last executing test programs: 1m52.146684858s ago: executing program 4 (id=258): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0xfffffc00}, 0x8) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@remote, 0x80}, {@empty}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1, 0x8}]}]}}}}}}}, 0x0) 1m51.981202107s ago: executing program 4 (id=260): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b8, 0xd0, 0xd0, 0xffffffff, 0xd0, 0xd0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1a5b"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @gre_key=0x10, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x562f, 0x6, 0xfff8, 0x0, 0x0, "e8b537b7ebbe1d4f62ac4346f02a5c77fa26059f30679f50ee9a2c2f2c92dfbe646c19a6a72dc99347b811a1ea6bd97a38cd5732585c882c16ad61b91e83797d"}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x9]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @remote, @gre_key=0xfffc, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1m51.798386345s ago: executing program 4 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m51.687952254s ago: executing program 4 (id=268): r0 = socket(0x11, 0x800000003, 0x0) bpf$LINK_GET_NEXT_ID(0x24, &(0x7f0000000080)={0x2}, 0x5) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="000000000000000000000000892f", 0xe}], 0x1}, 0x44000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x80, 0x20, 0x14, 0xd8, 0xff, 0x0, 0xc8, 0xa, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) (async, rerun: 32) r5 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r6, 0x0, &(0x7f0000000000), 0x80400) 1m51.231268814s ago: executing program 4 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r9 = socket(0x1, 0x803, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000400)=""/252, 0xfc, 0x10000, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async, rerun: 64) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m47.736996833s ago: executing program 4 (id=290): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2517000000440006803c00040067636d28616573290007000000000000000000000000000000000000000000d737000000bf1dddca2049e38b2f49083c278c97edd08cd4e8040005"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x28840) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0xa01, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40080d0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x20048001) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) (rerun: 32) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x6040001) (async, rerun: 64) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 1m47.32360785s ago: executing program 32 (id=290): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2517000000440006803c00040067636d28616573290007000000000000000000000000000000000000000000d737000000bf1dddca2049e38b2f49083c278c97edd08cd4e8040005"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x28840) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0xa01, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40080d0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x20048001) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) (rerun: 32) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x6040001) (async, rerun: 64) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 34.177541287s ago: executing program 5 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8220000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040054}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x7, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 33.84584257s ago: executing program 5 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'vcan0\x00', 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67127025c1d97bfbf788a83baa9900", 0x5f, 0x24000801, &(0x7f0000000000)={0x11, 0x88a8, r2, 0x1, 0x88, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 33.743352048s ago: executing program 3 (id=1125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x14) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000240)=0xfffffff7, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x9, 0x5}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2000000000000045, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x3}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0xffffffffffffffff, {[0x0, 0x7, 0xecb, 0x5, 0x7, 0x5, 0x5, 0x9]}}, 0x5c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 33.629922673s ago: executing program 5 (id=1126): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 33.62773039s ago: executing program 3 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xfff8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x1}, {0x7, 0x5}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41814, 0x42121}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) close(r5) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r11, &(0x7f0000000000), 0x12) 33.04176502s ago: executing program 3 (id=1136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000200)={0x2, @long}, 0x8) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000540)={r5, r5, 0x1, 0x1, &(0x7f0000000240)="84", 0x48, 0x1, 0x5, 0x5505, 0x8, 0x1, 0x0, 'syz1\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newlink={0x3d0, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r0, 0x2, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x7}}}}, @IFLA_VFINFO_LIST={0x37c, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0xff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xfffff5f3}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffffd}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @local}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4b2, 0xe62, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x869, 0xb3a, 0xfffffff9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x8e77}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf78c, 0x14c2}}]}, {0x4}, {0x138, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x8, 0x10000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xcc5, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xfffffff3}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x5a7, 0xb5b, 0x8100}}, {0x14, 0x1, {0x8000, 0xc7a, 0x100, 0x8100}}, {0x14, 0x1, {0x1ce949f4, 0xe18, 0x61, 0x88a8}}, {0x14, 0x1, {0x8, 0x6da, 0xb052, 0x8100}}, {0x14, 0x1, {0x9a4, 0x9a0, 0x6, 0x8100}}, {0x14, 0x1, {0x401, 0x2cc, 0xc2, 0x88a8}}, {0x14, 0x1, {0x1, 0xa8d, 0x0, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xd6c, 0x4, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x5}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80000001, 0x472, 0x9, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x81, 0x81}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x8000}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x529, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80, 0x83e}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x800, 0x1000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8b, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xb}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x48c5, 0x67b, 0x81, 0x88a8}}, {0x14, 0x1, {0x3, 0xa39, 0x8f66}}, {0x14, 0x1, {0x8806, 0xbb7, 0x4, 0x88a8}}, {0x14, 0x1, {0x6, 0xd49, 0xe6, 0x8100}}, {0x14, 0x1, {0x9, 0xcf3, 0x4}}, {0x14, 0x1, {0x73a, 0x1aa, 0x81, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x400, 0x7ff}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x7f}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffffd, 0x8}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80, 0x8000000000}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', r7}, 0x18) 32.689204907s ago: executing program 5 (id=1139): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 32.688962851s ago: executing program 3 (id=1140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x1000}) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) 32.4575906s ago: executing program 3 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 32.265784093s ago: executing program 3 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x48, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0xfc, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x44}}, 0x44) 31.906533385s ago: executing program 5 (id=1153): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_cswp={0x58, 0x114, 0x9, {{0xc, 0x1}, &(0x7f0000000080)=0x5, &(0x7f00000000c0), 0x0, 0x5a4ea895, 0x51, 0x1, 0x6a, 0xa3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x70}, 0x1400d044) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="120088a8"], 0xfce) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000001c0)={0x1, 0x7fffffffffffffff, 0x4, 0x0, 0x0, [{{r0}}, {{r2}, 0x6c9}, {{r1}, 0x10001}, {{r6}, 0x75a}]}) socket$can_bcm(0x1d, 0x2, 0x2) 31.745649909s ago: executing program 5 (id=1154): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x30}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x5b}, 0x8) r2 = socket$inet6(0xa, 0x2, 0xd) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, @generic={0x22, "f68b4ca32429dc96a3ec16b38e31"}, @ethernet={0x1, @multicast}, @nfc={0x27, r4}, 0x9, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)='erspan0\x00', 0x3, 0xa}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @mcast2, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x242f}, &(0x7f0000000340)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r5}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000500)={r6, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040051}, 0x40480c0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000780)='veth0_vlan\x00', 0x10) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000840)={'veth1_to_bond\x00'}) write(r2, &(0x7f0000000880)="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", 0x1000) openat$nci(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r7) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20200001}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x50, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r13 = epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001a40)={r13, 0x6, 0x1, 0xe}) 20.342037082s ago: executing program 0 (id=1335): r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="06000200ad8e4184b1dae2b4b6014ad7d4c49442638101cd247273901ccc55efa267ccdf0bc9cc7a263757865e29170442"], 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 20.257932461s ago: executing program 0 (id=1336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @none, 0xf, 0x2}, 0xe) 20.257106131s ago: executing program 0 (id=1337): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x84, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x40000002}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r5, 0x3, 0x1}, 0x8) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 19.814718602s ago: executing program 2 (id=1342): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x3, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c20000030180c2f32d9a6c65c287f23c1675e9a36e00000086dd6012000800183a0100000000000000000000000000000000fe8000000000000000000000000000aa8300907800090000ff01"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000e0ffffd065bbb60000002c0004802800018008000100666962001c0002800800024000000800014000000000080003400000002f0900010073797a30000000000900020073797a3200000000e599142c38d62baef580e7a2da140000001100010000510205d391e4d052c37b48a7d61d9fc11f2942227d2d12d06af9a2cc762e0137ceda0a1e5a60569503218689d120ee18c110ab2a7e308cb12bb2a0ec18bc21c504a77c5f5b12b9e9c7faddc985a104599d5cb609e30264"], 0x80}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0)=0x7fffffff, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, 0x0, 0x4) close(r5) socket$netlink(0x10, 0x3, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) close(r7) 19.333663248s ago: executing program 0 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 19.217500865s ago: executing program 0 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x4, 0xf, {{0x1c, 0x4, 0x3, 0x3, 0x70, 0x65, 0x1d4, 0x8, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "270f6c6e192630837a6b3ead"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x3c, [@dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x8f, 0x3, 0x1, [{@local, 0x5}, {@rand_addr=0x64010100, 0x401}, {@multicast2}, {@multicast1, 0x7}]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0xd, 0xa, 0x6, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41000, 0x25, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x2a6899ea, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4], 0x0, 0x10, 0xab8}, 0x94) r8 = socket(0x391a65871c7e21f, 0x1, 0x3) r9 = socket(0x840000000002, 0x3, 0x100) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) close(r10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000700)) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x30, 0x0, 0x2000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r9], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19.102252366s ago: executing program 0 (id=1351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0xb, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0xc, [{0x1, 0x2, 0xfa8}, {0x9, 0x0, 0xd}]}, @datasec={0xf, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x3, 0x2}, {0x1, 0x7ff, 0x8}, {0x2, 0x5, 0x50}, {0x1, 0xffffffff, 0x78}, {0x1, 0x3, 0x401}, {0x1, 0x0, 0x6}, {0x3, 0xfffffff8, 0x3}, {0x3, 0xbb, 0x7ff}], 'j?y'}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @restrict={0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000080)=""/53, 0xf3, 0x35, 0x0, 0x6, 0x10000}, 0x28) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES16=r0, @ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 18.770380903s ago: executing program 2 (id=1355): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x28, {0x2, 0x4e23, @remote}, 'wg1\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x9, 0x8, 0x5, 0x6, 0x8], 0x5, &(0x7f0000000080)=[{}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000001c0)={0x0, 0xffffffffffff8001}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x6, 0x2, 0x89, 0x9, 0x23, @local, @private1={0xfc, 0x1, '\x00', 0x6}, 0x700, 0x8000, 0x1, 0xad32534}}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e20, 0x8, 0x4e23, 0xfffe, 0x2, 0x0, 0xa0, 0x67, r3, 0xee01}, {0x6, 0x9, 0xb, 0x4, 0x9, 0xffffffffffff8001, 0x800, 0x7}, {0x3, 0x8c1a, 0x6, 0x6}, 0x6, 0x6e6bbd, 0x2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x4, 0x3, 0x0, 0x5, 0x15e, 0x7f}}, 0xe8) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000003c0)={0x7, 0x7, 0x4}, &(0x7f0000000400)=0x28) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={{r2}, "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"}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x8, 0x68, @private2, @loopback, 0x8, 0x40, 0xfff, 0x9}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000001500)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0x6, 0x6, 0x1000, 0x8]}, &(0x7f0000001580)=0x78) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f00000016c0)={0x1}) r8 = socket(0x2b, 0x1, 0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e22, 0x8, @remote, 0x3}}, [0x1ff, 0x2, 0x9, 0x7, 0x1, 0x7, 0xd, 0x7, 0x2000, 0x0, 0x7, 0x9, 0x6, 0xcbec, 0x4]}, &(0x7f0000001800)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001840)={0x6d34, 0x40, 0xe, 0x800, 0xffffffff, 0x6, 0x800, 0x2, r9}, 0x20) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000001880)={0x0, @empty, 0x4e20, 0x2, 'sh\x00', 0x18, 0x5, 0x3e}, 0x2c) r10 = socket$inet(0x2, 0x6, 0x1) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000018c0)=@req={0x8000, 0x2, 0x9, 0x2}, 0x10) listen(r10, 0x6) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001940), r8) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040040) ioctl$SIOCAX25NOUID(r8, 0x89e3, &(0x7f0000001a40)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) 18.711985405s ago: executing program 2 (id=1357): r0 = socket(0x28, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000070605000000000000000000050000010500010007"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ce6d409018480000000000000000000000000000000069e6a5"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r3, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @local}, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="68c50000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0) r9 = gettid() gettid() r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) recvfrom$unix(r0, &(0x7f0000000540)=""/231, 0xe7, 0x100, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000001a0667af6b46c0a7119a45b3d84cd13f9f5d0b441ad263fe4ac2b9158457806e42ec1e7a18baee66b25488b48260d214908dd360faf5329d6f3fb76d2ab7d16e1d7ba5e024268f8b5eb430f3f1e477fd0feb047d8c9ed9f5179fe4dbd93158863f0bd864f25e1162fc2bf343e2bf3ab6147dd1146ff05160563886d4fd6bbf5a469a2be8a2c1101813f0cd500b574bcdaf49a02f885aa9e0f043dd5d65338fd63205ad81d8a52a3773705a94", @ANYRES32=r9, @ANYBLOB="140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1000000"], 0x114}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) 18.538345211s ago: executing program 2 (id=1360): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92462}, [@IFLA_MAP={0x24, 0xe, {0xd, 0x10001, 0x7, 0xa6a7, 0xb, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10010, r1, 0x0) socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 18.248863625s ago: executing program 2 (id=1363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f0000000000)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.149938129s ago: executing program 2 (id=1364): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0xffffb000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000fdffffff4400000008000300", @ANYRES32, @ANYBLOB="68efd5a68bd86388152da51491d6778f709a04000000ea089b4611a01a05d85b0373d5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'caif0\x00', @local}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0xb9, &(0x7f0000000340)={@remote, @remote, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x5}}, {@generic={0x4, "62686ae5f7a4893e6719cc94500f6a76f05267f1776bc4b2f3c5c042c6146e25cfd7c0961843ad615d5d7ce3dffdd861da0bdd3b888f2b7ca2b4531fe1aca77ba465534b00700351da55214553da80e0943c79bd09379c660b4df789ec49904bd69947fa0f909968e343e87a0c295bf6fa32a6ef3d4667384ab297dc4684e195a37796ebda2020b9cbd075b8ab684be58c0292f257d203cd1937ea44581725d0f9b67c"}}}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000), 0x4) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) readv(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x6f01, 0x6004}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x2, 0x2, 0x20, 0x66, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}, @address_request={0x11, 0x0, 0x0, 0x100f}}}}, 0x2e) 16.666109638s ago: executing program 33 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x48, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0xfc, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x44}}, 0x44) 16.607060087s ago: executing program 34 (id=1154): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x30}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x5b}, 0x8) r2 = socket$inet6(0xa, 0x2, 0xd) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, @generic={0x22, "f68b4ca32429dc96a3ec16b38e31"}, @ethernet={0x1, @multicast}, @nfc={0x27, r4}, 0x9, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)='erspan0\x00', 0x3, 0xa}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @mcast2, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x242f}, &(0x7f0000000340)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r5}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000500)={r6, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040051}, 0x40480c0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000780)='veth0_vlan\x00', 0x10) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000840)={'veth1_to_bond\x00'}) write(r2, &(0x7f0000000880)="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", 0x1000) openat$nci(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r7) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20200001}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x50, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r13 = epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001a40)={r13, 0x6, 0x1, 0xe}) 15.626244762s ago: executing program 1 (id=1370): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20004810) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r0) 15.590923876s ago: executing program 1 (id=1371): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) 15.509839446s ago: executing program 1 (id=1372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$inet(r1, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) 15.218943872s ago: executing program 1 (id=1373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) listen(r1, 0x5) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) (async) listen(r1, 0x5) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) (async) 15.172761574s ago: executing program 1 (id=1374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x34, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xc}}, @TCA_RATE={0x6, 0x5, {0xf}}]}, 0x34}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x4010, r0, 0x0) syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000740)="fc6c1451d2824ad295fea6c270276ab42a0d42736af6ad249e0e35ff798dc10eb8e7b44f3d2e2db1f5414809d26604a0bf90f3a65cb8197d05265c8b7f992b55776f5f9c861bcd34278736e4980072253f989f6cb7b7074d80d185ac7b23069d176b34812de8ae90856e0fa120b39e2337c8ae03a752ae85f34a96ae5af31cb22426c6a70b8dc636cb921fff37bf8583014ba2089be2d322dfab7b6561166f42504ad89581961b279feebfa2b71940a4b0e2f44510676892f6b247f3160f9a06e1141f3388ed051320d0465e6fa88a9cd7315de6424cadc3b120be8a088642aa4c6132dce0dcea131bfc55b62014a0cf6305a54ff7a080bb5370746cfa80ab49a9e9e8c33bfcc2d8e09f1391c2bc4e4cf531c3f2c3627270e0a8210e50293c68e57e7ea135a1908a9692201e4fd24e5e1d68066ecdb65d1bc650d1c6d3eb37fb9664bd853b5f054f80eeba1da84ee727915fc2eaa9faa4fad6914130978359fcd3002f2863da603bad09f329095f1ca7fd6b5473d5e336be661b9c2c6ec16fd1092ed7ce8f09535a831f8de909aa691f48bb44edaa5f7eb67f12c8132339514639e61830df0652ac55a0ba1368b22bda0fab2b08e39237818b36484cdc7b88b1d601ba19db650435025804b40fb8934fd083152b32f223bdbc0590b576182f1f148e76e0dec59034b520a02f0720e039fb7a62507eb362695cf85bdbb72045b352444d476b4bd0464e59732d05e80c529f6e2f2f69590436bbee0d742fdfc265cd9a99abc7971b8adcc64f0dc2c71b20b7520b9e03c75fa3e2715304bfb805bc9ab3560c2c1b00694e23a8941809573bfce567c5ae839fd8f724e90bdc730ee493a6b0946df3cc39f97c53b157023784091574991e11ffff49e3096db7ca6ed48fb1ba91a202942cffaf256f9272612f62fcd43387a9865980dfab0c833500e08fa758cb087893a63db5f76114955f91ded953cfe8e653d37dda4d36366e504245442d58f19223bdef9ad868007b9ebf7a8504616c8aebf77f98065fa72b6bb776962a20b8f828ef4fdc04c774fb9c316ab69611c2b2e770e03185014577633184d410e3e699db02581c9a13f5f7c4f596478a5daed4dec7f9954c893da0efed67bfa1b81c6e6c2407024d7d1db97c9a962a80dbf8745bccab9b51589404716782ea2eeb7beedb7b9f382874185f8869c240024dacadd654d9c290a215c4530124e4a9a3c1715c7f770ab5acc72bbf0315569974f7df64ace11a8ba4da936a1d0288b7aa3bae9c96916a01583f05298b3d95208847001e5b7cd175f85aca6df8931f810f938cf907473afd535b6a5c9240519101c6ac736a377ee58fe56d9232920e01b6aa482201dc7104579552164dad99b7023c285089d88cc6462a704da8ed5253946ac0e46e170c82100a114bb373bb83d58037aea70218f02701c641d51782e77518155e3d119a44edb4705173dcafdcf3751e1b6639a169778f7da89af7506165c2b20ae020fe4a5c42d0efbf707cead3aa402b292997b7c3954cd990280c0b5fa189a910ed4bca5978743e6de2e43bad9fde583773fb14df945d13daad0f876e987df325ae4cf0958b2116f36f531412fcc5a8176e857fe58b8a908d9eae02600b126a417330284d6bf5b4226f0e27bb729b517e07e56ec01145c1c43e93a14ca348696c7e24658e02b2056addfbe430933364f02c3145d9c6694eef38f0e6fef592e66ce68b2f3c911df19c4806a81fc7a9476ce4e6debb210427a5ff682b5a05d0544f39fdfb59b98c9fafa4c286db3df11a644ec21905450af2db5bcb878c4d14ddec5df97a04bd615720af6a52cf5c6ce9dc175ed07a5c04b397b70a08ce8598db0a01110a6af22d3c2320fcb1cdf0aeaa8979275df287ad8866569b9da2ccd3307b062d5f2cbf327d4447be1ecd1189f98941724d10d0dca5c241f2c821477ae0b0530e0f09d65953aa22376c35427645edbbfad62e367b0f7eb2110c318068eaaf1abb029c9f082427b71f8afad566df15dcc488bc52dd5c360d9efaa2a94d16f1b72f5a872099ae830441e04ef97a9d432f0ec77b5355b3294f869ea6a2efb3dcfbe2dd0d05866c6346d265ddde5a3ec787712f0acffb3af42400b1e3cd633fd9d6e53e1ec04b8f653a1ff1725a232bd020aff65523278433ce26d21a6736f8619f4c15746fa19d322ceccd4d39c17e156b42885f724f93e92eb021fd187e6dc64d1bb566cd735260316f0d44f6d522b496c85834da40d52a7573901c8ed51dc196fb376804d361fb21da701eda7b7a3294f65561f2000795c72e3437e370c60a2486600180225082711ee63e4062e11952bc859e867ff44afa839d2fe74c5765eb055618ff263a80fb9ce5b672ac921347d17e98e978984d34c27e2b837e77cc61a71e0131914b3f1b484c9a80018489edcb0eeee434745b938baf79cbed9f4b901fa4539c6a49227d63989a6b4a0721617ac7699795130a12483270f0499bb2f8b0bf9a00831ea9034bbb237e1fe247bf45a64f63810fcef8dc6c94bac48faaf5863df9072991612fb357664dcc272593e525dcddbe91d52312ebc2df202d65a09a7f197c64ecdcefd6cfe9a760ea52ac2cd7d76bf51951c95cca12144a255cb2912211c079ef7aedfb4fce0da8396b83af017d72f7aebcc7a867be32b767d82b0ffb13c24921b60019fe91a3cc4cde69f500bd0633b9088d7aed6bd71c6de32b5c2678ccc3a21447ac518edd92d6d18d48f8dec6878c911b983fb189a2289841a7fe3dca67bcdf0b529090b57c08b93faeb7eeded6538c31e369931461b2d898fcd4e44838de969300c1f2ef11da5a45674ddaceabe8fb348995190356fa22dc64166671bcbccb2a9c4307d7cf5e7877816d12785cba2b48fdee64709410997619ccc7e911051410d92a660f5808beb9bd01904fbb53e0e7ce59f95600a9220770f32b634a22d7a888f0ca1d1ee8b5d7cfa54f15b65910dda1b99d4ce63ac138ea4a9723fa5a5471bace2536401b460ba9e7453844adbea0bf15b605060ad9b79924701f1029dba994f5a17fb1ccd21ab46e6d6356324f672217161010929afa1e5cce315894ea789abee341fad003ac849001b8a1ee1788d7c8df63fa536dcdc5b0fcb22782ad6b8bb7192c04d4bd8e9708f03ed2fc830e408974007b872d3fa0b038112f59c5ab1722aaf6f67b04951d9b5b633c83d919312fa83e4777c5609c804d00092ce398194007c5956942f35bfcffdf0a09f08ea9c8c6864f9bc02095839ea3c39cd57395986e66f51efe648508b1fc5d6d999fbf52f653aea398de5d109efa98ded0448069c5435e220a9dcfd98bc076543420daf9e013b8d1e065966aa5d233605c5c98c437bc2f2df907df3aae1932c95330dd4e89e9c5ea11cd48a2ef6fcaa5dc71f82563832c2b9dbfdd75012eb0e54dee9457d5c1ad166d6d99cdebd24f332226370bbe77fb633fc7d1f6c7c44aaa5d4642add32e66568395ce95507aa81cdb12d7a6d5879d66d61cce4223f360e44a56d24aead194dc00cc89aacb395f89fd9d0dd12d414d59f022405db66bcb37e63f9883f9c663daa660bc96671e0651ca856abf0d3b1418040e587b46d48d9a477cd8cac9a9ee2dabe9f199c6679bea15431f397d438f08db6ed8846275f650cdb9dd29add018ceb6fb396950e9dbf3019960b142072e09e8ff2c38de4ae394125ada996c1b3e80fe6eb3364b477c427fd163e2d1b071314862d3a8e3028d5fa95a4afd35cccdc9a412d4a623bf1f47d92c5b435de1f284a4ceced9f1aac2ab8daacaf17b632c4f330db208d94b50878ed5de5e74f4a962ed3c12e8e3a22b6010c3dfd458a4b1bc9b29126819c21e9e1b171567e31349ad612c7d14ce942866bc9a288eabdc91761e6f413f62331d3b8dde4c74c99b9d66f7b43bf70e216caff01fb423e13ed4e7530f7f0e8f0f00b5af80fe7cc4f39767862af1bd4e090c1dd9a24d4922088e81e6cabf552d6e573a05d333f2f7cd7eabbc42f2e2d898631ff855cc933af9cabc477b1e109591cebcfce5db871fa34b1c63d39694cd8d6cb40d32c909f0897ff469857f7939e776c62d2b9ae15f028480735a6ab31555516dd0289a2968204b3151dde6714ca69e63d23ef2b9632beacb2d291a85a3812db8e6987e51970c848a6302df6dd4898893f00e138f35d98536ec02e73dc950a085a868cebf712dc58ac884a7b8bb170388bda988179087d2aac47a64c0824c8b72cff8669f51a9fe5b7aaace6d83993a04d7b4c08b11d8072e35fce5426e12196a292235223576b10ad4908226ca5e548fd5272b729bdca113af250546d3d9b95dfcf22ed1aa2b491afd54c04138f625e830b04823d1bf6f649eb40de3498d53a191d81d1dc38baa7f7746edbd1c382161bc0527fad48753bbdf88d9d57c60c9b4fc9468d54e837df27d1f6afeb3d4de363977f2d74404a28303c200c64ec682be4205f6638b4e302f6a65f4311ab13f66b0ef61186df72926a0296148e643f76c1daf679f897cf9a1c667936b6e7e742e52474ac159c5156d8a903abeb7b71d9bedcaa780aa735984a5a039328446921f560b4a9f6fe35e0dec9b2c8aba4976ace307a7bde45e5077bd98218880a193649e2a3bc480432ea22a4983bf174644c7afa1a63cef3d273b3be805be8ebf9aa7400881aa16ded99f47e77966c9f6be6553b5fb83174c993c3dc18d1f08f277d575125911e4f4d8ab467a698fd6605de282593ef4ff62368dd4dff36f1767c9e080de4ce7b961f2a133b23efbdf88e7128171290938a86fa6ca5e9768e57c167935fa112dc8e5eb041c6fddb807bff1b7d887c115e0d286894ec2182d35a501879176f8ed310af9ec725c48ccc97ed038bc7d839c1138b471a1bf3af7dab5fff451f9378743d5995d755dfb61f8db3281611c513a4bd8b97ff20a0a73a62e7e4ac687ab07832ff3cddf10544e87d5b36348f135b3c0bb15b0ebd30d793159ad48ead6c10be9ce297ea0d81dc409ad5a7afc1d7bd2d005ce91a409b65848a0d934d5c331db167574143e2325ce0e2f4442100fc7f3d7db69a223ee9f357dcc7e7c0edbcc8c0beaf75db6a181106b946446cddbb1abbae34f535514e7ec281065349743e450cc07916c8ab922618131d2f303b500825e6a6cc632b6d9085a3418bc39ace4c4e6d9bb1eccd0a56a419fda136b63ccbb5812ffe859ddb115af2da7226821aa92d54f37243d5ba662bb88479260af93bb79db8971335f1a6404ebe08d3ee477572464f394f97b95b657a469fc88bace850ac1c7167ddf5bae35d6116cf953f3953fee5cbc42f2d1583a28ecc050bdeb3755b35f5d33d3416fffc73c6452aa09a2abe9e1b6da4d1bf4bc28c5caf852764b87e370f0e634438c437edcacc147dfd598e6735922dfc86e10663bc6fe7d44dc4f70f91ab47755aa14a04f9b4d5baf37d735e9563d50785a7ff4786283b699b0eb5c62b4f5d82901b1fef80371099f32eee885799cd9d3ff326cd814d63d7fd38df442cd548f78b0201bd912fb84601661370ab4aeac1ca2fe19996b713530fc118015f8df5aefae5cb9744f25c575b1af31be4663c26c87750c0f2a7ba715aaf50bdd0b0431cabec98569c770ad964d1d6b7dbd23715bfaedecfd62fe67edaf00930bbdf390e37a336e1d9ff79ae7976af6c5e4865a98636e278eeaf3ba68d468c577aa7f5a2006fd3bb07d3748aa1d414f9fd1ba7ba00bedcf00f9e2d6461ada5f5a83761444f6a9bb1c17c32fd9b9202040e54de1953c6776ff3dc9") sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.081904855s ago: executing program 1 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff37, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x801) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a00", @ANYRES32=0x0, @ANYBLOB="679b116ba091d101ff2d27cf941127d16561ad3db398ad23145b8497c6853e379636bcbf1ed831a2e39e92fc1e36d14b37cd116a9b208b99786093f844cb5af3eea1c765375f08b9"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="16426c5640fcc6f16d0cc2009416cfd0e67cbeb56f52e0a0f6bbbb068d48b703997dfe3a540bac2d009ff239856426716ff85b24d10fdfef486ce6db699736b38115a2164eb3fcac337e6b4d1c5192e346c2b39b3e3a14fb22fa520658103f745d3bd5d489632264e3b8f022086f9ad5d8a01fef73", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x5, 0x3ff, 0x1, 0xa6, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.05224031s ago: executing program 35 (id=1351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0xb, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0xc, [{0x1, 0x2, 0xfa8}, {0x9, 0x0, 0xd}]}, @datasec={0xf, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x3, 0x2}, {0x1, 0x7ff, 0x8}, {0x2, 0x5, 0x50}, {0x1, 0xffffffff, 0x78}, {0x1, 0x3, 0x401}, {0x1, 0x0, 0x6}, {0x3, 0xfffffff8, 0x3}, {0x3, 0xbb, 0x7ff}], 'j?y'}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @restrict={0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000080)=""/53, 0xf3, 0x35, 0x0, 0x6, 0x10000}, 0x28) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES16=r0, @ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.027765591s ago: executing program 36 (id=1364): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0xffffb000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000fdffffff4400000008000300", @ANYRES32, @ANYBLOB="68efd5a68bd86388152da51491d6778f709a04000000ea089b4611a01a05d85b0373d5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'caif0\x00', @local}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0xb9, &(0x7f0000000340)={@remote, @remote, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x5}}, {@generic={0x4, "62686ae5f7a4893e6719cc94500f6a76f05267f1776bc4b2f3c5c042c6146e25cfd7c0961843ad615d5d7ce3dffdd861da0bdd3b888f2b7ca2b4531fe1aca77ba465534b00700351da55214553da80e0943c79bd09379c660b4df789ec49904bd69947fa0f909968e343e87a0c295bf6fa32a6ef3d4667384ab297dc4684e195a37796ebda2020b9cbd075b8ab684be58c0292f257d203cd1937ea44581725d0f9b67c"}}}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000), 0x4) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) readv(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x6f01, 0x6004}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x2, 0x2, 0x20, 0x66, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}, @address_request={0x11, 0x0, 0x0, 0x100f}}}}, 0x2e) 0s ago: executing program 37 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff37, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x801) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a00", @ANYRES32=0x0, @ANYBLOB="679b116ba091d101ff2d27cf941127d16561ad3db398ad23145b8497c6853e379636bcbf1ed831a2e39e92fc1e36d14b37cd116a9b208b99786093f844cb5af3eea1c765375f08b9"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="16426c5640fcc6f16d0cc2009416cfd0e67cbeb56f52e0a0f6bbbb068d48b703997dfe3a540bac2d009ff239856426716ff85b24d10fdfef486ce6db699736b38115a2164eb3fcac337e6b4d1c5192e346c2b39b3e3a14fb22fa520658103f745d3bd5d489632264e3b8f022086f9ad5d8a01fef73", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x5, 0x3ff, 0x1, 0xa6, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 73.101777][ T5852] cgroup: Unknown subsys name 'net' [ 73.257070][ T5852] cgroup: Unknown subsys name 'cpuset' [ 73.265764][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.632526][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.980508][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.988962][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.996948][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.005602][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.050647][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.063219][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.088042][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.100671][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.108781][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.134653][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.230263][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.238533][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.246851][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.255444][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.263256][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.281946][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.290135][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.306011][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.315937][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.323888][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.345733][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.354045][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.362214][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.370643][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.385644][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.885192][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 78.013483][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 78.040110][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 78.133431][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 78.196299][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 78.233852][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.241036][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.250726][ T5866] bridge_slave_0: entered allmulticast mode [ 78.257971][ T5866] bridge_slave_0: entered promiscuous mode [ 78.326596][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.333815][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.340931][ T5866] bridge_slave_1: entered allmulticast mode [ 78.348332][ T5866] bridge_slave_1: entered promiscuous mode [ 78.429149][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.456467][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.463862][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.471142][ T5862] bridge_slave_0: entered allmulticast mode [ 78.479042][ T5862] bridge_slave_0: entered promiscuous mode [ 78.488286][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.495506][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.502704][ T5862] bridge_slave_1: entered allmulticast mode [ 78.510646][ T5862] bridge_slave_1: entered promiscuous mode [ 78.532906][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.592475][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.599977][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.607741][ T5873] bridge_slave_0: entered allmulticast mode [ 78.615658][ T5873] bridge_slave_0: entered promiscuous mode [ 78.640252][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.647615][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.655077][ T5872] bridge_slave_0: entered allmulticast mode [ 78.662104][ T5872] bridge_slave_0: entered promiscuous mode [ 78.688009][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.697344][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.705660][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.713002][ T5873] bridge_slave_1: entered allmulticast mode [ 78.720709][ T5873] bridge_slave_1: entered promiscuous mode [ 78.755579][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.762735][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.770276][ T5872] bridge_slave_1: entered allmulticast mode [ 78.778734][ T5872] bridge_slave_1: entered promiscuous mode [ 78.788428][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.812271][ T5866] team0: Port device team_slave_0 added [ 78.875354][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.886366][ T5866] team0: Port device team_slave_1 added [ 78.895026][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.928883][ T5862] team0: Port device team_slave_0 added [ 78.960109][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.967419][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.975136][ T5876] bridge_slave_0: entered allmulticast mode [ 78.982095][ T5876] bridge_slave_0: entered promiscuous mode [ 78.992689][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.004280][ T5862] team0: Port device team_slave_1 added [ 79.033325][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.041280][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.049693][ T5876] bridge_slave_1: entered allmulticast mode [ 79.056872][ T5876] bridge_slave_1: entered promiscuous mode [ 79.066542][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.089424][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.096704][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.127348][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.127741][ T5869] Bluetooth: hci0: command tx timeout [ 79.143802][ T5873] team0: Port device team_slave_0 added [ 79.189174][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.196297][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.223037][ T5869] Bluetooth: hci1: command tx timeout [ 79.228637][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.241594][ T5873] team0: Port device team_slave_1 added [ 79.282663][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.291837][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.318718][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.352072][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.353874][ T5869] Bluetooth: hci2: command tx timeout [ 79.367166][ T5863] Bluetooth: hci3: command tx timeout [ 79.369368][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.384612][ T5872] team0: Port device team_slave_0 added [ 79.391128][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.398524][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.424608][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.435256][ T5869] Bluetooth: hci4: command tx timeout [ 79.451246][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.459093][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.486435][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.512749][ T5872] team0: Port device team_slave_1 added [ 79.539734][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.547140][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.573181][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.606334][ T5876] team0: Port device team_slave_0 added [ 79.645309][ T5866] hsr_slave_0: entered promiscuous mode [ 79.651601][ T5866] hsr_slave_1: entered promiscuous mode [ 79.687444][ T5876] team0: Port device team_slave_1 added [ 79.717928][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.725124][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.751427][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.764042][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.771107][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.797050][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.913550][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.921272][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.947636][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.970578][ T5862] hsr_slave_0: entered promiscuous mode [ 79.977026][ T5862] hsr_slave_1: entered promiscuous mode [ 79.983051][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 79.989782][ T5862] Cannot create hsr debugfs directory [ 80.000519][ T5873] hsr_slave_0: entered promiscuous mode [ 80.007049][ T5873] hsr_slave_1: entered promiscuous mode [ 80.013124][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 80.019139][ T5873] Cannot create hsr debugfs directory [ 80.039737][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.046865][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.072937][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.235593][ T5872] hsr_slave_0: entered promiscuous mode [ 80.241841][ T5872] hsr_slave_1: entered promiscuous mode [ 80.248163][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 80.253951][ T5872] Cannot create hsr debugfs directory [ 80.269805][ T5876] hsr_slave_0: entered promiscuous mode [ 80.277614][ T5876] hsr_slave_1: entered promiscuous mode [ 80.283909][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 80.289734][ T5876] Cannot create hsr debugfs directory [ 80.662710][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.709890][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.753489][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.796464][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.841813][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.852915][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.874230][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.887457][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.977332][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.991935][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.003205][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.038830][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.096977][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.109435][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.144966][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.169937][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.196279][ T5869] Bluetooth: hci0: command tx timeout [ 81.246491][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.273752][ T5869] Bluetooth: hci1: command tx timeout [ 81.275904][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.308668][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.322009][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.367386][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.434344][ T5869] Bluetooth: hci2: command tx timeout [ 81.436295][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.439778][ T5869] Bluetooth: hci3: command tx timeout [ 81.458605][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.507410][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.523755][ T5869] Bluetooth: hci4: command tx timeout [ 81.535503][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.542958][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.554734][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.561858][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.611220][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618423][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.629842][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.637056][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.667933][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.768815][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.822223][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.829430][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.845038][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.852202][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.883052][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.962938][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.005591][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.092947][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.129243][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.136458][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.182453][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.189674][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.246275][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.253460][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.329002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.336213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.607931][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.654668][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.750474][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.850996][ T5862] veth0_vlan: entered promiscuous mode [ 82.908251][ T5866] veth0_vlan: entered promiscuous mode [ 82.942133][ T5862] veth1_vlan: entered promiscuous mode [ 82.983399][ T5866] veth1_vlan: entered promiscuous mode [ 83.142711][ T5866] veth0_macvtap: entered promiscuous mode [ 83.212095][ T5862] veth0_macvtap: entered promiscuous mode [ 83.222829][ T5866] veth1_macvtap: entered promiscuous mode [ 83.246432][ T5862] veth1_macvtap: entered promiscuous mode [ 83.272363][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.283751][ T5869] Bluetooth: hci0: command tx timeout [ 83.312845][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.353142][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.364283][ T5869] Bluetooth: hci1: command tx timeout [ 83.386008][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.394703][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.421601][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.451709][ T1169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.461335][ T1169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.470363][ T1169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.479281][ T1169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.498425][ T5873] veth0_vlan: entered promiscuous mode [ 83.514210][ T5869] Bluetooth: hci3: command tx timeout [ 83.514265][ T5863] Bluetooth: hci2: command tx timeout [ 83.527556][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538231][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.548085][ T5872] veth0_vlan: entered promiscuous mode [ 83.567385][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.577073][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.594270][ T5863] Bluetooth: hci4: command tx timeout [ 83.605218][ T5873] veth1_vlan: entered promiscuous mode [ 83.634886][ T5872] veth1_vlan: entered promiscuous mode [ 83.722832][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.740118][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.772052][ T5876] veth0_vlan: entered promiscuous mode [ 83.809427][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.822118][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.849786][ T5876] veth1_vlan: entered promiscuous mode [ 83.888247][ T5872] veth0_macvtap: entered promiscuous mode [ 83.911697][ T5873] veth0_macvtap: entered promiscuous mode [ 83.925369][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.931643][ T5872] veth1_macvtap: entered promiscuous mode [ 83.956588][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.963142][ T5873] veth1_macvtap: entered promiscuous mode [ 83.970316][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.091158][ T5876] veth0_macvtap: entered promiscuous mode [ 84.113188][ T5876] veth1_macvtap: entered promiscuous mode [ 84.114595][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.128022][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.152452][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.169969][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.183341][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.226367][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.270509][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.296777][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.313424][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.329164][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.338880][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.357388][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.392642][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.422643][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.470170][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516241][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.530559][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595054][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.614957][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706561][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.787245][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.799457][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.844616][ T5995] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9'. [ 84.907084][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.907963][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.938531][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.962417][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.991119][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.082539][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 85.166352][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.194003][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.290712][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.336814][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.354156][ T5863] Bluetooth: hci0: command tx timeout [ 85.434181][ T5863] Bluetooth: hci1: command tx timeout [ 85.574845][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.582696][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.600696][ T5863] Bluetooth: hci3: command tx timeout [ 85.600704][ T5869] Bluetooth: hci2: command tx timeout [ 85.674587][ T5869] Bluetooth: hci4: command tx timeout [ 85.780786][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.851882][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 85.882173][ T6025] ip6gre0: Master is either lo or non-ether device [ 86.083093][ T6039] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.356325][ T6054] netlink: 'syz.4.26': attribute type 1 has an invalid length. [ 86.551843][ T6054] netlink: 192 bytes leftover after parsing attributes in process `syz.4.26'. [ 86.687252][ T6055] Zero length message leads to an empty skb [ 86.900631][ T1973] cfg80211: failed to load regulatory.db [ 87.028360][ T6078] warning: `syz.3.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.308130][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.340687][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 87.360357][ T6092] sit0: mtu less than device minimum [ 87.361437][ T6086] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 87.385118][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.584087][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a0dd400: rx timeout, send abort [ 87.593985][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a0dd400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.887521][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41'. [ 88.058390][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'. [ 88.089702][ T6130] veth1_macvtap: left promiscuous mode [ 88.126161][ T6130] macsec0: entered promiscuous mode [ 88.200449][ T6127] can: request_module (can-proto-0) failed. [ 88.201777][ T6136] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 88.218266][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.47'. [ 88.743764][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 88.849183][ T6157] geneve2: entered promiscuous mode [ 88.898326][ T6157] geneve2: entered allmulticast mode [ 88.992310][ T6166] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 89.129535][ T6172] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 89.415446][ T6184] syzkaller1: entered promiscuous mode [ 89.471245][ T6184] syzkaller1: entered allmulticast mode [ 89.516715][ T6184] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 89.592962][ T6184] tipc: Enabling of bearer rejected, failed to enable media [ 90.082219][ T6220] __nla_validate_parse: 4 callbacks suppressed [ 90.082238][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 90.666143][ T6250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.678711][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.014393][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.071998][ T6267] xfrm1: entered promiscuous mode [ 91.093713][ T6267] xfrm1: entered allmulticast mode [ 91.116320][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.129004][ T6274] tipc: Started in network mode [ 91.148572][ T6274] tipc: Node identity 2ef3efc1e226, cluster identity 4711 [ 91.173425][ T6274] tipc: Enabled bearer , priority 0 [ 91.466072][ T6274] tipc: Disabling bearer [ 91.648044][ T6306] netlink: 160 bytes leftover after parsing attributes in process `syz.4.88'. [ 92.014272][ T6329] unsupported nlmsg_type 40 [ 92.120930][ T6339] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 92.145243][ T30] audit: type=1800 audit(1757979821.658:2): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="memory.events" dev="tmpfs" ino=137 res=0 errno=0 [ 92.205376][ T30] audit: type=1804 audit(1757979821.668:3): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.98" name="/newroot/23/memory.events" dev="tmpfs" ino=137 res=1 errno=0 [ 92.253050][ T6346] tipc: Enabled bearer , priority 13 [ 92.271472][ T6347] vxcan1: tx address claim with dlc 0 [ 92.462444][ T6370] netlink: 72 bytes leftover after parsing attributes in process `syz.4.106'. [ 92.489490][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 92.560859][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 92.587060][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.108'. [ 92.618412][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.108'. [ 92.656273][ T6374] netlink: 'syz.4.109': attribute type 11 has an invalid length. [ 92.931597][ T6393] veth1_to_bond: entered allmulticast mode [ 93.018593][ T6393] bond0: (slave bond_slave_1): Releasing backup interface [ 93.092127][ T6393] veth1_to_bond (unregistering): left allmulticast mode [ 93.141237][ T5905] IPVS: starting estimator thread 0... [ 93.200761][ T6405] netlink: 'syz.4.120': attribute type 3 has an invalid length. [ 93.254955][ T6410] IPVS: using max 38 ests per chain, 91200 per kthread [ 93.319012][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.366472][ T5905] tipc: Node number set to 3436572609 [ 93.722609][ T6443] netlink: 'syz.3.127': attribute type 27 has an invalid length. [ 93.730712][ T6443] netlink: 'syz.3.127': attribute type 4 has an invalid length. [ 93.755119][ T6449] netlink: 'syz.0.128': attribute type 64 has an invalid length. [ 93.887897][ T6454] netlink: 'syz.2.132': attribute type 16 has an invalid length. [ 94.048645][ T6466] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 94.232989][ T6474] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 94.286973][ T6478] netlink: 'syz.2.139': attribute type 3 has an invalid length. [ 94.441517][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.487584][ T6480] trusted_key: syz.0.140 sent an empty control message without MSG_MORE. [ 94.680185][ T6498] Bluetooth: MGMT ver 1.23 [ 94.875134][ T5869] Bluetooth: hci4: command tx timeout [ 94.881692][ T6510] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 95.098560][ T6517] gretap1: entered promiscuous mode [ 95.148407][ T6517] bond1: (slave gretap1): making interface the new active one [ 95.169028][ T6517] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 95.179006][ T6525] bridge0: port 3(team0) entered blocking state [ 95.190469][ T6525] bridge0: port 3(team0) entered disabled state [ 95.230821][ T6525] team0: entered allmulticast mode [ 95.238137][ T6525] team_slave_0: entered allmulticast mode [ 95.253820][ T6525] team_slave_1: entered allmulticast mode [ 95.288618][ T6525] team0: entered promiscuous mode [ 95.303486][ T6525] team_slave_0: entered promiscuous mode [ 95.323979][ T6525] team_slave_1: entered promiscuous mode [ 95.331170][ T6525] bridge0: port 3(team0) entered blocking state [ 95.337688][ T6525] bridge0: port 3(team0) entered forwarding state [ 95.565352][ T6533] __nla_validate_parse: 13 callbacks suppressed [ 95.565369][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 95.826626][ T6551] netlink: 'syz.4.159': attribute type 11 has an invalid length. [ 96.028056][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 96.179750][ T6562] IPVS: set_ctl: invalid protocol: 51 172.20.20.41:20004 [ 96.211782][ T6562] openvswitch: netlink: Message has 4 unknown bytes. [ 96.242792][ T6562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.387521][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.429934][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.439921][ T6564] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 96.446225][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 96.644090][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 96.658537][ T6582] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.733149][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 97.959082][ T6647] syzkaller1: entered promiscuous mode [ 97.983676][ T6647] syzkaller1: entered allmulticast mode [ 98.130086][ T6658] validate_nla: 2 callbacks suppressed [ 98.130105][ T6658] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 98.172252][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 98.316431][ T6665] vlan1: mtu less than device minimum [ 98.359451][ T6669] IPVS: set_ctl: invalid protocol: 12 172.20.20.11:21 [ 98.370771][ T6670] IPVS: set_ctl: invalid protocol: 12 172.20.20.11:21 [ 99.697734][ T6709] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 99.843517][ T6723] netlink: 256 bytes leftover after parsing attributes in process `syz.2.208'. [ 99.901889][ T6723] netlink: 'syz.2.208': attribute type 9 has an invalid length. [ 100.021456][ T6737] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 100.036794][ T6730] team0: Port device team_slave_1 removed [ 100.058278][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 100.067626][ T6737] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.229561][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 100.461379][ T6753] netlink: 84 bytes leftover after parsing attributes in process `syz.2.219'. [ 100.530364][ T6755] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 100.538454][ T6755] netlink: 'syz.3.220': attribute type 2 has an invalid length. [ 100.627534][ T6767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.690247][ T6773] lo: entered promiscuous mode [ 100.707768][ T6773] tunl0: entered promiscuous mode [ 100.716489][ T6773] gre0: entered promiscuous mode [ 100.730963][ T6773] gretap0: entered promiscuous mode [ 100.748575][ T6773] erspan0: entered promiscuous mode [ 100.767220][ T6773] ip_vti0: entered promiscuous mode [ 101.501912][ T6790] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 101.542425][ T6790] bond1: (slave gretap1): making interface the new active one [ 101.558354][ T6790] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.607507][ T6794] tipc: Started in network mode [ 101.629456][ T6794] tipc: Node identity e2287902e263, cluster identity 4711 [ 101.640015][ T6794] tipc: Enabled bearer , priority 0 [ 101.701948][ T6801] syzkaller0: entered promiscuous mode [ 101.710197][ T6801] syzkaller0: entered allmulticast mode [ 101.716622][ T6801] tipc: Resetting bearer [ 101.825579][ T6811] __nla_validate_parse: 1 callbacks suppressed [ 101.825598][ T6811] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.237'. [ 101.949783][ T6818] batman_adv: batadv0: Adding interface: dummy0 [ 101.956313][ T6818] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.989700][ T6818] batman_adv: batadv0: Interface activated: dummy0 [ 102.194192][ T6828] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 102.220667][ T12] tipc: Resetting bearer [ 102.287769][ T6828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.299918][ T6830] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 102.328277][ T6838] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.245'. [ 102.338303][ T6833] bond2: (slave geneve2): making interface the new active one [ 102.346331][ T1152] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 102.383485][ T6833] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 102.392948][ T6789] tipc: Resetting bearer [ 102.676207][ T24] tipc: Node number set to 4946178 [ 103.478366][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 103.879396][ T6789] tipc: Disabling bearer [ 103.908359][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 103.987536][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.989250][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 104.033701][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.071181][ T2990] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.106742][ T2990] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.136013][ T6877] netlink: 'syz.0.256': attribute type 9 has an invalid length. [ 104.266573][ T6884] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.260'. [ 104.555501][ T6899] syzkaller1: entered promiscuous mode [ 104.573414][ T6899] syzkaller1: entered allmulticast mode [ 104.582448][ T6901] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 104.627261][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.635599][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.665246][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.672499][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.680121][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.687348][ T6901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.700624][ T6901] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.762171][ T6904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 104.820097][ T6904] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 104.852255][ T6904] gretap1: entered promiscuous mode [ 104.860983][ T6904] gretap1: entered allmulticast mode [ 105.083721][ T6923] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 105.132407][ T6925] Illegal XDP return value 1882107906 on prog (id 53) dev N/A, expect packet loss! [ 105.274530][ T6947] block nbd2: not configured, cannot reconfigure [ 105.786007][ T6923] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 106.605319][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032bfcc00: rx timeout, send abort [ 106.622075][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032bfc800: rx timeout, send abort [ 106.630644][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032bfcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.645052][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032bfc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.700817][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 108.795460][ T6974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.989564][ T7039] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'. [ 109.162671][ T6974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.212139][ T7047] openvswitch: netlink: Message has 4 unknown bytes. [ 109.219206][ T7047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.352040][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.368836][ T6974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.380885][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.389248][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.392576][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 109.410976][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.430305][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.501757][ T6974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.587724][ T7073] blkio.reset_stats is deprecated [ 109.747012][ T6974] team0: left allmulticast mode [ 109.752361][ T6974] team_slave_0: left allmulticast mode [ 109.758879][ T6974] team_slave_1: left allmulticast mode [ 109.772456][ T6974] team0: left promiscuous mode [ 109.779160][ T6974] team_slave_0: left promiscuous mode [ 109.785898][ T6974] team_slave_1: left promiscuous mode [ 109.792856][ T6974] bridge0: port 3(team0) entered disabled state [ 109.803041][ T6974] bridge_slave_1: left allmulticast mode [ 109.811446][ T6974] bridge_slave_1: left promiscuous mode [ 109.817369][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.829262][ T6974] bridge_slave_0: left allmulticast mode [ 109.836535][ T6974] bridge_slave_0: left promiscuous mode [ 109.843614][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.051075][ T6974] bond1 (unregistering): (slave gretap1): Releasing active interface [ 110.351133][ T7090] netlink: 144 bytes leftover after parsing attributes in process `syz.2.305'. [ 110.396301][ T6974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.412618][ T6974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.426863][ T6974] bond0 (unregistering): Released all slaves [ 110.441975][ T6974] bond1 (unregistering): Released all slaves [ 110.472000][ T7092] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 110.633980][ T6974] tipc: Disabling bearer [ 110.652680][ T6974] tipc: Left network mode [ 110.660834][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 110.768494][ T7048] chnl_net:caif_netlink_parms(): no params data found [ 110.782568][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 110.791417][ T7111] netlink: 788 bytes leftover after parsing attributes in process `syz.1.310'. [ 111.165365][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 111.355230][ T7124] syzkaller1: entered promiscuous mode [ 111.361880][ T7124] syzkaller1: entered allmulticast mode [ 111.472751][ T6974] hsr_slave_0: left promiscuous mode [ 111.497840][ T6974] hsr_slave_1: left promiscuous mode [ 111.509031][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.516687][ T5869] Bluetooth: hci3: command tx timeout [ 111.522650][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.532056][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.539778][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.547782][ T6974] batman_adv: batadv0: Interface deactivated: dummy0 [ 111.554551][ T6974] batman_adv: batadv0: Removing interface: dummy0 [ 111.592792][ T6974] veth1_macvtap: left promiscuous mode [ 111.604370][ T6974] veth0_macvtap: left promiscuous mode [ 111.615101][ T6974] veth1_vlan: left promiscuous mode [ 111.620757][ T6974] veth0_vlan: left promiscuous mode [ 112.091276][ T6974] team0 (unregistering): Port device team_slave_1 removed [ 112.129487][ T6974] team0 (unregistering): Port device team_slave_0 removed [ 112.508880][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.517037][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.525199][ T7048] bridge_slave_0: entered allmulticast mode [ 112.532348][ T7048] bridge_slave_0: entered promiscuous mode [ 112.543925][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.551237][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.563225][ T7048] bridge_slave_1: entered allmulticast mode [ 112.570692][ T7048] bridge_slave_1: entered promiscuous mode [ 112.708000][ T7163] Bluetooth: MGMT ver 1.23 [ 112.781466][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.809732][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.878974][ T7165] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 112.945221][ T7048] team0: Port device team_slave_0 added [ 112.967078][ T7048] team0: Port device team_slave_1 added [ 113.096940][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.112626][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.142007][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.162582][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.172704][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.205196][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.220335][ T7181] : renamed from hsr0 (while UP) [ 113.250817][ T6974] IPVS: stop unused estimator thread 0... [ 113.372491][ T7048] hsr_slave_0: entered promiscuous mode [ 113.398356][ T7048] hsr_slave_1: entered promiscuous mode [ 113.408205][ T7048] debugfs: 'hsr0' already exists in 'hsr' [ 113.417042][ T7048] Cannot create hsr debugfs directory [ 113.586682][ T7208] netlink: 556 bytes leftover after parsing attributes in process `syz.2.334'. [ 113.605048][ T5869] Bluetooth: hci3: command tx timeout [ 113.747902][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 113.860486][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 113.927977][ T7218] netlink: 260 bytes leftover after parsing attributes in process `syz.3.338'. [ 113.932729][ T7234] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 114.031606][ T7236] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 114.045826][ T7236] bond3: (slave vcan1): Error -95 calling set_mac_address [ 114.063093][ T7234] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.179751][ T7048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.216703][ T7048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.253853][ T7048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.272375][ T7254] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 114.361915][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.369301][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.461490][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.477238][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.542753][ T7250] macsec0: left promiscuous mode [ 114.588650][ T7048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.643478][ T6974] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.685315][ T6974] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.703116][ T6974] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.748554][ T6974] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.938437][ T7285] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 114.952686][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.014958][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.060068][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.067286][ T6972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.098947][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.106189][ T6972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.674801][ T5869] Bluetooth: hci3: command tx timeout [ 115.745922][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.848290][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.098175][ T7341] sctp: [Deprecated]: syz.3.363 (pid 7341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.098175][ T7341] Use struct sctp_sack_info instead [ 116.128444][ T7341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.229410][ T7349] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 116.476881][ T7358] bridge_slave_0: left allmulticast mode [ 116.505659][ T7358] bridge_slave_0: left promiscuous mode [ 116.520256][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.543122][ T7358] bridge_slave_1: left allmulticast mode [ 116.552771][ T7358] bridge_slave_1: left promiscuous mode [ 116.567318][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.594382][ T7358] bond0: (slave bond_slave_0): Releasing backup interface [ 116.619183][ T7358] bond0: (slave bond_slave_1): Releasing backup interface [ 116.641141][ T7358] team0: Port device team_slave_0 removed [ 116.649266][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.657981][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.667378][ T7376] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 116.679263][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.690622][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.720041][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 116.729820][ T7358] bond1: (slave gretap1): Releasing active interface [ 116.755657][ T7358] bond2: (slave geneve2): Releasing active interface [ 116.886965][ T7380] delete_channel: no stack [ 116.909831][ T7380] delete_channel: no stack [ 116.916322][ T7380] delete_channel: no stack [ 116.920963][ T7380] delete_channel: no stack [ 116.932584][ T7380] delete_channel: no stack [ 116.939419][ T7380] delete_channel: no stack [ 116.943135][ T7376] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.948967][ T7380] delete_channel: no stack [ 116.960282][ T7387] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 116.962748][ T7380] delete_channel: no stack [ 116.969402][ T5869] Bluetooth: hci0: command 0x0c20 tx timeout [ 116.980590][ T7380] delete_channel: no stack [ 117.007655][ T7380] delete_channel: no stack [ 117.012843][ T7380] delete_channel: no stack [ 117.018365][ T7380] delete_channel: no stack [ 117.023149][ T7380] delete_channel: no stack [ 117.029951][ T7380] delete_channel: no stack [ 117.035811][ T7380] delete_channel: no stack [ 117.051852][ T7380] delete_channel: no stack [ 117.057259][ T7389] tipc: Enabled bearer , priority 0 [ 117.064199][ T7380] delete_channel: no stack [ 117.074453][ T7380] delete_channel: no stack [ 117.085374][ T7380] delete_channel: no stack [ 117.090040][ T7380] delete_channel: no stack [ 117.100031][ T7380] delete_channel: no stack [ 117.110146][ T7380] delete_channel: no stack [ 117.116238][ T7389] syzkaller0: entered promiscuous mode [ 117.124672][ T7380] delete_channel: no stack [ 117.129648][ T7389] syzkaller0: entered allmulticast mode [ 117.143107][ T7380] delete_channel: no stack [ 117.153082][ T7048] veth0_vlan: entered promiscuous mode [ 117.163457][ T7380] delete_channel: no stack [ 117.172766][ T7388] tipc: Resetting bearer [ 117.185197][ T7380] delete_channel: no stack [ 117.189910][ T7380] delete_channel: no stack [ 117.201683][ T7380] delete_channel: no stack [ 117.232329][ T7388] tipc: Disabling bearer [ 117.289614][ T7048] veth1_vlan: entered promiscuous mode [ 117.328793][ T7048] veth0_macvtap: entered promiscuous mode [ 117.339852][ T7048] veth1_macvtap: entered promiscuous mode [ 117.378581][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.419869][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.507820][ T6966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.554792][ T6966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.617963][ T7416] netlink: 'syz.0.386': attribute type 8 has an invalid length. [ 117.633792][ T6966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.660023][ T6966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.709091][ T7418] ieee802154 phy1 wpan1: encryption failed: -22 [ 117.759173][ T5869] Bluetooth: hci3: command tx timeout [ 117.957675][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.978401][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.989040][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 118.069010][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.091498][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.163716][ T7441] tipc: Enabled bearer , priority 0 [ 118.196122][ T7441] syzkaller0: entered promiscuous mode [ 118.206266][ T7441] syzkaller0: entered allmulticast mode [ 118.210925][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 118.267410][ T7441] tipc: Resetting bearer [ 118.281133][ T7440] tipc: Resetting bearer [ 118.304342][ T7440] tipc: Disabling bearer [ 118.355320][ T7445] wg1: entered promiscuous mode [ 118.360363][ T7445] wg1: entered allmulticast mode [ 118.800729][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 118.810893][ T7476] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 118.819228][ T7476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.830766][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.402'. [ 118.941921][ T7479] openvswitch: netlink: Unknown key attributes 2 [ 118.952240][ T7479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.405'. [ 118.962895][ T7486] netlink: 'syz.3.406': attribute type 33 has an invalid length. [ 118.986488][ T7486] netlink: 152 bytes leftover after parsing attributes in process `syz.3.406'. [ 119.102971][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.411'. [ 119.278360][ T7509] openvswitch: netlink: Multiple metadata blocks provided [ 119.292493][ T7509] netlink: 36 bytes leftover after parsing attributes in process `syz.5.414'. [ 119.381015][ T7506] nbd: device at index 1 is going down [ 119.541207][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 119.720318][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 119.742253][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.423'. [ 119.763326][ T7527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.800883][ T7532] bridge_slave_1: left allmulticast mode [ 119.806908][ T7532] bridge_slave_1: left promiscuous mode [ 119.812794][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.827583][ T7532] bridge_slave_0: left allmulticast mode [ 119.833339][ T7532] bridge_slave_0: left promiscuous mode [ 119.839952][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.922974][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 119.984799][ T7527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.000605][ T7543] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 120.206510][ T7527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.244865][ T7551] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 120.278317][ T7554] bond0: (slave bridge0): Releasing backup interface [ 120.297137][ T7554] bridge_slave_0: left allmulticast mode [ 120.302823][ T7554] bridge_slave_0: left promiscuous mode [ 120.336942][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.360019][ T7554] bridge_slave_1: left allmulticast mode [ 120.382466][ T7568] Bluetooth: MGMT ver 1.23 [ 120.388018][ T7554] bridge_slave_1: left promiscuous mode [ 120.410651][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.430556][ T7554] bond0: (slave bond_slave_0): Releasing backup interface [ 120.446147][ T7554] team0: Port device team_slave_0 removed [ 120.458535][ T7554] team0: Port device team_slave_1 removed [ 120.465231][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.478548][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.488257][ T6961] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.509492][ T7527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.527663][ T6960] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.539224][ T6960] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.565833][ T6960] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.763056][ T7581] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 120.763980][ T6964] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.842893][ T7585] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 120.864968][ T6960] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.966474][ T1110] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.993991][ T3011] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.009795][ T7592] FAULT_INJECTION: forcing a failure. [ 121.009795][ T7592] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.041310][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.1.438 Not tainted syzkaller #0 PREEMPT(full) [ 121.041337][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.041355][ T7592] Call Trace: [ 121.041362][ T7592] [ 121.041370][ T7592] dump_stack_lvl+0x189/0x250 [ 121.041402][ T7592] ? __pfx____ratelimit+0x10/0x10 [ 121.041422][ T7592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.041444][ T7592] ? __pfx__printk+0x10/0x10 [ 121.041470][ T7592] ? __might_fault+0xb0/0x130 [ 121.041511][ T7592] should_fail_ex+0x414/0x560 [ 121.041545][ T7592] _copy_from_user+0x2d/0xb0 [ 121.041571][ T7592] ___sys_sendmsg+0x158/0x2a0 [ 121.041598][ T7592] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.041654][ T7592] ? __fget_files+0x2a/0x420 [ 121.041668][ T7592] ? __fget_files+0x3a0/0x420 [ 121.041693][ T7592] __x64_sys_sendmsg+0x19b/0x260 [ 121.041720][ T7592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.041754][ T7592] ? __pfx_ksys_write+0x10/0x10 [ 121.041777][ T7592] ? rcu_is_watching+0x15/0xb0 [ 121.041802][ T7592] ? do_syscall_64+0xbe/0x3b0 [ 121.041827][ T7592] do_syscall_64+0xfa/0x3b0 [ 121.041847][ T7592] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.041865][ T7592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.041890][ T7592] ? clear_bhb_loop+0x60/0xb0 [ 121.041914][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.041932][ T7592] RIP: 0033:0x7f8d48f8eba9 [ 121.041952][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.041966][ T7592] RSP: 002b:00007f8d49d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.041989][ T7592] RAX: ffffffffffffffda RBX: 00007f8d491d5fa0 RCX: 00007f8d48f8eba9 [ 121.042003][ T7592] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 121.042013][ T7592] RBP: 00007f8d49d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.042024][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.042035][ T7592] R13: 00007f8d491d6038 R14: 00007f8d491d5fa0 R15: 00007ffc10c623f8 [ 121.042064][ T7592] [ 121.290731][ T7589] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 121.431142][ T7605] bond5 (unregistering): Released all slaves [ 121.678730][ T7615] IPVS: set_ctl: invalid protocol: 60 172.30.0.6:20002 [ 121.944009][ T7634] netlink: 'syz.3.451': attribute type 21 has an invalid length. [ 122.053385][ T7639] FAULT_INJECTION: forcing a failure. [ 122.053385][ T7639] name failslab, interval 1, probability 0, space 0, times 1 [ 122.071749][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: syz.0.453 Not tainted syzkaller #0 PREEMPT(full) [ 122.071774][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.071785][ T7639] Call Trace: [ 122.071793][ T7639] [ 122.071802][ T7639] dump_stack_lvl+0x189/0x250 [ 122.071830][ T7639] ? __pfx____ratelimit+0x10/0x10 [ 122.071851][ T7639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.071874][ T7639] ? __pfx__printk+0x10/0x10 [ 122.071907][ T7639] ? __pfx___might_resched+0x10/0x10 [ 122.071930][ T7639] should_fail_ex+0x414/0x560 [ 122.071964][ T7639] should_failslab+0xa8/0x100 [ 122.071994][ T7639] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.072022][ T7639] ? __alloc_skb+0x112/0x2d0 [ 122.072054][ T7639] __alloc_skb+0x112/0x2d0 [ 122.072078][ T7639] netlink_sendmsg+0x5c6/0xb30 [ 122.072107][ T7639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.072134][ T7639] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.072157][ T7639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.072178][ T7639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.072200][ T7639] __sock_sendmsg+0x21c/0x270 [ 122.072233][ T7639] ____sys_sendmsg+0x505/0x830 [ 122.072263][ T7639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.072297][ T7639] ? import_iovec+0x74/0xa0 [ 122.072327][ T7639] ___sys_sendmsg+0x21f/0x2a0 [ 122.072354][ T7639] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.072416][ T7639] ? __fget_files+0x2a/0x420 [ 122.072432][ T7639] ? __fget_files+0x3a0/0x420 [ 122.072460][ T7639] __x64_sys_sendmsg+0x19b/0x260 [ 122.072488][ T7639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.072523][ T7639] ? __pfx_ksys_write+0x10/0x10 [ 122.072546][ T7639] ? rcu_is_watching+0x15/0xb0 [ 122.072572][ T7639] ? do_syscall_64+0xbe/0x3b0 [ 122.072597][ T7639] do_syscall_64+0xfa/0x3b0 [ 122.072617][ T7639] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.072636][ T7639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.072656][ T7639] ? clear_bhb_loop+0x60/0xb0 [ 122.072679][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.072698][ T7639] RIP: 0033:0x7f3cba58eba9 [ 122.072716][ T7639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.072732][ T7639] RSP: 002b:00007f3cb87f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.072753][ T7639] RAX: ffffffffffffffda RBX: 00007f3cba7d5fa0 RCX: 00007f3cba58eba9 [ 122.072767][ T7639] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 122.072780][ T7639] RBP: 00007f3cb87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.072791][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.072803][ T7639] R13: 00007f3cba7d6038 R14: 00007f3cba7d5fa0 R15: 00007fffc642dc08 [ 122.072834][ T7639] [ 122.095860][ T7644] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 122.331779][ T7650] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 122.940992][ T7688] veth0_to_team: mtu less than device minimum [ 122.950416][ T7690] netlink: 'syz.5.465': attribute type 11 has an invalid length. [ 123.262017][ T7714] netlink: 'syz.5.468': attribute type 3 has an invalid length. [ 123.306391][ T7714] netlink: 'syz.5.468': attribute type 3 has an invalid length. [ 123.744916][ T7741] vlan2: entered allmulticast mode [ 123.759366][ T7741] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 123.882650][ T7753] raw_sendmsg: syz.0.478 forgot to set AF_INET. Fix it! [ 124.073410][ T7763] team0: Device gtp0 is up. Set it down before adding it as a team port [ 124.191715][ T7768] netlink: 'syz.5.483': attribute type 13 has an invalid length. [ 124.200172][ T7768] __nla_validate_parse: 10 callbacks suppressed [ 124.200187][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.483'. [ 124.244947][ T7768] netlink: 'syz.5.483': attribute type 13 has an invalid length. [ 124.256951][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.483'. [ 124.294831][ T6961] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.364762][ T7784] netlink: 'syz.1.488': attribute type 39 has an invalid length. [ 124.421611][ T7790] netlink: 'syz.1.488': attribute type 39 has an invalid length. [ 124.437687][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 124.544901][ T7795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.563474][ T6961] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.579296][ T6961] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.645821][ T6961] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.696790][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.494'. [ 124.973713][ T7811] netlink: 'syz.1.497': attribute type 8 has an invalid length. [ 124.974343][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.5.498'. [ 125.080485][ T7818] netlink: 'syz.2.499': attribute type 12 has an invalid length. [ 125.261123][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 125.306297][ T7830] netlink: 'syz.2.503': attribute type 4 has an invalid length. [ 125.380075][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 125.400161][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 125.557439][ T7854] netlink: 'syz.3.509': attribute type 10 has an invalid length. [ 125.613332][ T7854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.663093][ T3011] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.680796][ T3011] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.719321][ T3011] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.739947][ T3011] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.771696][ T7861] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 125.795800][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.512'. [ 125.828401][ T7861] dummy0: entered promiscuous mode [ 125.870861][ T7861] bridge0: port 1(dummy0) entered blocking state [ 125.882095][ T7861] bridge0: port 1(dummy0) entered disabled state [ 125.896961][ T7861] dummy0: entered allmulticast mode [ 125.909227][ T7861] bridge0: port 1(dummy0) entered blocking state [ 125.915844][ T7861] bridge0: port 1(dummy0) entered forwarding state [ 126.013225][ T7870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.086738][ T7871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.289737][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 126.651975][ T7903] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 126.715912][ T7903] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.727843][ T7903] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 126.770960][ T7910] gretap2: entered promiscuous mode [ 126.780972][ T7910] bond1: (slave gretap2): making interface the new active one [ 126.790731][ T7910] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 126.841913][ T7903] macvlan2: entered promiscuous mode [ 126.849280][ T7903] macvlan2: entered allmulticast mode [ 126.860719][ T7903] bond1: entered promiscuous mode [ 126.868053][ T7903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.888503][ T7903] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 126.908563][ T7903] bond1: left promiscuous mode [ 127.893902][ T7973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.324743][ T7977] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 128.743339][ T8016] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 129.490633][ T8051] "syz.5.559" (8051) uses obsolete ecb(arc4) skcipher [ 129.634494][ T8068] __nla_validate_parse: 10 callbacks suppressed [ 129.634513][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 130.001570][ T8092] tipc: Started in network mode [ 130.023254][ T8092] tipc: Node identity ae679c0bb247, cluster identity 4711 [ 130.036512][ T8092] tipc: Enabled bearer , priority 0 [ 130.048849][ T8092] syzkaller0: entered promiscuous mode [ 130.054724][ T8092] syzkaller0: entered allmulticast mode [ 130.122963][ T8091] tipc: Resetting bearer [ 130.177307][ T8091] tipc: Disabling bearer [ 130.253147][ T8107] validate_nla: 3 callbacks suppressed [ 130.253167][ T8107] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 130.312126][ T8107] bond2: (slave geneve3): making interface the new active one [ 130.321432][ T8107] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 130.327014][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 130.341511][ T6966] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.358783][ T6966] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.376396][ T8112] ip6gre1: entered allmulticast mode [ 130.384160][ T6966] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.404442][ T6966] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.450253][ T8114] tipc: New replicast peer: 255.255.255.255 [ 130.504427][ T8114] tipc: Enabled bearer , priority 10 [ 130.557823][ T8121] delete_channel: no stack [ 130.658699][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.584'. [ 130.722958][ T8129] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 130.778273][ T8125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.858718][ T8125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.263901][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 131.503675][ T5938] tipc: Node number set to 471899147 [ 131.519260][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.596'. [ 131.997772][ T8201] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 132.090049][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 132.118871][ T8201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.128737][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 132.160905][ T8217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'. [ 132.278248][ T8219] netlink: 'syz.3.609': attribute type 11 has an invalid length. [ 132.299511][ T8219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.609'. [ 132.392781][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 132.411375][ T8211] bond3 (unregistering): Released all slaves [ 132.629852][ T8232] netlink: 'syz.2.613': attribute type 17 has an invalid length. [ 132.760093][ T8252] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 132.863097][ T8257] netlink: 'syz.2.619': attribute type 14 has an invalid length. [ 132.960009][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220154][ T8278] netlink: 'syz.3.627': attribute type 3 has an invalid length. [ 133.356894][ T8285] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 133.391213][ T8289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.397913][ T8289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.756088][ T8308] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 133.773699][ T8308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.903351][ T8320] netlink: 'syz.0.641': attribute type 3 has an invalid length. [ 133.966001][ T8317] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 134.350815][ T8343] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 134.561172][ T8351] bond5: (slave bridge2): making interface the new active one [ 134.582444][ T8351] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 134.646699][ T8362] __nla_validate_parse: 22 callbacks suppressed [ 134.646717][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 134.691055][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 134.730574][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 135.059518][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 135.170629][ T8396] netlink: 100 bytes leftover after parsing attributes in process `syz.3.660'. [ 135.389268][ T8360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.395656][ T8360] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 135.478254][ T8360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.493713][ T8360] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 135.649876][ T8360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.664979][ T8360] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.130923][ T8448] netlink: 84 bytes leftover after parsing attributes in process `syz.0.673'. [ 136.264587][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.675'. [ 137.673812][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.599288][ T8360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.615275][ T8360] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 138.706414][ T8457] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 138.738126][ T8489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 138.753486][ T8457] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 138.829248][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 138.997861][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 139.136631][ T8494] netlink: 'syz.5.678': attribute type 1 has an invalid length. [ 139.334111][ T8360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.340055][ T8360] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 139.769108][ T8546] 8021q: VLANs not supported on lo [ 139.797423][ T8548] __nla_validate_parse: 2 callbacks suppressed [ 139.797441][ T8548] netlink: 160 bytes leftover after parsing attributes in process `syz.5.691'. [ 139.829957][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.691'. [ 139.902161][ T8548] netlink: 160 bytes leftover after parsing attributes in process `syz.5.691'. [ 139.919097][ T8554] openvswitch: netlink: EtherType 50a is less than min 600 [ 140.311275][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 140.395245][ T8582] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 140.493209][ T8586] pim6reg1: entered promiscuous mode [ 140.498892][ T8586] pim6reg1: entered allmulticast mode [ 140.838755][ T8607] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 140.910892][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.706'. [ 141.165518][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 141.369218][ T8642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.502066][ T8651] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 141.540086][ T8651] netlink: 232 bytes leftover after parsing attributes in process `syz.3.715'. [ 141.552528][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 141.584977][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 141.679176][ T8633] wg1: left promiscuous mode [ 142.017442][ T8633] xfrm1: left promiscuous mode [ 142.038649][ T8633] gretap1: left promiscuous mode [ 142.104277][ T8647] veth1_to_bond: entered allmulticast mode [ 142.173160][ T8657] bond0: (slave bond_slave_1): Releasing backup interface [ 142.216810][ T8657] veth1_to_bond (unregistering): left allmulticast mode [ 142.246326][ T6964] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.257296][ T6964] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.268192][ T6964] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.286395][ T6964] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.346306][ T6964] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.388747][ T6964] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.422651][ T6964] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.453778][ T6964] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.459984][ T8687] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.488490][ T8687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.571454][ T8693] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 142.617667][ T8697] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 142.821163][ T8711] netlink: 'syz.1.729': attribute type 10 has an invalid length. [ 142.849834][ T8711] veth0_vlan: entered allmulticast mode [ 142.944995][ T8711] veth0_vlan: left promiscuous mode [ 142.972881][ T8711] veth0_vlan: entered promiscuous mode [ 143.011043][ T8711] team0: Device veth0_vlan failed to register rx_handler [ 143.073758][ T8729] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 143.091778][ T8729] netlink: 228 bytes leftover after parsing attributes in process `syz.2.730'. [ 143.534097][ T8758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.873523][ T8839] netlink: 'syz.0.760': attribute type 21 has an invalid length. [ 144.892951][ T8840] __nla_validate_parse: 2 callbacks suppressed [ 144.892969][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 144.923779][ T8839] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.955395][ T8839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.963000][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 144.970348][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 144.977674][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 145.293421][ T8858] tipc: Started in network mode [ 145.326297][ T8858] tipc: Node identity aa361b419162, cluster identity 4711 [ 145.358769][ T8858] tipc: Enabled bearer , priority 0 [ 145.477270][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 145.478433][ T8868] syzkaller0: entered promiscuous mode [ 145.501906][ T8868] syzkaller0: entered allmulticast mode [ 145.512691][ T8868] tipc: Resetting bearer [ 145.635697][ T8855] tipc: Resetting bearer [ 146.355385][ T8677] tipc: Node number set to 995367745 [ 147.162345][ T8855] tipc: Disabling bearer [ 147.278087][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 147.473033][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 147.567010][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 147.886455][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.791'. [ 148.447858][ T8987] netlink: 72 bytes leftover after parsing attributes in process `syz.2.800'. [ 148.963480][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 149.025484][ T9021] syzkaller0: entered promiscuous mode [ 149.031532][ T9021] syzkaller0: entered allmulticast mode [ 149.382824][ T9052] netlink: 'syz.5.820': attribute type 1 has an invalid length. [ 149.561552][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.825'. [ 149.569076][ T9065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.826'. [ 150.201714][ T9102] bond0: (slave wlan1): Releasing backup interface [ 150.332004][ T9116] __nla_validate_parse: 2 callbacks suppressed [ 150.332025][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.840'. [ 150.378886][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.840'. [ 150.434458][ T9118] lo: left promiscuous mode [ 150.563529][ T8665] IPVS: starting estimator thread 0... [ 150.591418][ T9131] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 150.605105][ T9126] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:0 [ 150.614840][ T9129] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:0 [ 150.685008][ T9130] IPVS: using max 30 ests per chain, 72000 per kthread [ 150.713905][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.730293][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 150.761985][ T9135] bond0: (slave rose0): Enslaving as an active interface with an up link [ 150.956232][ T9154] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 150.977386][ T9154] netlink: 184 bytes leftover after parsing attributes in process `syz.3.852'. [ 151.004837][ T9154] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 151.097472][ T9164] syzkaller1: entered promiscuous mode [ 151.102989][ T9164] syzkaller1: entered allmulticast mode [ 151.292211][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 151.449390][ T9186] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 151.580998][ T9201] netlink: 68 bytes leftover after parsing attributes in process `syz.5.861'. [ 151.713047][ T9208] tipc: Enabled bearer , priority 0 [ 151.747653][ T9208] netlink: 'syz.2.862': attribute type 3 has an invalid length. [ 152.008586][ T9206] tipc: Disabling bearer [ 152.139434][ T9227] netlink: 284 bytes leftover after parsing attributes in process `syz.5.867'. [ 152.177489][ T9230] sit0: entered promiscuous mode [ 152.201625][ T9230] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 152.225642][ T9230] netlink: 1 bytes leftover after parsing attributes in process `syz.1.868'. [ 152.359207][ T9243] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 152.417971][ T9254] netlink: 'syz.5.872': attribute type 1 has an invalid length. [ 152.428211][ T9252] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 152.453817][ T9252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.873'. [ 152.537983][ T9265] netlink: 144 bytes leftover after parsing attributes in process `syz.3.874'. [ 152.608425][ T9257] bond2: (slave gretap1): making interface the new active one [ 152.641522][ T9257] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 153.586652][ T9328] tipc: Enabling of bearer rejected, failed to enable media [ 154.100730][ T9357] tipc: Enabled bearer , priority 0 [ 154.345412][ T9357] syzkaller0: entered promiscuous mode [ 154.351102][ T9357] syzkaller0: entered allmulticast mode [ 154.358739][ T9357] tipc: Resetting bearer [ 154.371782][ T9359] dummy0: left allmulticast mode [ 154.387451][ T9359] bridge0: port 1(dummy0) entered disabled state [ 154.403271][ T9359] batman_adv: batadv0: Adding interface: dummy0 [ 154.410495][ T9359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.439528][ T9359] batman_adv: batadv0: Interface activated: dummy0 [ 154.460421][ T9358] batadv0: mtu less than device minimum [ 154.461721][ T9377] netlink: 'syz.5.899': attribute type 1 has an invalid length. [ 154.470666][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.475244][ T9377] netlink: 'syz.5.899': attribute type 1 has an invalid length. [ 154.486007][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.504067][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.515981][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.528015][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.539863][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.551830][ T9358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.622802][ T9358] tipc: Resetting bearer [ 156.217339][ T9358] tipc: Disabling bearer [ 156.234665][ T9403] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 156.395578][ T9417] __nla_validate_parse: 6 callbacks suppressed [ 156.395597][ T9417] netlink: 44 bytes leftover after parsing attributes in process `syz.5.910'. [ 156.498246][ T9422] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 156.558439][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.589504][ T9433] netlink: 120 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.591389][ T9434] netlink: 80 bytes leftover after parsing attributes in process `syz.3.915'. [ 156.623113][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.660588][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.705521][ T9435] netlink: 120 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.736865][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 156.750195][ T9442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.917'. [ 156.785117][ T9442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.917'. [ 156.987027][ T9459] tipc: Enabling of bearer rejected, failed to enable media [ 157.149092][ T9470] syzkaller1: entered promiscuous mode [ 157.149689][ T9469] netlink: 'syz.0.925': attribute type 3 has an invalid length. [ 157.160624][ T9470] syzkaller1: entered allmulticast mode [ 157.419677][ T9486] macvlan2: entered allmulticast mode [ 157.465507][ T9486] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 157.573000][ T9498] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 158.503896][ T9536] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 158.548100][ T9533] ieee802154 phy1 wpan1: encryption failed: -90 [ 159.049232][ T9566] sctp: [Deprecated]: syz.0.952 (pid 9566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.049232][ T9566] Use struct sctp_sack_info instead [ 159.348785][ T9583] net_ratelimit: 12 callbacks suppressed [ 159.348804][ T9583] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 159.373776][ T9583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.324778][ T9641] openvswitch: netlink: Message has 4 unknown bytes. [ 160.383971][ T9646] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 160.513444][ T9655] syzkaller0: entered promiscuous mode [ 160.527614][ T9655] syzkaller0: entered allmulticast mode [ 161.022765][ T9681] sit0: entered promiscuous mode [ 161.032184][ T9681] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 161.121353][ T9685] tipc: Started in network mode [ 161.127613][ T9685] tipc: Node identity fe1c21786896, cluster identity 4711 [ 161.159217][ T9685] tipc: Enabled bearer , priority 0 [ 161.172573][ T9687] syzkaller1: entered promiscuous mode [ 161.181240][ T9687] syzkaller1: entered allmulticast mode [ 161.194482][ T9686] syzkaller0: entered promiscuous mode [ 161.200062][ T9686] syzkaller0: entered allmulticast mode [ 161.236398][ T9693] bond7: entered promiscuous mode [ 161.241464][ T9693] bond7: entered allmulticast mode [ 161.247126][ T9693] 8021q: adding VLAN 0 to HW filter on device bond7 [ 161.267643][ T9685] tipc: Resetting bearer [ 161.281235][ T9682] tipc: Resetting bearer [ 161.299614][ T9682] tipc: Disabling bearer [ 161.557646][ T9705] __nla_validate_parse: 13 callbacks suppressed [ 161.557665][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 161.628173][ T9705] IPVS: Error connecting to the multicast addr [ 161.856441][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.988'. [ 162.134561][ T9731] netlink: 260 bytes leftover after parsing attributes in process `syz.1.992'. [ 162.476117][ T9755] netlink: 108 bytes leftover after parsing attributes in process `syz.2.998'. [ 162.504114][ T9755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.675125][ T9764] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 162.955500][ T9796] bond0: (slave bridge0): Releasing backup interface [ 162.980919][ T9796] batman_adv: batadv0: Interface deactivated: dummy0 [ 162.997777][ T9796] dummy0: left promiscuous mode [ 163.009940][ T9796] batman_adv: batadv0: Removing interface: dummy0 [ 163.262479][ T9819] sctp: [Deprecated]: syz.0.1010 (pid 9819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.262479][ T9819] Use struct sctp_sack_info instead [ 163.319680][ T9790] syzkaller1: entered promiscuous mode [ 163.336040][ T9790] syzkaller1: entered allmulticast mode [ 163.387594][ T9822] TC_ACT_REPEAT abuse ? [ 163.392982][ T9822] TC_ACT_REPEAT abuse ? [ 163.398100][ T9822] TC_ACT_REPEAT abuse ? [ 163.403633][ T9822] TC_ACT_REPEAT abuse ? [ 163.408006][ T9822] TC_ACT_REPEAT abuse ? [ 163.646860][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 163.697203][ T9841] lo speed is unknown, defaulting to 1000 [ 163.707425][ T9841] lo speed is unknown, defaulting to 1000 [ 163.716308][ T9841] lo speed is unknown, defaulting to 1000 [ 163.863384][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1018'. [ 164.108228][ T9855] tipc: Started in network mode [ 164.116259][ T9855] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 164.133856][ T9855] tipc: Enabled bearer , priority 10 [ 164.167714][ T9855] tipc: Enabling of bearer rejected, already enabled [ 164.449287][ T9841] infiniband syz0: set active [ 164.456046][ T8675] lo speed is unknown, defaulting to 1000 [ 164.482727][ T9841] infiniband syz0: added lo [ 164.550479][ T9882] bridge3: entered promiscuous mode [ 164.556474][ T9882] bridge3: entered allmulticast mode [ 164.584755][ T9841] RDS/IB: syz0: added [ 164.589917][ T9841] smc: adding ib device syz0 with port count 1 [ 164.598667][ T9841] smc: ib device syz0 port 1 has pnetid [ 164.605893][ T9890] syzkaller1: entered promiscuous mode [ 164.621950][ T9890] syzkaller1: entered allmulticast mode [ 164.649118][ T8673] lo speed is unknown, defaulting to 1000 [ 164.659972][ T9841] lo speed is unknown, defaulting to 1000 [ 165.116726][ T9914] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 165.139594][ T9914] netlink: 'syz.2.1036': attribute type 2 has an invalid length. [ 165.151721][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 165.173122][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 165.184058][ T8665] tipc: Node number set to 10136234 [ 165.353214][ T9841] lo speed is unknown, defaulting to 1000 [ 165.626354][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1042'. [ 165.884716][ T9946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.892823][ T9946] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.902608][ T9946] net_ratelimit: 46 callbacks suppressed [ 165.902614][ T9946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.929057][ T9913] lo speed is unknown, defaulting to 1000 [ 166.187150][ T9841] lo speed is unknown, defaulting to 1000 [ 166.373980][ T9955] syzkaller0: entered promiscuous mode [ 166.379496][ T9955] syzkaller0: entered allmulticast mode [ 166.499793][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 166.781790][ T9841] lo speed is unknown, defaulting to 1000 [ 166.782553][ T9966] syz.0.1051 (9966) used obsolete PPPIOCDETACH ioctl [ 167.322156][ T9841] lo speed is unknown, defaulting to 1000 [ 167.568596][ T8675] IPVS: starting estimator thread 0... [ 167.685044][T10003] IPVS: using max 29 ests per chain, 69600 per kthread [ 167.921526][ T9841] lo speed is unknown, defaulting to 1000 [ 168.161444][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 168.170641][T10034] netlink: 'syz.2.1067': attribute type 23 has an invalid length. [ 168.331854][T10045] sctp: [Deprecated]: syz.0.1069 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.331854][T10045] Use struct sctp_sack_info instead [ 168.428628][T10045] sctp: [Deprecated]: syz.0.1069 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.428628][T10045] Use struct sctp_sack_info instead [ 168.566258][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 168.879317][ T8673] TC_ACT_REPEAT abuse ? [ 169.175231][T10074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1078'. [ 169.432194][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 169.590446][T10093] FAULT_INJECTION: forcing a failure. [ 169.590446][T10093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.624232][T10093] CPU: 1 UID: 0 PID: 10093 Comm: syz.2.1082 Not tainted syzkaller #0 PREEMPT(full) [ 169.624260][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.624272][T10093] Call Trace: [ 169.624279][T10093] [ 169.624288][T10093] dump_stack_lvl+0x189/0x250 [ 169.624317][T10093] ? __pfx____ratelimit+0x10/0x10 [ 169.624337][T10093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.624363][T10093] ? __pfx__printk+0x10/0x10 [ 169.624389][T10093] ? __might_fault+0xb0/0x130 [ 169.624427][T10093] should_fail_ex+0x414/0x560 [ 169.624460][T10093] _copy_to_iter+0x589/0x1790 [ 169.624498][T10093] ? __pfx__copy_to_iter+0x10/0x10 [ 169.624518][T10093] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 169.624548][T10093] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 169.624580][T10093] __skb_datagram_iter+0xf8/0x990 [ 169.624607][T10093] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 169.624642][T10093] skb_copy_datagram_iter+0xc5/0x230 [ 169.624672][T10093] netlink_recvmsg+0x2ab/0xa30 [ 169.624704][T10093] ? __pfx_netlink_recvmsg+0x10/0x10 [ 169.624729][T10093] ? __lock_acquire+0xab9/0xd20 [ 169.624756][T10093] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.624777][T10093] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 169.624797][T10093] ? security_socket_recvmsg+0x7e/0x2e0 [ 169.624820][T10093] ? __pfx_netlink_recvmsg+0x10/0x10 [ 169.624842][T10093] sock_recvmsg+0x22c/0x270 [ 169.624875][T10093] ____sys_recvmsg+0x1c9/0x460 [ 169.624909][T10093] ? __pfx_____sys_recvmsg+0x10/0x10 [ 169.624949][T10093] ? import_iovec+0x74/0xa0 [ 169.624976][T10093] ___sys_recvmsg+0x1b5/0x510 [ 169.625007][T10093] ? __pfx____sys_recvmsg+0x10/0x10 [ 169.625057][T10093] ? __fget_files+0x3a0/0x420 [ 169.625085][T10093] do_recvmmsg+0x307/0x770 [ 169.625120][T10093] ? __pfx_do_recvmmsg+0x10/0x10 [ 169.625157][T10093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.625203][T10093] __x64_sys_recvmmsg+0x190/0x240 [ 169.625232][T10093] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 169.625255][T10093] ? rcu_is_watching+0x15/0xb0 [ 169.625279][T10093] ? do_syscall_64+0xbe/0x3b0 [ 169.625304][T10093] do_syscall_64+0xfa/0x3b0 [ 169.625323][T10093] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.625342][T10093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.625361][T10093] ? clear_bhb_loop+0x60/0xb0 [ 169.625384][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.625402][T10093] RIP: 0033:0x7fc35998eba9 [ 169.625420][T10093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.625436][T10093] RSP: 002b:00007fc35a827038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 169.625456][T10093] RAX: ffffffffffffffda RBX: 00007fc359bd5fa0 RCX: 00007fc35998eba9 [ 169.625470][T10093] RDX: 0000000000000004 RSI: 0000200000001c00 RDI: 0000000000000003 [ 169.625482][T10093] RBP: 00007fc35a827090 R08: 0000000000000000 R09: 0000000000000000 [ 169.625494][T10093] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000001 [ 169.625505][T10093] R13: 00007fc359bd6038 R14: 00007fc359bd5fa0 R15: 00007ffe29eae398 [ 169.625536][T10093] [ 170.095186][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 170.099033][T10103] netlink: 'syz.0.1085': attribute type 11 has an invalid length. [ 170.231696][T10108] openvswitch: netlink: Tunnel attr 13 has unexpected len 12 expected 16 [ 170.558421][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'. [ 170.565001][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'. [ 178.394374][ T8675] TC_ACT_REPEAT abuse ? [ 178.398766][ T8673] TC_ACT_REPEAT abuse ? [ 180.962362][T10145] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 180.978334][ T8675] TC_ACT_REPEAT abuse ? [ 181.000191][T10145] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.036848][T10139] syzkaller1: entered promiscuous mode [ 181.049246][T10139] syzkaller1: entered allmulticast mode [ 181.148239][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 181.191710][T10155] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.345566][T10171] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1108'. [ 181.384903][T10171] netlink: 'syz.3.1108': attribute type 7 has an invalid length. [ 181.396238][T10167] sctp: [Deprecated]: syz.0.1106 (pid 10167) Use of int in maxseg socket option. [ 181.396238][T10167] Use struct sctp_assoc_value instead [ 181.449114][T10171] : entered promiscuous mode [ 181.475232][T10179] syzkaller1: entered promiscuous mode [ 181.495164][T10179] syzkaller1: entered allmulticast mode [ 181.855794][T10203] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 182.057469][T10216] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1120'. [ 182.063244][T10211] lo speed is unknown, defaulting to 1000 [ 182.451060][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'. [ 182.567577][T10232] TC_ACT_REPEAT abuse ? [ 183.468087][T10275] vlan0: entered allmulticast mode [ 183.486150][T10275] veth1: entered allmulticast mode [ 183.528425][T10272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1138'. [ 183.743535][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 183.778132][T10289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 183.884352][T10293] syzkaller1: entered promiscuous mode [ 183.903774][T10293] syzkaller1: entered allmulticast mode [ 184.038192][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.186257][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.794209][ C1] TC_ACT_REPEAT abuse ? [ 184.885852][T10346] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1156'. [ 184.984433][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 184.988218][T10355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1158'. [ 185.023360][T10355] tipc: Can't bind to reserved service type 1 [ 185.428408][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1167'. [ 185.885978][T10401] C: renamed from lo [ 185.909734][T10401] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.074761][ T24] TC_ACT_REPEAT abuse ? [ 186.187939][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 186.326876][T10422] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 186.339665][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 186.715299][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.727727][T10458] bridge_slave_0: entered promiscuous mode [ 186.833219][ T6964] tipc: Subscription rejected, illegal request [ 186.836980][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 186.929359][T10470] netlink: 'syz.1.1192': attribute type 19 has an invalid length. [ 186.994942][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'. [ 187.205155][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 187.228516][ T8677] IPVS: starting estimator thread 0... [ 187.238059][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 187.263166][T10492] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 187.324615][T10493] IPVS: using max 26 ests per chain, 62400 per kthread [ 187.351576][T10497] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 187.360974][T10497] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 187.406600][T10502] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 187.451003][T10502] bond3: entered promiscuous mode [ 187.581599][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 187.592227][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 187.662020][T10517] netlink: 'syz.1.1207': attribute type 30 has an invalid length. [ 187.703381][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 187.896943][T10530] syzkaller1: entered promiscuous mode [ 187.902460][T10530] syzkaller1: entered allmulticast mode [ 188.180091][T10547] netlink: 'syz.0.1216': attribute type 9 has an invalid length. [ 188.214141][T10550] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 188.262224][T10554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.756076][T10580] openvswitch: netlink: Unknown nsh attribute 0 [ 189.189697][T10614] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.260871][T10620] tipc: Enabled bearer , priority 0 [ 189.292413][T10620] syzkaller0: entered promiscuous mode [ 189.302370][T10620] syzkaller0: entered allmulticast mode [ 189.332935][T10620] tipc: Resetting bearer [ 189.341544][T10619] tipc: Resetting bearer [ 189.402616][T10619] tipc: Disabling bearer [ 189.523383][T10630] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 189.629988][T10636] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR [ 189.729214][T10645] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 190.030461][T10664] veth0_to_team: entered promiscuous mode [ 190.036816][T10664] veth0_to_team: entered allmulticast mode [ 190.171411][T10676] syzkaller1: entered promiscuous mode [ 190.179701][T10676] syzkaller1: entered allmulticast mode [ 190.265736][T10681] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 190.659593][T10706] netlink: 'syz.1.1263': attribute type 3 has an invalid length. [ 191.062804][T10730] tipc: MTU too low for tipc bearer [ 191.076992][T10731] tipc: MTU too low for tipc bearer [ 191.281255][T10745] __nla_validate_parse: 13 callbacks suppressed [ 191.281274][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1275'. [ 191.650185][T10763] bridge0: port 1(veth0_to_bridge) entered blocking state [ 191.659590][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 191.665699][T10763] bridge0: port 1(veth0_to_bridge) entered disabled state [ 191.677287][T10763] veth0_to_bridge: entered allmulticast mode [ 191.686123][T10763] veth0_to_bridge: entered promiscuous mode [ 191.695818][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.704075][T10765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.705611][T10763] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1279'. [ 191.725300][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.732801][T10765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.768473][T10763] syzkaller0: entered allmulticast mode [ 191.911791][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 191.962286][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'. [ 192.128573][T10784] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1286'. [ 192.198665][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 192.360985][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 192.424982][T10795] netlink: 'syz.2.1288': attribute type 10 has an invalid length. [ 192.515347][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 192.681949][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 192.807918][T10816] netlink: 'syz.1.1294': attribute type 6 has an invalid length. [ 193.442089][T10832] net_ratelimit: 1 callbacks suppressed [ 193.442103][T10832] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.909939][T10859] IPVS: length: 63 != 8 [ 194.183076][T10876] pimreg: entered allmulticast mode [ 194.328474][T10889] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 194.348004][T10889] team0: Device veth1_macvtap failed to register rx_handler [ 194.399899][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.456036][T10895] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 194.466328][T10895] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 194.541637][T10901] lo speed is unknown, defaulting to 1000 [ 195.346442][T10923] nbd0: detected capacity change from 0 to 127 [ 195.425793][T10932] openvswitch: netlink: Message has 8 unknown bytes. [ 195.674415][ T24] TC_ACT_REPEAT abuse ? [ 196.102228][ T5869] block nbd0: Receive control failed (result -32) [ 196.315445][ T1110] TC_ACT_REPEAT abuse ? [ 196.329043][T10974] __nla_validate_parse: 9 callbacks suppressed [ 196.329061][T10974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1340'. [ 196.389087][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'. [ 196.431678][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 196.448835][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 196.707969][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1346'. [ 196.828459][T11008] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 196.880092][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 196.885431][T11008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.021825][T11010] bond6 (unregistering): Released all slaves [ 197.241347][T11024] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 197.261210][T11024] team0: Port device dummy0 added [ 197.268943][T11024] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 197.278396][T11024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.300381][T11024] team0: Failed to send options change via netlink (err -105) [ 197.308819][T11024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.319590][T11024] team0: Port device dummy0 removed [ 197.328438][T11024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.486518][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 197.496499][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 197.565369][T11035] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 197.574230][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 197.940999][T11056] netlink: 'syz.2.1363': attribute type 7 has an invalid length. [ 200.958212][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 201.157234][T11100] tipc: Enabling of bearer rejected, failed to enable media [ 201.434412][ T6966] TC_ACT_REPEAT abuse ? [ 201.438759][ T6950] TC_ACT_REPEAT abuse ? [ 206.474233][ T6966] TC_ACT_REPEAT abuse ? [ 206.484648][ T6966] TC_ACT_REPEAT abuse ? [ 211.674532][ T6950] TC_ACT_REPEAT abuse ? [ 211.678832][ T1008] TC_ACT_REPEAT abuse ? [ 216.714480][ T6964] TC_ACT_REPEAT abuse ? [ 217.434587][ T6950] TC_ACT_REPEAT abuse ? [ 222.474309][ T6966] TC_ACT_REPEAT abuse ? [ 222.554948][ T6966] TC_ACT_REPEAT abuse ? [ 227.594862][ T1008] TC_ACT_REPEAT abuse ? [ 228.315207][ T1169] TC_ACT_REPEAT abuse ? [ 232.794523][ T1169] TC_ACT_REPEAT abuse ? [ 234.084555][ T1169] TC_ACT_REPEAT abuse ? [ 237.914336][ T6950] TC_ACT_REPEAT abuse ? [ 239.834482][ T1008] TC_ACT_REPEAT abuse ? [ 243.684348][ T6966] TC_ACT_REPEAT abuse ? [ 245.595638][ T24] TC_ACT_REPEAT abuse ? [ 245.599937][ T6950] TC_ACT_REPEAT abuse ? [ 249.434537][ T1008] TC_ACT_REPEAT abuse ? [ 251.364605][ T1008] TC_ACT_REPEAT abuse ? [ 255.194363][ T6950] TC_ACT_REPEAT abuse ? [ 255.837474][ C1] TC_ACT_REPEAT abuse ? [ 255.838418][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.124721][ T6950] TC_ACT_REPEAT abuse ? [ 260.325087][ T6966] TC_ACT_REPEAT abuse ? [ 260.964589][ T24] TC_ACT_REPEAT abuse ? [ 262.234757][ T1169] TC_ACT_REPEAT abuse ? [ 266.075764][ T6966] TC_ACT_REPEAT abuse ? [ 267.994226][ T1008] TC_ACT_REPEAT abuse ? [ 271.834792][ T6950] TC_ACT_REPEAT abuse ? [ 273.764529][ T1169] TC_ACT_REPEAT abuse ? [ 277.604417][ T1008] TC_ACT_REPEAT abuse ? [ 278.874199][ T6950] TC_ACT_REPEAT abuse ? [ 283.364505][ T1008] TC_ACT_REPEAT abuse ? [ 284.644307][ T6950] TC_ACT_REPEAT abuse ? [ 288.394012][ T6950] TC_ACT_REPEAT abuse ? [ 290.404415][ T6966] TC_ACT_REPEAT abuse ? [ 293.434607][ T6964] TC_ACT_REPEAT abuse ? [ 296.155009][ T6966] TC_ACT_REPEAT abuse ? [ 298.714606][ T6964] TC_ACT_REPEAT abuse ? [ 301.915151][ T6966] TC_ACT_REPEAT abuse ? [ 303.834463][ T6950] TC_ACT_REPEAT abuse ? [ 306.954479][ T6966] TC_ACT_REPEAT abuse ? [ 309.604935][ T6966] TC_ACT_REPEAT abuse ? [ 312.794139][ T1008] TC_ACT_REPEAT abuse ? [ 315.354258][ T6964] TC_ACT_REPEAT abuse ? [ 317.276974][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.554687][ T6950] TC_ACT_REPEAT abuse ? [ 321.114601][ T6966] TC_ACT_REPEAT abuse ? [ 324.314291][ T1008] TC_ACT_REPEAT abuse ? [ 326.884533][ T6950] TC_ACT_REPEAT abuse ? [ 330.084525][ T6966] TC_ACT_REPEAT abuse ? [ 331.914639][ T6964] TC_ACT_REPEAT abuse ? [ 335.194418][ T6950] TC_ACT_REPEAT abuse ? [ 337.114348][ T6950] TC_ACT_REPEAT abuse ? [ 339.043973][ T31] INFO: task kworker/1:9:8673 blocked for more than 143 seconds. [ 339.051729][ T31] Not tainted syzkaller #0 [ 339.057035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.065790][ T31] task:kworker/1:9 state:D stack:24616 pid:8673 tgid:8673 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 339.077878][ T31] Workqueue: events rfkill_sync_work [ 339.083186][ T31] Call Trace: [ 339.086570][ T31] [ 339.089509][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.094083][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.099654][ T31] ? __pfx___schedule+0x10/0x10 [ 339.104632][ T31] ? schedule+0x91/0x360 [ 339.109213][ T31] schedule+0x165/0x360 [ 339.113390][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.119012][ T31] __mutex_lock+0x7e6/0x1350 [ 339.123662][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.128446][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 339.153637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.163016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.199919][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 339.213592][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.219978][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 339.226285][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 339.231430][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 339.237649][ T31] rfkill_set_block+0x1d2/0x440 [ 339.242539][ T31] rfkill_sync_work+0x114/0x200 [ 339.248399][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 339.254468][ T31] process_scheduled_works+0xae1/0x17b0 [ 339.260068][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.266249][ T31] worker_thread+0x8a0/0xda0 [ 339.270966][ T31] kthread+0x70e/0x8a0 [ 339.275717][ T31] ? __pfx_worker_thread+0x10/0x10 [ 339.280863][ T31] ? __pfx_kthread+0x10/0x10 [ 339.285979][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.291199][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.296930][ T31] ? __pfx_kthread+0x10/0x10 [ 339.301545][ T31] ret_from_fork+0x436/0x7d0 [ 339.307724][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.312899][ T31] ? __switch_to_asm+0x39/0x70 [ 339.317927][ T31] ? __switch_to_asm+0x33/0x70 [ 339.322733][ T31] ? __pfx_kthread+0x10/0x10 [ 339.327436][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.332319][ T31] [ 339.335478][ T31] INFO: task kworker/1:11:8675 blocked for more than 143 seconds. [ 339.343282][ T31] Not tainted syzkaller #0 [ 339.348307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.357180][ T31] task:kworker/1:11 state:D stack:24712 pid:8675 tgid:8675 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 339.373044][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 339.380357][ T31] Call Trace: [ 339.384299][ T31] [ 339.387254][ T31] __schedule+0x1798/0x4cc0 [ 339.391771][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.397713][ T31] ? __pfx___schedule+0x10/0x10 [ 339.402587][ T31] ? schedule+0x91/0x360 [ 339.407317][ T31] schedule+0x165/0x360 [ 339.411488][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.417103][ T31] __mutex_lock+0x7e6/0x1350 [ 339.421756][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.426650][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 339.432923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.438450][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 339.444783][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 339.450517][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 339.457138][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 339.462857][ T31] process_scheduled_works+0xae1/0x17b0 [ 339.469025][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.475649][ T31] worker_thread+0x8a0/0xda0 [ 339.480278][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.486956][ T31] ? __kthread_parkme+0x7b/0x200 [ 339.491918][ T31] kthread+0x70e/0x8a0 [ 339.496523][ T31] ? __pfx_worker_thread+0x10/0x10 [ 339.501656][ T31] ? __pfx_kthread+0x10/0x10 [ 339.506847][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.512093][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.517802][ T31] ? __pfx_kthread+0x10/0x10 [ 339.522392][ T31] ret_from_fork+0x436/0x7d0 [ 339.527471][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.532580][ T31] ? __switch_to_asm+0x39/0x70 [ 339.537906][ T31] ? __switch_to_asm+0x33/0x70 [ 339.542697][ T31] ? __pfx_kthread+0x10/0x10 [ 339.547747][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.552625][ T31] [ 339.556204][ T31] INFO: task syz.3.1146:10299 blocked for more than 143 seconds. [ 339.567998][ T31] Not tainted syzkaller #0 [ 339.573046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.582304][ T31] task:syz.3.1146 state:D stack:25096 pid:10299 tgid:10299 ppid:5866 task_flags:0x400040 flags:0x00004006 [ 339.594715][ T31] Call Trace: [ 339.598027][ T31] [ 339.600968][ T31] __schedule+0x1798/0x4cc0 [ 339.606067][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.610974][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.616247][ T31] ? __pfx___schedule+0x10/0x10 [ 339.621107][ T31] ? schedule+0x91/0x360 [ 339.625900][ T31] schedule+0x165/0x360 [ 339.630098][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.636115][ T31] __mutex_lock+0x7e6/0x1350 [ 339.640731][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.645932][ T31] ? rfkill_unregister+0xc8/0x220 [ 339.650952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.656437][ T31] ? __pfx_device_del+0x10/0x10 [ 339.661289][ T31] rfkill_unregister+0xc8/0x220 [ 339.666767][ T31] nfc_unregister_device+0x96/0x2a0 [ 339.671983][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 339.678337][ T31] virtual_ncidev_close+0x56/0x90 [ 339.684395][ T31] __fput+0x449/0xa70 [ 339.688427][ T31] task_work_run+0x1d1/0x260 [ 339.693021][ T31] ? __pfx_task_work_run+0x10/0x10 [ 339.698683][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 339.704594][ T31] exit_to_user_mode_loop+0xec/0x110 [ 339.709896][ T31] do_syscall_64+0x2bd/0x3b0 [ 339.714647][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.720807][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.727010][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.731708][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.737687][ T31] RIP: 0033:0x7f53f8d8eba9 [ 339.742132][ T31] RSP: 002b:00007ffd22192ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 339.751156][ T31] RAX: 0000000000000000 RBX: 00007f53f8fd7da0 RCX: 00007f53f8d8eba9 [ 339.759836][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 339.768459][ T31] RBP: 00007f53f8fd7da0 R08: 00000000000001a8 R09: 00000017221931cf [ 339.777030][ T31] R10: 00007f53f8fd7cb0 R11: 0000000000000246 R12: 000000000002d19b [ 339.785477][ T31] R13: 00007f53f8fd6090 R14: ffffffffffffffff R15: 00007ffd22192ff0 [ 339.793454][ T31] [ 339.796975][ T31] INFO: task syz.5.1154:10331 blocked for more than 144 seconds. [ 339.805243][ T31] Not tainted syzkaller #0 [ 339.810187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.819319][ T31] task:syz.5.1154 state:D stack:24104 pid:10331 tgid:10331 ppid:7048 task_flags:0x400040 flags:0x00004004 [ 339.831740][ T31] Call Trace: [ 339.835623][ T31] [ 339.838568][ T31] __schedule+0x1798/0x4cc0 [ 339.843257][ T31] ? validate_chain+0x897/0x2140 [ 339.848670][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.854190][ T31] ? __pfx___schedule+0x10/0x10 [ 339.859080][ T31] ? schedule+0x91/0x360 [ 339.863329][ T31] schedule+0x165/0x360 [ 339.867924][ T31] schedule_timeout+0x9a/0x270 [ 339.872688][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 339.878602][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.884326][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.889539][ T31] ? wait_for_completion+0x267/0x5d0 [ 339.895454][ T31] wait_for_completion+0x2bf/0x5d0 [ 339.900670][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 339.906830][ T31] ? __flush_work+0xd2/0xbc0 [ 339.911450][ T31] ? __flush_work+0xd2/0xbc0 [ 339.916583][ T31] __flush_work+0x9b9/0xbc0 [ 339.921203][ T31] ? __flush_work+0xd2/0xbc0 [ 339.926325][ T31] ? __pfx___flush_work+0x10/0x10 [ 339.931366][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 339.937072][ T31] ? __pfx___cancel_work+0x10/0x10 [ 339.942184][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 339.948352][ T31] __cancel_work_sync+0xbe/0x110 [ 339.953321][ T31] rfkill_unregister+0x92/0x220 [ 339.958635][ T31] nfc_unregister_device+0x96/0x2a0 [ 339.964533][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 339.970269][ T31] virtual_ncidev_close+0x56/0x90 [ 339.975846][ T31] __fput+0x449/0xa70 [ 339.979849][ T31] task_work_run+0x1d1/0x260 [ 339.984902][ T31] ? __pfx_task_work_run+0x10/0x10 [ 339.990016][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 339.996191][ T31] exit_to_user_mode_loop+0xec/0x110 [ 340.001669][ T31] do_syscall_64+0x2bd/0x3b0 [ 340.006611][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.011842][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.017987][ T31] ? clear_bhb_loop+0x60/0xb0 [ 340.022683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.028638][ T31] RIP: 0033:0x7f01d6b8eba9 [ 340.033060][ T31] RSP: 002b:00007ffcce6ea2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 340.041893][ T31] RAX: 0000000000000000 RBX: 00007f01d6dd7da0 RCX: 00007f01d6b8eba9 [ 340.050298][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 340.058698][ T31] RBP: 00007f01d6dd7da0 R08: 0000000000000234 R09: 0000001ece6ea5af [ 340.067224][ T31] R10: 00000000003ffba8 R11: 0000000000000246 R12: 000000000002d363 [ 340.075837][ T31] R13: 00007f01d6dd6360 R14: ffffffffffffffff R15: 00007ffcce6ea3d0 [ 340.084348][ T31] [ 340.087432][ T31] [ 340.087432][ T31] Showing all locks held in the system: [ 340.095828][ T31] 1 lock held by khungtaskd/31: [ 340.100684][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 340.111018][ T31] 2 locks held by getty/5628: [ 340.116452][ T31] #0: ffff888033b660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.126525][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 340.137241][ T31] 5 locks held by kworker/u8:23/6964: [ 340.142636][ T31] 4 locks held by kworker/1:9/8673: [ 340.148479][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.162768][ T31] #1: ffffc9001a3efbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.175719][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 340.186266][ T31] #3: ffff88807aabd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 340.196250][ T31] 3 locks held by kworker/1:11/8675: [ 340.201518][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.213032][ T31] #1: ffffc9001a57fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.227124][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 340.239044][ T31] 2 locks held by syz.3.1146/10299: [ 340.244533][ T31] #0: ffff8880330fb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 340.254784][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 340.265474][ T31] 1 lock held by syz.5.1154/10331: [ 340.270632][ T31] #0: ffff88807aabd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 340.280743][ T31] 2 locks held by syz.0.1351/11014: [ 340.286459][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.295495][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 340.306067][ T31] 1 lock held by syz.2.1364/11058: [ 340.311167][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.319961][ T31] 1 lock held by syz-executor/11075: [ 340.325335][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.334094][ T31] 1 lock held by syz-executor/11076: [ 340.339384][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.348275][ T31] 1 lock held by syz.1.1375/11098: [ 340.353383][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.362391][ T31] 1 lock held by syz.1.1375/11099: [ 340.368069][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.376858][ T31] 1 lock held by syz.1.1375/11100: [ 340.381955][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.391018][ T31] 1 lock held by syz-executor/11106: [ 340.397389][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.406382][ T31] 1 lock held by syz-executor/11108: [ 340.411680][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.420619][ T31] 1 lock held by syz-executor/11110: [ 340.426388][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.435408][ T31] 1 lock held by syz-executor/11116: [ 340.440709][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.449700][ T31] 1 lock held by syz-executor/11117: [ 340.455373][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.464401][ T31] 1 lock held by syz-executor/11119: [ 340.469731][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.478862][ T31] 1 lock held by syz-executor/11121: [ 340.484708][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.493181][ T31] 1 lock held by syz-executor/11123: [ 340.499001][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.507925][ T31] 1 lock held by syz-executor/11129: [ 340.513196][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.522226][ T31] 1 lock held by syz-executor/11130: [ 340.528103][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.537129][ T31] 1 lock held by syz-executor/11132: [ 340.542431][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.551425][ T31] 1 lock held by syz-executor/11134: [ 340.557251][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.566324][ T31] 1 lock held by syz-executor/11136: [ 340.571624][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.580586][ T31] [ 340.582949][ T31] ============================================= [ 340.582949][ T31] [ 340.591965][ T31] NMI backtrace for cpu 1 [ 340.591977][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.591989][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.591995][ T31] Call Trace: [ 340.592000][ T31] [ 340.592004][ T31] dump_stack_lvl+0x189/0x250 [ 340.592023][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.592035][ T31] ? __pfx__printk+0x10/0x10 [ 340.592056][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 340.592073][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.592089][ T31] ? __pfx__printk+0x10/0x10 [ 340.592105][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.592123][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 340.592139][ T31] watchdog+0xf93/0xfe0 [ 340.592156][ T31] ? watchdog+0x1de/0xfe0 [ 340.592173][ T31] kthread+0x70e/0x8a0 [ 340.592188][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.592201][ T31] ? __pfx_kthread+0x10/0x10 [ 340.592215][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.592231][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.592240][ T31] ? __pfx_kthread+0x10/0x10 [ 340.592253][ T31] ret_from_fork+0x436/0x7d0 [ 340.592265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.592278][ T31] ? __switch_to_asm+0x39/0x70 [ 340.592290][ T31] ? __switch_to_asm+0x33/0x70 [ 340.592302][ T31] ? __pfx_kthread+0x10/0x10 [ 340.592315][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.592336][ T31] [ 340.592340][ T31] Sending NMI from CPU 1 to CPUs 0: [ 340.741602][ C0] NMI backtrace for cpu 0 [ 340.741621][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 340.741641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.741652][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 340.741675][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 340.741690][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 340.741706][ C0] RAX: f329bf006eac6e00 RBX: ffffffff819693f8 RCX: f329bf006eac6e00 [ 340.741720][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d0e RDI: ffffffff8be33c00 [ 340.741733][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 340.741746][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a730 [ 340.741759][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 340.741771][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 340.741786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.741798][ C0] CR2: 000055e4777cf000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 340.741819][ C0] Call Trace: [ 340.741828][ C0] [ 340.741834][ C0] default_idle+0x13/0x20 [ 340.741855][ C0] default_idle_call+0x74/0xb0 [ 340.741876][ C0] do_idle+0x1e8/0x510 [ 340.741896][ C0] ? __pfx_do_idle+0x10/0x10 [ 340.741921][ C0] cpu_startup_entry+0x44/0x60 [ 340.741937][ C0] rest_init+0x2de/0x300 [ 340.741960][ C0] start_kernel+0x3a9/0x410 [ 340.741979][ C0] x86_64_start_reservations+0x24/0x30 [ 340.742003][ C0] x86_64_start_kernel+0x143/0x1c0 [ 340.742025][ C0] common_startup_64+0x13e/0x147 [ 340.742056][ C0] [ 340.742653][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 340.923426][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.932528][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.942624][ T31] Call Trace: [ 340.945893][ T31] [ 340.948816][ T31] dump_stack_lvl+0x99/0x250 [ 340.953402][ T31] ? __asan_memcpy+0x40/0x70 [ 340.957995][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.963187][ T31] ? __pfx__printk+0x10/0x10 [ 340.967782][ T31] vpanic+0x281/0x750 [ 340.971759][ T31] ? __pfx_vpanic+0x10/0x10 [ 340.976256][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 340.981792][ T31] ? preempt_schedule+0xae/0xc0 [ 340.986633][ T31] ? preempt_schedule_common+0x83/0xd0 [ 340.992173][ T31] panic+0xb9/0xc0 [ 340.995887][ T31] ? __pfx_panic+0x10/0x10 [ 341.000729][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 341.006105][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 341.012259][ T31] watchdog+0xfd2/0xfe0 [ 341.016419][ T31] ? watchdog+0x1de/0xfe0 [ 341.020747][ T31] kthread+0x70e/0x8a0 [ 341.024813][ T31] ? __pfx_watchdog+0x10/0x10 [ 341.029489][ T31] ? __pfx_kthread+0x10/0x10 [ 341.034084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.039290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.044479][ T31] ? __pfx_kthread+0x10/0x10 [ 341.049064][ T31] ret_from_fork+0x436/0x7d0 [ 341.053646][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.058754][ T31] ? __switch_to_asm+0x39/0x70 [ 341.063513][ T31] ? __switch_to_asm+0x33/0x70 [ 341.068270][ T31] ? __pfx_kthread+0x10/0x10 [ 341.072854][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.077625][ T31] [ 341.080892][ T31] Kernel Offset: disabled [ 341.085202][ T31] Rebooting in 86400 seconds..