x6}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0xa}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @algo_aead={0x64, 0x12, {{'morus640\x00'}, 0xc0, 0x40, "44032e33b5c80f96b121d91c30752e3431c892424fa0e8f5"}}]}, 0x1e0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000380)={0x5, &(0x7f0000000080)=[{@fixed}, {@none}, {}, {@fixed}, {@fixed}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8082202}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x19, 0x1055, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, 0x0, 0x0) 26.123247825s ago: executing program 1 (id=9024): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r0, 0xa404}, {r1, 0x21}], 0x2, 0xfffffffe) (async) poll(&(0x7f0000000000)=[{r0, 0xa404}, {r1, 0x21}], 0x2, 0xfffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001200130628b57000fddbdf2506ff01fc0000f8ffffff0600000009000000090000007d0000006100000003000000e61e70783e85d29f65c6c92e1fe3ce7aa3e873", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) 25.943038724s ago: executing program 5 (id=9027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/248, 0xf8}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x4, &(0x7f0000000c40)=""/114, 0x72}, 0x800}, {{&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189, 0xbd}, {&(0x7f0000003180)=""/176, 0xb0}, {&(0x7f0000000340)=""/90, 0x5a}], 0x3}, 0x2}], 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) sendto$packet(r9, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmsg(r9, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) listen(r8, 0xfffffbeb) (async) listen(r8, 0xfffffbeb) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000000c0), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 25.941943798s ago: executing program 1 (id=9028): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @remote}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x2, 0x200, 0xac7e, 0x8, 0x0, 0x401, 0x101}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x401, 0x3, 0x43c}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88d0}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="117d4463da60"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ddf108e92c26"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="014dece130ac"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f65fe44f2efc"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="138ab39f3022"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000300)={0x7fac4f73, 0xf99}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x300, 0x70bd27, 0x40, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040845}, 0x4000) syz_80211_inject_frame(&(0x7f0000000480)=@broadcast, &(0x7f00000004c0)=@ctrl_frame=@rts={{}, {0x1}, @broadcast, @broadcast}, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = accept4(r3, &(0x7f0000000500)=@ieee802154, &(0x7f0000000580)=0x80, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000840)={0x4, &(0x7f00000005c0)=[{@fixed}, {@none}, {@none}, {@none}]}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)=@generic={&(0x7f0000000880)='./file0\x00', r8}, 0x18) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x8, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x80, 0x957}], "ae"}, @datasec={0x8, 0x8, 0x0, 0xf, 0x3, [{0x5, 0xfff, 0x4bca21b}, {0x4, 0x7, 0x7f}, {0x3, 0x6, 0x7}, {0x5, 0xd5b, 0xd50}, {0x2, 0x7, 0x8}, {0x2, 0x6, 0x2}, {0x4, 0x0, 0x1}, {0x4, 0x8}], "43b335"}, @const={0x8, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0xe, 0x5}, {0xb, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f0000000c80)=""/181, 0xd8, 0xb5, 0x1, 0x6}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e00)={0x7, 0x0}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xf, 0x1, 0x9, 0x8000, 0x10000, 0x1, 0x81, '\x00', 0x0, r3, 0x0, 0x4, 0x1}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0x0, 0x992, 0x10}, 0xc) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xb, 0x1c, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000a40)='GPL\x00', 0x174f, 0xca, &(0x7f0000000a80)=""/202, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, r9, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x10, 0xd27e, 0x9c}, 0x10, r10, r6, 0x3, &(0x7f0000000f00)=[0xffffffffffffffff, r11, r12, r8], &(0x7f0000000f40)=[{0x2, 0x2, 0x4, 0xb}, {0x4, 0x1, 0xc}, {0x2, 0x5, 0xc}], 0x10, 0x9}, 0x94) r14 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000030c0)=0x0) sendmmsg$sock(r14, &(0x7f0000003a80)=[{{&(0x7f0000001080)=@nfc={0x27, r15, 0x1, 0x7}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001100)="afd7bb130f1f303c76658d862f46b6f8494afc55c9b30bb48e71724af3e584fba89f3d7ec1b5c9e9a34aed8c357932e91726e4bd6ee19fb21f3e844cae20c5462fb482e345b2b787b8b8d0d6ffefd5ffe89517dc0f9906441b2e47aa64b6b7591f44f213d84dede2e40dbd2393ef31a29d962b55632d4f741635772d4f35c150f1d2bdde6fff1235f8cdd5990cfb6da0c2ef761777e3bc26a7e9496d629e70cde1bb27", 0xa3}, {&(0x7f00000011c0)="fa765f0e574e58ad8e", 0x9}, {&(0x7f0000001200)="202b21a9d5deb5aafcdeec263a2e7bdd15dafbc8c3361adf5ebcfeea327d2a83526eb579610ecfe3f96d0997068a37488ff2cb457a75982eb6908184cb6a9ffd0050f40ef57331d23a9001f07b1d1f1e9bf1c038e677a08103160253bfdebd4a457df95b102225", 0x67}, {&(0x7f0000001280)="74f8fae8e9fd9273e6df30709f822267ad7c3208e2c391ea2912be7df3ba206f276189d9f062463226d2490a25e242bacc7506e00e330b35b75ff0b5ecf806e452a8650f5f3450a5ad40cf779080be5591f2e0f52512cd3c30c1419f008dfd5b55c12b0549a736989fd0d988c70bd915c0f64ef7be7b2a9cc766e783fb4055bed27b006c31c5597715", 0x89}], 0x4}}, {{&(0x7f0000001380)=@in6={0xa, 0x4e22, 0x1, @mcast1, 0x8000}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)="62c1413ae69374069ea7faa9dd04f49bf812c08d21907ee35e81e43672a6a12cdee62f3e061962b6edbc67a7b45b3293fb88b8f3de7839e9c4e75a78daddbb30e5748a89", 0x44}, {&(0x7f0000001480)="7664c3948455cfc483e70a0dae41afb667374124546dede8b6ee6b01e84328f2e5c61e7d8e4c1ac3bfc994eb8c636e423bbf5860f65f7956ec80935e6bee6c691aebeaaf885f0ab12bab559edd2dbbf214191c3332789f18b6b8c9461b54e79c661b797e352b09a0ae595c891a58b9f55de903cbb13b15ee899463908ff2", 0x7e}, {&(0x7f0000001500)="e9ee1933d587aa432c2d64a47a3e83f9c64c578736853d7eab405f6f4e7feea03bcc1655ada87ae90249a269101b56cabec6b64578442754c45f23a1618d009e4a65f7ce18d5d6a3db8d16a56735088b3b15d549de9f54e66eb6f02f8d33c676b1341bf031e047631c55fda721c240099f3729c9462428134f2380a6fcd9ee99f81c35b225698a6098059fac33b92c342161a280aa90fd3f61fce5097604e6d14696fe233f9f6b133a41dab662a536c1c8c08c872552a4fb075986b7d1dee4db6976e9e27a2be3f5e981e45279e3e09bec267ab179db27d04a47465f15143393961d3336", 0xe4}], 0x3, &(0x7f0000001640)=[@timestamping={{0x14, 0x1, 0x25, 0x9db0}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000001680)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(hmac(sha256-neon),cbc-cast5-avx)\x00'}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001700)="6a782d6d1ed04c254dbaa1", 0xb}, {&(0x7f0000001740)="9f095d41955e619aa672608b77c349a8db080623fc3c664bb1b77516cf3e34da9841b169fd12b7da1d52ee4fa9e093e64b7c1b483858394d67929b5463a22d012b48c04c8f44db204a1126b57540bdcf96152b95402c9612619852b89574b7c2b707f2ed6b324c792976cc13b8cf51bf1581f9b7977ba39523183620c4b517956c3344dae62badec21da40853fa7bfcadc1b0a80859f2bf552218a0699f5", 0x9e}, {&(0x7f0000001800)="2acc70cae0cc4af9697fe0d0c45b247e2f6740e257e69f83c04c652f0bc7a8c2c3eec4bf365bc969740bc8a0f85a445f81aad0803e5e0eda57f5880ecb7b6bd4ba72a0236fee6d4101e68b68694ad0e08210", 0x52}, {&(0x7f0000001880)="e5ba1e987833de3bc4e8ed4001caf1845a9e64ab913b260bcb63884f92bd4b46890cf0444f8d476ad863c50f3b7ec315f31e15f7d3cafe6ba550541777dd729ec11137a66c47099f3d7cea162e575e26e1cdb0f8228e4e0e8717ef457c95d43a87074eafb6a1f4f939831bed9c621b7eab4253c007a0388315f38ecd5ca095e61b4fc2cbdfdd2e0e9a1085ccc771fbbfcf68f446ba98aec45361fa64015dafbdce897a377fa7ba4732fbe0b165e81fd98599ac4351173a606c9a796d1afe511143e89ff710a0a310cefb5ca8f8ad640a6a35c30467493e1da4bfc5f876132d4a96f4ce09203e82cd2c7ba6010254607d7e", 0xf1}], 0x4, &(0x7f00000019c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}], 0x18}}, {{&(0x7f0000001a00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001a80)="48309f2b13906c0935a2b1edec14a54f4a11c2172d5ed7227cf5d579432049fd0b1f06a6b88903000c987216d35436a465a27afd6e80f845c1b642eaf31c5d374a2f082daad2570aa50364286dfe061666d032341d88548f5bc47cf72ef3fdb2c33fc6ac27214d8711f435d52d79ae3a2d643ea1158c2111999e81ca5cfac8d7d7df6d5eae34403759b34dc139a2b11b89bdc2f5e58ca114ffca350c37fb909a1d3adcc67faabbb090a18add189aa1edf5e87817c9110c47", 0xb8}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="51a8bfc83d55100fd39f6858be43ed1fc820dae936dc27ce441757ca29f136239636946d93de0a56c9bf1961a981c7812e73569e56cde8c04b5bf039566522e660c644cdfe939f40b3e26d5f058b7fd69255d9ac87edfa8fe44de97329c62360d8ba2212f4436216f16c9904d91c066f8fa390a1a4a251ecca498394828aff9ce91c357d2f3ab29ac5cc1de57314744ac348ca88a80897d4de62ec6777e672b2cd4f6959c6c2555b80039e34db864bcfce5766a8d07d74baf3853553053f916273362bc3cf6e4b2e34660e7f154a241d79481b0313618abc5661571ae03ea5e73c6f593f45", 0xe5}], 0x3, &(0x7f0000002c80)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xd3d}}, @txtime={{0x18, 0x1, 0x3d, 0x333e}}], 0x60}}, {{&(0x7f0000002d00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d80)="593704eebfc541dab492641d2469a29e70211541ba20d0ed6307b117f322b0102d832aa27eec6a5f5d2aacdebf94d61562af7f9089cff30f2e6b5d1c183855171ea40c5c66b8b20787e381c008ef4c45d393ea3b29cbb29f18ca4d34ebc6b8006185c69b22f2aa1f7c50f586bead1d437f8427ac851ff162ef931e3bff9e5dcc9f8199d38d85b18dad8e219e184a2e01ef57c9acab9729bae2a55d15d5601aa2ca5f457e3241cd9227ec9b3d579a631ed5627694078ad23891", 0xb9}, {&(0x7f0000002e40)="72bbe0d43ba173e68c97832ce53debd19613c0a3abcdc26ec79f2867bb356e9037a87e37e99921d04f0990e313008840bcb2a7f9b50e78181434eef4e2c69cd757e5ca09c097969ed6943696883bf6ec704cf10e7ec6d09d9ed4de3742df50df2f846170b95cf6d8f4fcab402cec9a248faff079715636df0db89188cdd4185ba0daebb3a1011dc9cf73", 0x8a}, {&(0x7f0000002f00)="e58ee3d0021da7bfde6d4ab176c886a6ef3c3f03f60f1466ad7d2117519af6b67094762521ea4f36f6f25a792c4973de95b29f07852f4bb6d5237e796de03cbedfcc75a02185be92e34e98672dc5646f1aee26299821c057c903509aa5260e07cb1886dbf9c1f35ced723ac29557bfffc1f0755a5d0af3c165031a3659779c81153cdb147258c9f1701ea2203f3148f902225ee50b5d84eb75566b765f7407c9a89de676aa5b4b8753f2e892a46511e7b13564c6088276511bb6489589efe279181aa217e8483d3fec5b660c21c26afc96bb0c37946a6a579ac9e4fe299034989afa301dd56c9ddf129b3ce9cdd45e5b85a1ffa44f", 0xf5}], 0x3, &(0x7f0000003040)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfd}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}], 0x78}}, {{&(0x7f0000003100)=@nfc_llcp={0x27, r16, 0x0, 0x4, 0x7f, 0xfa, "fb3666ad4d6d7c0ea81cfbe5adf638a4639e3fb4501a344c48f1dbf71675def45441042d1c4c443ed85500034d94f922782388952d6cb4d40ff547af2378a0", 0x39}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)="7a713ef74b8a44ac27d1ccdfd71aa13ba9140d4cdbb4210102a01a56ac27bd7246914c26abcdd1252a60378cfd82ef8cff2a2757d8c7afbed367c1", 0x3b}], 0x1, &(0x7f0000003200)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xf48}}], 0x30}}, {{&(0x7f0000003240)=@x25, 0x80, &(0x7f00000033c0)=[{&(0x7f00000032c0)="1a08918427904b6a072a32d99c0d553601e2eb4579b1e75ee4c55eb24c4858225f8759062468e4ede12890e0b4c3ca8bdeff1551c703c084", 0x38}, {&(0x7f0000003300)="7922f13a3daf616b00ee2a945c6ae93ce509164ddc2c54e434", 0x19}, {&(0x7f0000003340)="ea998b17388a4fa36f0941a529d86b5a7ab6e6144c1f913d92180036216e8b72f33700cbe7ca9df883d0e8f12b18a0da3c8430dfed258a44a2d1631b7fb643fbae6dcc262538e430186a7d01c176e09269c1944f3552c3575f9b678bf61b647a45fc15f15c002fd0da9923", 0x6b}], 0x3, &(0x7f0000003400)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x48}}, {{&(0x7f0000003480)=@l2={0x1f, 0xe, @none, 0x1}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003500)="e6174a034396c6aeb6feb5c1aef3fd55f3282fd847aaca464e5d7c7b238b8f857ff1f82f5af307eda0dc35e894a829e9758faa8a989993488c6634c29973d9a81ce2f606e2fc0783407929f203b7e7440c371431ff573f3a00aee48d49d5079460959122c22e569a071252a7f66078693db1084b84f18b983066db9e3612b3db76192affb0abb2b2d0ce5613d99ed2d590a359b8c24e9d6531aea4417cbc50fdf8e47c94bae549e5d98682a4c0c09209a403bdb3426336f665fc5750b792b0dbc4e54e1d7e1ddd33c82dd0e4bf8ec549b5f8732a0d9641e1c3e795a4926f194d73c6", 0xe2}, {&(0x7f0000003600)="2ed5bc573fb2bf29a61a0c2108ec68877723c8fb2d662afccc9cb235006e562f2b959e1bc18a9395d2ce651d0dd3b133e4e60129283dad0c3938a97cc4f50eaf614c05f0626ac957d8ad90881f0b4fdb81b0793431295b93617a4e14d5c737881b882048b78e8c9a6123987c84a47791b59e94e13736acd1b789cf429c85", 0x7e}, {&(0x7f0000003680)="bf915af8e5f9c663dd98198825dd8cca588874a31fa7def74363aeb762efaa68b7ea4a7caf33c196990de29b810eec92d343938592219eb89de72658a7193df116b7df549fdf7f2c1ebcfde60e10f024ce86cae39cd080ed15763d922d299edbee4d2eef4cfabfc1d356049d51a8973504f27fe7be0d77d78efb6a2484e61e45960dc98d858d2763570b798c66e774025eb5aa7ccaf761fa09358bd74ce717f54349ed33129642674a9e74ace101bff1bfe5d36e85e1f2313a595c38724ef72ffad85e29580d87a55ce48269fa320875a316dabb37cedf36dd6937b2ce2c72a02f49e63bb6d26f", 0xe7}, {&(0x7f0000003780)="0896f5fd857713d20952d4764976", 0xe}, {&(0x7f00000037c0)="c788e80d5763549397f9e5a0ce0c7cf77175cc67a32d0deed773098555e95c8911b77fd093b8f965a98bb35007e1b8f35941fb883eb144517f3e49a79b3fb6f0d8a2640af31514bcbc7796d885fcaa1f3b89a7707d2b1665c3e1e8b487c07f518f09d13e47bed6981c8b9331f856532745ddb11a2a741fb4098e830d739d4a6f2f9c01544ae7d4c0d6fa98ab49ad1f9fc3dc4634bcaac8bb6dcf014a776050eff62120cdbee7383b2c218ab8f303ae", 0xaf}, {&(0x7f0000003880)="8e4a4eeba8464484c929f3420e83c3c9601f9d248712a352446fb77aef52cf637fe43811bdbff3cdeb7da1f3d0aa8fa17860de31fa568c7a6074f943ff71231b56a395682b774c65b29e0b649f0f77ec24291b152f9393e56a4917db60178378bbccf4598c7cd044051fd8788941ed80242eb3a91d7059a1cbe132e6727b94619301810dec2b8e051f15cb", 0x8b}], 0x6, &(0x7f00000039c0)=[@txtime={{0x18, 0x1, 0x3d, 0x346}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x74}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0xe4}}], 0xa8}}], 0x8, 0xc850) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000003c80)={0x7f, 0x8000, 0x3, 0x53a, 0x0}, &(0x7f0000003cc0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000003d00)=@assoc_value={r17, 0xff}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000003d40)={0x2, 'batadv_slave_0\x00', {}, 0x9}) 25.941189124s ago: executing program 4 (id=9029): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x3e, 0x107, 0x300, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x65}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 25.842035144s ago: executing program 4 (id=9030): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) close(r0) 25.633627844s ago: executing program 4 (id=9033): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001580)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x29}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x2, 0x8}]}}}}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 25.511284321s ago: executing program 4 (id=9035): r0 = socket(0x29, 0x2, 0x20a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00') 25.467220548s ago: executing program 4 (id=9036): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="10a3c0a2b69ad8cd24c86377bd46540000102c4001000000000000000000"], 0x10}, {&(0x7f00000008c0)=ANY=[], 0x10}], 0x2}, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x100020}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xacc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$can_bcm(r8, 0x0, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x4044005) r10 = socket$inet(0x2, 0xa, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 25.365160986s ago: executing program 5 (id=9038): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="d5adbd49d780a57f"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006d910000"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r0, &(0x7f0000000000)="05000000010001", 0x7) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = epoll_create(0x9) epoll_pwait(r11, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)={[0x2]}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000408000b40000000000900010073797a30"], 0xc0}}, 0x0) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="07000000010000", 0x7) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 17.468743908s ago: executing program 2 (id=9097): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x31020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x412002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x100, 0xa, 0x148, 0x0, 0x60, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x3b}, 0xff00007f, 0x0, 'bridge0\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fc57df4e84956d12660000005c63fa209bf8e29d862125039c39001c00"}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x6c, 0x0, 0x44}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60c5}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000000051229dc9", 0x0, 0x40000, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9fdef306844268cb89614f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r7, 0x20, &(0x7f00000004c0)={&(0x7f0000000440)=""/7, 0x7, 0x0, &(0x7f0000000480)=""/53, 0x35}}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x0) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) 17.38662966s ago: executing program 2 (id=9099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 17.303648883s ago: executing program 2 (id=9101): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000001c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3}, 0x10) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40) connect$tipc(r4, &(0x7f0000000480)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6667b9fa4a4fda0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 17.12969652s ago: executing program 2 (id=9103): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48805}, 0x40) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000280)={0x4e, "ac7e18231c8aa8e993849f059811ff14266ad1d21b22c662ce6194835ad0c5c9f73df7af18e9a681bf3a3aee186a6ed86e1dbf16de43df14f63e6ce4d6d48648ed654082c93f5398420a9f58a644a9c532586b0d0d076a971d19e5f473d72c6c878895aff7ef2e710688f807132a63faeeee4e3bbf70fe9b5158ec50ad2277e0"}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r4}) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r0, 0xe}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002d0001000400000004000d800000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x1) 16.713148282s ago: executing program 2 (id=9106): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x87, @local, 0x4e21, 0x2, 'lblcr\x00', 0x28, 0x6, 0x58}, {@multicast2, 0x4e24, 0x1, 0x47, 0x31, 0xc}}, 0x44) close(r1) 16.495179346s ago: executing program 2 (id=9108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%pS \x00'}, 0x20) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.154796945s ago: executing program 3 (id=9110): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000000)="260000002200470154daf151af565d78276fdd2482dcf5c3e8ff06dde9010172b7e5c72e", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00", 0xb, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40002000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) (async, rerun: 32) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) (async, rerun: 32) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 16.055079695s ago: executing program 3 (id=9111): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000300000040000180100001006574683a69703667726530002c0004001400010002"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x200, 0x98, 0x298, 0x298, 0x200, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x11]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="4c00000014006b03000000d86e6c1d001001250002f70f2c000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4fd9e96811baa33c5d74518e3f6", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='ip_vti0\x00', 0x10) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @local}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000000)=0x4) 15.747703223s ago: executing program 3 (id=9112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@expire={0x104, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x180, 0x73}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x9, 0x0, 0x800, 0x1000, 0x800, 0x0, 0x81}, {0x8, 0xa, 0xfffffffffffffffd, 0x3}, {0x4, 0xe415, 0x7}, 0x70bd2a, 0x0, 0xa, 0x0, 0xff}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc5}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 15.746374414s ago: executing program 3 (id=9113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x50}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2c, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) 15.743946979s ago: executing program 3 (id=9114): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="481000b80097f7a54c957278300c00", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000100000008000600090000000800080009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e000000208000740000000001c0010800800014000000015080002"], 0x80}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) unshare(0x22020600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) recvmmsg(r2, 0x0, 0x0, 0x60, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0xfffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct]}}, &(0x7f00000009c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @local}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@setneightbl={0x78, 0x43, 0x10, 0x70bd26, 0x25dfdbfc, {0x2}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xffffffffffff8001}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0x8}]}, @NDTA_PARMS={0x40, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x200}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0xcd4f}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x800007fff}, @NDTPA_LOCKTIME={0xc, 0xf, 0x9}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x6}, @NDTPA_IFINDEX={0x8, 0x1, r7}]}]}, 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='host1x_channel_submit_complete\x00', r3, 0x0, 0x3}, 0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000003880)={{r8}, "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"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) 15.102449393s ago: executing program 3 (id=9115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f0000000180)=""/120, &(0x7f0000000340)="4013072e", &(0x7f00000003c0), 0xffffffff, 0x1, 0x4}, 0x38) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='xen_mmu_set_pud\x00', r3, 0x0, 0x80000000000}, 0x18) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x1, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 10.009724726s ago: executing program 33 (id=9038): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="d5adbd49d780a57f"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006d910000"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r0, &(0x7f0000000000)="05000000010001", 0x7) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = epoll_create(0x9) epoll_pwait(r11, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)={[0x2]}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000408000b40000000000900010073797a30"], 0xc0}}, 0x0) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="07000000010000", 0x7) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 9.981890483s ago: executing program 34 (id=9036): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="10a3c0a2b69ad8cd24c86377bd46540000102c4001000000000000000000"], 0x10}, {&(0x7f00000008c0)=ANY=[], 0x10}], 0x2}, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x100020}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xacc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$can_bcm(r8, 0x0, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x4044005) r10 = socket$inet(0x2, 0xa, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.502004795s ago: executing program 35 (id=9108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%pS \x00'}, 0x20) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 36 (id=9115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f0000000180)=""/120, &(0x7f0000000340)="4013072e", &(0x7f00000003c0), 0xffffffff, 0x1, 0x4}, 0x38) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='xen_mmu_set_pud\x00', r3, 0x0, 0x80000000000}, 0x18) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x1, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): d cc 0x0c03 length: 249 > 1 [ 1232.918029][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1232.936012][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1232.946006][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1232.962916][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1233.224153][T31934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1235.038820][T30131] Bluetooth: hci1: command tx timeout [ 1235.334568][ T4883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1235.367453][T31934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1235.393293][ T4878] lo speed is unknown, defaulting to 1000 [ 1235.459014][T31934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1235.532776][ T4869] lo speed is unknown, defaulting to 1000 [ 1235.558279][ T4890] syzkaller1: left allmulticast mode [ 1235.611139][T19754] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 1235.680157][T31936] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 1235.721260][T31932] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 1235.738725][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1235.774596][T31936] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 1236.248519][T31934] bond7 (unregistering): (slave gretap2): Releasing active interface [ 1236.276164][T31934] bond10 (unregistering): (slave gretap4): Releasing active interface [ 1236.572334][ T4902] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1236.922327][T31934] bond0 (unregistering): Released all slaves [ 1237.057818][T31934] bond1 (unregistering): Released all slaves [ 1237.070699][T31934] bond2 (unregistering): Released all slaves [ 1237.083495][T31934] bond3 (unregistering): Released all slaves [ 1237.097777][T31934] bond4 (unregistering): (slave vcan0): Releasing backup interface [ 1237.107641][T31934] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 1237.115645][T30131] Bluetooth: hci1: command tx timeout [ 1237.125516][T31934] bond4 (unregistering): (slave vcan2): Releasing backup interface [ 1237.135581][T31934] bond4 (unregistering): Released all slaves [ 1237.264274][T31934] bond5 (unregistering): Released all slaves [ 1237.398925][T31934] bond6 (unregistering): (slave veth3): Releasing active interface [ 1237.409566][T31934] bond6 (unregistering): Released all slaves [ 1237.557253][T31934] bond7 (unregistering): Released all slaves [ 1237.708217][T31934] bond8 (unregistering): Released all slaves [ 1237.721319][T31934] bond9 (unregistering): Released all slaves [ 1237.734104][T31934] bond10 (unregistering): Released all slaves [ 1237.747980][T31934] bond11 (unregistering): Released all slaves [ 1237.897123][T31934] bond12 (unregistering): Released all slaves [ 1237.924080][T31934] bond13 (unregistering): Released all slaves [ 1237.942687][ T4892] lo speed is unknown, defaulting to 1000 [ 1237.964929][ T4878] wg1 speed is unknown, defaulting to 1000 [ 1237.973384][ T4878] vxcan1 speed is unknown, defaulting to 1000 [ 1238.003136][ T4909] netlink: 'syz.5.8031': attribute type 1 has an invalid length. [ 1238.213489][ T4910] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1238.266658][ T4910] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1238.331831][T31934] tipc: Disabling bearer [ 1238.365546][T31934] tipc: Disabling bearer [ 1238.371362][T31934] tipc: Left network mode [ 1238.434972][ T4869] wg1 speed is unknown, defaulting to 1000 [ 1238.611641][ T4921] IPVS: set_ctl: invalid protocol: 58 172.30.1.6:20004 [ 1238.649545][ T4869] vxcan1 speed is unknown, defaulting to 1000 [ 1238.978928][ T4933] netem: change failed [ 1239.089856][ T4926] lo speed is unknown, defaulting to 1000 [ 1239.090283][ T4934] hsr0: entered allmulticast mode [ 1239.112029][ T4934] hsr_slave_0: entered allmulticast mode [ 1239.125018][ T4934] hsr_slave_1: entered allmulticast mode [ 1239.140976][ T4892] wg1 speed is unknown, defaulting to 1000 [ 1239.202535][T30131] Bluetooth: hci1: command tx timeout [ 1239.209068][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.479051][ T4892] vxcan1 speed is unknown, defaulting to 1000 [ 1239.486697][ T4926] wg1 speed is unknown, defaulting to 1000 [ 1239.635507][ T4869] chnl_net:caif_netlink_parms(): no params data found [ 1240.182334][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.196744][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.215830][ T4869] bridge_slave_0: entered allmulticast mode [ 1240.228583][ T4869] bridge_slave_0: entered promiscuous mode [ 1240.256408][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.263591][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.285450][ T4869] bridge_slave_1: entered allmulticast mode [ 1240.297150][ T4869] bridge_slave_1: entered promiscuous mode [ 1240.369487][ T4926] vxcan1 speed is unknown, defaulting to 1000 [ 1240.387172][ T4869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.406325][ T4869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.537919][ T4869] team0: Port device team_slave_0 added [ 1240.544417][ T4954] IPVS: Error connecting to the multicast addr [ 1240.562555][ T4869] team0: Port device team_slave_1 added [ 1240.658892][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.675332][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.701834][ T4869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.760916][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.775922][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.809979][ T4869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.856517][ T4957] lo speed is unknown, defaulting to 1000 [ 1241.281617][T30131] Bluetooth: hci1: command tx timeout [ 1241.370251][ T4869] hsr_slave_0: entered promiscuous mode [ 1241.386488][ T4869] hsr_slave_1: entered promiscuous mode [ 1241.419387][ T4869] debugfs: 'hsr0' already exists in 'hsr' [ 1241.425479][ T4869] Cannot create hsr debugfs directory [ 1241.548385][T31934] hsr_slave_0: left promiscuous mode [ 1241.555512][T31934] hsr_slave_1: left promiscuous mode [ 1241.621321][T31934] pimreg (unregistering): left allmulticast mode [ 1242.537528][ T4958] lo speed is unknown, defaulting to 1000 [ 1242.550481][ T4957] wg1 speed is unknown, defaulting to 1000 [ 1242.550610][T31931] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.568045][T31931] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.604640][ T4957] vxcan1 speed is unknown, defaulting to 1000 [ 1242.615463][T31931] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.624187][T31931] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.923484][ T4869] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1243.043003][ T4967] tap0: tun_chr_ioctl cmd 1074025676 [ 1243.050992][ T4967] tap0: owner set to 0 [ 1243.102144][ T4869] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1243.170936][T31934] IPVS: stop unused estimator thread 0... [ 1243.227137][ T4958] wg1 speed is unknown, defaulting to 1000 [ 1243.258533][ T4869] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1243.297445][ T4958] vxcan1 speed is unknown, defaulting to 1000 [ 1243.434043][ T4978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8048'. [ 1243.485849][ T4869] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1243.781056][ T4983] netlink: 'syz.2.8050': attribute type 6 has an invalid length. [ 1243.804657][ T4985] lo speed is unknown, defaulting to 1000 [ 1243.818149][ T4869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1243.861355][ T4869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1243.961513][ T4869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1244.096131][ T4869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1244.277434][ T4985] wg1 speed is unknown, defaulting to 1000 [ 1244.308777][ T4985] vxcan1 speed is unknown, defaulting to 1000 [ 1244.349527][ T4869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.461515][ T5000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1244.472700][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1244.498291][ T4869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.528894][T31936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.536199][T31936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.607362][T31936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.614530][T31936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.135148][ T5007] mac80211_hwsim hwsim97 syzkaller0: Caught tx_queue_len zero misconfig [ 1245.471958][ T4869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.035511][ T5041] veth1_to_batadv: entered allmulticast mode [ 1246.134366][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8061'. [ 1246.150637][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8061'. [ 1246.353947][ T4869] veth0_vlan: entered promiscuous mode [ 1246.385352][ T4869] veth1_vlan: entered promiscuous mode [ 1246.468316][ T4869] veth0_macvtap: entered promiscuous mode [ 1246.514301][ T4869] veth1_macvtap: entered promiscuous mode [ 1246.562180][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.577735][ T5051] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8062'. [ 1246.600747][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.641832][T31928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.652338][T31928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.676193][T31928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.821781][T31928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.857036][ T5057] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1246.980497][ T5066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1247.058332][ T5072] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1247.081936][ T5072] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1247.102379][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8066'. [ 1247.126553][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8066'. [ 1247.139102][T31932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.156185][T31932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.329678][ T5077] netlink: 'syz.2.8068': attribute type 1 has an invalid length. [ 1247.339512][ T5077] netlink: 'syz.2.8068': attribute type 1 has an invalid length. [ 1247.363687][T31933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.381451][T31933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.249262][ T5152] netlink: 'syz.3.8087': attribute type 13 has an invalid length. [ 1248.307501][ T5153] netlink: 'syz.3.8087': attribute type 1 has an invalid length. [ 1248.436475][ T5144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.596269][ T5144] sit1: left allmulticast mode [ 1248.601583][ T5144] bridge1: left promiscuous mode [ 1248.608948][ T5144] bridge1: left allmulticast mode [ 1248.633904][ T5144] veth7: left promiscuous mode [ 1248.669672][ T5144] geneve2: left promiscuous mode [ 1248.734492][ T5144] veth9: left promiscuous mode [ 1248.913180][ T5152] bond7: option fail_over_mac: invalid value (6) [ 1248.926797][ T5152] bond7 (unregistering): Released all slaves [ 1249.055851][ T5173] netlink: 'syz.2.8091': attribute type 1 has an invalid length. [ 1249.063715][ T5173] __nla_validate_parse: 6 callbacks suppressed [ 1249.063733][ T5173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1249.108420][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1249.179744][T19754] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.188347][T19754] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.197861][T19754] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.206502][T19754] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.257037][T19754] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.276354][T19754] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.334149][T19754] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.376510][T19754] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.469817][ T5184] tipc: Enabled bearer , priority 0 [ 1249.488848][ T5184] syzkaller0: entered promiscuous mode [ 1249.500435][ T5184] syzkaller0: entered allmulticast mode [ 1249.587539][ T5191] lo speed is unknown, defaulting to 1000 [ 1249.629939][ T5184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8092'. [ 1249.650864][ T5184] tipc: Resetting bearer [ 1249.700807][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8097'. [ 1249.717625][ T5183] tipc: Resetting bearer [ 1249.760641][ T5183] tipc: Disabling bearer [ 1249.778447][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8098'. [ 1249.976682][ T5191] wg1 speed is unknown, defaulting to 1000 [ 1249.984583][ T5191] vxcan1 speed is unknown, defaulting to 1000 [ 1250.257271][ T5227] netlink: 'syz.4.8104': attribute type 13 has an invalid length. [ 1250.284469][ T5227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8104'. [ 1250.303184][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8106'. [ 1250.330341][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8106'. [ 1250.349789][ T5232] netlink: 'syz.4.8104': attribute type 1 has an invalid length. [ 1250.376494][ T5227] bond1: option fail_over_mac: invalid value (6) [ 1250.386862][ T5227] bond1 (unregistering): Released all slaves [ 1250.414569][ T5231] netlink: 'syz.2.8105': attribute type 2 has an invalid length. [ 1250.427620][ T5233] netlink: 'syz.2.8105': attribute type 2 has an invalid length. [ 1250.436988][ T5231] netlink: 'syz.2.8105': attribute type 2 has an invalid length. [ 1250.661088][ T5242] netlink: 5464 bytes leftover after parsing attributes in process `syz.5.8108'. [ 1251.038756][ T5252] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1251.142644][ T5256] lo speed is unknown, defaulting to 1000 [ 1251.302913][ T5267] netlink: 'syz.1.8115': attribute type 1 has an invalid length. [ 1251.426803][ T5273] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8115'. [ 1251.428691][ T5267] bond4: entered promiscuous mode [ 1251.441555][ T5267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.460938][ T5256] wg1 speed is unknown, defaulting to 1000 [ 1251.468827][ T5256] vxcan1 speed is unknown, defaulting to 1000 [ 1251.594375][ T5268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.630928][ T5268] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1251.665415][ T5268] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1251.690153][ T5268] bond4: (slave wireguard0): making interface the new active one [ 1251.705326][ T5268] wireguard0: entered promiscuous mode [ 1251.718294][ T5268] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1251.930544][ T5288] netlink: 'syz.2.8121': attribute type 4 has an invalid length. [ 1252.349872][ T5313] macvlan3: entered promiscuous mode [ 1253.161669][ T5343] syzkaller1: entered promiscuous mode [ 1253.167270][ T5341] Unsupported ieee802154 address type: 0 [ 1253.173510][ T5343] syzkaller1: entered allmulticast mode [ 1253.225388][ T5340] lo speed is unknown, defaulting to 1000 [ 1253.358818][ T5350] lo speed is unknown, defaulting to 1000 [ 1254.105585][ T5340] wg1 speed is unknown, defaulting to 1000 [ 1254.171645][ T5340] vxcan1 speed is unknown, defaulting to 1000 [ 1254.345586][ T5378] lo speed is unknown, defaulting to 1000 [ 1254.709475][ T5350] wg1 speed is unknown, defaulting to 1000 [ 1254.795025][T30131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1255.532775][ T5350] vxcan1 speed is unknown, defaulting to 1000 [ 1255.556965][ T5378] wg1 speed is unknown, defaulting to 1000 [ 1256.044539][ T5378] vxcan1 speed is unknown, defaulting to 1000 [ 1256.433729][ T5425] __nla_validate_parse: 2 callbacks suppressed [ 1256.433748][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8154'. [ 1256.699563][ T5432] tipc: Started in network mode [ 1256.707945][ T5432] tipc: Node identity 66e143db3b0f, cluster identity 4711 [ 1256.760538][ T5432] tipc: Enabled bearer , priority 0 [ 1256.799252][ T5434] syzkaller0: entered promiscuous mode [ 1256.818061][ T5434] syzkaller0: entered allmulticast mode [ 1256.854341][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1256.858896][ T5432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1256.889257][ T5432] tipc: Resetting bearer [ 1256.905273][ T5438] netlink: 'syz.3.8159': attribute type 3 has an invalid length. [ 1256.993345][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.063416][ T5448] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.8160'. [ 1257.122403][ T5450] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8162'. [ 1257.166937][ T5432] tipc: Resetting bearer [ 1257.246024][ T5432] tipc: Disabling bearer [ 1257.397695][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8165'. [ 1257.478409][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.489935][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.853631][ T5478] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.8169'. [ 1258.061666][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8170'. [ 1258.103361][ T5483] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 1258.203906][ T5483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1258.316940][T30131] Bluetooth: hci1: command tx timeout [ 1258.652995][ T5496] syzkaller1: entered promiscuous mode [ 1258.660407][ T5496] syzkaller1: entered allmulticast mode [ 1258.853086][ T5503] lo speed is unknown, defaulting to 1000 [ 1258.937328][ T5509] : option downdelay: invalid value (18446744073709551615) [ 1258.964203][ T5509] : option downdelay: allowed values 0 - 2147483647 [ 1258.998799][ T5509]  (unregistering): Released all slaves [ 1259.194575][ T5507] : option downdelay: invalid value (18446744073709551615) [ 1259.203584][ T5507] : option downdelay: allowed values 0 - 2147483647 [ 1259.213094][ T5507]  (unregistering): Released all slaves [ 1259.229767][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1259.304951][ T5504] lo speed is unknown, defaulting to 1000 [ 1259.319895][ T5512] block nbd8: shutting down sockets [ 1259.527348][ T30] audit: type=1800 audit(1759957947.568:23): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8181" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1811 res=0 errno=0 [ 1259.570091][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8182'. [ 1259.604592][ T5503] wg1 speed is unknown, defaulting to 1000 [ 1259.633355][ T5503] vxcan1 speed is unknown, defaulting to 1000 [ 1259.966874][ T5552] lo speed is unknown, defaulting to 1000 [ 1260.161565][ T5558] bond0: (slave team0): Releasing backup interface [ 1260.194474][ T5558] team0: left promiscuous mode [ 1260.212962][ T5558] team_slave_0: left promiscuous mode [ 1260.235221][ T5558] team_slave_1: left promiscuous mode [ 1260.287440][ T5558] bond0: (slave dummy0): Releasing backup interface [ 1260.319314][ T5558] dummy0: left promiscuous mode [ 1260.354052][ T5558] bond0: (slave bond_slave_0): Releasing backup interface [ 1260.405776][ T5558] bond_slave_0: left promiscuous mode [ 1260.436253][ T5558] bond0: (slave bond_slave_1): Releasing backup interface [ 1260.464575][ T5558] bond_slave_1: left promiscuous mode [ 1260.477563][ T5558] team0: Port device team_slave_0 removed [ 1260.488574][ T5558] team0: Port device team_slave_1 removed [ 1260.496443][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.532788][ T5558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.638953][ T5504] wg1 speed is unknown, defaulting to 1000 [ 1260.652324][ T5504] vxcan1 speed is unknown, defaulting to 1000 [ 1260.882300][ T5574] tipc: Enabled bearer , priority 0 [ 1260.890294][ T5574] syzkaller0: entered promiscuous mode [ 1260.896086][ T5574] syzkaller0: entered allmulticast mode [ 1261.063109][ T5582] tipc: Resetting bearer [ 1261.113387][ T5581] lo speed is unknown, defaulting to 1000 [ 1261.140239][ T5573] tipc: Resetting bearer [ 1261.190863][ T5573] tipc: Disabling bearer [ 1261.270041][ T5552] wg1 speed is unknown, defaulting to 1000 [ 1261.320191][ T5552] vxcan1 speed is unknown, defaulting to 1000 [ 1261.593175][ T5578] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1261.775607][T30131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1262.049471][ T5594] lo speed is unknown, defaulting to 1000 [ 1262.056730][ T5581] wg1 speed is unknown, defaulting to 1000 [ 1262.064334][ T5581] vxcan1 speed is unknown, defaulting to 1000 [ 1262.878555][T30131] Bluetooth: hci4: command 0x0406 tx timeout [ 1263.103597][ T5594] wg1 speed is unknown, defaulting to 1000 [ 1263.170112][ T5605] lo speed is unknown, defaulting to 1000 [ 1263.273449][ T5594] vxcan1 speed is unknown, defaulting to 1000 [ 1263.636761][ T5625] __nla_validate_parse: 1 callbacks suppressed [ 1263.636780][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8204'. [ 1263.669652][ T5625] dvmrp1: entered allmulticast mode [ 1263.973309][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8206'. [ 1264.192222][ T5634] netlink: 'syz.4.8207': attribute type 13 has an invalid length. [ 1264.323039][ T5636] lo speed is unknown, defaulting to 1000 [ 1264.766091][ T5639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1264.775931][ T5639] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1264.789885][ T5639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.803973][ T5639] bridge0: failed insert local address into bridge forwarding table [ 1264.819663][ T5640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1264.833622][ T5640] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1265.144127][ T5636] wg1 speed is unknown, defaulting to 1000 [ 1265.153861][ T5636] vxcan1 speed is unknown, defaulting to 1000 [ 1265.155569][ T5605] wg1 speed is unknown, defaulting to 1000 [ 1265.325298][ T5648] lo speed is unknown, defaulting to 1000 [ 1265.556321][ T5658] netlink: 'syz.3.8213': attribute type 10 has an invalid length. [ 1265.599277][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.619053][ T5658] team0: entered promiscuous mode [ 1265.628071][ T5658] team_slave_0: entered promiscuous mode [ 1265.633951][ T5658] team_slave_1: entered promiscuous mode [ 1265.640909][ T5658] bond0: (slave team0): Enslaving as an active interface with an up link [ 1265.721880][ T5605] vxcan1 speed is unknown, defaulting to 1000 [ 1265.784666][ T5663] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1266.018877][ T5667] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode [ 1266.079501][ T5667] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1266.770924][ T5648] wg1 speed is unknown, defaulting to 1000 [ 1266.881151][ T5648] vxcan1 speed is unknown, defaulting to 1000 [ 1267.861756][ T5692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1268.218707][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8223'. [ 1269.290567][ T5721] Cannot find add_set index 2 as target [ 1269.760645][ T5738] lo speed is unknown, defaulting to 1000 [ 1269.771257][ T5739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8235'. [ 1269.980828][ T5747] lo speed is unknown, defaulting to 1000 [ 1270.191842][ T5757] bridge0: port 3(erspan0) entered blocking state [ 1270.219106][ T5757] bridge0: port 3(erspan0) entered disabled state [ 1270.246211][ T5757] erspan0: entered allmulticast mode [ 1270.253300][ T5757] erspan0: entered promiscuous mode [ 1270.305996][ T5758] erspan0: left allmulticast mode [ 1270.314620][ T5758] erspan0: left promiscuous mode [ 1270.334173][ T5758] bridge0: port 3(erspan0) entered disabled state [ 1270.380229][ T5751] lo speed is unknown, defaulting to 1000 [ 1270.430415][ T5738] wg1 speed is unknown, defaulting to 1000 [ 1270.508757][ T5738] vxcan1 speed is unknown, defaulting to 1000 [ 1270.961004][ T5778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8245'. [ 1270.983796][ T5747] wg1 speed is unknown, defaulting to 1000 [ 1271.157441][ T5747] vxcan1 speed is unknown, defaulting to 1000 [ 1271.254416][ T5787] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1271.493671][ T5791] tun0: tun_chr_ioctl cmd 1074025681 [ 1271.590878][ T30] audit: type=1107 audit(1759957959.638:24): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1271.595120][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1271.613987][ T5795] netlink: 'syz.4.8250': attribute type 21 has an invalid length. [ 1271.665697][ T5751] wg1 speed is unknown, defaulting to 1000 [ 1271.707652][ T5751] vxcan1 speed is unknown, defaulting to 1000 [ 1271.873189][ T5812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1271.944611][ T5812] netlink: 'syz.3.8253': attribute type 29 has an invalid length. [ 1272.223293][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1272.851065][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8257'. [ 1272.886341][ T5830] tipc: Resetting bearer [ 1272.997729][T31931] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.025064][T31931] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.077815][T31931] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.090532][T31931] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.418218][ T5842] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8260'. [ 1273.452947][ T5845] C: renamed from lo [ 1273.467129][ T5845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1273.686998][ T5858] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8263'. [ 1273.723550][ T5862] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1273.898705][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.911924][ T5875] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1274.363240][ T5911] vlan2: entered promiscuous mode [ 1274.368963][ T5911] vlan2: entered allmulticast mode [ 1274.374241][ T5911] hsr_slave_1: entered allmulticast mode [ 1274.478646][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8275'. [ 1274.549282][ T5924] netlink: 'syz.3.8279': attribute type 1 has an invalid length. [ 1274.663290][ T5924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1274.679751][ T5930] vlan0: entered allmulticast mode [ 1274.686290][ T5930] veth1: entered allmulticast mode [ 1274.697841][ T5930] bond7: (slave vlan0): Opening slave failed [ 1274.720310][ T5926] mac80211_hwsim hwsim97 wlan0: left promiscuous mode [ 1274.760800][ T5926] bond7: (slave wlan0): Opening slave failed [ 1274.791491][ T5922] lo speed is unknown, defaulting to 1000 [ 1274.846831][ T5939] netlink: 'syz.2.8282': attribute type 3 has an invalid length. [ 1274.857432][ T5937] sctp: [Deprecated]: syz.5.8281 (pid 5937) Use of int in max_burst socket option deprecated. [ 1274.857432][ T5937] Use struct sctp_assoc_value instead [ 1274.914505][ T5940] dvmrp0: entered allmulticast mode [ 1275.000535][ T5922] wg1 speed is unknown, defaulting to 1000 [ 1275.009516][ T5922] vxcan1 speed is unknown, defaulting to 1000 [ 1275.372473][ T5957] netlink: 'syz.3.8286': attribute type 1 has an invalid length. [ 1275.696754][ T5970] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8289'. [ 1276.096645][ T5980] xt_connbytes: Forcing CT accounting to be enabled [ 1276.103952][ T5978] lo speed is unknown, defaulting to 1000 [ 1276.538142][ T5978] wg1 speed is unknown, defaulting to 1000 [ 1276.546513][ T5978] vxcan1 speed is unknown, defaulting to 1000 [ 1276.683757][ T6002] netlink: 'syz.4.8299': attribute type 1 has an invalid length. [ 1276.813174][ T6007] bond1: (slave gretap1): making interface the new active one [ 1276.856489][ T6007] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1276.890335][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1276.900542][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1276.937367][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1276.947811][ T6018] netlink: 'syz.3.8301': attribute type 1 has an invalid length. [ 1276.957149][ T6018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1276.996813][ T6018] netlink: 'syz.3.8301': attribute type 10 has an invalid length. [ 1277.011850][ T6023] netlink: 'syz.2.8303': attribute type 4 has an invalid length. [ 1277.050974][ T6023] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8303'. [ 1277.123999][ T6029] vlan0: entered promiscuous mode [ 1277.130125][ T6029] vlan0: entered allmulticast mode [ 1277.156163][ T6029] veth0_vlan: entered allmulticast mode [ 1277.272398][ T6020] lo speed is unknown, defaulting to 1000 [ 1277.461563][ T6042] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 1277.667668][ T6051] bond2 (unregistering): Released all slaves [ 1277.719226][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8311'. [ 1277.759024][ T6057] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8311'. [ 1277.833736][ T6020] wg1 speed is unknown, defaulting to 1000 [ 1277.867285][ T6020] vxcan1 speed is unknown, defaulting to 1000 [ 1278.361616][ T6088] lo speed is unknown, defaulting to 1000 [ 1278.408233][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8320'. [ 1278.798899][ T6088] wg1 speed is unknown, defaulting to 1000 [ 1278.839057][ T6088] vxcan1 speed is unknown, defaulting to 1000 [ 1279.298311][ T6109] vlan2: entered promiscuous mode [ 1279.314454][ T6109] hsr0: entered promiscuous mode [ 1279.344920][ T6109] vlan2: entered allmulticast mode [ 1279.423045][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1279.488643][ T6114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1279.571724][ T6118] rdma_op ffff888062ff11f0 conn xmit_rdma 0000000000000000 [ 1280.003293][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.031857][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.099200][ T6117] vlan0: left promiscuous mode [ 1280.104251][ T6117] vlan0: left allmulticast mode [ 1280.109490][ T6117] veth0_vlan: left allmulticast mode [ 1280.141760][ T6117] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1280.194417][T31932] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.226411][T31932] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.239761][T31932] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.256147][T31932] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.269673][ T6137] netlink: 'syz.5.8329': attribute type 4 has an invalid length. [ 1280.388227][ T6143] netlink: 'syz.5.8332': attribute type 1 has an invalid length. [ 1280.396584][ T6143] netlink: 'syz.5.8332': attribute type 2 has an invalid length. [ 1280.404326][ T6143] netlink: 'syz.5.8332': attribute type 1 has an invalid length. [ 1281.027491][ T6176] netlink: 'syz.4.8342': attribute type 1 has an invalid length. [ 1281.151384][ T6184] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1281.181499][ T6184] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1281.264361][ T6195] __nla_validate_parse: 4 callbacks suppressed [ 1281.264380][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1281.296586][ T6176] vlan2: entered allmulticast mode [ 1281.296756][ T6196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1281.301746][ T6176] bridge0: entered allmulticast mode [ 1281.352843][T31934] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.363853][T31934] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.373821][ T6197] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1281.373938][T31932] bond0: (slave 77ÿ): interface is now down [ 1281.394621][T31932] bond0: (slave bond_slave_1): interface is now down [ 1281.402013][T31934] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.414535][T31934] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.425860][T31934] bond0: (slave 77ÿ): interface is now down [ 1281.434036][T31934] bond0: (slave bond_slave_1): interface is now down [ 1281.486551][T31934] bond0: (slave 77ÿ): interface is now down [ 1281.505927][T31934] bond0: (slave bond_slave_1): interface is now down [ 1281.525691][T31934] bond0: (slave 77ÿ): interface is now down [ 1281.531907][T31934] bond0: (slave bond_slave_1): interface is now down [ 1281.560238][ T6195] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1281.569910][T31932] bond0: (slave 77ÿ): interface is now down [ 1281.569934][T31932] bond0: (slave bond_slave_1): interface is now down [ 1281.573546][T31932] bond0: now running without any active interface! [ 1281.635867][ T6211] tipc: Enabled bearer , priority 10 [ 1281.662498][ T6213] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8350'. [ 1281.687258][ T6214] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1281.827344][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8351'. [ 1281.912349][ T6231] syzkaller1: entered promiscuous mode [ 1281.919722][ T6231] syzkaller1: entered allmulticast mode [ 1282.299248][ T6256] vlan0: entered promiscuous mode [ 1282.315792][ T6256] macsec0: entered promiscuous mode [ 1285.258045][ T6287] syzkaller0: entered promiscuous mode [ 1285.264301][ T6287] syzkaller0: entered allmulticast mode [ 1285.530939][ T6312] veth8: entered promiscuous mode [ 1285.933909][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8383'. [ 1286.118053][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1286.293074][ T6342] validate_nla: 5 callbacks suppressed [ 1286.293092][ T6342] netlink: 'syz.5.8386': attribute type 1 has an invalid length. [ 1286.825531][ T6363] netlink: 'syz.1.8392': attribute type 1 has an invalid length. [ 1286.855714][ T6365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1287.005651][ T6365] veth3: entered promiscuous mode [ 1287.071008][ T6374] tipc: Enabled bearer , priority 0 [ 1287.089004][ T6377] syzkaller0: entered promiscuous mode [ 1287.102563][ T6377] syzkaller0: entered allmulticast mode [ 1287.516154][ T6386] tipc: Resetting bearer [ 1287.566654][ T6386] tipc: Disabling bearer [ 1287.717581][ T6393] netlink: 'syz.1.8400': attribute type 1 has an invalid length. [ 1287.871261][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1288.018405][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8404'. [ 1288.028706][ T6409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8404'. [ 1288.059507][ T6407] netlink: 'syz.4.8403': attribute type 3 has an invalid length. [ 1288.210912][ T6413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1288.891555][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1290.544000][ T6447] netlink: 'syz.1.8411': attribute type 1 has an invalid length. [ 1290.565915][ T6447] netlink: 'syz.1.8411': attribute type 2 has an invalid length. [ 1290.579368][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1290.603841][ T6448] syzkaller1: left promiscuous mode [ 1290.609317][ T6448] syzkaller1: left allmulticast mode [ 1290.829028][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1291.039987][ T6470] lo speed is unknown, defaulting to 1000 [ 1291.077826][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8421'. [ 1291.230417][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8421'. [ 1291.257631][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1291.316634][ T6470] wg1 speed is unknown, defaulting to 1000 [ 1291.324241][ T6470] vxcan1 speed is unknown, defaulting to 1000 [ 1291.908799][ T6516] __nla_validate_parse: 1 callbacks suppressed [ 1291.908818][ T6516] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8429'. [ 1292.088769][ T6525] 8021q: VLANs not supported on caif0 [ 1292.098996][ T6513] lo speed is unknown, defaulting to 1000 [ 1292.114622][ T6530] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1292.337005][ T6534] netlink: 'syz.1.8432': attribute type 1 has an invalid length. [ 1292.373290][ T6534] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1292.484069][ T6539] netlink: 'syz.1.8432': attribute type 1 has an invalid length. [ 1292.502697][ T6539] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1292.520407][ T6513] wg1 speed is unknown, defaulting to 1000 [ 1292.528969][ T6513] vxcan1 speed is unknown, defaulting to 1000 [ 1292.912299][ T6556] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8437'. [ 1293.071334][ T6559] tipc: Enabled bearer , priority 0 [ 1293.094026][ T6558] syzkaller0: entered promiscuous mode [ 1293.117376][ T6558] syzkaller0: entered allmulticast mode [ 1293.177369][ T6559] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8438'. [ 1293.440005][ T6558] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8438'. [ 1293.572837][ T6559] lo speed is unknown, defaulting to 1000 [ 1293.579659][ T6580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1293.982906][ T6580] tipc: Disabling bearer [ 1294.186572][T16570] tipc: Node number set to 3128245281 [ 1294.658557][ T6559] wg1 speed is unknown, defaulting to 1000 [ 1294.667490][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 1294.738103][ T6613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1294.772656][ T6617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1294.858495][ T6612] lo speed is unknown, defaulting to 1000 [ 1295.145753][ T6612] wg1 speed is unknown, defaulting to 1000 [ 1295.180506][ T6628] syzkaller1: entered promiscuous mode [ 1295.193523][ T6628] syzkaller1: entered allmulticast mode [ 1295.327402][ T6612] vxcan1 speed is unknown, defaulting to 1000 [ 1295.347010][ T6630] netlink: 20896 bytes leftover after parsing attributes in process `syz.3.8458'. [ 1295.708374][ T6649] netlink: 19576 bytes leftover after parsing attributes in process `syz.3.8462'. [ 1295.957565][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058584c00: rx timeout, send abort [ 1296.285651][T31934] bond6 (unregistering): (slave erspan0): Releasing active interface [ 1296.456430][T31934] dvmrp0 (unregistering): left allmulticast mode [ 1296.465946][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058584c00: abort rx timeout. Force session deactivation [ 1296.520930][T31934] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1297.045688][T31934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.054610][T31934] bond_slave_0: left promiscuous mode [ 1297.061637][T31934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.071344][T31934] bond_slave_1: left promiscuous mode [ 1297.078609][T31934] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1297.087902][T31934] mac80211_hwsim hwsim75 wlan1: left promiscuous mode [ 1297.096111][T31934] bond0 (unregistering): Released all slaves [ 1297.249341][T31934] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1297.259222][T31934] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 1297.268488][T31934] bond1 (unregistering): Released all slaves [ 1297.421152][T31934] bond2 (unregistering): Released all slaves [ 1297.575095][T31934] bond3 (unregistering): Released all slaves [ 1297.726516][T31934] bond4 (unregistering): Released all slaves [ 1297.877809][T31934] bond5 (unregistering): Released all slaves [ 1298.025553][T31934] bond6 (unregistering): Released all slaves [ 1298.176545][T31934] bond7 (unregistering): Released all slaves [ 1298.332272][T31934] bond8 (unregistering): Released all slaves [ 1298.500152][T31934] bond9 (unregistering): Released all slaves [ 1298.513480][T31934] bond10 (unregistering): Released all slaves [ 1298.676089][T31934] bond11 (unregistering): Released all slaves [ 1298.690031][T31934] bond12 (unregistering): Released all slaves [ 1298.720457][ T6651] dvmrp1: left allmulticast mode [ 1298.926249][T31934] tipc: Left network mode [ 1299.371366][ T6673] tipc: Enabling of bearer rejected, already enabled [ 1299.392036][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8469'. [ 1299.402354][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8469'. [ 1299.731720][ T6693] mac80211_hwsim hwsim97 syzkaller0: left promiscuous mode [ 1299.768335][ T6693] mac80211_hwsim hwsim97 syzkaller0: left allmulticast mode [ 1300.190065][ T6691] tipc: New replicast peer: 172.20.20.187 [ 1300.200465][ T6691] tipc: Enabled bearer , priority 10 [ 1300.657683][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.866128][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1300.910644][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1300.998899][ T6726] batadv0: entered promiscuous mode [ 1301.048027][ T6731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8484'. [ 1301.058736][ T6726] team0: entered promiscuous mode [ 1301.063804][ T6726] team_slave_0: entered promiscuous mode [ 1301.080961][ T6726] team_slave_1: entered promiscuous mode [ 1301.122227][ T6726] debugfs: 'hsr1' already exists in 'hsr' [ 1301.145492][ T6726] Cannot create hsr debugfs directory [ 1301.162006][ T6726] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 1301.210618][ T6726] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1301.252791][ T6726] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1301.324482][ T6734] 0ªX¹¦D: left allmulticast mode [ 1301.353875][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.362989][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.380607][ T6734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1301.509161][ T6738] netlink: 'syz.4.8486': attribute type 1 has an invalid length. [ 1301.585320][T31934] hsr_slave_0: left promiscuous mode [ 1301.669435][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1302.852684][T31934] team0 (unregistering): Port device team_slave_1 removed [ 1303.367861][T31932] smc: removing ib device syz2 [ 1303.873067][ T6738] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1303.873628][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8488'. [ 1303.892962][ T6748] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1303.897457][ T6745] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1304.094527][ T6749] lo speed is unknown, defaulting to 1000 [ 1304.115559][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8495'. [ 1304.125689][ T6781] netlink: 'syz.1.8495': attribute type 1 has an invalid length. [ 1304.156830][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8495'. [ 1304.195708][ T6780] netlink: 'syz.1.8495': attribute type 1 has an invalid length. [ 1304.225751][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.272554][ T6784] netlink: 'syz.2.8496': attribute type 13 has an invalid length. [ 1304.292602][ T6784] netlink: 'syz.2.8496': attribute type 17 has an invalid length. [ 1304.351128][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8497'. [ 1304.556310][ T6795] __nla_validate_parse: 1 callbacks suppressed [ 1304.556330][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1304.640937][ T6800] netlink: 700 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1304.671982][ T6800] netlink: 700 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1304.998082][ T6795] nbd: socks must be embedded in a SOCK_ITEM attr [ 1305.368751][ T6823] netlink: 528 bytes leftover after parsing attributes in process `syz.4.8508'. [ 1305.396740][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8507'. [ 1305.495252][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8507'. [ 1305.769760][ T6834] netlink: 'syz.3.8511': attribute type 13 has an invalid length. [ 1305.778445][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1305.814342][ T6834] netlink: 'syz.3.8511': attribute type 17 has an invalid length. [ 1305.892527][ T6834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1305.953230][ T6749] wg1 speed is unknown, defaulting to 1000 [ 1306.836620][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8517'. [ 1307.067836][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8518'. [ 1307.179648][T31934] IPVS: stop unused estimator thread 0... [ 1307.325525][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8520'. [ 1307.461827][ T6880] gretap0: entered promiscuous mode [ 1307.795415][ T6903] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1307.987457][ T6903] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1308.739570][ T6942] Can't find ip_set type hash:ip$mec [ 1309.401342][ T6967] x_tables: duplicate underflow at hook 2 [ 1309.649457][ T6988] __nla_validate_parse: 5 callbacks suppressed [ 1309.649475][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8548'. [ 1309.976105][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8552'. [ 1309.986064][ T7007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.017912][ T7005] lo speed is unknown, defaulting to 1000 [ 1310.134316][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8553'. [ 1310.323276][ T7022] netlink: 2352 bytes leftover after parsing attributes in process `syz.1.8556'. [ 1310.324910][ T7005] wg1 speed is unknown, defaulting to 1000 [ 1310.456325][ T7028] netlink: 'syz.2.8557': attribute type 6 has an invalid length. [ 1310.522272][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1311.151762][ T7046] sctp: [Deprecated]: syz.3.8560 (pid 7046) Use of int in maxseg socket option. [ 1311.151762][ T7046] Use struct sctp_assoc_value instead [ 1311.448250][ T7052] lo speed is unknown, defaulting to 1000 [ 1311.517871][ T7056] netlink: 'syz.4.8562': attribute type 1 has an invalid length. [ 1311.669680][ T7062] macsec1: entered promiscuous mode [ 1311.675652][ T7062] bridge0: entered promiscuous mode [ 1311.682807][ T7062] bridge0: port 1(macsec1) entered blocking state [ 1311.694136][ T7062] bridge0: port 1(macsec1) entered disabled state [ 1311.701996][ T7062] macsec1: entered allmulticast mode [ 1311.708854][ T7062] bridge0: entered allmulticast mode [ 1311.718308][ T7062] macsec1: left allmulticast mode [ 1311.723585][ T7062] bridge0: left allmulticast mode [ 1311.760713][ T7062] bridge0: left promiscuous mode [ 1311.804472][ T7052] wg1 speed is unknown, defaulting to 1000 [ 1311.809031][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1311.812969][ T7060] lo speed is unknown, defaulting to 1000 [ 1311.829294][ T4710] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 1311.846958][ T4710] hid-generic 0005:16C0:5505.0007: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1312.117747][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8568'. [ 1312.440680][ T7060] wg1 speed is unknown, defaulting to 1000 [ 1312.929658][ T7116] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8578'. [ 1313.240835][ T7118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1313.542036][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8586'. [ 1313.621772][ T7150] netlink: 'syz.3.8589': attribute type 1 has an invalid length. [ 1313.675295][ T7152] veth0: entered promiscuous mode [ 1313.680984][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8590'. [ 1313.682717][ T7152] netlink: 'syz.5.8590': attribute type 10 has an invalid length. [ 1313.699650][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 1313.719064][ T7152] team0: Cannot enslave team device to itself [ 1313.762325][ T7153] veth0 (unregistering): left promiscuous mode [ 1313.923169][ T7167] 8021q: VLANs not supported on nlmon0 [ 1314.179705][ T7190] IPVS: length: 4096 != 8 [ 1314.208741][ T7190] IPVS: length: 4096 != 2088 [ 1314.254223][ T7194] nbd: socks must be embedded in a SOCK_ITEM attr [ 1314.586390][ T7209] batadv1: entered promiscuous mode [ 1314.591651][ T7209] batadv1: entered allmulticast mode [ 1314.849190][ T7203] delete_channel: no stack [ 1315.074255][ T7238] __nla_validate_parse: 8 callbacks suppressed [ 1315.074273][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8615'. [ 1315.138838][ T7236] pim6reg1: entered promiscuous mode [ 1315.144220][ T7236] pim6reg1: entered allmulticast mode [ 1315.255559][ T7243] lo speed is unknown, defaulting to 1000 [ 1315.286175][ T7238] lo speed is unknown, defaulting to 1000 [ 1315.331338][ T7239] lo speed is unknown, defaulting to 1000 [ 1315.589591][ T7263] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8619'. [ 1315.687793][ T7274] pim6reg: entered allmulticast mode [ 1315.706504][ T7261] netlink: 'syz.3.8619': attribute type 7 has an invalid length. [ 1315.725716][ T7261] netlink: 'syz.3.8619': attribute type 8 has an invalid length. [ 1315.735762][ T7277] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.8622'. [ 1315.755303][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8622'. [ 1315.764167][ T7278] pim6reg: left allmulticast mode [ 1315.894612][ T7285] SET target dimension over the limit! [ 1315.999373][T31935] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.030135][T31935] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.061676][T31935] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.079412][T31935] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.076495][ T7304] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1317.498550][ T7316] netlink: 'syz.1.8632': attribute type 16 has an invalid length. [ 1317.536238][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1317.555815][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1317.565470][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1317.565866][ T7239] wg1 speed is unknown, defaulting to 1000 [ 1317.613614][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1317.621590][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1317.628898][ T7243] wg1 speed is unknown, defaulting to 1000 [ 1317.744857][ T7238] wg1 speed is unknown, defaulting to 1000 [ 1318.352279][ T7322] bond4: left promiscuous mode [ 1318.361569][ T7322] wireguard0: left promiscuous mode [ 1318.713615][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1318.763400][ T7326] tipc: Enabled bearer , priority 0 [ 1318.802656][ T7335] tipc: Resetting bearer [ 1318.808535][ T7317] lo speed is unknown, defaulting to 1000 [ 1318.901872][ T7347] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8637'. [ 1318.936368][ T7325] tipc: Disabling bearer [ 1319.311746][ T7317] wg1 speed is unknown, defaulting to 1000 [ 1319.563424][ T7375] tun0: tun_chr_ioctl cmd 1074025675 [ 1319.572842][ T7375] tun0: persist disabled [ 1319.577399][ T7368] tun0: tun_chr_ioctl cmd 1074025680 [ 1319.607411][ T7380] netlink: 'syz.2.8647': attribute type 1 has an invalid length. [ 1319.640740][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1319.662615][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8647'. [ 1319.774182][T30131] Bluetooth: hci5: command tx timeout [ 1319.973847][ T7381] dvmrp1: left allmulticast mode [ 1320.292392][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8649'. [ 1320.606429][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8652'. [ 1320.621802][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8652'. [ 1320.685985][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 1320.831032][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.841328][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.849917][ T7317] bridge_slave_0: entered allmulticast mode [ 1320.858658][ T7317] bridge_slave_0: entered promiscuous mode [ 1320.878655][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.886910][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.894389][ T7317] bridge_slave_1: entered allmulticast mode [ 1320.903310][ T7317] bridge_slave_1: entered promiscuous mode [ 1320.972932][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.991453][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.021929][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8658'. [ 1321.048662][ T7317] team0: Port device team_slave_0 added [ 1321.098869][ T7437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1321.108680][ T7317] team0: Port device team_slave_1 added [ 1321.173040][ T7439] : renamed from bond_slave_0 [ 1321.217233][ T7440] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1321.224508][ T7440] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 1321.236465][ T7440] bond8: (slave sit2): Error -95 calling set_mac_address [ 1321.346371][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.363722][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.413120][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.449860][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.462095][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.490073][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.597795][ T7317] hsr_slave_0: entered promiscuous mode [ 1321.616547][ T7317] hsr_slave_1: entered promiscuous mode [ 1321.763415][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8663'. [ 1321.792988][ T7456] bridge0: port 1(macvlan3) entered blocking state [ 1321.815563][ T7456] bridge0: port 1(macvlan3) entered disabled state [ 1321.824529][ T7456] macvlan3: entered allmulticast mode [ 1321.830251][ T7456] bridge0: entered allmulticast mode [ 1321.835979][ T5828] Bluetooth: hci5: command tx timeout [ 1321.844169][ T7456] macvlan3: left allmulticast mode [ 1321.850881][ T7456] bridge0: left allmulticast mode [ 1321.970961][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8665'. [ 1321.970961][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8665'. [ 1321.989803][ T7457] bridge0: port 1(macvlan3) entered blocking state [ 1322.007956][ T7469] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8665'. [ 1322.035316][ T7457] bridge0: port 1(macvlan3) entered disabled state [ 1322.043984][ T7457] macvlan3: entered allmulticast mode [ 1322.051691][ T7457] bridge0: entered allmulticast mode [ 1322.062407][ T7457] macvlan3: left allmulticast mode [ 1322.068094][ T7457] bridge0: left allmulticast mode [ 1322.140383][ T7467] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8664'. [ 1322.309181][ T7474] lo speed is unknown, defaulting to 1000 [ 1322.330543][ T7478] virt_wifi0: mtu greater than device maximum [ 1322.387628][ T7481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1322.438520][ T7487] netlink: 'syz.1.8671': attribute type 1 has an invalid length. [ 1322.440911][ T7317] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.474860][ T7317] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.569795][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8672'. [ 1322.662518][ T7474] wg1 speed is unknown, defaulting to 1000 [ 1322.786189][ T7317] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1322.796165][ T7317] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.056870][ T7317] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.090884][ T7317] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.260177][ T7317] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.316284][ T7317] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.793160][ T7317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1323.845626][ T7317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1323.865964][ T7317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1323.903350][ T7317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1323.916666][ T5828] Bluetooth: hci5: command 0x040f tx timeout [ 1324.128205][ T7560] lo speed is unknown, defaulting to 1000 [ 1324.159317][ T7568] veth6: entered allmulticast mode [ 1324.243721][ T7570] veth1_virt_wifi: entered allmulticast mode [ 1324.313893][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.387822][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.407011][T31931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.414214][T31931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.491159][T31928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.498525][T31928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.189751][ T7560] wg1 speed is unknown, defaulting to 1000 [ 1325.342654][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.371482][ T7615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 1325.491309][ T7618] lo speed is unknown, defaulting to 1000 [ 1325.526536][ T7317] veth0_vlan: entered promiscuous mode [ 1325.564518][ T7317] veth1_vlan: entered promiscuous mode [ 1325.618233][ T7624] __nla_validate_parse: 4 callbacks suppressed [ 1325.618253][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1325.663637][ T7317] veth0_macvtap: entered promiscuous mode [ 1325.704500][ T7317] veth1_macvtap: entered promiscuous mode [ 1325.793794][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.838577][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.911570][T31928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.951314][T31928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.991787][T31928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.996039][ T5828] Bluetooth: hci5: command 0x040f tx timeout [ 1326.059592][T31928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.220975][ T7618] wg1 speed is unknown, defaulting to 1000 [ 1326.284313][T31928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.318732][T31928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.422372][T31933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.441230][T31933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.520487][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1326.536759][ T7645] netlink: 'syz.2.8713': attribute type 2 has an invalid length. [ 1326.544528][ T7645] netlink: 'syz.2.8713': attribute type 8 has an invalid length. [ 1326.553623][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1326.561375][ T7645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8713'. [ 1327.160195][ T7672] lo speed is unknown, defaulting to 1000 [ 1327.363178][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8726'. [ 1327.451307][ T7688] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1327.497008][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8728'. [ 1327.530393][ T7672] wg1 speed is unknown, defaulting to 1000 [ 1327.541539][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8729'. [ 1327.564614][ T7693] sctp: [Deprecated]: syz.2.8729 (pid 7693) Use of int in maxseg socket option. [ 1327.564614][ T7693] Use struct sctp_assoc_value instead [ 1327.582917][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8728'. [ 1327.671650][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.683792][ T7698] pim6reg: entered allmulticast mode [ 1327.722094][ T7698] pim6reg: left allmulticast mode [ 1327.852307][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1327.902843][ T7709] veth15: entered promiscuous mode [ 1328.078737][ T5828] Bluetooth: hci5: command 0x040f tx timeout [ 1328.101368][ T7721] sctp: [Deprecated]: syz.5.8740 (pid 7721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1328.101368][ T7721] Use struct sctp_sack_info instead [ 1328.122204][ T7721] sctp: [Deprecated]: syz.5.8740 (pid 7721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1328.122204][ T7721] Use struct sctp_sack_info instead [ 1328.399065][ T7741] netlink: 'syz.5.8747': attribute type 1 has an invalid length. [ 1328.572317][ T7736] lo speed is unknown, defaulting to 1000 [ 1328.743727][ T7740] lo speed is unknown, defaulting to 1000 [ 1328.967374][ T7736] wg1 speed is unknown, defaulting to 1000 [ 1329.113423][ T7740] wg1 speed is unknown, defaulting to 1000 [ 1355.449922][ T7767] openvswitch: netlink: Flow actions attr not present in new flow. [ 1355.457552][ T7768] __nla_validate_parse: 4 callbacks suppressed [ 1355.457572][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1355.566965][ T7772] lo speed is unknown, defaulting to 1000 [ 1355.611190][ T7777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1355.621753][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8754'. [ 1355.921492][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1355.958304][ T7772] wg1 speed is unknown, defaulting to 1000 [ 1356.058618][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1356.470850][ T7806] lo speed is unknown, defaulting to 1000 [ 1356.733889][ T7805] lo speed is unknown, defaulting to 1000 [ 1357.132133][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8769'. [ 1357.302817][ T7806] wg1 speed is unknown, defaulting to 1000 [ 1357.512948][ T7840] netlink: 'syz.5.8771': attribute type 12 has an invalid length. [ 1357.589271][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8772'. [ 1357.932171][ T7805] wg1 speed is unknown, defaulting to 1000 [ 1358.134454][ T7852] netlink: 'syz.2.8775': attribute type 1 has an invalid length. [ 1358.173310][ T7852] NCSI netlink: No device for ifindex 0 [ 1358.238400][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.265536][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.275321][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.284113][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.293691][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.302579][ T7855] tipc: Enabling of bearer rejected, already enabled [ 1358.744629][ T7873] netlink: 'syz.5.8783': attribute type 1 has an invalid length. [ 1358.746984][ T7876] netlink: zone id is out of range [ 1358.757876][ T7873] netlink: 15 bytes leftover after parsing attributes in process `syz.5.8783'. [ 1358.776003][ T7876] netlink: zone id is out of range [ 1358.781167][ T7876] netlink: zone id is out of range [ 1358.806716][ T7877] netlink: zone id is out of range [ 1358.811934][ T7876] netlink: zone id is out of range [ 1358.835283][ T7877] netlink: zone id is out of range [ 1358.837186][ T7876] netlink: zone id is out of range [ 1358.840431][ T7877] netlink: zone id is out of range [ 1358.840444][ T7877] netlink: zone id is out of range [ 1358.931930][ T7879] bond9: Removing last arp target with arp_interval on [ 1358.982176][ T7879] bond9: entered promiscuous mode [ 1359.005094][ T7879] bond9: entered allmulticast mode [ 1359.038413][ T7879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1359.164042][ T7892] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1359.178725][ T7892] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1359.191202][ T7892] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1359.257319][ T7895] tipc: Enabling of bearer rejected, already enabled [ 1359.289534][ T7895] tipc: Resetting bearer [ 1359.539751][ T7907] ip_vti0: entered promiscuous mode [ 1359.557256][ T7907] netlink: 'syz.1.8791': attribute type 2 has an invalid length. [ 1359.797284][ T7927] netlink: 'syz.3.8797': attribute type 2 has an invalid length. [ 1359.806839][ T7926] delete_channel: no stack [ 1359.955634][ T7938] netlink: 'syz.1.8801': attribute type 2 has an invalid length. [ 1359.983913][ T7938] netlink: 'syz.1.8801': attribute type 2 has an invalid length. [ 1360.069302][ T7944] siw: device registration error -23 [ 1360.227339][ T7327] IPVS: starting estimator thread 0... [ 1360.314877][ T7952] IPVS: using max 30 ests per chain, 72000 per kthread [ 1360.390548][ T7962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1360.793252][ T7992] __nla_validate_parse: 4 callbacks suppressed [ 1360.793272][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8812'. [ 1360.976807][ T7992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1361.193850][ T8014] net_ratelimit: 37 callbacks suppressed [ 1361.193871][ T8014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1361.222388][ T8016] lo speed is unknown, defaulting to 1000 [ 1361.246693][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8818'. [ 1361.403193][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8821'. [ 1361.432242][ T8028] netlink: 'syz.1.8821': attribute type 5 has an invalid length. [ 1361.453653][ T8028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8821'. [ 1361.554505][ T8028] geneve3: entered promiscuous mode [ 1361.561204][ T8028] geneve3: entered allmulticast mode [ 1361.568591][ T7990] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1361.591781][ T7990] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1361.615483][ T7990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1361.631743][ T8033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1361.720462][ T8033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1361.801141][ T8016] wg1 speed is unknown, defaulting to 1000 [ 1361.826805][ T8033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1362.033610][ T7977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.080049][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.137217][T31935] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.236919][T31935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.279482][ T7990] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.311047][ T8061] tipc: Started in network mode [ 1362.316610][ T8061] tipc: Node identity 6a0205d90a35, cluster identity 4711 [ 1362.324006][ T8061] tipc: Enabled bearer , priority 0 [ 1362.380065][ T8065] netlink: 'syz.1.8830': attribute type 6 has an invalid length. [ 1362.461274][ T8061] tipc: Resetting bearer [ 1362.470612][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8830'. [ 1362.480822][ T8060] tipc: Disabling bearer [ 1362.559546][ T8069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1362.734116][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1363.245775][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8841'. [ 1363.330179][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8840'. [ 1364.072663][ T8151] 8021q: VLANs not supported on gre0 [ 1364.245862][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1364.536785][ T8187] netlink: 'syz.2.8863': attribute type 1 has an invalid length. [ 1364.579074][ T8187] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1364.683695][ T8187] veth5: entered promiscuous mode [ 1364.704331][ T8190] erspan0: entered allmulticast mode [ 1365.129853][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8871'. [ 1365.280082][ T8222] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1365.387187][ T8231] netlink: 'syz.2.8876': attribute type 7 has an invalid length. [ 1365.395282][ T8231] netlink: 'syz.2.8876': attribute type 8 has an invalid length. [ 1365.405411][ T8231] netlink: 'syz.2.8876': attribute type 4 has an invalid length. [ 1365.505296][ T8234] syzkaller1: entered promiscuous mode [ 1365.531306][ T8234] syzkaller1: entered allmulticast mode [ 1365.732119][ T8253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.850071][ T8259] netlink: 'syz.3.8886': attribute type 21 has an invalid length. [ 1366.124053][ T8275] __nla_validate_parse: 3 callbacks suppressed [ 1366.124070][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8890'. [ 1366.169414][ T8275] netlink: 'syz.5.8890': attribute type 10 has an invalid length. [ 1366.179565][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8890'. [ 1366.338865][ T8281] lo speed is unknown, defaulting to 1000 [ 1366.346652][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1366.962214][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1367.511474][ T7990] ip6gretap0 (unregistering): left promiscuous mode [ 1368.087814][ T7990] dvmrp0 (unregistering): left allmulticast mode [ 1368.127897][ T7990] dvmrp8 (unregistering): left allmulticast mode [ 1368.214024][ T7990] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1368.444499][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1368.507889][ T8308] netlink: 'syz.4.8901': attribute type 2 has an invalid length. [ 1368.516574][ T8308] netlink: 4040 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1368.855450][ T7990] bond0 (unregistering): left promiscuous mode [ 1368.861749][ T7990] bond_slave_0: left promiscuous mode [ 1368.868842][ T7990] bond_slave_1: left promiscuous mode [ 1368.874624][ T7990] dummy0: left promiscuous mode [ 1368.881237][ T7990] team0: left promiscuous mode [ 1368.886880][ T7990] team_slave_0: left promiscuous mode [ 1368.892872][ T7990] team_slave_1: left promiscuous mode [ 1368.902393][ T7990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.913790][ T7990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.936056][ T7990] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1368.950653][ T7990] bond0 (unregistering): (slave team0): Releasing backup interface [ 1368.972089][ T7990] bond0 (unregistering): Released all slaves [ 1369.411342][ T7990] bond1 (unregistering): (slave veth3): Releasing active interface [ 1369.442768][ T7990] bond1 (unregistering): Released all slaves [ 1369.667747][ T7990] bond2 (unregistering): Released all slaves [ 1369.854609][ T7990] bond3 (unregistering): Released all slaves [ 1369.879318][ T7990] bond4 (unregistering): Released all slaves [ 1370.082335][ T8286] Set syz1 is full, maxelem 65536 reached [ 1370.128445][ T7990] bond5 (unregistering): Released all slaves [ 1370.145809][ T7990] bond6 (unregistering): Released all slaves [ 1370.289121][ T7990] bond7 (unregistering): Released all slaves [ 1370.302829][ T8281] wg1 speed is unknown, defaulting to 1000 [ 1370.316768][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8902'. [ 1370.499203][ T8319] netlink: 'syz.1.8904': attribute type 2 has an invalid length. [ 1370.566215][ T7990] _ÐZ`Ô€@Y: left promiscuous mode [ 1370.650984][ T8311] lo speed is unknown, defaulting to 1000 [ 1370.661972][ T7990] tipc: Disabling bearer [ 1370.721041][ T7990] tipc: Left network mode [ 1370.994341][ T8311] wg1 speed is unknown, defaulting to 1000 [ 1371.210597][ T8326] netlink: 'syz.2.8905': attribute type 9 has an invalid length. [ 1371.225018][ T8326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8905'. [ 1371.678644][ T8329] lo speed is unknown, defaulting to 1000 [ 1372.241473][ T8345] openvswitch: netlink: Key type 83 is out of range max 32 [ 1372.256376][ T8345] netlink: 'syz.2.8911': attribute type 1 has an invalid length. [ 1372.322816][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1372.440527][ T8345] bond10: entered promiscuous mode [ 1372.445876][ T8345] bond10: entered allmulticast mode [ 1372.460099][ T8346] bridge7: entered promiscuous mode [ 1372.466107][ T8346] bridge7: entered allmulticast mode [ 1372.480150][ T8346] bond10: (slave bridge7): making interface the new active one [ 1372.489014][ T8346] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 1372.506744][ T8329] wg1 speed is unknown, defaulting to 1000 [ 1372.743214][ T8354] netlink: 'syz.2.8913': attribute type 13 has an invalid length. [ 1372.751502][ T8354] netlink: 'syz.2.8913': attribute type 17 has an invalid length. [ 1372.841984][ T8354] erspan0: left allmulticast mode [ 1372.863605][ T8354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.896344][ T7990] veth1_to_bridge: left promiscuous mode [ 1372.910345][ T7990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.138978][ T7990] pim6reg (unregistering): left allmulticast mode [ 1373.482763][ T7990] team0 (unregistering): Port device team_slave_1 removed [ 1373.531387][ T7990] team0 (unregistering): Port device team_slave_0 removed [ 1374.198591][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1374.218826][ T8373] netlink: 'syz.3.8917': attribute type 1 has an invalid length. [ 1374.234220][ T8361] lo speed is unknown, defaulting to 1000 [ 1374.360067][ T8378] lo speed is unknown, defaulting to 1000 [ 1374.473755][ T8385] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1374.532622][ T7990] IPVS: stop unused estimator thread 0... [ 1374.674354][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8922'. [ 1374.689383][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8922'. [ 1374.700662][ T8394] tipc: Enabled bearer , priority 0 [ 1374.709135][ T8394] syzkaller0: entered promiscuous mode [ 1374.715425][ T8394] syzkaller0: entered allmulticast mode [ 1374.761117][ T8393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.786596][ T8361] wg1 speed is unknown, defaulting to 1000 [ 1374.808649][ T8394] tipc: Resetting bearer [ 1374.834580][ T8396] tipc: Enabling of bearer rejected, failed to enable media [ 1374.947123][ T8393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.045811][ T8393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.074065][ T8378] wg1 speed is unknown, defaulting to 1000 [ 1375.192615][ T8393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.360111][ T8401] tipc: Enabled bearer , priority 0 [ 1375.374383][ T8401] syzkaller0: entered promiscuous mode [ 1375.381168][ T8401] syzkaller0: entered allmulticast mode [ 1375.449326][ T7990] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.574031][ T8404] tipc: Resetting bearer [ 1375.591520][ T7994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.626320][ T8400] tipc: Resetting bearer [ 1375.655579][ T8400] tipc: Disabling bearer [ 1375.664260][ T7994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.680134][ T7990] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.825141][ T7327] tipc: Node number set to 1575896027 [ 1375.935989][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8929'. [ 1376.005381][ T8416] netlink: 'syz.3.8929': attribute type 1 has an invalid length. [ 1376.026467][ T8416] netlink: 'syz.3.8929': attribute type 1 has an invalid length. [ 1376.084127][ T8423] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1376.366948][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8935'. [ 1376.402361][ T8437] tipc: Enabled bearer , priority 0 [ 1376.461328][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1376.482353][ T8437] syzkaller0: entered promiscuous mode [ 1376.495509][ T8437] syzkaller0: entered allmulticast mode [ 1376.513406][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1376.570393][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1376.589392][ T7991] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.607850][ T8437] tipc: Resetting bearer [ 1376.614533][ T8441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8936'. [ 1376.636160][ T7991] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.644414][ T7991] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.684547][ T8435] tipc: Resetting bearer [ 1376.720002][ T8452] netlink: 17235 bytes leftover after parsing attributes in process `syz.3.8942'. [ 1376.734619][ T8435] tipc: Disabling bearer [ 1376.757862][ T8448] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8938'. [ 1376.771701][ T7991] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.803863][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8942'. [ 1376.813729][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1377.003559][ T8476] veth0: entered promiscuous mode [ 1377.010381][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8947'. [ 1377.087266][ T8476] veth0 (unregistering): left promiscuous mode [ 1378.022599][ T8505] lo speed is unknown, defaulting to 1000 [ 1378.150527][ T8517] macsec1: entered promiscuous mode [ 1378.155939][T30131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1378.172346][ T8517] batadv0: entered promiscuous mode [ 1378.188599][ T8517] batadv0: left promiscuous mode [ 1378.294266][ T8524] netlink: 'syz.5.8960': attribute type 1 has an invalid length. [ 1378.334824][ T8521] bridge_slave_0: left allmulticast mode [ 1378.340517][ T8521] bridge_slave_0: left promiscuous mode [ 1378.365178][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.377794][ T8521] bridge_slave_1: left allmulticast mode [ 1378.383480][ T8521] bridge_slave_1: left promiscuous mode [ 1378.392612][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.417937][ T8521] bond0: (slave bond_slave_0): Releasing backup interface [ 1378.433672][ T8521] bond0: (slave bond_slave_1): Releasing backup interface [ 1378.453850][ T8521] team0: Port device team_slave_0 removed [ 1378.468090][ T8521] team0: Port device team_slave_1 removed [ 1378.478018][ T8533] x_tables: duplicate underflow at hook 1 [ 1378.486208][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.494617][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.503496][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.511384][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.520508][ T8521] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1378.590091][ T8524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1378.599510][ T8522] team0: Mode changed to "activebackup" [ 1378.758661][ T8532] veth15: entered promiscuous mode [ 1378.779969][ T8532] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1378.810309][ T8505] wg1 speed is unknown, defaulting to 1000 [ 1379.269359][ T8566] netlink: 'syz.4.8967': attribute type 13 has an invalid length. [ 1379.296873][ T8566] netlink: 'syz.4.8967': attribute type 17 has an invalid length. [ 1379.567725][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.577540][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.591230][ T8566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1379.739640][ T8569] lo speed is unknown, defaulting to 1000 [ 1379.782668][ T8586] netlink: 'syz.5.8971': attribute type 1 has an invalid length. [ 1380.190749][ T8598] lo speed is unknown, defaulting to 1000 [ 1380.930554][ T8569] wg1 speed is unknown, defaulting to 1000 [ 1381.428567][ T8598] wg1 speed is unknown, defaulting to 1000 [ 1381.561187][ T8631] __nla_validate_parse: 12 callbacks suppressed [ 1381.561209][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1382.201450][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8986'. [ 1382.233405][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8986'. [ 1382.252620][ T8648] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1382.263561][ T8642] lo speed is unknown, defaulting to 1000 [ 1382.578061][ T8654] FAULT_INJECTION: forcing a failure. [ 1382.578061][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.603792][ T8656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8992'. [ 1382.614516][ T8654] CPU: 1 UID: 0 PID: 8654 Comm: syz.4.8991 Not tainted syzkaller #0 PREEMPT(full) [ 1382.614543][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1382.614555][ T8654] Call Trace: [ 1382.614564][ T8654] [ 1382.614573][ T8654] dump_stack_lvl+0x189/0x250 [ 1382.614597][ T8654] ? __pfx____ratelimit+0x10/0x10 [ 1382.614622][ T8654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1382.614641][ T8654] ? __pfx__printk+0x10/0x10 [ 1382.614664][ T8654] ? __might_fault+0xb0/0x130 [ 1382.614691][ T8654] should_fail_ex+0x414/0x560 [ 1382.614715][ T8654] _copy_from_user+0x2d/0xb0 [ 1382.614740][ T8654] ___sys_sendmsg+0x158/0x2a0 [ 1382.614766][ T8654] ? __pfx____sys_sendmsg+0x10/0x10 [ 1382.614823][ T8654] ? __fget_files+0x2a/0x420 [ 1382.614844][ T8654] ? __fget_files+0x3a0/0x420 [ 1382.614873][ T8654] __x64_sys_sendmsg+0x19b/0x260 [ 1382.614899][ T8654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1382.614933][ T8654] ? rcu_is_watching+0x15/0xb0 [ 1382.614960][ T8654] do_syscall_64+0xfa/0xfa0 [ 1382.614982][ T8654] ? lockdep_hardirqs_on+0x9c/0x150 [ 1382.615006][ T8654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.615023][ T8654] ? clear_bhb_loop+0x60/0xb0 [ 1382.615043][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.615060][ T8654] RIP: 0033:0x7f130ad8eec9 [ 1382.615078][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.615094][ T8654] RSP: 002b:00007f130bd03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1382.615112][ T8654] RAX: ffffffffffffffda RBX: 00007f130afe5fa0 RCX: 00007f130ad8eec9 [ 1382.615126][ T8654] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1382.615138][ T8654] RBP: 00007f130bd03090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.615150][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.615171][ T8654] R13: 00007f130afe6038 R14: 00007f130afe5fa0 R15: 00007fff32d93ce8 [ 1382.615219][ T8654] [ 1383.042512][ T8642] wg1 speed is unknown, defaulting to 1000 [ 1383.056347][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8996'. [ 1383.171604][ T8670] bond1: option ad_user_port_key: invalid value (65535) [ 1383.190826][ T8670] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1383.207278][ T8670] bond1 (unregistering): Released all slaves [ 1383.354613][ T8682] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8996'. [ 1383.381452][ T8693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1383.542204][ T8693] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1383.650531][ T8705] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1383.664293][ T8713] FAULT_INJECTION: forcing a failure. [ 1383.664293][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.679674][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.5.9005 Not tainted syzkaller #0 PREEMPT(full) [ 1383.679700][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1383.679712][ T8713] Call Trace: [ 1383.679720][ T8713] [ 1383.679728][ T8713] dump_stack_lvl+0x189/0x250 [ 1383.679752][ T8713] ? __pfx____ratelimit+0x10/0x10 [ 1383.679776][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1383.679794][ T8713] ? __pfx__printk+0x10/0x10 [ 1383.679819][ T8713] ? __pfx___might_resched+0x10/0x10 [ 1383.679919][ T8713] should_fail_ex+0x414/0x560 [ 1383.679944][ T8713] should_failslab+0xa8/0x100 [ 1383.679966][ T8713] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1383.679987][ T8713] ? __alloc_skb+0x112/0x2d0 [ 1383.680013][ T8713] __alloc_skb+0x112/0x2d0 [ 1383.680039][ T8713] netlink_sendmsg+0x5c6/0xb30 [ 1383.680071][ T8713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.680096][ T8713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1383.680119][ T8713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1383.680141][ T8713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.680163][ T8713] __sock_sendmsg+0x21c/0x270 [ 1383.680187][ T8713] ____sys_sendmsg+0x505/0x830 [ 1383.680217][ T8713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.680250][ T8713] ? import_iovec+0x74/0xa0 [ 1383.680276][ T8713] ___sys_sendmsg+0x21f/0x2a0 [ 1383.680302][ T8713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.680363][ T8713] ? __fget_files+0x2a/0x420 [ 1383.680383][ T8713] ? __fget_files+0x3a0/0x420 [ 1383.680414][ T8713] __x64_sys_sendmsg+0x19b/0x260 [ 1383.680440][ T8713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1383.680474][ T8713] ? __pfx_ksys_write+0x10/0x10 [ 1383.680496][ T8713] ? do_syscall_64+0xbe/0xfa0 [ 1383.680524][ T8713] do_syscall_64+0xfa/0xfa0 [ 1383.680546][ T8713] ? lockdep_hardirqs_on+0x9c/0x150 [ 1383.680569][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.680587][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 1383.680608][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.680625][ T8713] RIP: 0033:0x7fcaff98eec9 [ 1383.680641][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.680656][ T8713] RSP: 002b:00007fcb00813038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.680676][ T8713] RAX: ffffffffffffffda RBX: 00007fcaffbe5fa0 RCX: 00007fcaff98eec9 [ 1383.680688][ T8713] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1383.680699][ T8713] RBP: 00007fcb00813090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.680710][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.680720][ T8713] R13: 00007fcaffbe6038 R14: 00007fcaffbe5fa0 R15: 00007ffcda1f32b8 [ 1383.680749][ T8713] [ 1383.993439][ T8715] lo speed is unknown, defaulting to 1000 [ 1384.088645][ T8719] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9008'. [ 1384.113456][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9008'. [ 1384.542516][ T8715] wg1 speed is unknown, defaulting to 1000 [ 1385.259847][ T8747] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1385.280247][ T8750] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1385.501722][ T8759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.518401][ T8760] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20001 [ 1385.804228][ T8773] xt_ecn: cannot match TCP bits for non-tcp packets [ 1385.836397][ T8773] vlan2: entered allmulticast mode [ 1385.854979][ T8773] bridge_slave_0: entered allmulticast mode [ 1385.910959][ T8781] tipc: Enabled bearer , priority 25 [ 1386.086561][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.116781][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.141998][ T8801] tipc: Enabling of bearer rejected, already enabled [ 1386.224042][ T8805] FAULT_INJECTION: forcing a failure. [ 1386.224042][ T8805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.238987][ T5828] Bluetooth: hci5: command 0x040f tx timeout [ 1386.240960][ T8805] CPU: 1 UID: 0 PID: 8805 Comm: syz.3.9031 Not tainted syzkaller #0 PREEMPT(full) [ 1386.240984][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1386.240996][ T8805] Call Trace: [ 1386.241005][ T8805] [ 1386.241013][ T8805] dump_stack_lvl+0x189/0x250 [ 1386.241037][ T8805] ? __pfx____ratelimit+0x10/0x10 [ 1386.241062][ T8805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.241080][ T8805] ? __pfx__printk+0x10/0x10 [ 1386.241098][ T8805] ? __might_fault+0xb0/0x130 [ 1386.241128][ T8805] should_fail_ex+0x414/0x560 [ 1386.241152][ T8805] _copy_from_iter+0x1de/0x1790 [ 1386.241181][ T8805] ? rcu_is_watching+0x15/0xb0 [ 1386.241200][ T8805] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1386.241220][ T8805] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.241243][ T8805] ? __build_skb_around+0x257/0x3e0 [ 1386.241268][ T8805] ? netlink_sendmsg+0x642/0xb30 [ 1386.241289][ T8805] ? skb_put+0x11b/0x210 [ 1386.241313][ T8805] netlink_sendmsg+0x6b2/0xb30 [ 1386.241344][ T8805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1386.241370][ T8805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1386.241393][ T8805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1386.241414][ T8805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1386.241437][ T8805] __sock_sendmsg+0x21c/0x270 [ 1386.241458][ T8805] ____sys_sendmsg+0x505/0x830 [ 1386.241487][ T8805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1386.241519][ T8805] ? import_iovec+0x74/0xa0 [ 1386.241560][ T8805] ___sys_sendmsg+0x21f/0x2a0 [ 1386.241593][ T8805] ? __pfx____sys_sendmsg+0x10/0x10 [ 1386.241652][ T8805] ? __fget_files+0x2a/0x420 [ 1386.241672][ T8805] ? __fget_files+0x3a0/0x420 [ 1386.241702][ T8805] __x64_sys_sendmsg+0x19b/0x260 [ 1386.241727][ T8805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1386.241760][ T8805] ? __pfx_ksys_write+0x10/0x10 [ 1386.241783][ T8805] ? do_syscall_64+0xbe/0xfa0 [ 1386.241810][ T8805] do_syscall_64+0xfa/0xfa0 [ 1386.241831][ T8805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1386.241854][ T8805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.241871][ T8805] ? clear_bhb_loop+0x60/0xb0 [ 1386.241892][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.241909][ T8805] RIP: 0033:0x7fbfd638eec9 [ 1386.241926][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.241941][ T8805] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1386.241961][ T8805] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1386.241975][ T8805] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1386.241986][ T8805] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.241997][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.242007][ T8805] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1386.242039][ T8805] [ 1386.348084][ T8809] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1386.654266][ T8820] __nla_validate_parse: 4 callbacks suppressed [ 1386.654283][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1386.708066][ T8822] lo speed is unknown, defaulting to 1000 [ 1386.963332][ T8819] vlan2: left allmulticast mode [ 1386.978526][ T8819] bridge0: left allmulticast mode [ 1387.018435][ T8819] tipc: Resetting bearer [ 1387.038898][ T8819] syzkaller0: left promiscuous mode [ 1387.044931][ T8819] syzkaller0: left allmulticast mode [ 1387.650675][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9039'. [ 1387.660887][ T8822] wg1 speed is unknown, defaulting to 1000 [ 1387.718973][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.776515][ T8848] FAULT_INJECTION: forcing a failure. [ 1387.776515][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.789765][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.3.9042 Not tainted syzkaller #0 PREEMPT(full) [ 1387.789790][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1387.789802][ T8848] Call Trace: [ 1387.789810][ T8848] [ 1387.789818][ T8848] dump_stack_lvl+0x189/0x250 [ 1387.789841][ T8848] ? __pfx____ratelimit+0x10/0x10 [ 1387.789864][ T8848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.789880][ T8848] ? __pfx__printk+0x10/0x10 [ 1387.789898][ T8848] ? __lock_acquire+0xab9/0xd20 [ 1387.789931][ T8848] should_fail_ex+0x414/0x560 [ 1387.789954][ T8848] should_failslab+0xa8/0x100 [ 1387.789977][ T8848] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1387.789996][ T8848] ? skb_clone+0x212/0x3a0 [ 1387.790025][ T8848] skb_clone+0x212/0x3a0 [ 1387.790053][ T8848] __netlink_deliver_tap+0x404/0x850 [ 1387.790088][ T8848] ? netlink_deliver_tap+0x2e/0x1b0 [ 1387.790112][ T8848] netlink_deliver_tap+0x19c/0x1b0 [ 1387.790135][ T8848] netlink_unicast+0x7fa/0x9e0 [ 1387.790165][ T8848] ? __pfx_netlink_unicast+0x10/0x10 [ 1387.790188][ T8848] ? netlink_sendmsg+0x642/0xb30 [ 1387.790207][ T8848] ? skb_put+0x11b/0x210 [ 1387.790233][ T8848] netlink_sendmsg+0x805/0xb30 [ 1387.790266][ T8848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.790292][ T8848] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1387.790317][ T8848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1387.790340][ T8848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.790363][ T8848] __sock_sendmsg+0x21c/0x270 [ 1387.790385][ T8848] ____sys_sendmsg+0x505/0x830 [ 1387.790412][ T8848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1387.790444][ T8848] ? import_iovec+0x74/0xa0 [ 1387.790469][ T8848] ___sys_sendmsg+0x21f/0x2a0 [ 1387.790493][ T8848] ? __pfx____sys_sendmsg+0x10/0x10 [ 1387.790540][ T8848] ? __fget_files+0x2a/0x420 [ 1387.790555][ T8848] ? __fget_files+0x3a0/0x420 [ 1387.790579][ T8848] __x64_sys_sendmsg+0x19b/0x260 [ 1387.790605][ T8848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1387.790639][ T8848] ? __pfx_ksys_write+0x10/0x10 [ 1387.790663][ T8848] ? do_syscall_64+0xbe/0xfa0 [ 1387.790698][ T8848] do_syscall_64+0xfa/0xfa0 [ 1387.790720][ T8848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.790741][ T8848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.790758][ T8848] ? clear_bhb_loop+0x60/0xb0 [ 1387.790778][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.790794][ T8848] RIP: 0033:0x7fbfd638eec9 [ 1387.790811][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.790826][ T8848] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1387.790845][ T8848] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1387.790857][ T8848] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1387.790866][ T8848] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.790874][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.790883][ T8848] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1387.790915][ T8848] [ 1387.791096][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.229934][ T8852] netlink: 'syz.3.9044': attribute type 11 has an invalid length. [ 1388.238763][ T8852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9044'. [ 1388.631230][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1388.647455][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1388.696960][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9050'. [ 1388.796209][ T8886] FAULT_INJECTION: forcing a failure. [ 1388.796209][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.817416][ T8887] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9050'. [ 1388.820574][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.2.9052 Not tainted syzkaller #0 PREEMPT(full) [ 1388.820599][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1388.820611][ T8886] Call Trace: [ 1388.820619][ T8886] [ 1388.820626][ T8886] dump_stack_lvl+0x189/0x250 [ 1388.820649][ T8886] ? __pfx____ratelimit+0x10/0x10 [ 1388.820674][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1388.820691][ T8886] ? __pfx__printk+0x10/0x10 [ 1388.820712][ T8886] ? __pfx___might_resched+0x10/0x10 [ 1388.820736][ T8886] ? fs_reclaim_acquire+0x7d/0x100 [ 1388.820762][ T8886] should_fail_ex+0x414/0x560 [ 1388.820786][ T8886] should_failslab+0xa8/0x100 [ 1388.820807][ T8886] __kmalloc_noprof+0xcb/0x4f0 [ 1388.820824][ T8886] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1388.820849][ T8886] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1388.820874][ T8886] genl_family_rcv_msg_doit+0xb8/0x300 [ 1388.820900][ T8886] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1388.820924][ T8886] ? apparmor_capable+0x137/0x1b0 [ 1388.820952][ T8886] ? bpf_lsm_capable+0x9/0x20 [ 1388.820969][ T8886] ? security_capable+0x7e/0x2e0 [ 1388.820995][ T8886] genl_rcv_msg+0x60e/0x790 [ 1388.821019][ T8886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1388.821035][ T8886] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1388.821061][ T8886] ? __asan_memcpy+0x40/0x70 [ 1388.821085][ T8886] ? __pfx_ref_tracker_free+0x10/0x10 [ 1388.821112][ T8886] netlink_rcv_skb+0x208/0x470 [ 1388.821131][ T8886] ? __lock_acquire+0xab9/0xd20 [ 1388.821154][ T8886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1388.821173][ T8886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1388.821213][ T8886] ? down_read+0x1ad/0x2e0 [ 1388.821234][ T8886] genl_rcv+0x28/0x40 [ 1388.821249][ T8886] netlink_unicast+0x82f/0x9e0 [ 1388.821297][ T8886] ? __pfx_netlink_unicast+0x10/0x10 [ 1388.821324][ T8886] ? netlink_sendmsg+0x642/0xb30 [ 1388.821343][ T8886] ? skb_put+0x11b/0x210 [ 1388.821368][ T8886] netlink_sendmsg+0x805/0xb30 [ 1388.821400][ T8886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1388.821424][ T8886] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1388.821447][ T8886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1388.821468][ T8886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1388.821491][ T8886] __sock_sendmsg+0x21c/0x270 [ 1388.821513][ T8886] ____sys_sendmsg+0x505/0x830 [ 1388.821542][ T8886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1388.821574][ T8886] ? import_iovec+0x74/0xa0 [ 1388.821601][ T8886] ___sys_sendmsg+0x21f/0x2a0 [ 1388.821627][ T8886] ? __pfx____sys_sendmsg+0x10/0x10 [ 1388.821687][ T8886] ? __fget_files+0x2a/0x420 [ 1388.821706][ T8886] ? __fget_files+0x3a0/0x420 [ 1388.821736][ T8886] __x64_sys_sendmsg+0x19b/0x260 [ 1388.821763][ T8886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1388.821795][ T8886] ? __pfx_ksys_write+0x10/0x10 [ 1388.821818][ T8886] ? do_syscall_64+0xbe/0xfa0 [ 1388.821845][ T8886] do_syscall_64+0xfa/0xfa0 [ 1388.821867][ T8886] ? lockdep_hardirqs_on+0x9c/0x150 [ 1388.821890][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.821907][ T8886] ? clear_bhb_loop+0x60/0xb0 [ 1388.821928][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.821944][ T8886] RIP: 0033:0x7fcfd138eec9 [ 1388.821961][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1388.821977][ T8886] RSP: 002b:00007fcfd22de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.821996][ T8886] RAX: ffffffffffffffda RBX: 00007fcfd15e5fa0 RCX: 00007fcfd138eec9 [ 1388.822009][ T8886] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1388.822020][ T8886] RBP: 00007fcfd22de090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.822031][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.822042][ T8886] R13: 00007fcfd15e6038 R14: 00007fcfd15e5fa0 R15: 00007ffdc88a8e08 [ 1388.822074][ T8886] [ 1388.965745][T30131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1388.972125][ T8829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1389.227764][ T8829] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1389.244060][ T8829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1389.250133][ T8829] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1389.275721][ T8829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1389.281673][ T8829] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1389.294263][ T8829] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1389.303635][ T8829] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1389.703750][ T8901] !: renamed from dummy0 (while UP) [ 1389.763345][ T8901] lo speed is unknown, defaulting to 1000 [ 1389.808484][ T8906] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9056'. [ 1389.818371][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9056'. [ 1389.895269][ T8901] wg1 speed is unknown, defaulting to 1000 [ 1390.022187][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9057'. [ 1390.327236][ T8918] syzkaller1: entered promiscuous mode [ 1390.332749][ T8918] syzkaller1: entered allmulticast mode [ 1390.520829][ T8925] FAULT_INJECTION: forcing a failure. [ 1390.520829][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.534390][ T8925] CPU: 0 UID: 0 PID: 8925 Comm: syz.3.9062 Not tainted syzkaller #0 PREEMPT(full) [ 1390.534417][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1390.534428][ T8925] Call Trace: [ 1390.534436][ T8925] [ 1390.534444][ T8925] dump_stack_lvl+0x189/0x250 [ 1390.534468][ T8925] ? __pfx____ratelimit+0x10/0x10 [ 1390.534492][ T8925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.534509][ T8925] ? __pfx__printk+0x10/0x10 [ 1390.534528][ T8925] ? __pfx___might_resched+0x10/0x10 [ 1390.534552][ T8925] ? fs_reclaim_acquire+0x7d/0x100 [ 1390.534577][ T8925] should_fail_ex+0x414/0x560 [ 1390.534599][ T8925] should_failslab+0xa8/0x100 [ 1390.534619][ T8925] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1390.534637][ T8925] ? ovs_flow_alloc+0x24/0x1f0 [ 1390.534664][ T8925] ovs_flow_alloc+0x24/0x1f0 [ 1390.534685][ T8925] ovs_flow_cmd_new+0x1ee/0xd80 [ 1390.534705][ T8925] ? stack_depot_save_flags+0x40/0x860 [ 1390.534723][ T8925] ? netlink_unicast+0x751/0x9e0 [ 1390.534748][ T8925] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1390.534831][ T8925] ? __nla_parse+0x40/0x60 [ 1390.534855][ T8925] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1390.534882][ T8925] genl_family_rcv_msg_doit+0x215/0x300 [ 1390.534907][ T8925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1390.534938][ T8925] ? bpf_lsm_capable+0x9/0x20 [ 1390.534955][ T8925] ? security_capable+0x7e/0x2e0 [ 1390.534982][ T8925] genl_rcv_msg+0x60e/0x790 [ 1390.535005][ T8925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.535022][ T8925] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1390.535048][ T8925] ? __asan_memcpy+0x40/0x70 [ 1390.535071][ T8925] ? __pfx_ref_tracker_free+0x10/0x10 [ 1390.535099][ T8925] netlink_rcv_skb+0x208/0x470 [ 1390.535127][ T8925] ? __lock_acquire+0xab9/0xd20 [ 1390.535149][ T8925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.535168][ T8925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1390.535210][ T8925] ? down_read+0x1ad/0x2e0 [ 1390.535231][ T8925] genl_rcv+0x28/0x40 [ 1390.535245][ T8925] netlink_unicast+0x82f/0x9e0 [ 1390.535270][ T8925] ? __pfx_netlink_unicast+0x10/0x10 [ 1390.535293][ T8925] ? netlink_sendmsg+0x642/0xb30 [ 1390.535312][ T8925] ? skb_put+0x11b/0x210 [ 1390.535338][ T8925] netlink_sendmsg+0x805/0xb30 [ 1390.535367][ T8925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.535388][ T8925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1390.535409][ T8925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1390.535426][ T8925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.535445][ T8925] __sock_sendmsg+0x21c/0x270 [ 1390.535463][ T8925] ____sys_sendmsg+0x505/0x830 [ 1390.535487][ T8925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.535515][ T8925] ? import_iovec+0x74/0xa0 [ 1390.535537][ T8925] ___sys_sendmsg+0x21f/0x2a0 [ 1390.535558][ T8925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.535608][ T8925] ? __fget_files+0x2a/0x420 [ 1390.535624][ T8925] ? __fget_files+0x3a0/0x420 [ 1390.535649][ T8925] __x64_sys_sendmsg+0x19b/0x260 [ 1390.535671][ T8925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1390.535698][ T8925] ? __pfx_ksys_write+0x10/0x10 [ 1390.535717][ T8925] ? do_syscall_64+0xbe/0xfa0 [ 1390.535740][ T8925] do_syscall_64+0xfa/0xfa0 [ 1390.535758][ T8925] ? lockdep_hardirqs_on+0x9c/0x150 [ 1390.535777][ T8925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.535791][ T8925] ? clear_bhb_loop+0x60/0xb0 [ 1390.535809][ T8925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.535822][ T8925] RIP: 0033:0x7fbfd638eec9 [ 1390.535837][ T8925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.535850][ T8925] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.535866][ T8925] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1390.535877][ T8925] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1390.535887][ T8925] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.535896][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.535905][ T8925] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1390.535930][ T8925] [ 1391.148392][ T8941] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 1391.263367][ T8947] lo speed is unknown, defaulting to 1000 [ 1391.366822][ T8951] syzkaller1: entered promiscuous mode [ 1391.372423][ T8951] syzkaller1: entered allmulticast mode [ 1391.432910][ T8947] wg1 speed is unknown, defaulting to 1000 [ 1391.671609][ T8964] __nla_validate_parse: 9 callbacks suppressed [ 1391.671630][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9074'. [ 1391.763368][ T8966] FAULT_INJECTION: forcing a failure. [ 1391.763368][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.781280][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.3.9075 Not tainted syzkaller #0 PREEMPT(full) [ 1391.781312][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1391.781324][ T8966] Call Trace: [ 1391.781332][ T8966] [ 1391.781341][ T8966] dump_stack_lvl+0x189/0x250 [ 1391.781365][ T8966] ? __pfx____ratelimit+0x10/0x10 [ 1391.781390][ T8966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.781409][ T8966] ? __pfx__printk+0x10/0x10 [ 1391.781435][ T8966] ? __pfx___might_resched+0x10/0x10 [ 1391.781458][ T8966] ? fs_reclaim_acquire+0x7d/0x100 [ 1391.781486][ T8966] should_fail_ex+0x414/0x560 [ 1391.781511][ T8966] should_failslab+0xa8/0x100 [ 1391.781534][ T8966] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1391.781554][ T8966] ? ovs_flow_alloc+0x103/0x1f0 [ 1391.781579][ T8966] ovs_flow_alloc+0x103/0x1f0 [ 1391.781603][ T8966] ovs_flow_cmd_new+0x1ee/0xd80 [ 1391.781625][ T8966] ? stack_depot_save_flags+0x40/0x860 [ 1391.781643][ T8966] ? netlink_unicast+0x751/0x9e0 [ 1391.781670][ T8966] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1391.781758][ T8966] ? __nla_parse+0x40/0x60 [ 1391.781782][ T8966] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1391.781809][ T8966] genl_family_rcv_msg_doit+0x215/0x300 [ 1391.781835][ T8966] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1391.781867][ T8966] ? bpf_lsm_capable+0x9/0x20 [ 1391.781885][ T8966] ? security_capable+0x7e/0x2e0 [ 1391.781914][ T8966] genl_rcv_msg+0x60e/0x790 [ 1391.781939][ T8966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1391.781956][ T8966] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1391.781981][ T8966] ? __asan_memcpy+0x40/0x70 [ 1391.782005][ T8966] ? __pfx_ref_tracker_free+0x10/0x10 [ 1391.782033][ T8966] netlink_rcv_skb+0x208/0x470 [ 1391.782051][ T8966] ? __lock_acquire+0xab9/0xd20 [ 1391.782075][ T8966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1391.782094][ T8966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1391.782137][ T8966] ? down_read+0x1ad/0x2e0 [ 1391.782159][ T8966] genl_rcv+0x28/0x40 [ 1391.782174][ T8966] netlink_unicast+0x82f/0x9e0 [ 1391.782204][ T8966] ? __pfx_netlink_unicast+0x10/0x10 [ 1391.782227][ T8966] ? netlink_sendmsg+0x642/0xb30 [ 1391.782247][ T8966] ? skb_put+0x11b/0x210 [ 1391.782274][ T8966] netlink_sendmsg+0x805/0xb30 [ 1391.782311][ T8966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.782337][ T8966] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1391.782361][ T8966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1391.782384][ T8966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.782407][ T8966] __sock_sendmsg+0x21c/0x270 [ 1391.782430][ T8966] ____sys_sendmsg+0x505/0x830 [ 1391.782461][ T8966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.782495][ T8966] ? import_iovec+0x74/0xa0 [ 1391.782523][ T8966] ___sys_sendmsg+0x21f/0x2a0 [ 1391.782550][ T8966] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.782615][ T8966] ? __fget_files+0x2a/0x420 [ 1391.782633][ T8966] ? __fget_files+0x3a0/0x420 [ 1391.782666][ T8966] __x64_sys_sendmsg+0x19b/0x260 [ 1391.782692][ T8966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1391.782727][ T8966] ? __pfx_ksys_write+0x10/0x10 [ 1391.782750][ T8966] ? do_syscall_64+0xbe/0xfa0 [ 1391.782778][ T8966] do_syscall_64+0xfa/0xfa0 [ 1391.782800][ T8966] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.782824][ T8966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.782841][ T8966] ? clear_bhb_loop+0x60/0xb0 [ 1391.782863][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.782881][ T8966] RIP: 0033:0x7fbfd638eec9 [ 1391.782897][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.782912][ T8966] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.782932][ T8966] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1391.782946][ T8966] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1391.782957][ T8966] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.782969][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.782980][ T8966] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1391.783014][ T8966] [ 1392.480515][ T8978] netlink: 'syz.2.9078': attribute type 10 has an invalid length. [ 1392.489913][ T8978] bridge0: port 3(macsec0) entered blocking state [ 1392.501487][ T8978] bridge0: port 3(macsec0) entered disabled state [ 1392.512190][ T8978] macsec0: entered allmulticast mode [ 1392.518618][ T8978] veth1_macvtap: entered allmulticast mode [ 1392.526664][ T8978] macsec0: entered promiscuous mode [ 1392.533376][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1392.556149][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1393.085460][ T8997] FAULT_INJECTION: forcing a failure. [ 1393.085460][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.099045][ T8997] CPU: 0 UID: 0 PID: 8997 Comm: syz.3.9085 Not tainted syzkaller #0 PREEMPT(full) [ 1393.099063][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1393.099070][ T8997] Call Trace: [ 1393.099075][ T8997] [ 1393.099079][ T8997] dump_stack_lvl+0x189/0x250 [ 1393.099095][ T8997] ? __pfx____ratelimit+0x10/0x10 [ 1393.099118][ T8997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.099134][ T8997] ? __pfx__printk+0x10/0x10 [ 1393.099157][ T8997] ? __pfx___might_resched+0x10/0x10 [ 1393.099180][ T8997] ? fs_reclaim_acquire+0x7d/0x100 [ 1393.099206][ T8997] should_fail_ex+0x414/0x560 [ 1393.099230][ T8997] should_failslab+0xa8/0x100 [ 1393.099243][ T8997] __kmalloc_cache_noprof+0x70/0x3d0 [ 1393.099254][ T8997] ? ovs_flow_cmd_new+0x294/0xd80 [ 1393.099271][ T8997] ovs_flow_cmd_new+0x294/0xd80 [ 1393.099283][ T8997] ? stack_depot_save_flags+0x40/0x860 [ 1393.099299][ T8997] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1393.099345][ T8997] ? __nla_parse+0x40/0x60 [ 1393.099359][ T8997] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1393.099374][ T8997] genl_family_rcv_msg_doit+0x215/0x300 [ 1393.099388][ T8997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1393.099405][ T8997] ? bpf_lsm_capable+0x9/0x20 [ 1393.099415][ T8997] ? security_capable+0x7e/0x2e0 [ 1393.099431][ T8997] genl_rcv_msg+0x60e/0x790 [ 1393.099444][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1393.099454][ T8997] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1393.099468][ T8997] ? __asan_memcpy+0x40/0x70 [ 1393.099481][ T8997] ? __pfx_ref_tracker_free+0x10/0x10 [ 1393.099497][ T8997] netlink_rcv_skb+0x208/0x470 [ 1393.099508][ T8997] ? __lock_acquire+0xab9/0xd20 [ 1393.099522][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1393.099533][ T8997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1393.099555][ T8997] ? down_read+0x1ad/0x2e0 [ 1393.099567][ T8997] genl_rcv+0x28/0x40 [ 1393.099576][ T8997] netlink_unicast+0x82f/0x9e0 [ 1393.099592][ T8997] ? __pfx_netlink_unicast+0x10/0x10 [ 1393.099605][ T8997] ? netlink_sendmsg+0x642/0xb30 [ 1393.099616][ T8997] ? skb_put+0x11b/0x210 [ 1393.099631][ T8997] netlink_sendmsg+0x805/0xb30 [ 1393.099648][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1393.099663][ T8997] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1393.099677][ T8997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1393.099690][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1393.099703][ T8997] __sock_sendmsg+0x21c/0x270 [ 1393.099716][ T8997] ____sys_sendmsg+0x505/0x830 [ 1393.099733][ T8997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1393.099752][ T8997] ? import_iovec+0x74/0xa0 [ 1393.099768][ T8997] ___sys_sendmsg+0x21f/0x2a0 [ 1393.099783][ T8997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1393.099817][ T8997] ? __fget_files+0x2a/0x420 [ 1393.099828][ T8997] ? __fget_files+0x3a0/0x420 [ 1393.099846][ T8997] __x64_sys_sendmsg+0x19b/0x260 [ 1393.099863][ T8997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1393.099883][ T8997] ? __pfx_ksys_write+0x10/0x10 [ 1393.099896][ T8997] ? do_syscall_64+0xbe/0xfa0 [ 1393.099912][ T8997] do_syscall_64+0xfa/0xfa0 [ 1393.099924][ T8997] ? lockdep_hardirqs_on+0x9c/0x150 [ 1393.099938][ T8997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.099948][ T8997] ? clear_bhb_loop+0x60/0xb0 [ 1393.099960][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.099969][ T8997] RIP: 0033:0x7fbfd638eec9 [ 1393.099980][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.099989][ T8997] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.100001][ T8997] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1393.100009][ T8997] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1393.100015][ T8997] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.100022][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.100028][ T8997] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1393.100045][ T8997] [ 1393.769396][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9089'. [ 1393.990529][ T9030] FAULT_INJECTION: forcing a failure. [ 1393.990529][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.005470][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.3.9095 Not tainted syzkaller #0 PREEMPT(full) [ 1394.005496][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1394.005508][ T9030] Call Trace: [ 1394.005516][ T9030] [ 1394.005524][ T9030] dump_stack_lvl+0x189/0x250 [ 1394.005548][ T9030] ? __pfx____ratelimit+0x10/0x10 [ 1394.005573][ T9030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1394.005592][ T9030] ? __pfx__printk+0x10/0x10 [ 1394.005617][ T9030] ? __pfx___might_resched+0x10/0x10 [ 1394.005647][ T9030] should_fail_ex+0x414/0x560 [ 1394.005672][ T9030] should_failslab+0xa8/0x100 [ 1394.005696][ T9030] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1394.005716][ T9030] ? ovs_nla_get_match+0x3b5/0x18c0 [ 1394.005733][ T9030] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 1394.005759][ T9030] kmemdup_noprof+0x2b/0x70 [ 1394.005785][ T9030] ovs_nla_get_match+0x3b5/0x18c0 [ 1394.005801][ T9030] ? ___sys_sendmsg+0x21f/0x2a0 [ 1394.005824][ T9030] ? __x64_sys_sendmsg+0x19b/0x260 [ 1394.005859][ T9030] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 1394.005915][ T9030] ? __asan_memset+0x22/0x50 [ 1394.005945][ T9030] ovs_flow_cmd_new+0x324/0xd80 [ 1394.005967][ T9030] ? stack_depot_save_flags+0x40/0x860 [ 1394.005995][ T9030] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1394.006090][ T9030] ? __nla_parse+0x40/0x60 [ 1394.006119][ T9030] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1394.006147][ T9030] genl_family_rcv_msg_doit+0x215/0x300 [ 1394.006173][ T9030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1394.006206][ T9030] ? bpf_lsm_capable+0x9/0x20 [ 1394.006224][ T9030] ? security_capable+0x7e/0x2e0 [ 1394.006252][ T9030] genl_rcv_msg+0x60e/0x790 [ 1394.006278][ T9030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1394.006294][ T9030] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1394.006319][ T9030] ? __asan_memcpy+0x40/0x70 [ 1394.006342][ T9030] ? __pfx_ref_tracker_free+0x10/0x10 [ 1394.006370][ T9030] netlink_rcv_skb+0x208/0x470 [ 1394.006390][ T9030] ? __lock_acquire+0xab9/0xd20 [ 1394.006414][ T9030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1394.006434][ T9030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1394.006476][ T9030] ? down_read+0x1ad/0x2e0 [ 1394.006498][ T9030] genl_rcv+0x28/0x40 [ 1394.006514][ T9030] netlink_unicast+0x82f/0x9e0 [ 1394.006544][ T9030] ? __pfx_netlink_unicast+0x10/0x10 [ 1394.006568][ T9030] ? netlink_sendmsg+0x642/0xb30 [ 1394.006587][ T9030] ? skb_put+0x11b/0x210 [ 1394.006614][ T9030] netlink_sendmsg+0x805/0xb30 [ 1394.006648][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.006674][ T9030] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1394.006699][ T9030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1394.006721][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.006744][ T9030] __sock_sendmsg+0x21c/0x270 [ 1394.006768][ T9030] ____sys_sendmsg+0x505/0x830 [ 1394.006797][ T9030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1394.006832][ T9030] ? import_iovec+0x74/0xa0 [ 1394.006859][ T9030] ___sys_sendmsg+0x21f/0x2a0 [ 1394.006886][ T9030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1394.006950][ T9030] ? __fget_files+0x2a/0x420 [ 1394.006971][ T9030] ? __fget_files+0x3a0/0x420 [ 1394.007003][ T9030] __x64_sys_sendmsg+0x19b/0x260 [ 1394.007031][ T9030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1394.007072][ T9030] ? __pfx_ksys_write+0x10/0x10 [ 1394.007096][ T9030] ? do_syscall_64+0xbe/0xfa0 [ 1394.007123][ T9030] do_syscall_64+0xfa/0xfa0 [ 1394.007146][ T9030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1394.007169][ T9030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.007187][ T9030] ? clear_bhb_loop+0x60/0xb0 [ 1394.007209][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.007226][ T9030] RIP: 0033:0x7fbfd638eec9 [ 1394.007243][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.007259][ T9030] RSP: 002b:00007fbfd7166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.007279][ T9030] RAX: ffffffffffffffda RBX: 00007fbfd65e5fa0 RCX: 00007fbfd638eec9 [ 1394.007292][ T9030] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1394.007304][ T9030] RBP: 00007fbfd7166090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.007315][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1394.007326][ T9030] R13: 00007fbfd65e6038 R14: 00007fbfd65e5fa0 R15: 00007fff84130188 [ 1394.007360][ T9030] [ 1394.638499][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1394.649145][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9099'. [ 1394.784076][ T30] audit: type=1800 audit(1759958082.828:25): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9102" name="memory.events" dev="tmpfs" ino=572 res=0 errno=0 [ 1394.810646][ T30] audit: type=1804 audit(1759958082.828:26): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9102" name="/newroot/108/memory.events" dev="tmpfs" ino=572 res=1 errno=0 [ 1394.839265][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9102'. [ 1394.918842][ T9060] lo speed is unknown, defaulting to 1000 [ 1395.157051][ T9060] wg1 speed is unknown, defaulting to 1000 [ 1395.921633][ T9094] tipc: Enabled bearer , priority 10 [ 1396.053354][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1397.035258][ T4713] tipc: Node number set to 1614218713 [ 1423.518250][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1484.962234][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1535.516217][ T31] INFO: task syz-executor:28241 blocked for more than 143 seconds. [ 1535.524162][ T31] Not tainted syzkaller #0 [ 1535.529745][ T31] Blocked by coredump. [ 1535.534360][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1535.543279][ T31] task:syz-executor state:D stack:21768 pid:28241 tgid:28241 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1535.556125][ T31] Call Trace: [ 1535.559407][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1535.562328][ T31] __schedule+0x1798/0x4cc0 [ 1535.567107][ T31] ? __lock_acquire+0xab9/0xd20 [ 1535.571988][ T31] ? __lock_acquire+0xab9/0xd20 [ 1535.577898][ T31] ? __pfx___schedule+0x10/0x10 [ 1535.583150][ T31] ? schedule+0x91/0x360 [ 1535.588555][ T31] schedule+0x165/0x360 [ 1535.592745][ T31] schedule_preempt_disabled+0x13/0x30 [ 1535.598706][ T31] __mutex_lock+0x7e6/0x1350 [ 1535.603326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1535.608718][ T31] ? rfkill_unregister+0xc8/0x220 [ 1535.613776][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1535.619973][ T31] ? __pfx_device_del+0x10/0x10 [ 1535.625398][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 1535.630633][ T31] rfkill_unregister+0xc8/0x220 [ 1535.635977][ T31] hci_unregister_dev+0x374/0x510 [ 1535.641048][ T31] vhci_release+0x152/0x1a0 [ 1535.646694][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1535.651772][ T31] __fput+0x44c/0xa70 [ 1535.655953][ T31] task_work_run+0x1d1/0x260 [ 1535.660565][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1535.665982][ T31] ? kmem_cache_free+0x18f/0x400 [ 1535.670949][ T31] do_exit+0x6b5/0x2300 [ 1535.675769][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1535.680815][ T31] ? __pfx_do_exit+0x10/0x10 [ 1535.685905][ T31] ? cgroup_freezing+0x20/0x350 [ 1535.690839][ T31] do_group_exit+0x21c/0x2d0 [ 1535.722482][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.728268][ T31] get_signal+0x1285/0x1340 [ 1535.732830][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 1535.755120][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1535.761352][ T31] ? do_rmdir+0x4fb/0x550 [ 1535.766730][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1535.772702][ T31] exit_to_user_mode_loop+0x72/0x110 [ 1535.778634][ T31] do_syscall_64+0x2bd/0xfa0 [ 1535.783250][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.788767][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.795369][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1535.800068][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.806225][ T31] RIP: 0033:0x7fbce7d8e4a7 [ 1535.810656][ T31] RSP: 002b:00007fff72665348 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 1535.819405][ T31] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fbce7d8e4a7 [ 1535.828116][ T31] RDX: 0000000000000200 RSI: 00007fff72666490 RDI: 00000000ffffff9c [ 1535.836636][ T31] RBP: 00007fbce7e11d7d R08: 0000000000000000 R09: 0000000000000000 [ 1535.844687][ T31] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff72666490 [ 1535.853047][ T31] R13: 00007fbce7e11d7d R14: 00000000001526a2 R15: 00007fff726664d0 [ 1535.861738][ T31] [ 1535.865396][ T31] INFO: task kworker/1:16:7327 blocked for more than 143 seconds. [ 1535.873411][ T31] Not tainted syzkaller #0 [ 1535.878457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1535.887510][ T31] task:kworker/1:16 state:D stack:24808 pid:7327 tgid:7327 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1535.899908][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1535.907076][ T31] Call Trace: [ 1535.910381][ T31] [ 1535.913322][ T31] __schedule+0x1798/0x4cc0 [ 1535.918957][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1535.924378][ T31] ? __pfx___schedule+0x10/0x10 [ 1535.929543][ T31] ? schedule+0x91/0x360 [ 1535.933804][ T31] schedule+0x165/0x360 [ 1535.938363][ T31] schedule_preempt_disabled+0x13/0x30 [ 1535.943842][ T31] __mutex_lock+0x7e6/0x1350 [ 1535.948627][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1535.953429][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1535.959962][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1535.965312][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1535.971145][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1535.977612][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1535.983813][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1535.989814][ T31] process_scheduled_works+0xade/0x17b0 [ 1535.995746][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1536.001745][ T31] worker_thread+0x8a0/0xda0 [ 1536.006681][ T31] ? __kthread_parkme+0x7b/0x200 [ 1536.011659][ T31] kthread+0x711/0x8a0 [ 1536.015988][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1536.021116][ T31] ? __pfx_kthread+0x10/0x10 [ 1536.025864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.031077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.036311][ T31] ? __pfx_kthread+0x10/0x10 [ 1536.040927][ T31] ret_from_fork+0x4b9/0x870 [ 1536.045894][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1536.051030][ T31] ? __switch_to_asm+0x39/0x70 [ 1536.056107][ T31] ? __switch_to_asm+0x33/0x70 [ 1536.060888][ T31] ? __pfx_kthread+0x10/0x10 [ 1536.065668][ T31] ret_from_fork_asm+0x1a/0x30 [ 1536.070453][ T31] [ 1536.073511][ T31] INFO: task syz.4.9036:8829 blocked for more than 143 seconds. [ 1536.085597][ T31] Not tainted syzkaller #0 [ 1536.090626][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1536.100099][ T31] task:syz.4.9036 state:D stack:26888 pid:8829 tgid:8817 ppid:4869 task_flags:0x400040 flags:0x00080003 [ 1536.112164][ T31] Call Trace: [ 1536.115597][ T31] [ 1536.118555][ T31] __schedule+0x1798/0x4cc0 [ 1536.123059][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.128081][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.132955][ T31] ? __pfx___schedule+0x10/0x10 [ 1536.138434][ T31] ? schedule+0x91/0x360 [ 1536.142749][ T31] schedule+0x165/0x360 [ 1536.147055][ T31] schedule_preempt_disabled+0x13/0x30 [ 1536.152622][ T31] __mutex_lock+0x7e6/0x1350 [ 1536.157451][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1536.162743][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1536.168136][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1536.173160][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.178496][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1536.184407][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1536.191437][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1536.197671][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1536.202795][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1536.208788][ T31] rfkill_set_block+0x1d2/0x440 [ 1536.213649][ T31] rfkill_fop_write+0x44b/0x570 [ 1536.219090][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1536.224466][ T31] ? security_kernfs_init_security+0x220/0x290 [ 1536.231126][ T31] ? rw_verify_area+0x255/0x4d0 [ 1536.236496][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.241401][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1536.247252][ T31] vfs_write+0x27e/0xb30 [ 1536.251506][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1536.256927][ T31] ? __fget_files+0x2a/0x420 [ 1536.261644][ T31] ? __fget_files+0x2a/0x420 [ 1536.266579][ T31] ? __fget_files+0x3a0/0x420 [ 1536.271356][ T31] ? __fget_files+0x2a/0x420 [ 1536.276391][ T31] ksys_write+0x145/0x250 [ 1536.280727][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1536.285964][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1536.290653][ T31] do_syscall_64+0xfa/0xfa0 [ 1536.295251][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.300445][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.306676][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1536.311350][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.317616][ T31] RIP: 0033:0x7f130ad8eec9 [ 1536.322026][ T31] RSP: 002b:00007f130bce2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1536.331015][ T31] RAX: ffffffffffffffda RBX: 00007f130afe6090 RCX: 00007f130ad8eec9 [ 1536.339387][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 1536.347750][ T31] RBP: 00007f130ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1536.355963][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.363932][ T31] R13: 00007f130afe6128 R14: 00007f130afe6090 R15: 00007fff32d93ce8 [ 1536.372850][ T31] [ 1536.376309][ T31] INFO: task syz.5.9038:8821 blocked for more than 144 seconds. [ 1536.384014][ T31] Not tainted syzkaller #0 [ 1536.392662][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1536.401932][ T31] task:syz.5.9038 state:D stack:24104 pid:8821 tgid:8821 ppid:31469 task_flags:0x400040 flags:0x00080002 [ 1536.414422][ T31] Call Trace: [ 1536.418082][ T31] [ 1536.421028][ T31] __schedule+0x1798/0x4cc0 [ 1536.425939][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.430882][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.436254][ T31] ? __pfx___schedule+0x10/0x10 [ 1536.441123][ T31] ? schedule+0x91/0x360 [ 1536.445625][ T31] schedule+0x165/0x360 [ 1536.449776][ T31] schedule_preempt_disabled+0x13/0x30 [ 1536.455974][ T31] __mutex_lock+0x7e6/0x1350 [ 1536.460600][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1536.465833][ T31] ? rfkill_unregister+0xc8/0x220 [ 1536.470852][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1536.476343][ T31] ? __pfx_device_del+0x10/0x10 [ 1536.481229][ T31] rfkill_unregister+0xc8/0x220 [ 1536.486503][ T31] nfc_unregister_device+0x96/0x2a0 [ 1536.491702][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1536.497806][ T31] virtual_ncidev_close+0x56/0x90 [ 1536.502828][ T31] __fput+0x44c/0xa70 [ 1536.507099][ T31] task_work_run+0x1d1/0x260 [ 1536.511687][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1536.517219][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1536.522694][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 1536.528347][ T31] do_syscall_64+0x2bd/0xfa0 [ 1536.532933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.539281][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1536.545963][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1536.550642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.557380][ T31] RIP: 0033:0x7fcaff98eec9 [ 1536.561803][ T31] RSP: 002b:00007ffcda1f3418 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1536.570483][ T31] RAX: 0000000000000000 RBX: 00007fcaffbe7da0 RCX: 00007fcaff98eec9 [ 1536.578910][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1536.587254][ T31] RBP: 00007fcaffbe7da0 R08: 0000000000000204 R09: 0000001eda1f370f [ 1536.595290][ T31] R10: 00007fcaffbe7cb0 R11: 0000000000000246 R12: 0000000000152b99 [ 1536.603261][ T31] R13: 00007fcaffbe6270 R14: ffffffffffffffff R15: 00007ffcda1f3530 [ 1536.611437][ T31] [ 1536.614467][ T31] INFO: task syz-executor:8843 blocked for more than 144 seconds. [ 1536.622675][ T31] Not tainted syzkaller #0 [ 1536.627890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1536.636968][ T31] task:syz-executor state:D stack:27384 pid:8843 tgid:8843 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1536.649269][ T31] Call Trace: [ 1536.652540][ T31] [ 1536.655829][ T31] __schedule+0x1798/0x4cc0 [ 1536.660358][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.665616][ T31] ? __lock_acquire+0xab9/0xd20 [ 1536.670489][ T31] ? __pfx___schedule+0x10/0x10 [ 1536.675867][ T31] ? schedule+0x91/0x360 [ 1536.680108][ T31] schedule+0x165/0x360 [ 1536.684254][ T31] schedule_preempt_disabled+0x13/0x30 [ 1536.689966][ T31] __mutex_lock+0x7e6/0x1350 [ 1536.694547][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1536.699709][ T31] ? rfkill_register+0x37/0x8e0 [ 1536.704571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1536.709666][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1536.715677][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1536.721108][ T31] ? device_initialize+0x24b/0x440 [ 1536.726953][ T31] rfkill_register+0x37/0x8e0 [ 1536.731687][ T31] hci_register_dev+0x3f5/0x890 [ 1536.736949][ T31] vhci_create_device+0x39c/0x650 [ 1536.742197][ T31] vhci_write+0x3ce/0x4a0 [ 1536.746929][ T31] vfs_write+0x5c9/0xb30 [ 1536.751214][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1536.756436][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1536.761218][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1536.766893][ T31] ksys_write+0x145/0x250 [ 1536.771219][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1536.776430][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1536.781108][ T31] do_syscall_64+0xfa/0xfa0 [ 1536.785994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.791190][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.797960][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1536.802749][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.809044][ T31] RIP: 0033:0x7f0815d8d940 [ 1536.813452][ T31] RSP: 002b:00007ffe8bd08ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1536.822262][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0815d8d940 [ 1536.830553][ T31] RDX: 0000000000000002 RSI: 00007ffe8bd08eea RDI: 00000000000000ca [ 1536.838985][ T31] RBP: 00007f0815fe67b8 R08: 0000000000000000 R09: 00007f0816b1d6c0 [ 1536.847429][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1536.855671][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1536.863672][ T31] [ 1536.867100][ T31] [ 1536.867100][ T31] Showing all locks held in the system: [ 1536.875616][ T31] 1 lock held by khungtaskd/31: [ 1536.880481][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1536.890499][ T31] 2 locks held by getty/5580: [ 1536.895635][ T31] #0: ffff88823bf848a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1536.905698][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1536.916109][ T31] 1 lock held by syz-executor/28241: [ 1536.921468][ T31] #0: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1536.931977][ T31] 3 locks held by kworker/1:16/7327: [ 1536.937650][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1536.948959][ T31] #1: ffffc9000d537ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1536.962918][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1536.975176][ T31] 2 locks held by syz.4.9036/8829: [ 1536.980302][ T31] #0: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1536.991216][ T31] #1: ffff888068aa6100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1537.001272][ T31] 2 locks held by syz.5.9038/8821: [ 1537.006771][ T31] #0: ffff888068aa6100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1537.016894][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1537.027359][ T31] 2 locks held by syz-executor/8843: [ 1537.032642][ T31] #0: ffff88804a6c9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1537.047395][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1537.057723][ T31] 3 locks held by syz.2.9108/9079: [ 1537.062845][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.071778][ T31] #1: ffff8880632e0100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 1537.081966][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1537.092254][ T31] 1 lock held by syz.3.9115/9103: [ 1537.098064][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.107154][ T31] 1 lock held by syz-executor/9107: [ 1537.112350][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.121455][ T31] 1 lock held by syz-executor/9108: [ 1537.127050][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.135969][ T31] 1 lock held by syz-executor/9110: [ 1537.141176][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.149874][ T31] 1 lock held by syz-executor/9112: [ 1537.155431][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.163862][ T31] 1 lock held by syz-executor/9114: [ 1537.169432][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.178127][ T31] 1 lock held by syz-executor/9117: [ 1537.183324][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.191993][ T31] 1 lock held by syz-executor/9118: [ 1537.197516][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.206142][ T31] 1 lock held by syz-executor/9120: [ 1537.211327][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.220269][ T31] 1 lock held by syz-executor/9122: [ 1537.225854][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.234304][ T31] 1 lock held by syz-executor/9124: [ 1537.239775][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.248700][ T31] 1 lock held by syz-executor/9127: [ 1537.253905][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.262749][ T31] 1 lock held by syz-executor/9128: [ 1537.268196][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.277026][ T31] 1 lock held by syz-executor/9130: [ 1537.282210][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.291045][ T31] 1 lock held by syz-executor/9132: [ 1537.296510][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1537.305497][ T31] [ 1537.307859][ T31] ============================================= [ 1537.307859][ T31] [ 1537.316969][ T31] NMI backtrace for cpu 0 [ 1537.316985][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1537.316998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1537.317005][ T31] Call Trace: [ 1537.317011][ T31] [ 1537.317018][ T31] dump_stack_lvl+0x189/0x250 [ 1537.317035][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1537.317046][ T31] ? __pfx__printk+0x10/0x10 [ 1537.317063][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1537.317077][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1537.317090][ T31] ? __pfx__printk+0x10/0x10 [ 1537.317101][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1537.317117][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1537.317130][ T31] watchdog+0xf93/0xfe0 [ 1537.317146][ T31] ? watchdog+0x1de/0xfe0 [ 1537.317162][ T31] kthread+0x711/0x8a0 [ 1537.317176][ T31] ? __pfx_watchdog+0x10/0x10 [ 1537.317188][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.317199][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1537.317213][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.317225][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.317236][ T31] ret_from_fork+0x4b9/0x870 [ 1537.317252][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1537.317269][ T31] ? __switch_to_asm+0x39/0x70 [ 1537.317280][ T31] ? __switch_to_asm+0x33/0x70 [ 1537.317289][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.317301][ T31] ret_from_fork_asm+0x1a/0x30 [ 1537.317320][ T31] [ 1537.317324][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1537.468883][ C1] NMI backtrace for cpu 1 [ 1537.468901][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1537.468920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1537.468930][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1537.468957][ C1] Code: 43 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 23 00 f3 0f 1e fa fb f4 18 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1537.468972][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1537.468987][ C1] RAX: 8732b0456ee15000 RBX: ffffffff81958c97 RCX: 8732b0456ee15000 [ 1537.469000][ C1] RDX: 0000000000000001 RSI: ffffffff8d7ddcda RDI: ffffffff8bc03b60 [ 1537.469012][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 1537.469025][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9d4c30 [ 1537.469037][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d4b58 [ 1537.469049][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 1537.469063][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1537.469074][ C1] CR2: 00007fa8eb717d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1537.469089][ C1] Call Trace: [ 1537.469098][ C1] [ 1537.469105][ C1] default_idle+0x13/0x20 [ 1537.469121][ C1] default_idle_call+0x73/0xb0 [ 1537.469139][ C1] do_idle+0x1e7/0x510 [ 1537.469165][ C1] ? __pfx_do_idle+0x10/0x10 [ 1537.469194][ C1] cpu_startup_entry+0x44/0x60 [ 1537.469215][ C1] start_secondary+0x101/0x110 [ 1537.469234][ C1] common_startup_64+0x13e/0x147 [ 1537.469262][ C1] [ 1537.469971][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1537.636024][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1537.645129][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1537.655176][ T31] Call Trace: [ 1537.658453][ T31] [ 1537.661375][ T31] dump_stack_lvl+0x99/0x250 [ 1537.665959][ T31] ? __asan_memcpy+0x40/0x70 [ 1537.670631][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1537.675820][ T31] ? __pfx__printk+0x10/0x10 [ 1537.680411][ T31] vpanic+0x281/0x750 [ 1537.684391][ T31] ? __pfx_vpanic+0x10/0x10 [ 1537.688889][ T31] ? preempt_schedule+0xae/0xc0 [ 1537.693739][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1537.699195][ T31] panic+0xb9/0xc0 [ 1537.702910][ T31] ? __pfx_panic+0x10/0x10 [ 1537.707410][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1537.712785][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1537.718947][ T31] watchdog+0xfd2/0xfe0 [ 1537.723106][ T31] ? watchdog+0x1de/0xfe0 [ 1537.727437][ T31] kthread+0x711/0x8a0 [ 1537.731502][ T31] ? __pfx_watchdog+0x10/0x10 [ 1537.736179][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.740782][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1537.745979][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.751180][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.755857][ T31] ret_from_fork+0x4b9/0x870 [ 1537.760453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1537.765566][ T31] ? __switch_to_asm+0x39/0x70 [ 1537.770318][ T31] ? __switch_to_asm+0x33/0x70 [ 1537.775072][ T31] ? __pfx_kthread+0x10/0x10 [ 1537.779654][ T31] ret_from_fork_asm+0x1a/0x30 [ 1537.784417][ T31] [ 1537.787704][ T31] Kernel Offset: disabled [ 1537.792020][ T31] Rebooting in 86400 seconds..