last executing test programs: 1m9.813289186s ago: executing program 1 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x428482, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xf}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x400) unshare(0x6a040000) socket(0x2, 0x3, 0xff) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, 0x0}}], 0x1, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x24}}, 0x0) 1m5.847768863s ago: executing program 1 (id=1603): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x20050800) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) 1m5.706724103s ago: executing program 1 (id=1606): r0 = socket(0x10, 0x3, 0x0) socketpair(0x9, 0x4, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r1, &(0x7f0000000100)="5f7497f5c01d7609c4a00789a1c6a98079e027a795e230d4b99463ec540c6d60180bef92b6cc293699a4452968e5d3e4a6a93ada61e80dc862febbf11831f21c47c853d869761f1def63c2afc3abd47585d85ba26060321e63ea8e8c5e5d01216c843f9d2c8cdd07867a0c14f62d0d41d83857a13bd2cca0cde02900f601e94c408cecea89c3af619e6be573894f2647b1a3c122d4e980bdc165371d5ef2bc0b163a79be7bfb6512b04d205219dbb05925b7838fa6", 0xb5, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 19.664378791s ago: executing program 1 (id=1616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f0000001200)={0x22, 0xe, 0x27, 0x7, 0x73}, 0x6) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r8, 0x0) (async) mmap(&(0x7f00005d9000/0x3000)=nil, 0x3000, 0x1000018, 0x13, r7, 0xe202000) (async) unshare(0x22020600) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8d}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44) (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19.66188425s ago: executing program 1 (id=1618): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000402c1fb8042c000000040000000500000000000008000000000000000007032d9b72e46103bf91f4be3153b8380100000d0000000005008900010000000c00"], &(0x7f00000002c0)=""/253, 0x48, 0xfd, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000000000000ff0300000000000000000000ef52b9abce081b05fb9558ed3ead691fe23dfc2aaf3701a6897989adaf6ed7664b8fa48d3666b770", @ANYRES32=r0, @ANYBLOB="0000000000008e0a31163e167652e09854c64d6439a6532727c32d0c2afa6cce0311007bd95189", @ANYRES8=r0, @ANYBLOB="42a71c7f5a4e17dd1ba1c01ef20872b47dbe7557d6377ea36929999880e4a72c323aac9478ae4b90ac38255393b2da7ad2ff6a3d8cfa6bba4a3016715e42da493209dc7dd2fe55e572266f339aa04a42db5092d782b42c987dbfe5025b5f36e3d82bfc8cc6370104", @ANYBLOB='\x00'/28], 0x50) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004680)="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", 0x864}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="3c3bb0c85eb2383b543bb863c732", 0xe}, {&(0x7f0000000600)="3a7df7014d0a4d5ef013339a9b84d87edd907bcacde5ebbee76f90927269dd2b8c8bd79dc5f65edd85bc6a091a4ab3b5cd0fc3e2cc60a774", 0x38}, {&(0x7f0000000640)="0e49da7dc2f6f17380c9f7ace92449385ef774c613146ee1cbdb5e8d925b2e92bf17e4a70714c7673158b15045a7b0af2d74ebe1b5a6381ededee705775d57c41a5d8786d1e3bb63a56bd085b92e3234f4aa0bfbd9548540bffcb7a8fd70b98553e75a0f38", 0x65}, {&(0x7f0000001e80)="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", 0x1000}], 0x4, &(0x7f0000004280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0], 0xc0}}, {{&(0x7f0000000740)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000001340)="a4dad81faa45eeb835b653ae0000000000000c513b504db49dc75b4ca351353327787997b6b207dfe2b6ddcc6fd78ecbad3b3103b2d95ae904000000c300072a18f2f58e058220343b04ccd1fce293d79f8552a5809c59f11e83752da2a4fe4b49c14e62662118e88e73169efecce2fef0c9c104c51d6db6e72cae79cf5c26d84daf81f24188cb2a73ad65b72fd166ddd4022cfec0c4c8f91592ddaf99797d4df8bd5ca808e0eeebee5088ed5d9dcd28a1f897e2814ac33aa4b92cd0146d9c99707bb247e33040916dff0700002b", 0xce}, {&(0x7f0000000780)="f0c44eac464a2fc9cc", 0x9}, {&(0x7f0000000a40)="7cfc6802080e2b9fd392551156", 0xd}], 0x3}}, {{&(0x7f0000001440)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001480)="7941be6e3616cd12e80eb928073bc208fcc7f68dd4c35891478b14f1ee11e07d4d0586cfcc870076d5291644691df1a966d6d7ed9ca62faf958c94feb214acba26a6f354e040fe1419b002cb009fb4510a4900cfec29cae67e5da9b3fcf6cabb48cbfe4c4367d25ff268b8a281d0f23e", 0x70}, {&(0x7f0000001500)="225ed6cfad87131faf055c3032836af881f40785733498d6dd4a68c2c8bae8d250099ec65e60f5ac425a34e87edf2464bf21c245a8a3782fef38bb8c8e18436d1abb97f78b87b37a46d9009c17a956f7b311a3b89470c5582e3773f938de65392f5c0b8553bfe08d682e99d6998c1eafc571bcaca1093dace556879cffcf373085e1aff122c5aed08a9381514f09e1a360459e9f9fd615d688153596d3355080f5f95725cff063bf", 0xa8}, {&(0x7f00000015c0)="c156e3103b2c8c74dd337261f0179ffffa9318476c01d9b37b63f04317b40d2a16b7", 0x22}, {&(0x7f0000001600)="78309be98e5d115b9cc146693cf1024ce563d70c5f594763d378db78d3fc5037b905a27c79570f819f1df09393f69919b3ea0ac31f03449eecc9f95e8c887ff5870414b49b1d5ea2ea5d408e33e55dc4e1f959f0ce3735a001f53c5d51cd3c09078c0d6a975a428883e1e0868efe7c7e56dea537", 0x74}, {&(0x7f0000001680)="767b39fa09eef43a5b56a82fae958953957837a2c1a1dcc7c3ae9b3d523263cceb317be7f5eb79673163a309703d8290476b3d30c6d45951e7a9db04995b3a82bbf9dd14e44407", 0x47}, {&(0x7f0000001700)="543138df7b627bf901000000d154a4de0400cb70b454b26ff990e7de", 0x1c}, {&(0x7f0000001740)="64253ae8924669018af7fd78ca46a75ee772d7a4a6ffcf59fe939b67fd9b26720cd46c088cb94741868dbf742d2ccacc36545eaf39f41aa6386c1eb6e27eb07182fb30eaf46d13706a0f3ae3759af3dd0b7c5d33c3056c016fb0fe6ee0997c69e63aea8199481a89070abba3c463606c922e34c34928b15d54ff0afbb5d9d8b1a522f76e0a7e3a01a1a1aa8d689ace0bf63056f4e8f503f585", 0x99}, {&(0x7f0000001800)="cf59fdc9c2bdb0052adb02e9f8602ecdd6dc9d5cba2c78dd35a9a9039bd567d5440bd448b8b621b187ca39aa35993eafafd44cb83a026967d0322fd3a1a026afa5f9be10086b21ac3cd36a72f4b46aa2fd8875cae1b34bbcbf92faa955f9c8a3c28ac908b582bc923b350d73eae3f2c8c6442cc5f66faa8ea772d4d22f24cd9704e9f56dcfa31f78ade4abb4b085309a3635ccac53bbc68ece3a8a", 0x9b}, {&(0x7f00000018c0)="de0e7e0ed02a11", 0x7}], 0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0101006401010100000000140000000000000000000000020000000100000000000000140000000000000000000000020000000100000000000000540000000000000000000000070000004418d990000000070000000800000005000000020000000b441c0a330a0101000000f448e000000100000004ac1e00017fffffff070f1b7f000001ac1414aa0000000000000000001100000000000000000000000100000000000000000000001c0000000000000000000039fd3a5eae0557c9b7f407dc7c5f6624c0cb0b6746a269628ce97195650c63647690ea80913fc83cfca7425e5d66a94b3ec4e70000000000", @ANYRES32=0x0, @ANYBLOB="6401010100000000000000001100000000000000000000000100000006000000000000002800000000000000000000000700000094037c01070b98932cf0deb772000089036b019404000000"], 0x120}}, {{&(0x7f0000001b00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)="8f7debdd5344486c01c213bbb3b48127b4ad227815efaea394f6844ae6aceebe599637e4cb721062e146132872e0f7ba6980894d78a3f2d4eef608213eefd1d8de422e759068ffdfe81138b9400f60eaa1f155d09e48d33d7ab230a0a592c46a75a1e65ae80085f3a50e30b683fd602012e0d2b3af2e0fa165b2ca01399c4c55e2e481cd62cba5c1b3464559b7d634059ad76ee4bd9242240190757ef3173cd6a82dad9a1152aea24207b91de65b56a64e9fff130e2efbdd51b63b02bcbb3c514bc49d28a8b9456723c4dbc14c1db3608f187d96de046dcc71d5b8fae65311e4eed90ed25aea9e4e1a1823f881f96f94831fb6c26453", 0xf6}, {&(0x7f0000001c40)="3dacf1a0926bd71874935375d83980b16e23bd0cdb49ff5f2a4cf7d3849a3d55f7c609402d611df60eab", 0x2a}, {&(0x7f0000002e80)="9fb3cd6ff96d4346dabb953634949ef7ebee978bef16c34848cdff7554d2062ec5a45bb930b256d72d8188b28ee6b092d267b01a400b5be0360f909baf66d90a69807a4e1da3945afc6667fd16b03c9c4b42b33808da0b7dc603e39caada6831eba2dc9ac03deb1c8e141c261147c3d1763369251b1788dca3cb0a84cddbb360b1bad2e53b2a2e7947d70cddf959eecd193d707d928cf1ee3a65245c702924e423f963a180ddbd2abf2e3d7fc3439382d945427bf2baf8d9ed452714ee9d015f5ffe7296ca3c9b55fea26b16de8b15f3a1ecc0", 0xd3}, {&(0x7f0000002f80)="8fb31ae2c9caf68f5f916c57b386c1fa103bfbb1c4d09a5168f20790490250313789f5c78a18fdd4086c316a894e6d681cb63ba1af60825b9f07546fbc3ce9e92134049611eb0859f66dd8ffe82cd783779fabe388a1460b1418d5b58c18256b51c8cebdfe7490e12af8ffd329c4d6f4bfdc07eabdb213c45587adfe76fe98034f821956fd9ee2e1234dfe2d89c6607bba033730836cea227e5b05da98e5bbfe2cbdf56c564a9ba1b0c3b15e44a1df5b27e9c645bd5f556c24879e2c6d0285e1bdf2e3bd79f338e15a73c1be4ba1341589520e4d45f7101f58348588ac2ea2ba7a0a80a112bf4d260e38448c8b87d4aa91", 0xf1}, {&(0x7f0000003080)="1c95f8ab304384608ee814be54d72ba6cf18b1efdec496e4f47a135f4de55a6881c9de05be5b6fbe0eee887db64d8d477662f9430aad592b5524c49c4eebe984e007afdbd97539a23f414854bc2e9a2a7abd32dc463e566e88df356ae291c987b5c8ae6cad8bff033c941d7715e376c4571cf4bbe44e998623b0d631469bc82ee84a6b6466c53554caefce162221f9fef8689e4e98f53b7a6d6f6cdb49293eae8c323381d90e3b95b879dd23c302d036a5d83ef05143ff6193c89712d55a3e7d1fe5314b34822b627985ac3a3b5df956e06cc62e768e07197a8ba5193bb9594abb90a3747da6b674f7547b40925056f1e9efd1785044d661226c6c8ed7081f9cc7240610f7856badb2a69f5d8634f8e90cea70ac0ce1fe5645ca1343389cae3883c9729fbdf70107618606054d874a7fc5f1f303e9e155d35f8fcc46a8767bcac73aa58cc5e4f29ca747dfbc763b301099cfa5b03a3874ac390a7de3aabad10541584948d0e72b176401d1c41efc739352ac580efe19e3b28afd8f2eb311953b95f26e5caeecdee28973e10ebb3c635246e51e73d19730bfa23858ebcd5dc2a95e7bc43e55ec65f8b757588e104ec0509a958b29eeb20d23c18ffc55c36fe559d8ebe4530826f88c7ab933e9daa4183df1afc75b44335655274f796c174248b709f4311cb6238c7e17138ef59c551057e99d72c6c17cd33f3b58cf3643ca80da5ed41250d4561e6f47de6b994ccc7575e663c5b7d4a9e3af4e9201c6474c7ab54961569534ab0d6b59cbabd0361c59282bbbabcd137eb64da8969c90575cd59076d5114b376e6902010249465028178e891460b4c509717d237cf270e955c44ca6927bd5f4bf9802944dc9d2bbd560a11ef248270c66cb1f9278611eaa7864f55d30b216696ed8f1a1127b467c40580b9d8e367909081834074d102ff9a5c0445af5c0f7e90a3a7000ea8d141968883c6691570a7dac5aeed8ecc23b1fdad67618480138b4edb64ab8df07123839343d75cca7c8a1a2ad1c3c51ea7a84a3d200875d142d217a872144f5669b8d11414120a842c911f29efaee84eed81fda049c891d1e4cd5fd118bb8187c9239140126b39dc46394d3b7b238def041f38a4a955b17aff939ff0b5c34facd3d2440a35a220f90cd233cc488f7ffe5e78a8f6714b8cf302873c9f2ada124d62fe1ae4ebe80484d61900ed08b6f6e91214f6fc4dfb29025583931b72424c3d978a5e13ed137173f87b7f315decda791026e6a0ee46a9191051f0d6e2da6997dafa6f5f729e650339bf7bf4138806e5923bcf80b1f46421bfc5dfca4bf7ce70a866a29b65a1300a6fb305db7737b7ece37cfea6dc994afd927f2a8c4bff0a9b1e038926e29227056005298a04047480eba23cd74c930e32956b5808437901d5fa6b7e8f619e5a6d0e5c55239295a9de033f94fba9fbce4e698b677ea55514712ff27df2b9e3214460dfee220d31ab46e3f021f6dd91297f0cd8a8d5f326b6cc7cae50cc73c452273f32c905433acae66e4806cf8ac4f542b47f1b0badb9b85f4813c9ae751b22a96f2a446082d06715a1af96188ac92929821b7ae7e176ada07ddeec5e5ab437847f9011ce005b6258921c51f9788338eac7332c55e6faa7977c71fc79239a0155ea583d55b16c4422ad50b7b856efff79c6b0a60c1433acab5aa4bd3869534a6f7e006cf79c83b6e57f3dc2f765cec8ed59abac9604bc14450890d308b8cbbdcd7e58ebec8563851c75b599d87cb59d487c06e2b894253c28e8afb7cd91258665c335ecdb48b85a04c584b782c500ea69ebaf0ffc23a14e7b2f99b818b203013ef64451066c242148232dafd5543e7334dfbfbb52dd9b322c6a778365ce3a6b960916f37a99c8356e64c6eb80c4f995950956db3b19928124af3f6c1ad1854921d3d3990aaa9608a5e135c4137706ed0766befb6d1c1468204942efa873b4957f62cf56f60b6f65a1bfb67385a41c3f27181f90d7915008363ae62687aba97c35bd0b0f74d566e8f60025786db4a08d13ed16e7683fd3b9a710b84593a05b64c592c7adbec30b1cbec041910b3392659fe3011bdf39e8b15e7fdd51b00ad732b168c8dd0a72ef35246bef31b15f51e4de2f6f3fceb6ef0b5006e5051c66e1c8d707e7faf630ab0ade64a82079b1f557462ba2f028d30738f27b78202d23f51b5a2ce18a7733db9e21e82e4094b20d00a3be20c09d0566bf3f4bac5492778b43e34a0939cf67422c2dde974ed008dc6cf0f1511f46f39b9e3fd9d3564d1f1f66a3e15e7a7dd0b3708464343b06069fd3b2ad4b523e6fcf0728985f387df6985b5de754e108aec75b5c106b39cd499d3392480b955a1cc22be2501072f759f6337e59e124e4025c46668e31a5a15c90ec30a4d806bd2e8db63119d9c3ed88d759ec3e31877a4896e96b56b6d0c05cd984f6e11daf8f3560ab9a9dac9ffbcf6b26d53004df2c2a9c41537ac1c6da3333b209f4951ec3f52a76b1a66868554b50b7cf265cc4e13afb11a8b0ce9d6bfc566b8f97bdf41f39ed46557311e099cd0c64c556889a9cac89fcb8304e6f85ebece264f5c9779f33482096c2bb26f9607fca7f0c9a0d56008a8334f4e574c14814d3cffa3cb1dde4937b14dd8664eff58f423036ee3c680f4d9063c481561b5e09894242f14aae1f2f3e901e1c5ced1917ded9f70e51be5281073a5648348cbc79dd3b1da2a7bea3e0e3c5c3a3d107f7a5333cb94b863f12522090b93b9147f0ef8b3cc5352c4e768380e5a5ea4c872695c2c0143dd2a1433723a766dded3af475eeb0ab299ea38ea0c732ae366f5484f248e7c64803baeeab026b4111323407fe924ef4c0ec608c22c27c3991497273bf696f050409e43ade1076d71ec62d05d86494e61db504c4e4a22260f6524dc7612c0e47357cb71a46ac06a7142d243c329c47c67267c4755de86c8591fe6a5d2eae5b3dd2c3fa7e787c9c85f46c765b454df9ee3c68b4451bea9a1a09f1ebb310ebeba7e532f278ff71dfcd0e0026e54cc57de327070f7f38301bebe4be8a106953a633dd688e89ad5116be6eb11eea29bb9cfac79b572511c052e6aadaac08005d174457620f00c01eb26d1273d9d464a6349dc88279dab091fa740f78b05757837c9b4fb30cf1e717e529d0e043270a58600b767c32605a6fcc069f5be3d35fc3d6158c224d6ae9fcd79dd803a8f1b88490f36b92208d1a8d627bc4088c3a4b6cfc2019a4eeccc29940adef3296136ff01e370bb13871e10f2a50aafc5ef45fc492c66d87fdabae4ff8e941c6bf175c681d1bf6b4b217c5d139b3371fec9f5307cc5ca59e8260b6a1532e5c6c31ae0f28a2f05ca6c914e52a12f4fe59b7d713147456b32d93bf56c4ab58b765fe422e9073999bf46cdfcf54e4f1ada7dd234a021c067dc3b3996be0705a4b6a9a7702de596fbb6c9bd6aa4413d1e568118eb4a8b826f82dabe1a856b5386b7c22b0ebc04754062556a27bd4ec48c1f269591694dd12ca3091b77b24568bda2ad6b9d0a9d66dd5fdd22c308735f176ce096af5d45f6e5d24deb37784b6043b2c085da08ad178cd4ac63e5eafc07b6eeffb5e34f53ddc799ab472bdab469e1d0c096bb58832214c581b724db84f2aea66693bd620145c19bd046fa59876084de5f0c4e3106fcc650116ae62d0fe3f48964ba160343e551fa1a36d2a21224ae57b17db21920c8d39162ab52322eae477ceeff1077e3da70a40d1a7356c0131cb1b6f803ba7fa821bb7e28861892591bb052d6f7e2cd7b916531ea37bd5fc091ed1d40fbf91d88e6e42391181c8660258b5c7c9156e0c3c33a5db044336da184e5bc366ccae86f49fbc62b7dc3260bf3a472f33acc7683c86f8ae56245b91ea58e8e7b62e9477f429d9afc9f787003b4a543b301d76ddb3c664777f8d474594b295b8232682cf1709b449e083ca6b50eee73408bac7cf38dadc4b964d110cd2ff38b46ff46993066ef3757504b82f4616cd6350ff321381e4595a028a22d2201b3d8d6394363b8ac84c2d5ecf619f155421b94088b925ebfeb27bf0ab3a7ec642f1980435f13799f7302ebdea8cacf65361a563481dc2263217d2fd5e73c0ca271dd24fe125b5395832b2c2b66fccbc3e1a0fcf44de6e680a196390d86a6277686a2c79d79b38ce6dd87ae484b5893318fb6137177bee8e2cf0a2ffc2d4f6b26e8a53d6e1b85e58d30ccac03e663bc871f622d67b41054a22237bb97c779b282538994dc420510430e3d86dab094d4f92260c21c83a9af5c7dd630bba67d15ba5d4cb4e0e66e68910623b11c3a1293afcc4146ccbeeb9c734b595f2373902c6cd01a81fc9021bd55e317ec76b2969ded56891daf4c18c6d4700bae0996b33f960ed8743fad59ff97fb6858a99b02458ee24988347e3a488af96ff94d38575da416c8f59cb6a31e336c4e0daa06bb5edb63e4fcd0963ddb134bbb2dc69212ab9f25cdd6aeb8a4f1e8e5d9a20a59daebb208049a87ff571cef66ca2586b2c680a922edef2dfb4aad36920b7c671c699bb0db41b8cbe05f0487011359505b6f06ebe30c682d91409179457a5d622adc96e815e7b6b451f6f58a9b4a4002c4fa7f6d3d1866e7e65c310f204bbdd42a219462d52a8177aabd977574f975433a7125c116625bbb3a0c8f947f0eee4d4106a2a016d9de0ac1a932a3efb667e58adc96796b03ae11b52e34973a77d7224a7f84d1dec3554d7313e92ce0c8793130d13b2b7bd1eb07f7cc5a636e6caa267a9967e5dac2d94cac889665de73602d1ef54d6eea647cf16070abe3cf977736f4ed654c185753a219a930cbf725b2debbd4ea5267a9e3436ac7a4ca4aa30c7848877318765addc9d0f0c2367e850245377bdc9e8bdf3ddeeab704a0b13bb71c9fa41cc3c4b6f67bc05909985e5116300e09cecaca5c8418df59fe7889ecf2021b2ad53d063941e909b4a3b3f77550459f367e07c539e6c910a58c79b5c875a6fe8fbd610e390cb4ceccddd2a55a58437a51971b049cc7fa2a36a474fd2241c09bcda2b5782ad3d37a22ef5e9eaf0a1c9dad2d8b465348fa8fa73762709bba4e484663b5db986a622109d057cef50f9e9cfd02d75b739f97538456f76a66a22ac504ca5d8c3ded6fb0a728d73a9f2750a48f54c5318fa3c0bb15199c88908f9a40b1a41aaf30313addfce3f73d2ebbebc7205935669954e3c3d6ff14e3e39c657558c140db8559305b309b14d5f8aca22c881e82f0ea9a8a23cf88bd9ed72f9e477d0abee81413bb193242fd10ab89ef74fd49338bba53ad1edf8d75e66bfb1cec6de431afc62c1b56ba6d4a33b7b38514c6c9fa0bdde8f98dfb9c888d997fa91f8ae9870c60c0e6202d95f243db4e286d7e38df4efe6708fe7b036fdd22c174ad1602725dbd68a75a2fbea58856739c2fa2b985c1e15865140b9b35d9fc1134f933964273fd089af08531d3acb09d7e48c8b4a1ce428051be5219f1a28cca39bf3160d702dcea4955ebfacbf0dfaadc9bebc6e1c0e7f9277c3f3ba8e529ed695746306a9f10996569edb90853f0761977d62a101d5d42e66912941e6e1451066b4bf238f9bce7c7f7ad03dfdc5d14cc36b0843c12c78c51fcb5940a81801f273c946df945ca364712b9346730ff054e9395ebf4226405732cc516119588e27ddcd949618adf5c6d574fab849b994ab6f1d6bf4bdb920997e3fa85b8ed3f30fc0c88df4055e8a6b8ea50311b0e8fdeb725fb2974664a3fab9e24ce462dfbf8eecc8a41fc9645792862081462c1f352d07d7be0cccee1d547", 0x1000}, {&(0x7f0000001c80)="47927a598ec604e0bfbf03ca621ab8bf92aa2941b16b783b5c7b59c619407cfee79b22579b0d0529c3dbdbf64e1e9c24be4bfad0448b574d6474c9d71580fa60f7ee329f46aa3ea03f0c94bb734a6b9eda57f0468a1784d277bee80a290ca15029a40d3fbf60da8c06a987bf64ef396a63147db3ed036e234dac98533b4c4da56d467f88dad1010e107a00363cf9258dcfa9a9d1c3b6905a9f88e88af25c2c56bdf7c09a45ff38", 0xa7}], 0x6, &(0x7f0000004400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e000100000000000000001400000000000000000000000200000000080000000000001c000000000000000000000008000000", @ANYRES8=r0, @ANYBLOB="ffffffffffffffff00000000140000000000000000000000010000000a0000000000000010000000000000000000000007000000110000000000000000e2ffff0000000005000000000000001400000000000000000000000100000000000000000000006a3f8da5933463f511d05cf9c1e70fb1b1e2"], 0xb0}}], 0x5, 0x40) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30bcf5b9000f440bff", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8e46a46c598e6e93) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x4}}) connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000440)) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) write(0xffffffffffffffff, 0x0, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000ac0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) 19.096829828s ago: executing program 3 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x800) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000240)=0x5, 0x4) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$sock_buf(r8, 0x1, 0x1f, &(0x7f0000000100), &(0x7f00000001c0)) 18.819626625s ago: executing program 2 (id=1634): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x71, 0x7}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x30, 0x30, 0x5e, 0x61, 0x5f, 0x5f, 0x1e, 0x0]}}, &(0x7f0000000d40)=""/4096, 0x3f, 0x1000, 0x1, 0x7, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x42f00, 0x10001, 0x4003c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000906f7020000000000000010020000000900020073797a31000000000500010007000000200007800c00018008000140ffffffff07001a00257b5b"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2c3197db9f1b0a, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0x800, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x6, 0xf}, {0x2, 0x1}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0x46, 0x79, &(0x7f0000000080)="235c25b651cae3ef91ba5cb166dd6724045916ca7c9ff4ac89eb01d2575a6dd38234dc9bef35961acab3132bcbb07100ad68b0ccb74fafbf66ed4955ca5c954fac88143a9f8c", &(0x7f0000000100)=""/121, 0xfffffffa, 0x0, 0x29, 0x32, &(0x7f0000000180)="437913eab85f90e8231013a5fcdaf78a824ce72c292fb03dc59b1d45388d20231ee240fbb5f53bdb39", &(0x7f00000001c0)="bb15819ecc2183ad7bc562d64f64085830a2b644f7a9a0c753ffd68e9d26fb68386f0c0b1b5ae199bef2e082a66ae9d547e6", 0xc, 0x0, 0x2}, 0x50) bind$bt_l2cap(r3, &(0x7f0000000480)={0x1f, 0x8, @any, 0x8, 0xa2ba9206bb13df5f}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 18.770148611s ago: executing program 2 (id=1636): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x108, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x33) socket(0x2, 0x80805, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000a40), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r6, r4, 0x0, 0x10000) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r3, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r13, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 18.639854449s ago: executing program 1 (id=1638): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0xae164958ff3601f6, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x820}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000180)={0x8, 0x800, 0x6, 0x3}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000440)={{}, r5, 0x2, @inherit={0x58, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0x6, {0x12, 0x5, 0xcf9, 0x52, 0x6}, [0x2, 0xfffffffffffffffe]}}, @subvolid=0x3}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = accept(r1, 0x0, &(0x7f0000001440)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000001480), 0x4) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000014c0)=""/184, 0xb8}, {&(0x7f0000001580)=""/156, 0x9c}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/92, 0x5c}, {&(0x7f00000017c0)=""/47, 0x2f}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000001980)=""/89, 0x59}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)}], 0xa, &(0x7f0000001b80)=""/4096, 0x1000}, 0xee0}, {{&(0x7f0000002b80)=@qipcrtr, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/211, 0xd3}, {&(0x7f0000003d00)=""/150, 0x96}, {&(0x7f0000003dc0)=""/12, 0xc}, {&(0x7f0000003e00)=""/157, 0x9d}], 0x5, &(0x7f0000003f40)=""/7, 0x7}, 0xd}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003f80)=""/200, 0xc8}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/201, 0xc9}, {&(0x7f0000004200)=""/54, 0x36}, {&(0x7f0000004240)=""/175, 0xaf}], 0x5}, 0x10001}], 0x3, 0x2042, &(0x7f0000004440)={0x77359400}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000004480)={'filter\x00', 0x7d, "c00178fada06b52885c04d05c3c3349e479612859e990c01a5e77dfd5676119c73f52c61ae0151f70a3149650c97779711e4bcf584da48d44ccfc40ca029af319a275d65a79cebe679d0e309c3b6b169293b933bd5a0d0baefc3d347fd13ab3e6db7122ceaac21383cf19dc5012a4501de65955647b05ad3aa61ea6462"}, &(0x7f0000004540)=0xa1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000004580), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000045c0)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000004600), 0x8) sendfile(r6, r8, &(0x7f0000004640)=0x4, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000046c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) sendto$inet(r3, &(0x7f00000047c0)="7005eb88aa1036896e0ca7784a5e7142d9dc0151cad68162900577fbd9844f5e2cb87c3a5cc1a8a958ba8e496f4ff796f92c51fff42884f29d784324702b8e450148032c754d70555be1d3d7eb1e4db010fb0e8d38c6", 0x56, 0x5, &(0x7f0000004840)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000004880), &(0x7f00000048c0)=0x4) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000004900)='lp\x00', 0x3) getpeername$packet(r8, &(0x7f0000004940)={0x11, 0x0, 0x0}, &(0x7f0000004980)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000049c0)={@mcast2, 0x80, r11}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000004a00)=[@in6={0xa, 0x4e22, 0xd, @private1, 0x9}], 0x1c) 18.391814529s ago: executing program 3 (id=1639): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x3, 0x1, 0x1, 0x3, 0x1ff, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) (fail_nth: 2) 17.99722946s ago: executing program 2 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 17.995475238s ago: executing program 3 (id=1643): unshare(0x2040400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x24044840}, 0x4000000) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r3, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 17.775345231s ago: executing program 2 (id=1646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc814) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000010213f503", @ANYRES64=0x0], 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) (async) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x20, 0x700, 0x4, 0xdc1, {{0x20, 0x4, 0x1, 0x3a, 0x80, 0x64, 0x0, 0x99, 0x0, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x40, 0x1, [{0x7, 0xe, "0dda441bee3d92b451d59ba7"}, {0x1, 0xc, "25ad07c7a1ee91237000"}, {0x0, 0x3, 'O'}, {0x0, 0xd, "51237dd85b9606a34d37e8"}, {0x7, 0x9, "c027dcfd4f1bf6"}, {0x6, 0x7, "895cdb0135"}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x4, [{@multicast2, 0x3}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010100, 0x8f61}, {@private=0xa010102}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x29}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x3, '\x00', r6, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0xfffffffc, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2], 0x0, 0x10, 0x2b34}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x140d, 0x100, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x8000008) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000440)="46e4df6286f75d1c966a873b188f5f0ab706f03f5af515d82872e3100afa6e79c70c292a36fd358a8e87275bda9eba7928a36e835f12d94852db0b77b0332662d86f9381bcd8105e5eca8aaf835ea0eb6327063bfb15b3f259e7febae3013b0bbc860cdb7ec61c", &(0x7f00000005c0)}, 0x20) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007800800094000"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 17.66888984s ago: executing program 2 (id=1648): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018910000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) listen(r2, 0x39e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 17.499762467s ago: executing program 0 (id=1650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x19, 0x8070bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x42bb7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xa}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000005bd83d", @ANYRES16=r3, @ANYBLOB="010029bd700000000000280000000a0001007770616e30000000"], 0x20}}, 0x0) 17.447975736s ago: executing program 0 (id=1652): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0xec, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x33) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000a40), 0x4) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x54, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8094) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r6, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040) (async) r7 = accept4$x25(r2, &(0x7f0000000180), &(0x7f0000000280)=0x12, 0x80000) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000600)={'veth0_to_bond\x00', 0x9, 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113640000000000bfa000000000000007000000ee00160e5e03010000000000160500000000000069163a0000000000bf07000000000000260507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000055) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0xcaf70000) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r2, r0, 0x0, 0x10000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, 0x0, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4060091) 17.357256213s ago: executing program 4 (id=1653): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) (async) r1 = socket(0x8, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xa}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7) (async) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/686, @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x1}, 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r8, r7, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x11bc, &(0x7f0000001640)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000060000", @ANYRES64=r9, @ANYBLOB="031ff331a9527463e875a98d3b22190018b4834261a203ccfd1e902e3c085cc614ad47510ebac3b57325e8050cca33c0bcc98cdc3129e1338d67bb6d0467c3f168dd9664cf4e8a646f88474b2e"], 0x48}, 0x1, 0x0, 0x0, 0x20040002}, 0x0) 17.051448868s ago: executing program 0 (id=1654): syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc9}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x5, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) connect$unix(r0, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_extract_tcp_res$synack(&(0x7f0000000940), 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="11050000000c190f00ff05000000"], 0x21}}, 0xa000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x334, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52dff422}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b8b785}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc177}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4398373}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75b47ebc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1442ec4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x583f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f6e0da9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2448004a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc552}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1de4bd93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xacf8fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49003b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d53911c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31f54da0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x389713e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x572c7a35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a15f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf81d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c516ff1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b4a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x787d1328}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65b6fa75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7945213}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76d7b449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3886}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa18}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4de5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6056}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ac9131}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fd1cfac}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf009}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x805e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753f185e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f612abf}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1270de4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57029a88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4da5b9fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x311ddc5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51475ca0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaf5e8a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2075ca23}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159a01fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc41d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f07}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c076cc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e8a958a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16ee2c64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303cba85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x242c23d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbcea1a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x603586b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4649ce81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cba130}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x292452bb}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x509e3913}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac43b7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790637b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x636bc3a5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eca61c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x10}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x29}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x90}}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r12, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, 0x0, 0x0}, 0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2, 0x6, 0x2}, {0x9, 0x2, 0x0, 0x8}]}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) 17.050055897s ago: executing program 3 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x4c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000030000000d00000003000013040000000d0000001000000010000000080000000d000000bd2100000400000026376860086592a74a9429737ab000"/91], &(0x7f0000001240)=""/4096, 0x5b, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/52, 0x34, 0x0, &(0x7f0000000180)=""/140, 0x8c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x1ff}, {0x16}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8000000000000010140003006d61637365633000000000000000000014001680100001800c000700000001cf"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xc}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0x14, 0x2, [0x6, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17.010676308s ago: executing program 3 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1ff}, 0x7a) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000300)=0x80000009, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/147, 0x599, 0x1, &(0x7f0000000180)=""/129, 0xd9}, &(0x7f0000000240)=0x44) recvmmsg(r4, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/12, 0xc}, 0xff}], 0x1, 0x45833af92e4b391f, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005907350082"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000018010000000000ae4aea269e81a0c1f6a53f6cf1000000000000080000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0000000000000000000000000000000004000000b56b6e000001030300000000"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000240)=0x40) 16.897464903s ago: executing program 0 (id=1657): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x3, 0x8, 0x400, 0x1, 0x5cbb, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0xff, 0x8000, 0x5, 0x7, 0x81}}, &(0x7f0000000440)=0xb0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x4a, "43720700000000004786b89e6fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36d68dbac78c2893c6a9798597b201337a179ecc35385efddfd9ec373f0295041c1695fc1a58d9"}}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x820}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000005c0)="f8a31a7c59e892dd81cc898289ea2e775b9c3f1c2d6abbf69057b6ace25bf90728cd61df122f22f438cde3eefe53b2ac866cd7a5640863b591f628e1cd13694b7f661475fe0242a6fb83e2351cf7ee384afb71c7d1295b40aabe48d521a97683718a54885cd046b5a2a37c8cccc1c137f78a7f2383e900"/142, 0x8e}, {&(0x7f0000000180)="fa506b4d9e2002d631752ac1da40287a06fd476026e40c8ae784d2d2352b878b2520967cb4c3e9c533c1b70b3e62407610d88d332eaf01c34082c10381792a0497f243e5d31cfc44d755d9adfc350951339bc9105397ee0214ed5525b97f41624de50c90a83332e82f49366c276eadd8d5e356c04b1e88164f36fd2431c244a3833785196bb05d0705930a8cf3ebef8a73ac6993b893c4b144247a839242f52ed690ac41667bda707463f2066580916627bf14398149bd6ccfa28d3c012cd83cf665f4a1e134da25938d79", 0xcb}, {&(0x7f00000002c0)="7938cb77cc36cbf97b7ce185f29bed834701ef6b2f40dba03562f2c4269bd3ca6f8e7576829bf7fca00261ddce3ce21efdb139afd0ba74c15a3c1d2f9fef58fb021d5cf0a8578195ea13698d44921fee", 0x50}], 0x3}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x9, 0x400}, 0x8) 16.743622336s ago: executing program 3 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) sendto$unix(r2, &(0x7f0000000400)="492032a6aadbd80b5d8f98e27e42cba70501180f2e23736431404c033d4417f45b2937675afdce28bd5328272fa3bda280d4232d866eb7ecbac9ac2cb9db23560b65802ee4a8551c5f30b92161154bd0a0a514a0044e5fc72fc54082911b5db2ed4bb50a08", 0x65, 0x20000000, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x7, 0x0, &(0x7f00000003c0)="c274386d178550", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0xf8, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) close(0x3) 16.706565567s ago: executing program 0 (id=1659): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='>n', 0x2) (async, rerun: 32) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @bcast}, [@bcast, @remote, @bcast, @rose, @netrom, @null, @null, @rose]}, &(0x7f00000006c0)=0x48) (rerun: 32) accept4(r1, &(0x7f0000000180)=@isdn, &(0x7f0000000000)=0x80, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r7) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r6, 0x0, 0x40004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES16=r8, @ANYBLOB="010300000000fedbdf25050000008e8d91f8b77e", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) 16.64349414s ago: executing program 0 (id=1660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffe97, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) 15.923114943s ago: executing program 2 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000900000000b70400000500000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000eb7e4faf226ac5800000000000000000000000000071904f00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 15.665328118s ago: executing program 4 (id=1662): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="1546770000200000000012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r2], 0x44}}, 0x44) 15.603496556s ago: executing program 4 (id=1663): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0x1, 0x0, 0x68}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) recvfrom$ax25(r0, &(0x7f00000001c0)=""/187, 0xbb, 0x40000042, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000032e727cc48ee00bd87feff3d00000000980040", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c00028005000d0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) 15.535759006s ago: executing program 4 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000440)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80c1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000020705000000000000000000020000090c00024000000000000000070c0002400000000000000a0508000540000000011400078008000140000000200800014000000a7708000540000000032f6a192c5f74cf0c5aea033e901e28cb"], 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x801) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 15.489229682s ago: executing program 4 (id=1665): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) getsockname$llc(r0, &(0x7f0000002d80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002dc0)=0x10) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000700000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmmsg$unix(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x2}}], 0x1, 0x2002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400000000fe000000000000b1cfccb0e280741c4dbddcad8f0000000000006900000000009370c5b1fa384f58bfa927a4833f74807b1fe39972052b475b837759ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x8, @mcast1, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)="b09976a68de8233a2246e9dc10044d362f8719c340422b2d785500d9c18365b1535d02e86667b54860dae2d38166cc23041f601a0f46a465977663e928ef0b62de1168c4868cc49ad7541e01b7e2a272e1d26bda29e1d5e9483b474ddc6717d1ec12bff4e2963854b0d4bc351703c313b543f02bb86708e86ffa8765c971ddf1898aafe42c3315c65e563e58d3898cfbbb2dda6519952961d18ee3670ca6d83ce6eca6a6caf136931f284a5938609b658e251b9e430d49aaf0553442b33f8fb2e676adcfca36852d8b3b2b24d868fbbc7988c93fde805884573c", 0xda}], 0x1, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x100}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="35fd192239f1c92bb8be689b7cdf782cb08af1ea31942cfcf7240a5e9399d2757282298bbaba406b84dc851963c4e32844a4e57e41481b61c82b2f19b33474bab1119ebad48bc1c53191eca269f5802a6a7729f92aea8f5a2d7c10b40bdcac5e7d6a0dcc110fb7ee13e9cf4856137ecaec08a958c8cd8a586243a3105978c037c66206e9442c56042a70cceb24462349112ce60222a020f7a5ca7be08b4eb358e6341794f6770bab217b679a941a498bc94b57e1a80567b2", 0xb8}, {&(0x7f00000005c0)="023593eb79abd24a635a2aa86f995b61c86630e922fbaef707459d2b646c83f0bc7afda1e6c6efc2dc3612d4feb00b43866d495479225ee574d1141813c9e14118d43a99c9bfcc51ecf2b72f3c2fa63902f41d485fb1acc88153f8f2ea65b7b19e219172e8f161852a398a54d6249ba84ad31315f2580cf42eb60215c4e2de976daa6fcdaaf78ac8aec02940e35fdd52b456fbd3f20360f7bb3a6fcf9587854dec18f981a9026d63a13d7cb726642757c14e82833946a0a42f12faecc8f26020ffcf6fd7be0c173622aec9a74cdbc8f4f66d5c61269e7caa67c32600d76af694d10a8560328fb5927e78868948e7b12d5af2f3123a", 0xf5}], 0x2, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x10f}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5d}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}}, {{&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="aed4a183236777833bdb827ca301406a68cdfd18e91b1163e137d87d850429f46c2618b85ee183d7f414910a2cd625b227943da5040f849a0f1c916928bcd1bc6d8002fa9b40683c63ca", 0x4a}, {&(0x7f00000018c0)="de9d2205570bb7b71c186f3a", 0xc}, {&(0x7f0000001900)="115584cc6ec79e9cdbbb60121fe4625d61e6d305668e2faaa93ca9b4e166030151ab9a2c7a7ec32eb52e5f4c", 0x2c}, {&(0x7f0000001940)="021e032580fa3d836a5535e6277e2bbc8ecdb59d7bdc2f6d0df62719aed8adf68f5110e94769f113f5ff83e9631fb9d675c2b5eeddcf5d8e35a15ccc16f46de6f21bb2d9e1f3fa6d5a7eafce93a90da869aec68cf1c311746dd1ab349f828a3ffa717c8bd34327750aefafb53862d325b3c89f0656338d57e9d680f3c39be0f2489ebab228b917e36448a8497bc5845c58838b04b854119bc93e2a57de73224e6fe60b2d2c14349e9f01", 0xaa}, {&(0x7f0000001a00)="41744c4656899a26968630bbf98b838037cb5cdc1ca8a7d849d7d9448de4ba74531a8616e313daa2729723ed901b0c1f0ff2af2c64041c6782a0205272f1e9f8ee8d9db0f0f0865d78b8ec2f4299060e4225ad629e271a3c92303ebd2cb1b1bdb543fe18e6e5d35b7c23525c90367b2886dd90b46ed2a35e22257191d1cd78ad0fd02f646dc9cd8e1929d9ca2d9a6ec89ba4f025d85a0d17801eaf3aef8c8f0a502d1fd903086eb71009d5b570e7ee23343e9e26be2b62fc884e1e51100882eb006bfe00144d63f8b83352bb4167a61b2ca689ae55c7346dd0a2c7", 0xdb}, {&(0x7f0000001b00)="27dc8a702d6dd7f7499d60", 0xb}, {&(0x7f0000001b40)="44f4e8b46808e26066bb968fc51ce61845f5f31590248c7606d369cc42a6a7359262434c2458b857ebd1564cf94a9119e790e2d209cdef78eee3f355aceb5afdab0467f54fd5972a17247d436f70af0c09a17eee57e86f34308ef9898e9a597f33f5c9de0c7f97c98615a3aef2b65ef03fc733152ad48ed61e6fe488bd952bdafe94ee148833eb0bf68308d9b288da0a78a8a6b6d7bf0aa10af39f1226c0c24d4d32df9791722d914a41ce341c48d48206d64e502e9ea542d172868796444d65694ed8c0a4fa303ddc288968f493742aea570e6d4ff0cd6cdb5ba63e2cf65c14792ab65b99f7fb4f11fe94cdeacb29513e2bcac6d4031c4c6444a504ca5ed868c00e221b4a70634820b1d83c97cd79bcda128792c110729026f3ad5aa13a89b7c47a9476a0d01ffef291a6adf4b7b197e4479ba61f4a0b80f7f1278ad951346799da537eb2fb168e32a00bac6c8f50a2a6f57f2c79ac2d1ab51cddd2550a39ed366080f111a55756405eba0dbe2c395a9bf2d10b5359c6ed52213c39352272587cc2486ae087b0ab7ec5482d5f97d9b8beb809412e0f49cf1ed1267a70d5756a2685c8b5a887eb6ea6275a21b34613343f372acd242f221d82d19e47ed0978171c0ce49175dc004469ecaf18b8d50179161a0c8e04a3131623b084058b47f004616580954adfa53b3f7fbac9649e872ee2f1d7c62cc95c6919df8caef6c39556ecadf3666ac528f4a6715c26227999c7f54f197249694a66508e68e8456c83eaa3c936bbd05f3731bc89ef35a8c08b9abf466695e19ed1344c568a5fe04673f2fe8b63c84ca9f861482b5ef72ca1b57573c1b7ddefe069ed867c3e6ccbaaba94978ea9e8355c0c93d54baca3ee3b237fe22a7611169e1c5d2aaa2bfdb46561ccbdde3ef6630bb1b1bea96d3584c63c59e95f955138d0ff9e8e711bf419ba9485bd25ad5916c53961f39c1595ea1fe27e0ca4741f9e18bc1cfc9fb0e8bc0cc5462a0916364dbbf9a933257f91fd4cfab7de4f220f6504b21fb44d746cade3afff0d052e95c1efae099a2b89368d665169ad081c58545481af2ede91e08a26ebd560c28869385a5ba6aae813a9f7cb469c2c3afe22050f07fa662cf9f26a70de0216ce0fbe6d79a7278fdaf65d7cba976d41b23685ac9dcb128c63c71c2b05d504c575a2008cdceee232e123742a0a98b21ec95137cb68f55da6ed302956050a758496dc014e5228899e5fb9d53a446794a71e206af9a8ed338782a54edd78f2e7f977a016e1369c0fefd05720b465fc461459855e406f8ca8a3e5334787b82dd5333cdd484c4e5f323f991e8784695d3a7b3c52270544e0ee7dd06e6aa0240d18de8c9685c5f56efc7bb7ad6e14f6676039fc14699013a94bca6f5eb4b470a4767a26b9039616af31e5fc7bd404879c6eb816465da40abeccdbc0a5fa0c03d178ee75bec4df40c327d6890044279d5b2b0d8a90ad985a77dd78492f00b270e262a911cc74fe065470e61645b2c76ce9f51d235c1461808fcad814e082a46cbef9d3c147816552d90a91472c2cbab334b7f69c3bcec9e84608c1bf901a38c06084601230bbfcf45d9cce021453a3efcd00c59d08266a99b979170648ff42bd2e0b5ddddaf0ca30d9a9bc76b84e0e6913b22e5f0c82b4b26ae965793038662758fbd17721d10739d0d4d402dc60e83c2da196eb1acc28b53be5af7d06e9323efef4c92424888411d8b5392a735da5c3a3f042559dad23e15398a7a6b461d476c2243f77f3777441c567f537a5e27bf0c98ed60f77f1d496b43ea200f0948e980d599466705c22dd6bb268f055901aef81dd1c62955cdd9b5dc0c78771bc51ece4863423c1dd699104ab02f7da2d4dac27c0b1cb203279b12508bd5b83f395776bf6fa4cb81e030f8a29f6624a6de8f6d56b01ef199cd6e70107e92328b653a58994797f067328248ff0f0d56987e57e5c8dbe5e3435cb04eec4c8c8f47ec382f2e3ced45b769f11c049530e63c4b9da2a6fbd9463878e9642660d8492e353e36dd828d05f995fa3959dcb88ee5a42ffd976c522afec3afd9677c2042b3366f2b2b23773ec681f503fd9456853402e9ad3a513e98f1e3071445f38df7851d598ab9d67e26b7fe3c0f04369ffc669c6d1bcd77dc4d633e701e9694c297f2c9ba8c5fdcab358c34033c9f3d8c18875feecd38896e78e75a002cce982d75af6b52707606ab3e85a524c98d87774f686b3b84d1d83488c52f112ddce1a61ac8f9ef123a2e76bceb74829e20a04392f877b32e5240d41a95d29c2dc65ea9b5c5770ba6ec4e1c0b4f9dc990ed891e9684f54afd0961f092d9ecea002073a20d61bf7c8e0059f8bd3323b1f74d4da0e7abceaac770f072be9bdf62fdc995d3391083177d3fe310515c9d967a0d4ad39b04d97889a6475649e2982a5ab565d5ba2261ba3833988f5deabe098996479d657ce2333f2774f40995701d8c956e08d6795fd5da53183edda594e091b01d5f12d87bae94bd9fd746420314ea955bc9a372d911fcc8d4e9e96de6cb8d5bd6b298a6769c94a5ce9e58080797b197870deabbbb3fce09cadbb6f128778b80614f63400ba58184ab508600b3ca6e53f7f2cd5cafc76dc8c9576c00093b67ad306bf44277f677ff9b25e5da24dfc67850bf5cdbe20888b798a7d9dcc3b957545553f2c7746f2988a27761c92943a59d66002a6b93c383505b9e1e79630d34b05ff144d23c81f8992d1c0bd4ce3612732305d010f3356a3725bc04aeccd8059d2fca8a17afe07e2d5ee4ba1ebb0da6f8af8d6f003f2201c14e37bd7c74e12959b2cc6e288a577304298bd2aa9afce5c622c6e551b501517c14cabb63969c2211d654452207028cc63c5e77468ef916f288568d4816a28c273a95c0ec4c3c7eb75deabf57a2c6b9591affd8bd1db032f98c2965df05a1c7b82d0d54d9fd1b8555ee0c41ed95586a2f3863cd99f84ccd8f1e58d470a9865f6802d208743cb2ce94e3f45959c9bb84d5a516caaa7027d1fc7fc85ecdfd044654aad0a229dd617ef3f46936accaaf311216018f33ecf077ef81cb036e19e4e52023d0fd16fde2d12d14a56895a718956b94e4634d8a90ea26666aca3eb14ecc270fd9f770575c66c2c6b5fe57c42187ab0b3051d73afa9e6446e58ff12346cccc495a3447d85bfb30074602644b2c3b73c1e101aa667501acfbb02e1da50857dcfcd6bef66c824a33670a62a40c7c8251eed3568ad69465c7e51f64c84974426fe68dbb04dd090651d6235b56c09058c37d7488691696e1e48d081d2101db0a51e868da96b697568a96f196580234c93cbc36a2d4f789b0f36ec47591c36fbb825e1609527a9a0cdade2121402f3e33ef3f49240b9917582a6e9767327bb68459cf9e84a1760d73b8bf186ed56a81ba14e2f2e8a9b19ef8f601ef14f1dc98b90bfdcd02b7ab7880d93ee50b0f03ab698070b9e1b0d15c36d91fd1f2185d04e16ec300f47c78f23e1a826abd3235394e574ce5b41c501dc4b7721391e0505cd92052e51d1590824ef3c839bcf4604ccf7f43ab235d9b8de9513031a1a627de8c9711e05a74b7ab3551ae40925aafad9184e8f8ab7d3c8f057d39471b65e976a3b80df3722352ec3185826f2704b8c7a1915490ac760283f1a5df35239a88d261a6fb3af10d5a3fe0a4a0eb30977884ef23ddbb137593ac5d79517c535b5963b0ee07779a3961299b8747a3e67ca45035f7d0c55c985b818c95216b7937f2ab557e850035604807dea6152def19f9251faf59984b9251a8f6ffd214e764772249d71247dce5c546e4e6f243dcaa4a46b7f16fcb66faf468f79f220365b48553137c62892e1e73aff12acd793bcbd3d1ea96858dab74945afeadd2e138ba468b9df937ef0f817dcf11c910b8b06c9f917eff21d2190a060871c0becba7d6e9456cf35040b221306cab0df698c758cecd3a217b752de50591c19bcc688f53a96bc4a16ee07902c99341cc33379eef976121bef86fdaad2df140787b12604a4b7583eafb88e874c20db408ebd1a96eb6c45633880cd567725becec64cf08d5afd061ec0a9cb18007edefc483b4206fc7ebb5afb16df270ddc6e18096bc7c2ff0e6c01c858bda399151d352b88cc249d84b6ed2e31d694bf739ec6bbe224ee0e503770808343f0229b8238df1786cf9a9406ef60db52cd46f763a43ab77e5a01a05c91607791dd1850143d5c0534384e2c94242c58684c735dbda6fb234abb782583baa250a3f21720803adb641b6934bf09080fc1098c11076b523b835aa9cf5589d6ccc2489c48286e1a0b5c9caab7252d5ddad31f1937d7745caeff8a1145da03c0d226fe1a6d733ac440689aab49ce7c30187130cc9209e5ac3dfd527ff3c6081749415756b2f7ce508b22816c0870af4c7962ed67402bb5ef43a9d87d13d436b6813d2719d02b7bd8b2d0719b87341554ae4b609fe0f0d5b291b9f2a09d67b93c3933381555d1f5c73efcdb124e7a28814bd21f1ecbd92f7b297ec175b1c39f26a0de41ab38be7de8d56eeb9b775d42744c32bb9c2ae8731750a44c3c65d6a3e766da7fe8dfdfb0d81f781e489f0400da9eb6401796311966541399b36204847d752fae6dcdf0481ef8d914ea4dca1f79532709c80ca6907d5c2adb63dc585d7b2c8c9065e08055db77784eff4d3ad4a0d28232f8e3d8a2613a42b7e500e85cf3856db4065337e9203342bc484f63846b19addd47601d5e18f353f33e1303ae0faf096a47a9842676b7c9031c780ab6fb356bd1f7b73914d93c459fef015f3fe4508484016e0adb9559cf1e6469e7764d6ed41c7772ec45389e3bc6ab31437e2b43b5db8d38150d99e60aa8eb17af83a8c236dd0bf56ad97c7864007fcaa7b9d839da5a6c3ea719be394415ade2f626d7a66e34b9d1f68c4435c6fb45987d7b021e174abb1b09e4bb5393aa49ba20309efd46028dc54ef7ba43e73b1e570b06c8335b59da2cb46745ef2137363819f1b3af4bc46de06cb703001cc8233a843aa0fd97172c648fdf7095e2f976f8e348be567e59d65c44258f92f6d24f9faacc341864604b48f715fe666e7a0611950d884ceeb9286410dde4447efd346dd31d26bbbc9ff468e057397c0fbc27fe1d0bbdd1b8957c4f14d661f91172d27102e182be7d081a2025531f36d9f057152fbd1ab7709ebcd8e2678a94e4e1643f6da849746cef89ebadb185a038e60f7aae74969d73826d971dc14b96388a9bb220c7cde9198d9002c3bb649ff9d109f079f4323a27419a97f3975c6711c1298218ada815ce8705e54dcf3f14a661837aadd22a4e7eb62bacf0bb7575463447b0735d6ad1355c575ebb1536b61ef98a987f8c529a537925b35c2f91c3b096e9f9d73f9291f0f7fd2b5e558c71ebb73f807df986d2b8344214d7a73014e11e5e4c9bcaae99d56739b60d1c4408b13f71539f846aeb587bf67c615e6a11ff22dd0a961282b8fa5b8719ac2ed5be58684afe8d4c714ec585ac9bf95eb364587299805b983849611d75fca4ef4ed94810c00d45a3b404f176ecf2c2878e62edbef140722342876c77f1f3c1039bcc502c31c7c3d8c1f652b44fa649c5a4d89477fa1228bd239f07bb2cf2bd9478149a5403a6681bfc38bb1144c9169df8aa3ee9d368305e44b7bf28b0a57388f02c85762b10f8651b7c3145f9f12a866d7ada5193c7f8d915e0290cef40b989a1801d324bf7331c1fa1af4051c238388d9bb79ec4315158c62cf5bfb8cdcc1a69d5d95d78df20aee500c6aac9f4b8a28a526d314fbcfc80179e", 0x1000}, {&(0x7f0000002b40)="4bf992fbc3be2bd87f7d3ac7f59b632d87aec75f2b43cf967c5a68b8c64433a8aae4a74d8b49355af6fc49c1ce7c683cf3d0b02ff1867ca3cf382e490966f1e93c7a69f3965dce6a7dc81aeeb7a338", 0x4f}], 0x9}}], 0x3, 0x8000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4) 15.436148672s ago: executing program 4 (id=1666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) 3.091949952s ago: executing program 32 (id=1638): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0xae164958ff3601f6, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x820}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000180)={0x8, 0x800, 0x6, 0x3}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000440)={{}, r5, 0x2, @inherit={0x58, &(0x7f00000003c0)={0x0, 0x2, 0x6, 0x6, {0x12, 0x5, 0xcf9, 0x52, 0x6}, [0x2, 0xfffffffffffffffe]}}, @subvolid=0x3}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = accept(r1, 0x0, &(0x7f0000001440)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000001480), 0x4) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000014c0)=""/184, 0xb8}, {&(0x7f0000001580)=""/156, 0x9c}, {&(0x7f0000001640)=""/242, 0xf2}, {&(0x7f0000001740)=""/92, 0x5c}, {&(0x7f00000017c0)=""/47, 0x2f}, {&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000001980)=""/89, 0x59}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)}], 0xa, &(0x7f0000001b80)=""/4096, 0x1000}, 0xee0}, {{&(0x7f0000002b80)=@qipcrtr, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/211, 0xd3}, {&(0x7f0000003d00)=""/150, 0x96}, {&(0x7f0000003dc0)=""/12, 0xc}, {&(0x7f0000003e00)=""/157, 0x9d}], 0x5, &(0x7f0000003f40)=""/7, 0x7}, 0xd}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003f80)=""/200, 0xc8}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/201, 0xc9}, {&(0x7f0000004200)=""/54, 0x36}, {&(0x7f0000004240)=""/175, 0xaf}], 0x5}, 0x10001}], 0x3, 0x2042, &(0x7f0000004440)={0x77359400}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000004480)={'filter\x00', 0x7d, "c00178fada06b52885c04d05c3c3349e479612859e990c01a5e77dfd5676119c73f52c61ae0151f70a3149650c97779711e4bcf584da48d44ccfc40ca029af319a275d65a79cebe679d0e309c3b6b169293b933bd5a0d0baefc3d347fd13ab3e6db7122ceaac21383cf19dc5012a4501de65955647b05ad3aa61ea6462"}, &(0x7f0000004540)=0xa1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000004580), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000045c0)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000004600), 0x8) sendfile(r6, r8, &(0x7f0000004640)=0x4, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000046c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) sendto$inet(r3, &(0x7f00000047c0)="7005eb88aa1036896e0ca7784a5e7142d9dc0151cad68162900577fbd9844f5e2cb87c3a5cc1a8a958ba8e496f4ff796f92c51fff42884f29d784324702b8e450148032c754d70555be1d3d7eb1e4db010fb0e8d38c6", 0x56, 0x5, &(0x7f0000004840)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000004880), &(0x7f00000048c0)=0x4) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000004900)='lp\x00', 0x3) getpeername$packet(r8, &(0x7f0000004940)={0x11, 0x0, 0x0}, &(0x7f0000004980)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000049c0)={@mcast2, 0x80, r11}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000004a00)=[@in6={0xa, 0x4e22, 0xd, @private1, 0x9}], 0x1c) 1.075103685s ago: executing program 33 (id=1660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffe97, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) 1.043499204s ago: executing program 34 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) sendto$unix(r2, &(0x7f0000000400)="492032a6aadbd80b5d8f98e27e42cba70501180f2e23736431404c033d4417f45b2937675afdce28bd5328272fa3bda280d4232d866eb7ecbac9ac2cb9db23560b65802ee4a8551c5f30b92161154bd0a0a514a0044e5fc72fc54082911b5db2ed4bb50a08", 0x65, 0x20000000, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x7, 0x0, &(0x7f00000003c0)="c274386d178550", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0xf8, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) close(0x3) 29.252989ms ago: executing program 35 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000900000000b70400000500000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000eb7e4faf226ac5800000000000000000000000000071904f00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 0s ago: executing program 36 (id=1666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): ng backup interface [ 79.529787][ T5864] Bluetooth: hci3: command tx timeout [ 79.600072][ T6014] wg1 speed is unknown, defaulting to 1000 [ 79.609272][ T5864] Bluetooth: hci4: command tx timeout [ 79.652089][ T6053] netlink: 'syz.3.24': attribute type 12 has an invalid length. [ 79.665069][ T6053] netlink: 200 bytes leftover after parsing attributes in process `syz.3.24'. [ 79.677972][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 79.706882][ T6014] wg1 speed is unknown, defaulting to 1000 [ 79.760357][ T6014] wg1 speed is unknown, defaulting to 1000 [ 79.878177][ T6063] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 80.006184][ T6014] wg1 speed is unknown, defaulting to 1000 [ 80.199437][ T6066] syzkaller1: entered promiscuous mode [ 80.204941][ T6066] syzkaller1: entered allmulticast mode [ 80.301032][ T6072] wg1 speed is unknown, defaulting to 1000 [ 80.377838][ T6084] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.574932][ T6091] syz.1.35 uses old SIOCAX25GETINFO [ 80.671359][ T6086] wg1 speed is unknown, defaulting to 1000 [ 80.998048][ T6106] netlink: 'syz.2.38': attribute type 5 has an invalid length. [ 81.013867][ T5930] IPVS: starting estimator thread 0... [ 81.015813][ T6102] wg1 speed is unknown, defaulting to 1000 [ 81.028024][ T6106] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.119205][ T6107] IPVS: using max 28 ests per chain, 67200 per kthread [ 81.225000][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 81.679389][ T5861] IPVS: starting estimator thread 0... [ 81.779046][ T6121] IPVS: using max 30 ests per chain, 72000 per kthread [ 81.843004][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 81.871987][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 81.983668][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.45'. [ 82.031600][ T6128] bridge0: entered allmulticast mode [ 82.103981][ T6127] bridge1: entered allmulticast mode [ 82.312861][ T6111] syzkaller1: entered allmulticast mode [ 82.401542][ T6148] C: renamed from lo (while UP) [ 82.432396][ T6148] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 82.681721][ T6160] netlink: 64 bytes leftover after parsing attributes in process `syz.2.53'. [ 82.694800][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 82.868386][ T6167] syzkaller0: entered promiscuous mode [ 82.884384][ T6167] syzkaller0: entered allmulticast mode [ 82.951456][ T6179] netlink: 'syz.3.59': attribute type 5 has an invalid length. [ 83.013605][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.025520][ T6183] Bluetooth: MGMT ver 1.23 [ 83.070140][ T6180] bond_slave_0: entered promiscuous mode [ 83.075938][ T6180] bond_slave_1: entered promiscuous mode [ 83.091799][ T6180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.099716][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 83.122405][ T6180] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 83.159535][ T6191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.237444][ T6184] bond0: (slave bond_slave_0): Releasing backup interface [ 83.281375][ T6184] bond_slave_0: left promiscuous mode [ 83.304142][ T6184] bond0: (slave bond_slave_1): Releasing backup interface [ 83.305342][ T6204] IPVS: set_ctl: invalid protocol: 47 172.20.20.10:20004 [ 83.324636][ T6184] bond_slave_1: left promiscuous mode [ 83.343193][ T6184] team0: Port device team_slave_0 removed [ 83.365623][ T6184] team0: Port device team_slave_1 removed [ 83.374005][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.384340][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.512859][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.555820][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.571773][ T6184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.621287][ T73] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 83.689540][ T6202] netlink: 'syz.4.64': attribute type 4 has an invalid length. [ 83.719913][ T3569] bond1: (slave macvlan2): link status definitely down, disabling slave [ 83.907897][ T6200] wg1 speed is unknown, defaulting to 1000 [ 83.999978][ T73] bond1: (slave macvlan2): link status definitely down, disabling slave [ 84.133129][ T6234] IPv6: Can't replace route, no match found [ 84.157718][ T6235] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 84.203275][ T6235] vlan2: entered allmulticast mode [ 84.217312][ T6235] team_slave_0: entered allmulticast mode [ 84.334164][ T6228] wg1 speed is unknown, defaulting to 1000 [ 84.356477][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 84.395196][ T6241] netlink: 34 bytes leftover after parsing attributes in process `syz.3.71'. [ 84.418897][ T6241] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 84.733586][ T6257] wg1 speed is unknown, defaulting to 1000 [ 85.168368][ T6282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.196856][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.285334][ T6284] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 85.313387][ T6284] team0: Device ipvlan2 is already an upper device of the team interface [ 85.727286][ T6318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.968146][ T6332] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 86.006223][ T6332] batadv1: entered promiscuous mode [ 86.013339][ T6332] batadv1: entered allmulticast mode [ 86.030769][ T6331] wg1 speed is unknown, defaulting to 1000 [ 86.044573][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 86.266297][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.274049][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.316166][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 86.382374][ T6358] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 86.392006][ T6358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.95'. [ 86.413266][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.442245][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.733489][ T980] cfg80211: failed to load regulatory.db [ 86.746433][ T6356] bridge1: port 1(veth5) entered blocking state [ 86.759649][ T6356] bridge1: port 1(veth5) entered disabled state [ 86.776355][ T6356] veth5: entered allmulticast mode [ 86.777153][ T6373] netlink: 'syz.1.97': attribute type 6 has an invalid length. [ 86.794985][ T6356] veth5: entered promiscuous mode [ 86.905758][ T6363] bridge1: port 2(veth0_to_bond) entered blocking state [ 86.915552][ T6363] bridge1: port 2(veth0_to_bond) entered disabled state [ 86.933800][ T6363] veth0_to_bond: entered allmulticast mode [ 86.942566][ T6363] veth0_to_bond: entered promiscuous mode [ 86.958432][ T3535] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.062076][ T3535] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.071532][ T3535] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.089210][ T3535] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.267909][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.378316][ T6408] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.105'. [ 87.516770][ T6416] bridge_slave_0: left allmulticast mode [ 87.565525][ T6419] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 87.567541][ T6416] bridge_slave_0: left promiscuous mode [ 87.581943][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.605053][ T6416] bridge_slave_1: left allmulticast mode [ 87.614935][ T6416] bridge_slave_1: left promiscuous mode [ 87.621348][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.635063][ T6416] : (slave bond_slave_0): Releasing backup interface [ 87.654985][ T6416] : (slave bond_slave_1): Releasing backup interface [ 87.671087][ T6432] Bluetooth: MGMT ver 1.23 [ 87.686045][ T6416] team0: Port device team_slave_0 removed [ 87.708398][ T6435] __nla_validate_parse: 1 callbacks suppressed [ 87.708411][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 87.717127][ T6416] team0: Port device team_slave_1 removed [ 87.737158][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.745356][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.754961][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.768541][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.777837][ T6416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.936849][ T6433] gretap1: entered promiscuous mode [ 87.996877][ T6439] tipc: Started in network mode [ 88.016871][ T6439] tipc: Node identity 7e250a572fa, cluster identity 4711 [ 88.037314][ T6439] tipc: Enabled bearer , priority 0 [ 88.064277][ T6417] syzkaller0: entered promiscuous mode [ 88.070407][ T6417] syzkaller0: entered allmulticast mode [ 88.104585][ T6424] wg1 speed is unknown, defaulting to 1000 [ 88.123938][ T6415] tipc: Resetting bearer [ 88.180383][ T6415] tipc: Disabling bearer [ 88.568586][ T6463] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 88.591467][ T6463] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 88.651890][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 88.656444][ T3535] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.675578][ T3535] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.708343][ T3535] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.761645][ T3535] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.777868][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 88.872387][ T6484] vlan2: entered promiscuous mode [ 88.896022][ T6484] syz_tun: entered promiscuous mode [ 89.025707][ T6494] netlink: 348 bytes leftover after parsing attributes in process `syz.3.122'. [ 89.032567][ T6497] pim6reg1: entered promiscuous mode [ 89.044716][ T6497] pim6reg1: entered allmulticast mode [ 89.094435][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 89.148608][ T6500] wg1 speed is unknown, defaulting to 1000 [ 89.217709][ T6506] wg1 speed is unknown, defaulting to 1000 [ 89.283398][ T6509] ieee802154 phy1 wpan1: encryption failed: -22 [ 89.327811][ T6510] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 89.392954][ T6512] tipc: Started in network mode [ 89.398409][ T6512] tipc: Node identity f62bf088fb4d, cluster identity 4711 [ 89.412014][ T6512] tipc: Enabled bearer , priority 0 [ 89.423301][ T6522] syzkaller0: entered promiscuous mode [ 89.428795][ T6522] syzkaller0: entered allmulticast mode [ 89.452024][ T6512] netlink: 'syz.1.128': attribute type 13 has an invalid length. [ 89.595849][ T6511] tipc: Resetting bearer [ 89.650512][ T6511] tipc: Disabling bearer [ 89.851550][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.140'. [ 89.950972][ T6552] wg1 speed is unknown, defaulting to 1000 [ 89.985063][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 90.036839][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 90.048678][ T6563] wg1 speed is unknown, defaulting to 1000 [ 90.186177][ T6577] netlink: 240 bytes leftover after parsing attributes in process `syz.2.145'. [ 90.203757][ T6577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'. [ 90.322467][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 90.470951][ T6597] bridge0: entered promiscuous mode [ 90.476805][ T6597] macvtap1: entered allmulticast mode [ 90.488054][ T6597] bridge0: entered allmulticast mode [ 90.496947][ T6597] batman_adv: batadv0: Adding interface: macvtap1 [ 90.503819][ T6597] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.531571][ T6597] batman_adv: batadv0: Interface activated: macvtap1 [ 90.607556][ T6599] wg1 speed is unknown, defaulting to 1000 [ 90.872269][ T6619] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 90.942861][ T6620] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 91.869289][ T6643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 91.969066][ T6638] wg1 speed is unknown, defaulting to 1000 [ 91.992092][ T6647] syzkaller1: entered promiscuous mode [ 91.997694][ T6647] syzkaller1: entered allmulticast mode [ 92.020017][ T6641] wg1 speed is unknown, defaulting to 1000 [ 92.127018][ T6647] wg1 speed is unknown, defaulting to 1000 [ 92.560026][ T6678] wg1 speed is unknown, defaulting to 1000 [ 92.782772][ T6679] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.603046][ T6713] __nla_validate_parse: 10 callbacks suppressed [ 93.603062][ T6713] netlink: 52 bytes leftover after parsing attributes in process `syz.3.180'. [ 93.615046][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.621469][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.637085][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.698235][ T6719] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 93.802313][ T6716] wg1 speed is unknown, defaulting to 1000 [ 93.948664][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 94.018356][ T6729] bridge_slave_1: left allmulticast mode [ 94.032209][ T6729] bridge_slave_1: left promiscuous mode [ 94.038008][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.052144][ T6729] bridge_slave_0: left allmulticast mode [ 94.057873][ T6729] bridge_slave_0: left promiscuous mode [ 94.063916][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.088671][ T6729] batman_adv: batadv0: Interface deactivated: macvtap1 [ 94.097219][ T6729] bridge0 (unregistering): left allmulticast mode [ 94.118070][ T6729] batman_adv: batadv0: Removing interface: macvtap1 [ 94.169132][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 94.260174][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 94.356002][ T6750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.363282][ T6750] IPv6: NLM_F_CREATE should be set when creating new route [ 94.370616][ T6750] IPv6: NLM_F_CREATE should be set when creating new route [ 94.377834][ T6750] IPv6: NLM_F_CREATE should be set when creating new route [ 94.595044][ T6769] netlink: 104 bytes leftover after parsing attributes in process `syz.3.199'. [ 95.066836][ T6798] wg1 speed is unknown, defaulting to 1000 [ 95.092960][ T6806] netlink: 'syz.1.206': attribute type 13 has an invalid length. [ 95.111532][ T6806] netlink: 'syz.1.206': attribute type 17 has an invalid length. [ 95.255686][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.266030][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.278734][ T6806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.366772][ T6823] netlink: 'syz.0.213': attribute type 3 has an invalid length. [ 95.416553][ T6826] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 95.453469][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 95.541655][ T6833] bond1: (slave geneve2): making interface the new active one [ 95.548831][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 95.560784][ T6833] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.575792][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.592953][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.602329][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.623322][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.652670][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 95.743312][ T6838] wg1 speed is unknown, defaulting to 1000 [ 95.995902][ T6855] tipc: Enabling of bearer rejected, failed to enable media [ 96.089219][ T6861] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 96.294784][ T6869] sctp: [Deprecated]: syz.1.229 (pid 6869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.294784][ T6869] Use struct sctp_sack_info instead [ 96.499948][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 96.533544][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 96.544648][ T6888] tipc: Enabled bearer , priority 0 [ 96.562025][ T6889] syzkaller0: entered promiscuous mode [ 96.567516][ T6889] syzkaller0: entered allmulticast mode [ 96.636305][ T6888] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 96.755566][ T6896] netlink: 27 bytes leftover after parsing attributes in process `syz.4.234'. [ 96.769235][ T6888] tipc: Resetting bearer [ 96.803291][ T6888] tipc: Disabling bearer [ 96.896865][ T6902] ieee802154 phy1 wpan1: encryption failed: -22 [ 96.903659][ T6902] ieee802154 phy1 wpan1: encryption failed: -22 [ 96.927349][ T6904] tipc: Enabled bearer , priority 0 [ 96.983822][ T6904] syzkaller0: entered promiscuous mode [ 96.989390][ T6904] syzkaller0: entered allmulticast mode [ 96.995427][ T6904] tipc: Resetting bearer [ 97.015271][ T6903] tipc: Resetting bearer [ 97.999862][ T5967] tipc: Node number set to 224850056 [ 98.041299][ T6903] tipc: Disabling bearer [ 98.092259][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.119321][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.135834][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.166293][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.233469][ T6934] netlink: 'syz.0.244': attribute type 21 has an invalid length. [ 98.406258][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.442531][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.473233][ T6951] tipc: Started in network mode [ 98.478123][ T6951] tipc: Node identity ac14142f, cluster identity 4711 [ 98.511338][ T6951] tipc: Enabling of bearer rejected, failed to enable media [ 98.566689][ T6947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.713477][ T6970] openvswitch: netlink: Flow key attr not present in new flow. [ 99.497875][ T6993] __nla_validate_parse: 3 callbacks suppressed [ 99.497891][ T6993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.260'. [ 99.546777][ T6993] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 99.627435][ T7003] sctp: [Deprecated]: syz.1.263 (pid 7003) Use of int in maxseg socket option. [ 99.627435][ T7003] Use struct sctp_assoc_value instead [ 99.744564][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 99.965159][ T7030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.271'. [ 100.021898][ T7039] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 100.032831][ T7039] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.273'. [ 100.368876][ T7053] netlink: 'syz.4.278': attribute type 6 has an invalid length. [ 100.377226][ T7053] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.278'. [ 100.694775][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 100.739823][ T7073] netlink: 'syz.0.283': attribute type 2 has an invalid length. [ 100.747496][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.766480][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 100.812269][ T7080] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 100.825284][ T7080] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 101.130119][ T7085] wg1 speed is unknown, defaulting to 1000 [ 101.193259][ T7107] openvswitch: netlink: Multiple metadata blocks provided [ 101.236361][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 101.402310][ T7123] netlink: zone id is out of range [ 101.407712][ T7123] netlink: zone id is out of range [ 101.427164][ T7123] netlink: zone id is out of range [ 101.437701][ T7123] netlink: zone id is out of range [ 101.443830][ T7123] netlink: zone id is out of range [ 101.454881][ T7123] netlink: zone id is out of range [ 101.469376][ T7123] netlink: zone id is out of range [ 101.488008][ T7123] netlink: zone id is out of range [ 101.866609][ T7142] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 101.891600][ T7142] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 101.912116][ T7142] netlink: 144 bytes leftover after parsing attributes in process `syz.1.302'. [ 102.142880][ T7153] wg1 speed is unknown, defaulting to 1000 [ 102.144873][ T7154] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 102.181381][ T7155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 102.244967][ T7161] Unsupported ieee802154 address type: 0 [ 102.459154][ T7170] netlink: 'syz.3.307': attribute type 5 has an invalid length. [ 102.514968][ T7161] wg1 speed is unknown, defaulting to 1000 [ 102.587473][ T7168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.600234][ T7168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.612321][ T7168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.651821][ T7170] geneve3: entered promiscuous mode [ 102.657232][ T7170] geneve3: entered allmulticast mode [ 102.783416][ T3535] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 102.846824][ T3535] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 102.879641][ T7168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.895756][ T7168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.906559][ T7168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.712769][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.729098][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.349374][ T7241] netlink: 'syz.1.327': attribute type 5 has an invalid length. [ 104.397707][ T7241] geneve2: entered promiscuous mode [ 104.413107][ T7241] geneve2: entered allmulticast mode [ 104.425228][ T3535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 104.444230][ T3535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 104.463110][ T3535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 104.511149][ T7168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.522633][ T7168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.538870][ T7168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 104.550409][ T7168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 104.618296][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.626235][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.728821][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.746916][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.898109][ T3535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 104.917191][ T3535] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.937052][ T7250] __nla_validate_parse: 11 callbacks suppressed [ 104.937065][ T7250] netlink: 2 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.960186][ T7252] netlink: 2 bytes leftover after parsing attributes in process `syz.1.330'. [ 105.026258][ T7168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.041075][ T7168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.057374][ T7168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.073424][ T7168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 105.124104][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 105.137031][ T7187] wg1 speed is unknown, defaulting to 1000 [ 105.138800][ T3535] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.149240][ T7187] syz0: Port: 1 Link DOWN [ 105.160138][ T7267] netlink: 9 bytes leftover after parsing attributes in process `syz.4.331'. [ 105.171621][ T3535] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.198733][ T7267] ..0·: renamed from hsr0 [ 105.206188][ T7267] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.226015][ T7267] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.236966][ T7267] ..0·: entered allmulticast mode [ 105.242031][ T7267] hsr_slave_0: entered allmulticast mode [ 105.247663][ T7267] hsr_slave_1: entered allmulticast mode [ 105.255014][ T7267] net_ratelimit: 15 callbacks suppressed [ 105.255028][ T7267] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 105.284985][ T3535] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.321229][ T7261] netlink: 22 bytes leftover after parsing attributes in process `syz.1.333'. [ 105.366466][ T7275] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 105.376306][ T7275] netlink: 184 bytes leftover after parsing attributes in process `syz.2.336'. [ 105.386633][ T7275] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 105.447164][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.473561][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 105.495123][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.515476][ T13] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 105.540471][ T3535] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.550901][ T3535] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 105.569103][ T3535] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.587832][ T3535] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 105.654713][ T3535] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.663182][ T3535] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 105.679017][ T3535] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.687344][ T3535] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 105.729051][ T3535] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.758084][ T3535] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 105.780646][ T3535] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 105.802361][ T3535] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 105.926097][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 105.937449][ T7300] netlink: 'syz.4.342': attribute type 20 has an invalid length. [ 105.992216][ T7300] netlink: 'syz.4.342': attribute type 21 has an invalid length. [ 106.027881][ T7306] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 106.107937][ T7306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.124296][ T7307] wg1 speed is unknown, defaulting to 1000 [ 106.133123][ T7311] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 106.199576][ T7306] vlan3: entered allmulticast mode [ 106.217690][ T7306] veth1: entered allmulticast mode [ 106.231463][ T7306] veth1: entered promiscuous mode [ 106.237251][ T7306] veth1: left promiscuous mode [ 106.263939][ T7306] bond2: (slave vlan3): making interface the new active one [ 106.277826][ T7306] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 106.300542][ T7306] veth1: entered promiscuous mode [ 106.310927][ T7306] vlan3: entered promiscuous mode [ 106.316520][ T7306] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 106.375191][ T7320] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.347'. [ 106.474283][ T7326] wg1 speed is unknown, defaulting to 1000 [ 106.806107][ T7336] wg1 speed is unknown, defaulting to 1000 [ 106.887778][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 107.104306][ T7339] wg1 speed is unknown, defaulting to 1000 [ 107.449467][ T7345] wg1 speed is unknown, defaulting to 1000 [ 107.514784][ T7387] netlink: 64 bytes leftover after parsing attributes in process `syz.4.361'. [ 108.158588][ T7421] geneve2: entered promiscuous mode [ 108.173736][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.200328][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.226811][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.274076][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.268612][ T7453] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 109.653347][ T7460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 109.728813][ T7479] veth2: entered promiscuous mode [ 109.745514][ T7479] veth2: entered allmulticast mode [ 109.822333][ T7460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 109.939568][ T7503] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 109.989365][ T7475] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 110.025190][ T7509] __nla_validate_parse: 1 callbacks suppressed [ 110.025205][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.382'. [ 110.035076][ T7460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 110.049602][ T7509] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 110.073044][ T7510] sctp: [Deprecated]: syz.0.383 (pid 7510) Use of int in max_burst socket option. [ 110.073044][ T7510] Use struct sctp_assoc_value instead [ 110.087147][ T7509] sctp: [Deprecated]: syz.3.382 (pid 7509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.087147][ T7509] Use struct sctp_sack_info instead [ 110.171977][ T7483] wg1 speed is unknown, defaulting to 1000 [ 110.204001][ T7460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 110.381875][ T7520] ip6gre1: entered allmulticast mode [ 110.419717][ T7525] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 110.516805][ T7525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.567064][ T7537] vxlan1: entered promiscuous mode [ 110.584246][ T7537] vxlan1: entered allmulticast mode [ 110.594868][ T7531] netlink: 104 bytes leftover after parsing attributes in process `syz.2.386'. [ 110.606193][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 110.645105][ T7536] tipc: Enabled bearer , priority 0 [ 110.818355][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 110.862158][ T7545] tipc: Resetting bearer [ 110.870415][ T7544] syzkaller1: entered promiscuous mode [ 110.896199][ T7544] syzkaller1: entered allmulticast mode [ 110.922866][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 110.990414][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 111.011903][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 111.031289][ T7536] tipc: Disabling bearer [ 111.277406][ T7557] tipc: Enabled bearer , priority 0 [ 111.350208][ T7556] tipc: Disabling bearer [ 111.656373][ T7569] tap0: tun_chr_ioctl cmd 1074025677 [ 111.679241][ T7569] tap0: linktype set to 774 [ 111.949456][ T7583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.403'. [ 112.163832][ T7593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.177624][ T7586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 112.205098][ T7595] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 112.354636][ T7608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.410'. [ 112.379187][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.410'. [ 112.684591][ T7611] syzkaller1: entered promiscuous mode [ 112.696961][ T7611] syzkaller1: entered allmulticast mode [ 112.913414][ T7639] tipc: Can't bind to reserved service type 1 [ 112.920650][ T7639] netlink: 'syz.4.416': attribute type 39 has an invalid length. [ 112.986086][ T7645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.011131][ T7646] netlink: 3 bytes leftover after parsing attributes in process `syz.0.415'. [ 113.026289][ T7646] 0ªX¹¦À: renamed from caif0 [ 113.026341][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 113.045613][ T7645] netlink: 43 bytes leftover after parsing attributes in process `syz.4.416'. [ 113.062958][ T7645] netlink: 'syz.4.416': attribute type 5 has an invalid length. [ 113.072451][ T7645] netlink: 43 bytes leftover after parsing attributes in process `syz.4.416'. [ 113.101854][ T7646] 0ªX¹¦À: entered allmulticast mode [ 113.107219][ T7646] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 113.151716][ T7645] vlan2: entered allmulticast mode [ 113.927867][ T7663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.943063][ T7663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.540182][ T7699] team1: entered promiscuous mode [ 114.575824][ T7699] team1: entered allmulticast mode [ 114.603369][ T7699] 8021q: adding VLAN 0 to HW filter on device team1 [ 114.660358][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.677247][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 114.695972][ T36] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.714976][ T36] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 114.783134][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.791962][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 114.800627][ T36] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.809535][ T36] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 114.817893][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.923545][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 114.945794][ T36] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.962034][ T36] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 114.981719][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.996132][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 115.009189][ T36] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.017623][ T36] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 115.161910][ T7728] wg1 speed is unknown, defaulting to 1000 [ 115.173892][ T51] block nbd0: Receive control failed (result -11) [ 115.420561][ T7745] __nla_validate_parse: 5 callbacks suppressed [ 115.420578][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.439'. [ 115.731625][ T7752] wg1: entered promiscuous mode [ 115.731998][ T7757] FAULT_INJECTION: forcing a failure. [ 115.731998][ T7757] name failslab, interval 1, probability 0, space 0, times 1 [ 115.749366][ T7752] wg1: entered allmulticast mode [ 115.755325][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) [ 115.755368][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.755388][ T7757] Call Trace: [ 115.755395][ T7757] [ 115.755403][ T7757] dump_stack_lvl+0x189/0x250 [ 115.755428][ T7757] ? __pfx____ratelimit+0x10/0x10 [ 115.755447][ T7757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.755466][ T7757] ? __pfx__printk+0x10/0x10 [ 115.755491][ T7757] ? __pfx___might_resched+0x10/0x10 [ 115.755508][ T7757] ? fs_reclaim_acquire+0x7d/0x100 [ 115.755530][ T7757] should_fail_ex+0x414/0x560 [ 115.755559][ T7757] should_failslab+0xa8/0x100 [ 115.755582][ T7757] __kmalloc_cache_noprof+0x70/0x3d0 [ 115.755603][ T7757] ? xfrm_policy_alloc+0x78/0x2b0 [ 115.755631][ T7757] xfrm_policy_alloc+0x78/0x2b0 [ 115.755654][ T7757] xfrm_policy_construct+0x39/0x6b0 [ 115.755682][ T7757] xfrm_add_policy+0x267/0x800 [ 115.755706][ T7757] ? __pfx_xfrm_add_policy+0x10/0x10 [ 115.755721][ T7757] ? apparmor_capable+0x137/0x1b0 [ 115.755747][ T7757] ? __nla_parse+0x40/0x60 [ 115.755770][ T7757] xfrm_user_rcv_msg+0x7a0/0xab0 [ 115.755794][ T7757] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 115.755850][ T7757] ? __pfx___mutex_trylock_common+0x10/0x10 [ 115.755874][ T7757] ? rcu_is_watching+0x15/0xb0 [ 115.755891][ T7757] ? trace_contention_end+0x39/0x120 [ 115.755909][ T7757] ? __mutex_lock+0x335/0x1350 [ 115.755935][ T7757] netlink_rcv_skb+0x208/0x470 [ 115.755957][ T7757] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 115.755976][ T7757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.756011][ T7757] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.756030][ T7757] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.756052][ T7757] xfrm_netlink_rcv+0x79/0x90 [ 115.756069][ T7757] netlink_unicast+0x82f/0x9e0 [ 115.756096][ T7757] ? __pfx_netlink_unicast+0x10/0x10 [ 115.756115][ T7757] ? netlink_sendmsg+0x642/0xb30 [ 115.756137][ T7757] ? skb_put+0x11b/0x210 [ 115.756161][ T7757] netlink_sendmsg+0x805/0xb30 [ 115.756191][ T7757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.756213][ T7757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.756232][ T7757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.756250][ T7757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.756270][ T7757] __sock_sendmsg+0x21c/0x270 [ 115.756291][ T7757] ____sys_sendmsg+0x505/0x830 [ 115.756318][ T7757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.756349][ T7757] ? import_iovec+0x74/0xa0 [ 115.756374][ T7757] ___sys_sendmsg+0x21f/0x2a0 [ 115.756398][ T7757] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.756457][ T7757] ? __fget_files+0x2a/0x420 [ 115.756472][ T7757] ? __fget_files+0x3a0/0x420 [ 115.756499][ T7757] __x64_sys_sendmsg+0x19b/0x260 [ 115.756524][ T7757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.756555][ T7757] ? __pfx_ksys_write+0x10/0x10 [ 115.756574][ T7757] ? rcu_is_watching+0x15/0xb0 [ 115.756596][ T7757] ? do_syscall_64+0xbe/0x3b0 [ 115.756618][ T7757] do_syscall_64+0xfa/0x3b0 [ 115.756635][ T7757] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.756652][ T7757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.756669][ T7757] ? clear_bhb_loop+0x60/0xb0 [ 115.756690][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.756706][ T7757] RIP: 0033:0x7f645278ec29 [ 115.756722][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.756735][ T7757] RSP: 002b:00007f64535b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.756753][ T7757] RAX: ffffffffffffffda RBX: 00007f64529d5fa0 RCX: 00007f645278ec29 [ 115.756766][ T7757] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 115.756776][ T7757] RBP: 00007f64535b8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.756786][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.756796][ T7757] R13: 00007f64529d6038 R14: 00007f64529d5fa0 R15: 00007fff124b7578 [ 115.756827][ T7757] [ 116.230692][ T7763] tipc: Started in network mode [ 116.236133][ T7763] tipc: Node identity f64e0d052861, cluster identity 4711 [ 116.270794][ T7763] tipc: Enabled bearer , priority 0 [ 116.374909][ T7763] syzkaller0: entered promiscuous mode [ 116.381827][ T7763] syzkaller0: entered allmulticast mode [ 116.669598][ T7773] tipc: Resetting bearer [ 116.759257][ T7762] tipc: Resetting bearer [ 116.788449][ T7802] FAULT_INJECTION: forcing a failure. [ 116.788449][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 116.803025][ T7762] tipc: Disabling bearer [ 116.812637][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.4.454 Not tainted syzkaller #0 PREEMPT(full) [ 116.812655][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.812663][ T7802] Call Trace: [ 116.812670][ T7802] [ 116.812677][ T7802] dump_stack_lvl+0x189/0x250 [ 116.812698][ T7802] ? __pfx____ratelimit+0x10/0x10 [ 116.812715][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.812732][ T7802] ? __pfx__printk+0x10/0x10 [ 116.812758][ T7802] ? __pfx___might_resched+0x10/0x10 [ 116.812772][ T7802] ? fs_reclaim_acquire+0x7d/0x100 [ 116.812792][ T7802] should_fail_ex+0x414/0x560 [ 116.812820][ T7802] should_failslab+0xa8/0x100 [ 116.812843][ T7802] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 116.812865][ T7802] ? __alloc_skb+0x112/0x2d0 [ 116.812888][ T7802] __alloc_skb+0x112/0x2d0 [ 116.812911][ T7802] netlink_ack+0x146/0xa50 [ 116.812931][ T7802] ? rcu_is_watching+0x15/0xb0 [ 116.812949][ T7802] ? trace_contention_end+0x39/0x120 [ 116.812977][ T7802] netlink_rcv_skb+0x28c/0x470 [ 116.812996][ T7802] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 116.813016][ T7802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.813050][ T7802] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.813069][ T7802] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.813091][ T7802] xfrm_netlink_rcv+0x79/0x90 [ 116.813108][ T7802] netlink_unicast+0x82f/0x9e0 [ 116.813136][ T7802] ? __pfx_netlink_unicast+0x10/0x10 [ 116.813156][ T7802] ? netlink_sendmsg+0x642/0xb30 [ 116.813172][ T7802] ? skb_put+0x11b/0x210 [ 116.813195][ T7802] netlink_sendmsg+0x805/0xb30 [ 116.813223][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.813245][ T7802] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.813264][ T7802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.813281][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.813307][ T7802] __sock_sendmsg+0x21c/0x270 [ 116.813327][ T7802] ____sys_sendmsg+0x505/0x830 [ 116.813353][ T7802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.813383][ T7802] ? import_iovec+0x74/0xa0 [ 116.813407][ T7802] ___sys_sendmsg+0x21f/0x2a0 [ 116.813430][ T7802] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.813487][ T7802] ? __fget_files+0x2a/0x420 [ 116.813501][ T7802] ? __fget_files+0x3a0/0x420 [ 116.813527][ T7802] __x64_sys_sendmsg+0x19b/0x260 [ 116.813551][ T7802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.813581][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 116.813600][ T7802] ? rcu_is_watching+0x15/0xb0 [ 116.813621][ T7802] ? do_syscall_64+0xbe/0x3b0 [ 116.813643][ T7802] do_syscall_64+0xfa/0x3b0 [ 116.813659][ T7802] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.813675][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.813691][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 116.813711][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.813727][ T7802] RIP: 0033:0x7fcd9718ec29 [ 116.813742][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.813755][ T7802] RSP: 002b:00007fcd97fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.813772][ T7802] RAX: ffffffffffffffda RBX: 00007fcd973d5fa0 RCX: 00007fcd9718ec29 [ 116.813784][ T7802] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 116.813794][ T7802] RBP: 00007fcd97fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.813804][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.813814][ T7802] R13: 00007fcd973d6038 R14: 00007fcd973d5fa0 R15: 00007ffe405b0f78 [ 116.813843][ T7802] [ 117.196668][ T7801] wg1 speed is unknown, defaulting to 1000 [ 117.297993][ T7811] syzkaller0: entered promiscuous mode [ 117.303718][ T7811] syzkaller0: entered allmulticast mode [ 117.356332][ T7814] netlink: 'syz.4.459': attribute type 14 has an invalid length. [ 117.701045][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 117.763279][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 117.858211][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'. [ 117.873676][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 117.885213][ T7829] netlink: 156 bytes leftover after parsing attributes in process `syz.0.464'. [ 117.931796][ T7839] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.964839][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.467'. [ 117.986122][ T7841] tipc: Enabled bearer , priority 0 [ 117.993711][ T7841] syzkaller0: entered promiscuous mode [ 117.999789][ T7841] syzkaller0: entered allmulticast mode [ 118.008251][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 118.019760][ T7841] netlink: 'syz.2.468': attribute type 7 has an invalid length. [ 118.155858][ T7840] tipc: Resetting bearer [ 118.185118][ T7840] tipc: Disabling bearer [ 118.187802][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 118.204813][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 118.220643][ T7854] team0: Device ipip0 is up. Set it down before adding it as a team port [ 118.302860][ T7857] syzkaller0: entered promiscuous mode [ 118.308423][ T7857] syzkaller0: entered allmulticast mode [ 118.714644][ T7882] netlink: 'syz.2.480': attribute type 21 has an invalid length. [ 118.718664][ T7881] pim6reg1: entered promiscuous mode [ 118.728192][ T7881] pim6reg1: entered allmulticast mode [ 118.750754][ T7882] netlink: 'syz.2.480': attribute type 21 has an invalid length. [ 118.757845][ T7881] syzkaller1: entered promiscuous mode [ 118.764253][ T7881] syzkaller1: entered allmulticast mode [ 118.771019][ T73] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.780213][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.789415][ T7881] syzkaller1: left promiscuous mode [ 118.795932][ T7881] syzkaller1: left allmulticast mode [ 118.801759][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.848040][ T7884] wg1 speed is unknown, defaulting to 1000 [ 118.848059][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.121822][ T7897] wg1 speed is unknown, defaulting to 1000 [ 119.169375][ T7902] Bluetooth: MGMT ver 1.23 [ 120.240125][ T7915] wg1 speed is unknown, defaulting to 1000 [ 120.569066][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 120.660218][ T7940] IPVS: Scheduler module ip_vs_sip not found [ 120.917796][ T7955] netlink: 'syz.1.497': attribute type 3 has an invalid length. [ 121.002991][ T7960] ieee80211 phy17: Failed to add default virtual iface [ 121.069567][ T7962] ieee80211 phy18: Failed to add default virtual iface [ 121.282594][ T7974] netlink: 'syz.0.501': attribute type 11 has an invalid length. [ 121.295446][ T7974] netlink: 'syz.0.501': attribute type 11 has an invalid length. [ 121.304099][ T7974] __nla_validate_parse: 7 callbacks suppressed [ 121.304110][ T7974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.501'. [ 121.343566][ T7976] netlink: 'syz.3.502': attribute type 4 has an invalid length. [ 121.411496][ T7982] netlink: 8168 bytes leftover after parsing attributes in process `syz.0.505'. [ 121.414073][ T7978] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 121.457505][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 121.535432][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.507'. [ 121.558057][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 121.563509][ T7995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.508'. [ 121.886968][ T8023] tipc: Started in network mode [ 121.897872][ T8023] tipc: Node identity aa957a9226cd, cluster identity 4711 [ 121.908338][ T8023] tipc: Enabled bearer , priority 0 [ 121.931013][ T8023] tipc: Resetting bearer [ 121.978255][ T8022] tipc: Disabling bearer [ 122.010923][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 122.025389][ T8029] wg1 speed is unknown, defaulting to 1000 [ 122.322837][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 122.419972][ T8062] tun0: tun_chr_ioctl cmd 1074025675 [ 122.427157][ T8062] tun0: persist enabled [ 122.556915][ T8071] tipc: Enabled bearer , priority 0 [ 122.585704][ T8071] tipc: Resetting bearer [ 122.630128][ T8069] tipc: Disabling bearer [ 122.813281][ T8085] wg1 speed is unknown, defaulting to 1000 [ 122.921400][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 122.940950][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.544'. [ 123.196154][ T8106] wg1 speed is unknown, defaulting to 1000 [ 123.489511][ T8129] bond2: entered promiscuous mode [ 123.495655][ T8129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.519642][ T8122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.526684][ T8122] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 123.544910][ T8122] bond2: (slave vcan1): Error -95 calling set_mac_address [ 123.567744][ T8124] tipc: Enabled bearer , priority 0 [ 123.586268][ T8124] tipc: Resetting bearer [ 123.598757][ T8123] tipc: Disabling bearer [ 123.731596][ T8141] syz_tun: entered allmulticast mode [ 123.776832][ T8141] dvmrp8: entered allmulticast mode [ 123.827129][ T8141] wg1 speed is unknown, defaulting to 1000 [ 123.865935][ T8146] netlink: 'syz.3.555': attribute type 23 has an invalid length. [ 124.732878][ T8187] wg1 speed is unknown, defaulting to 1000 [ 124.787696][ T30] audit: type=1800 audit(1758485714.058:2): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.561" name="memory.events" dev="tmpfs" ino=548 res=0 errno=0 [ 125.121310][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.538415][ T8216] syzkaller1: entered promiscuous mode [ 125.544425][ T8216] syzkaller1: entered allmulticast mode [ 126.099668][ T8252] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.116742][ T8252] gretap1: entered promiscuous mode [ 126.122528][ T8252] gretap1: entered allmulticast mode [ 126.247131][ T8256] wg1 speed is unknown, defaulting to 1000 [ 126.361499][ T8270] __nla_validate_parse: 9 callbacks suppressed [ 126.361514][ T8270] netlink: 260 bytes leftover after parsing attributes in process `syz.3.591'. [ 126.393810][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 126.409071][ T8270] netlink: 260 bytes leftover after parsing attributes in process `syz.3.591'. [ 126.418043][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'. [ 126.422687][ T8275] netlink: 180 bytes leftover after parsing attributes in process `syz.1.587'. [ 126.453085][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.469915][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.503090][ T8272] bridge0: entered promiscuous mode [ 126.509901][ T8272] ip6gretap0: entered promiscuous mode [ 126.516753][ T8272] debugfs: 'hsr0' already exists in 'hsr' [ 126.531128][ T8272] Cannot create hsr debugfs directory [ 126.542155][ T8272] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 126.552822][ T8272] hsr0: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 126.587981][ T8281] netlink: 248 bytes leftover after parsing attributes in process `syz.2.592'. [ 126.600127][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.613286][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.734467][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 126.741044][ T8282] netlink: 248 bytes leftover after parsing attributes in process `syz.3.593'. [ 126.887644][ T8286] 8021q: VLANs not supported on ip6gre0 [ 126.923653][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 126.952343][ T8300] batadv1: entered promiscuous mode [ 126.957568][ T8300] batadv1: entered allmulticast mode [ 126.973426][ T8302] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 127.053861][ T8309] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 127.072814][ T3535] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.083369][ T8302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.126871][ T8302] veth7: entered promiscuous mode [ 127.178353][ T8302] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 127.210874][ T3535] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.257054][ T8316] team0: Device gtp0 is up. Set it down before adding it as a team port [ 127.303036][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 127.453202][ T8333] wg1 speed is unknown, defaulting to 1000 [ 128.596131][ T8408] wg1 speed is unknown, defaulting to 1000 [ 128.763292][ T8427] wg1 speed is unknown, defaulting to 1000 [ 128.853607][ T8432] tipc: Enabling of bearer rejected, failed to enable media [ 128.934386][ T8440] wg1 speed is unknown, defaulting to 1000 [ 129.441962][ T8452] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 129.508578][ T8456] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 129.752479][ T8472] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 129.801510][ T8472] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 130.056157][ T8491] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 130.208436][ T8513] netlink: 'syz.3.653': attribute type 19 has an invalid length. [ 130.305089][ T8491] bond1: (slave macvlan2): Releasing backup interface [ 130.353501][ T8491] bond0 (unregistering): Released all slaves [ 130.694542][ T8536] syzkaller0: entered promiscuous mode [ 130.711441][ T8536] syzkaller0: entered allmulticast mode [ 130.746655][ T8540] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 131.141571][ T8563] wg1 speed is unknown, defaulting to 1000 [ 131.638166][ T8590] __nla_validate_parse: 20 callbacks suppressed [ 131.638182][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.675'. [ 131.842123][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 131.883106][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 131.925461][ T8603] vlan4: entered allmulticast mode [ 131.932537][ T8603] bridge0: entered allmulticast mode [ 131.938736][ T8603] bridge1: port 1(vlan4) entered blocking state [ 131.945705][ T8603] bridge1: port 1(vlan4) entered disabled state [ 131.956371][ T8603] vlan4: entered promiscuous mode [ 131.961647][ T8603] bridge0: entered promiscuous mode [ 132.290047][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 132.613654][ T8641] macvlan1: entered promiscuous mode [ 132.619404][ T8641] macvlan1: entered allmulticast mode [ 132.624887][ T8641] veth1_vlan: entered allmulticast mode [ 132.778264][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 132.903413][ T8665] tipc: Enabled bearer , priority 0 [ 132.921691][ T8665] syzkaller0: entered promiscuous mode [ 132.927182][ T8665] syzkaller0: entered allmulticast mode [ 132.980578][ T8665] tipc: Resetting bearer [ 133.030774][ T8664] tipc: Resetting bearer [ 133.077052][ T8664] tipc: Disabling bearer [ 133.102042][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 133.103794][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 133.120301][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 133.120534][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 133.222462][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.704'. [ 133.232935][ T8687] unsupported nlmsg_type 40 [ 133.360692][ T8700] netem: change failed [ 133.787750][ T8727] wg1 speed is unknown, defaulting to 1000 [ 133.895806][ T8733] tipc: Enabled bearer , priority 0 [ 133.941879][ T8733] syzkaller0: entered promiscuous mode [ 133.961953][ T8733] syzkaller0: entered allmulticast mode [ 134.021067][ T8733] tipc: Resetting bearer [ 134.168827][ T8731] tipc: Resetting bearer [ 134.196772][ T8731] tipc: Disabling bearer [ 134.240388][ T8748] wg1 speed is unknown, defaulting to 1000 [ 134.671673][ T8781] tipc: Enabled bearer , priority 0 [ 134.697785][ T8774] syzkaller0: entered promiscuous mode [ 134.705372][ T8774] syzkaller0: entered allmulticast mode [ 134.750947][ T8785] veth1_vlan: left allmulticast mode [ 134.765607][ T8785] macvlan1: left promiscuous mode [ 134.776946][ T8785] macvlan1: left allmulticast mode [ 134.792294][ T8785] geneve2: left promiscuous mode [ 134.797354][ T8785] geneve2: left allmulticast mode [ 134.840935][ T8785] team1: left promiscuous mode [ 134.845743][ T8785] team1: left allmulticast mode [ 134.891364][ T3569] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 134.899959][ T3569] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 134.954851][ T8774] tipc: Resetting bearer [ 134.976682][ T3569] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 135.006322][ T8773] tipc: Resetting bearer [ 135.035227][ T8773] tipc: Disabling bearer [ 135.048641][ T3569] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 135.058661][ T8801] 8021q: VLANs not supported on vxcan0 [ 135.138446][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 135.180245][ T8807] netlink: 'syz.2.733': attribute type 10 has an invalid length. [ 135.234255][ T8818] syzkaller0: entered promiscuous mode [ 135.239917][ T8818] syzkaller0: entered allmulticast mode [ 135.298673][ T8805] tipc: Enabled bearer , priority 0 [ 135.320514][ T8804] tipc: Resetting bearer [ 135.348443][ T8804] tipc: Disabling bearer [ 135.652849][ T8838] netlink: 'syz.3.739': attribute type 303 has an invalid length. [ 135.778653][ T8845] batman_adv: batadv0: Adding interface: dummy0 [ 135.796354][ T8845] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.850673][ T8845] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 136.105812][ T8864] veth3: entered promiscuous mode [ 136.192406][ T8869] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 136.200250][ T8869] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.381685][ T8885] tipc: Enabled bearer , priority 10 [ 136.414338][ T8887] netlink: 'syz.1.755': attribute type 13 has an invalid length. [ 136.416234][ T8884] trusted_key: syz.4.754 sent an empty control message without MSG_MORE. [ 136.571144][ T8899] veth1_to_bridge: mtu less than device minimum [ 136.671959][ T8907] nft_compat: unsupported protocol 0 [ 136.698771][ T8909] wg1 speed is unknown, defaulting to 1000 [ 136.958614][ T8916] wg1 speed is unknown, defaulting to 1000 [ 137.205950][ T8936] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 137.257003][ T8939] __nla_validate_parse: 14 callbacks suppressed [ 137.257020][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 137.327465][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.461564][ T8909] netlink: 'syz.1.765': attribute type 6 has an invalid length. [ 137.499007][ T7685] tipc: Node number set to 2886997039 [ 137.605919][ T8934] wg1 speed is unknown, defaulting to 1000 [ 137.622255][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 137.949125][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 137.957984][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 138.001128][ T8960] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 138.309241][ T8968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.774'. [ 138.614593][ T8973] syz.3.774 (8973) used greatest stack depth: 15608 bytes left [ 138.979571][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.3.781'. [ 139.306846][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 139.487711][ T9036] wg1 speed is unknown, defaulting to 1000 [ 139.605379][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 139.653411][ T9046] IPv6: sit1: Disabled Multicast RS [ 139.847043][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 139.873561][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 140.224709][ T9063] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.238119][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.881112][ T9104] wg1 speed is unknown, defaulting to 1000 [ 140.963288][ T9115] tipc: Enabled bearer , priority 0 [ 140.972042][ T9115] syzkaller0: entered promiscuous mode [ 140.977527][ T9115] syzkaller0: entered allmulticast mode [ 140.999493][ T9115] tipc: Resetting bearer [ 141.008091][ T9114] tipc: Resetting bearer [ 141.027248][ T9114] tipc: Disabling bearer [ 141.647405][ T9160] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.729939][ T9154] bond0: (slave macvlan3): Opening slave failed [ 141.779741][ T9161] bridge0: port 1(syz_tun) entered blocking state [ 141.788130][ T9161] bridge0: port 1(syz_tun) entered disabled state [ 141.806216][ T9161] syz_tun: entered allmulticast mode [ 141.840745][ T9161] syz_tun: entered promiscuous mode [ 142.082134][ T9193] netlink: 'syz.3.833': attribute type 2 has an invalid length. [ 142.105393][ T9193] : entered promiscuous mode [ 142.149287][ T9198] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 142.394917][ T9154] infiniband syz1: set down [ 142.399733][ T9154] infiniband syz1: added syz_tun [ 142.476679][ T9154] RDS/IB: syz1: added [ 142.481741][ T9154] smc: adding ib device syz1 with port count 1 [ 142.488178][ T9154] smc: ib device syz1 port 1 has no pnetid [ 142.651087][ T9223] bond3: entered promiscuous mode [ 142.662371][ T9223] __nla_validate_parse: 9 callbacks suppressed [ 142.662384][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 142.677660][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 142.859565][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 187.518574][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 187.679623][ T9267] netlink: 'syz.4.851': attribute type 12 has an invalid length. [ 187.886912][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 187.968558][ T9280] tipc: Enabled bearer , priority 0 [ 187.982727][ T9280] syzkaller0: entered promiscuous mode [ 187.988334][ T9280] syzkaller0: entered allmulticast mode [ 188.017455][ T9275] tipc: Resetting bearer [ 188.038232][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.855'. [ 188.052641][ T9275] tipc: Disabling bearer [ 188.096345][ T9284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.107530][ T9284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.118184][ T9284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.141015][ T9283] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 188.182444][ T9283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.218696][ T9284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.229435][ T9284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.240904][ T9284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.317629][ T9283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.325490][ T9283] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.341020][ T9283] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 188.419673][ T9288] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 188.579877][ T9284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.592478][ T9284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.613739][ T9284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.742277][ T9284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.756059][ T9284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.766626][ T9284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.911447][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.919869][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 188.928161][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.954547][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.969175][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 188.985863][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.060569][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.075231][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.087519][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.135199][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.145328][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.167746][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.280101][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 189.402414][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'. [ 189.658522][ T9374] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 189.669046][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.681690][ T9374] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 189.747342][ T9376] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 189.756869][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 189.766360][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 189.817175][ T9383] wg1 speed is unknown, defaulting to 1000 [ 190.333709][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'. [ 190.601013][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 190.631642][ T9429] netlink: 64 bytes leftover after parsing attributes in process `syz.1.894'. [ 190.681579][ T9429] tipc: Invalid UDP bearer configuration [ 190.681631][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 190.975850][ T9448] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 191.728699][ T9501] vcan0: Master is either lo or non-ether device [ 191.959744][ T9517] wg1 speed is unknown, defaulting to 1000 [ 192.376744][ T9529] !: renamed from dummy0 [ 192.668258][ T9532] wg1 speed is unknown, defaulting to 1000 [ 193.279900][ T9555] wg1 speed is unknown, defaulting to 1000 [ 193.933612][ T9585] __nla_validate_parse: 2 callbacks suppressed [ 193.933630][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 194.126645][ T9591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.926'. [ 194.233186][ T9598] netlink: 'syz.1.928': attribute type 4 has an invalid length. [ 194.308133][ T9596] netlink: 'syz.1.928': attribute type 4 has an invalid length. [ 194.319816][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 194.575054][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'. [ 194.590745][ T9607] netlink: 120 bytes leftover after parsing attributes in process `syz.2.932'. [ 194.596759][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 194.687137][ T9611] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.695226][ T7684] IPVS: starting estimator thread 0... [ 194.789142][ T9619] IPVS: using max 29 ests per chain, 69600 per kthread [ 194.833008][ T9622] tipc: Enabled bearer , priority 0 [ 194.846524][ T9622] syzkaller0: entered promiscuous mode [ 194.879002][ T9622] syzkaller0: entered allmulticast mode [ 194.966607][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 194.981504][ T9633] vlan0: entered promiscuous mode [ 195.082357][ T9622] tipc: Resetting bearer [ 195.136668][ T9621] tipc: Resetting bearer [ 195.205963][ T9621] tipc: Disabling bearer [ 195.523984][ T9657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.578326][ T9667] netlink: 'syz.1.948': attribute type 12 has an invalid length. [ 195.593226][ T9663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.627098][ T9665] vlan4: entered allmulticast mode [ 195.633706][ T9665] bridge_slave_0: entered allmulticast mode [ 195.855454][ T9695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.954'. [ 195.984567][ T9696] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 195.996103][ T9696] tipc: Enabled bearer , priority 10 [ 196.331549][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 196.337607][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 196.342595][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 196.478975][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.4.967'. [ 196.562930][ T9742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'. [ 196.781810][ T9747] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 196.801053][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.413576][ T9767] bridge_slave_1: left allmulticast mode [ 197.424606][ T9767] bridge_slave_1: left promiscuous mode [ 197.430769][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.440663][ T9767] bridge_slave_0: left promiscuous mode [ 197.446404][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.482251][ T9773] netlink: 'syz.3.973': attribute type 13 has an invalid length. [ 197.493238][ T9773] netlink: 'syz.3.973': attribute type 17 has an invalid length. [ 197.502325][ T9767] bridge0 (unregistering): left promiscuous mode [ 197.566842][ T9772] macvlan1: entered promiscuous mode [ 197.573341][ T9772] ipvlan0: entered promiscuous mode [ 197.580066][ T9772] ipvlan0: left promiscuous mode [ 197.586179][ T9772] macvlan1: left promiscuous mode [ 197.758548][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.811045][ T9773] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.913929][ T9773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.938054][ T9774] tc_dump_action: action bad kind [ 198.064705][ T9792] sctp: [Deprecated]: syz.4.981 (pid 9792) Use of int in maxseg socket option. [ 198.064705][ T9792] Use struct sctp_assoc_value instead [ 198.467714][ T9828] wg1 speed is unknown, defaulting to 1000 [ 198.835551][ T9850] wg1 speed is unknown, defaulting to 1000 [ 199.202568][ T9870] netlink: 'syz.0.1002': attribute type 13 has an invalid length. [ 199.269803][ T9873] __nla_validate_parse: 8 callbacks suppressed [ 199.269819][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 200.577104][ T9934] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1018'. [ 200.618542][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 200.695130][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1021'. [ 200.738797][ T9937] 8021q: VLANs not supported on vxcan1 [ 200.835476][ T9951] netlink: 'syz.3.1023': attribute type 3 has an invalid length. [ 201.437705][ T9993] netlink: 'syz.2.1034': attribute type 13 has an invalid length. [ 201.461315][ T9987] wg1 speed is unknown, defaulting to 1000 [ 201.490803][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 201.519094][ T9998] vlan7: entered promiscuous mode [ 201.534345][ T9998] gretap0: entered promiscuous mode [ 201.628938][T10004] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.649697][T10004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.661589][T10004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.701875][ T9956] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.730428][T10004] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.741158][T10004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.777812][T10004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.897077][T10004] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.907157][T10004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.918299][T10004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.941555][T10013] wg1 speed is unknown, defaulting to 1000 [ 201.986302][T10004] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.013210][T10004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 202.023766][T10004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.161834][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.173575][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.193200][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.244937][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 202.253434][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.271195][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.297050][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.305430][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.319245][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.339320][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.482357][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.494101][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.508981][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.577064][ T30] audit: type=1804 audit(1758485791.848:3): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1044" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1091 res=1 errno=0 [ 202.698355][T10034] wg1 speed is unknown, defaulting to 1000 [ 202.740898][ T30] audit: type=1800 audit(1758485791.848:4): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1091 res=0 errno=0 [ 202.804561][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1046'. [ 203.185475][T10058] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 203.201465][T10058] tipc: Enabled bearer , priority 0 [ 203.271761][T10057] tipc: Disabling bearer [ 203.423529][T10065] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.1052'. [ 203.677444][T10072] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 203.685339][T10072] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1054'. [ 203.700519][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 204.413011][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.446813][T10121] __nla_validate_parse: 8 callbacks suppressed [ 204.446827][T10121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1067'. [ 204.595116][T10123] IPVS: Scheduler module ip_vs_sip not found [ 205.230214][T10154] wg1 speed is unknown, defaulting to 1000 [ 205.254580][T10145] wg1 speed is unknown, defaulting to 1000 [ 205.303390][T10177] macvlan1: entered promiscuous mode [ 205.328444][T10177] ipvlan0: entered promiscuous mode [ 205.363495][T10177] ipvlan0: left promiscuous mode [ 205.384512][T10177] macvlan1: left promiscuous mode [ 205.451704][T10181] batadv_slave_1: entered promiscuous mode [ 205.458558][T10186] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 205.499656][T10175] batadv_slave_1: left promiscuous mode [ 205.514343][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 205.705276][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 205.721073][T10192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1083'. [ 206.443837][T10231] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 206.457178][T10231] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1095'. [ 206.725719][T10245] pimreg: entered allmulticast mode [ 206.756767][T10247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1098'. [ 206.797331][T10245] dvmrp8: entered allmulticast mode [ 206.857896][T10250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1100'. [ 206.902336][T10250] pimreg: left allmulticast mode [ 206.907463][T10250] dvmrp8: left allmulticast mode [ 207.047337][T10262] netlink: 'syz.4.1103': attribute type 13 has an invalid length. [ 207.110295][T10262] dvmrp0: entered allmulticast mode [ 207.210593][T10268] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 207.228439][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'. [ 207.242131][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'. [ 207.307860][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.317503][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 207.326811][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.335391][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.369121][T10278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 207.392675][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.405399][T10274] wg1 speed is unknown, defaulting to 1000 [ 207.405488][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.486436][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.526121][T10276] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 207.825152][T10334] tap0: tun_chr_ioctl cmd 1074025680 [ 207.962028][T10346] syz_tun: left allmulticast mode [ 207.967175][T10346] dvmrp8: left allmulticast mode [ 208.028070][T10348] rdma_rxe: rxe_newlink: failed to add lo [ 208.196430][T10348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.637766][T10366] veth3: entered promiscuous mode [ 208.844950][T10389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.890055][T10392] batadv0: entered promiscuous mode [ 208.921266][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.509140][T10436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.539443][T10436] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 209.655810][T10450] tipc: Enabled bearer , priority 0 [ 209.663385][T10450] syzkaller0: entered promiscuous mode [ 209.682514][T10450] syzkaller0: entered allmulticast mode [ 209.830062][T10459] syzkaller0: entered promiscuous mode [ 209.835573][T10459] syzkaller0: entered allmulticast mode [ 209.842554][T10450] tipc: Resetting bearer [ 209.861765][T10450] tipc: Disabling bearer [ 211.024043][T10481] syzkaller1: entered promiscuous mode [ 211.029934][T10481] syzkaller1: entered allmulticast mode [ 211.124198][T10488] __nla_validate_parse: 72 callbacks suppressed [ 211.124214][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 211.377042][T10513] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1156'. [ 211.409927][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 211.445380][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 211.513538][T10517] vlan3: entered promiscuous mode [ 211.531211][T10509] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1159'. [ 211.536528][T10517] macvtap0: entered promiscuous mode [ 211.766014][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 211.953961][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 211.991267][T10540] geneve3: entered promiscuous mode [ 212.014836][T10543] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1167'. [ 212.031795][ T73] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.040098][ T73] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.069010][ T73] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.077278][ T73] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.128824][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'. [ 212.199716][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1171'. [ 212.403122][T10561] wg1 speed is unknown, defaulting to 1000 [ 213.222357][T10587] syzkaller1: entered promiscuous mode [ 213.231595][T10587] syzkaller1: entered allmulticast mode [ 213.653779][T10609] @0Ù: renamed from bond_slave_1 [ 214.442096][T10590] validate_nla: 28 callbacks suppressed [ 214.442114][T10590] netlink: 'syz.4.1179': attribute type 3 has an invalid length. [ 214.553194][T10618] syzkaller1: entered promiscuous mode [ 214.567153][T10618] syzkaller1: entered allmulticast mode [ 214.689080][T10625] netlink: 'syz.0.1189': attribute type 9 has an invalid length. [ 214.801858][T10633] netlink: 'syz.4.1196': attribute type 11 has an invalid length. [ 214.899060][T10642] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 215.463333][T10665] tipc: Enabled bearer , priority 0 [ 215.475815][T10665] syzkaller0: entered promiscuous mode [ 215.485621][T10665] syzkaller0: entered allmulticast mode [ 215.535355][T10665] tipc: Resetting bearer [ 215.544561][T10664] tipc: Resetting bearer [ 215.583249][T10664] tipc: Disabling bearer [ 215.706067][T10675] wg1 speed is unknown, defaulting to 1000 [ 215.719425][T10678] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 215.730361][T10678] dvmrp1: linktype set to 768 [ 215.868723][T10311] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.877768][T10311] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.913777][T10311] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.938270][T10688] netlink: 'syz.4.1211': attribute type 10 has an invalid length. [ 215.938403][T10311] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.161545][T10706] __nla_validate_parse: 9 callbacks suppressed [ 216.161562][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 217.169992][T10729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.184954][T10729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.200427][T10729] hsr0: entered promiscuous mode [ 217.205483][T10729] hsr0: entered allmulticast mode [ 217.227196][T10729] hsr_slave_0: entered allmulticast mode [ 217.237623][T10729] hsr_slave_1: entered allmulticast mode [ 217.369483][T10740] wg1 speed is unknown, defaulting to 1000 [ 217.448583][T10746] geneve5: entered promiscuous mode [ 217.456073][T10746] geneve5: entered allmulticast mode [ 217.485579][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'. [ 217.520157][T10739] wg1 speed is unknown, defaulting to 1000 [ 217.527862][T10743] wg1 speed is unknown, defaulting to 1000 [ 217.530478][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 217.544577][T10749] vlan0: entered promiscuous mode [ 217.552281][T10749] tipc: Enabled bearer , priority 0 [ 217.576480][T10755] netlink: 'syz.0.1229': attribute type 3 has an invalid length. [ 217.585331][T10755] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1229'. [ 217.600738][T10745] wg1 speed is unknown, defaulting to 1000 [ 217.822626][T10763] wg1 speed is unknown, defaulting to 1000 [ 218.529271][T10783] tipc: Enabled bearer , priority 0 [ 218.536433][T10782] tipc: Enabling of bearer rejected, already enabled [ 218.545409][T10783] syzkaller0: entered promiscuous mode [ 218.551163][T10783] syzkaller0: entered allmulticast mode [ 218.584325][T10782] tipc: Resetting bearer [ 218.602294][T10781] tipc: Resetting bearer [ 218.621610][T10781] tipc: Disabling bearer [ 218.878272][T10791] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1238'. [ 218.894107][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 218.971478][T10787] wg1 speed is unknown, defaulting to 1000 [ 219.706852][T10812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.827567][T10816] wg1 speed is unknown, defaulting to 1000 [ 220.140003][T10827] batman_adv: batadv0: Removing interface: dummy0 [ 220.204543][T10827] bond0: (slave batadv0): Releasing backup interface [ 220.270195][T10827] bridge_slave_0: left allmulticast mode [ 220.276971][T10827] bridge_slave_0: left promiscuous mode [ 220.284008][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.303367][T10827] bridge_slave_1: left allmulticast mode [ 220.309855][T10827] bridge_slave_1: left promiscuous mode [ 220.315758][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.328708][T10827] bond0: (slave bond_slave_0): Releasing backup interface [ 220.343953][T10827] bond0: (slave bond_slave_1): Releasing backup interface [ 220.361638][T10827] team0: Failed to send options change via netlink (err -105) [ 220.370084][T10827] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 220.381145][T10827] team0: Port device team_slave_0 removed [ 220.388403][T10827] team0: Failed to send options change via netlink (err -105) [ 220.399811][T10827] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 220.411580][T10827] team0: Port device team_slave_1 removed [ 220.417733][T10827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.426778][T10827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.434742][T10827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.451200][T10828] team0: Failed to send options change via netlink (err -105) [ 220.458660][T10828] team0: Mode changed to "activebackup" [ 220.584639][T10844] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1247'. [ 220.719889][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 220.922975][T10865] netlink: 'syz.1.1254': attribute type 3 has an invalid length. [ 220.934417][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'. [ 220.942649][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 220.977386][T10857] wg1 speed is unknown, defaulting to 1000 [ 221.003504][ T30] audit: type=1800 audit(1758485810.288:5): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1254" name="x000000000000000a00000000000000000000012" dev="tmpfs" ino=1294 res=0 errno=0 [ 221.107131][ T30] audit: type=1804 audit(1758485810.348:6): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1254" name="/newroot/249/x000000000000000a00000000000000000000012" dev="tmpfs" ino=1294 res=1 errno=0 [ 221.397990][T10879] tipc: Enabled bearer , priority 0 [ 221.418268][T10879] tipc: Resetting bearer [ 221.448328][T10878] tipc: Disabling bearer [ 221.574106][T10890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.682193][T10890] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 221.693529][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 222.416444][T10908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.436840][T10911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.474196][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1269'. [ 222.504891][T10908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.615349][T10908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.675297][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 222.714396][T10908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.848665][T10311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.906097][T10932] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 222.944126][T10314] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.978681][T10932] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 222.995029][T10947] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1276'. [ 223.016975][T10311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.036472][T10946] wg1 speed is unknown, defaulting to 1000 [ 223.052214][T10949] dvmrp8: entered allmulticast mode [ 223.061666][T10932] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 223.074575][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 223.086228][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 223.103879][T10314] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.158746][T10932] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 223.381037][T10955] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 223.399652][T10955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1279'. [ 223.423708][T10953] wg1 speed is unknown, defaulting to 1000 [ 223.479559][T10309] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 223.498423][T10960] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1280'. [ 223.668243][T10314] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 223.724687][T10314] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 223.853902][T10314] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 223.966321][T10970] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1284'. [ 224.248688][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 224.270967][T10979] wg1 speed is unknown, defaulting to 1000 [ 224.478908][T10990] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 224.739164][T10997] syzkaller1: entered promiscuous mode [ 224.746960][T10997] syzkaller1: entered allmulticast mode [ 225.477842][T11021] bridge1: left allmulticast mode [ 225.485629][T11034] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 225.497879][T11021] geneve2: left promiscuous mode [ 225.505298][T11021] veth2: left promiscuous mode [ 225.510333][T11021] veth2: left allmulticast mode [ 225.523630][ T73] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.532139][ T73] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.540906][ T73] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.560796][ T73] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.579172][ T73] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.597772][ T73] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.614945][ T73] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.627496][ T73] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.638087][ T73] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.674266][ T73] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.683109][ T73] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 225.693578][ T73] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.790242][T11048] wg1 speed is unknown, defaulting to 1000 [ 225.906877][T11055] wg1 speed is unknown, defaulting to 1000 [ 226.124862][T11072] batadv_slave_0: entered allmulticast mode [ 226.201510][T11074] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 226.238514][T11077] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 226.364174][T11077] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.461208][T11081] bond6: (slave geneve2): making interface the new active one [ 226.472493][T11081] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 226.487333][T10309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.500405][T10309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.561346][T10309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.579123][T10309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.909336][T11105] __nla_validate_parse: 21 callbacks suppressed [ 226.909354][T11105] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1323'. [ 226.976931][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 227.389421][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 227.563223][T11130] wg1 speed is unknown, defaulting to 1000 [ 227.591981][T11132] delete_channel: no stack [ 228.114475][T11140] wg1 speed is unknown, defaulting to 1000 [ 229.230408][T11172] tipc: Enabled bearer , priority 0 [ 229.237904][T11172] syzkaller0: entered promiscuous mode [ 229.253312][T11172] syzkaller0: entered allmulticast mode [ 229.339714][T11173] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 229.377327][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 229.673063][T11173] tipc: Resetting bearer [ 229.751568][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 229.772663][T11192] wg1 speed is unknown, defaulting to 1000 [ 229.782090][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.882442][T11206] tipc: Enabled bearer , priority 0 [ 229.901539][T11206] syzkaller0: entered promiscuous mode [ 229.907934][T11206] syzkaller0: entered allmulticast mode [ 229.922261][T11206] tipc: Resetting bearer [ 229.980436][T11210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1346'. [ 230.002682][T11210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1346'. [ 230.040415][T11171] tipc: Resetting bearer [ 230.103126][T11171] tipc: Disabling bearer [ 230.156024][T11172] infiniband syz!: set down [ 230.199528][T11172] infiniband syz!: added team_slave_0 [ 230.210199][T11172] syz!: rxe_create_cq: returned err = -12 [ 230.217377][T11172] infiniband syz!: Couldn't create ib_mad CQ [ 230.229191][T11172] infiniband syz!: Couldn't open port 1 [ 230.255467][T11224] tap0: tun_chr_ioctl cmd 1074025677 [ 230.261419][T11224] tap0: linktype set to 0 [ 230.268421][T11172] RDS/IB: syz!: added [ 230.274786][T11172] smc: adding ib device syz! with port count 1 [ 230.281977][T11172] smc: ib device syz! port 1 has no pnetid [ 230.378319][T11229] tipc: Enabled bearer , priority 0 [ 230.414228][T11229] syzkaller0: entered promiscuous mode [ 230.436479][T11229] syzkaller0: entered allmulticast mode [ 230.460584][T11229] tipc: Resetting bearer [ 230.477993][T11228] tipc: Resetting bearer [ 230.513239][T11228] tipc: Disabling bearer [ 230.649680][T11232] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 230.683409][T11233] netdevsim netdevsim4: Direct firmware load for ./bus failed with error -2 [ 230.709253][T11233] netdevsim netdevsim4: Falling back to sysfs fallback for: ./bus [ 230.733227][T11232] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1353'. [ 230.918966][ T7684] tipc: Node number set to 3727625477 [ 231.324739][T11256] netlink: 'syz.1.1359': attribute type 32 has an invalid length. [ 231.353298][T11256] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 231.386589][T11256] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 231.519921][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.025356][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 232.430275][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 233.111612][T11316] wg2: entered promiscuous mode [ 233.121858][T11316] wg2: entered allmulticast mode [ 233.194346][T11263] wg1 speed is unknown, defaulting to 1000 [ 233.222737][T11287] wg1 speed is unknown, defaulting to 1000 [ 233.294459][T11248] wg1 speed is unknown, defaulting to 1000 [ 233.801706][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 252.728963][ T7690] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 283.512051][T11367] siw: device registration error -23 [ 283.548025][T11367] wg1 speed is unknown, defaulting to 1000 [ 283.569492][T11366] smc: net device bond0 applied user defined pnetid SYZ2 [ 283.582321][T11366] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 283.736440][T11378] wg1 speed is unknown, defaulting to 1000 [ 284.369531][T11385] netlink: 'syz.3.1389': attribute type 22 has an invalid length. [ 284.521220][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 284.584082][T10309] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.595828][T10309] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.676998][T10309] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.692066][T10309] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.796785][T11398] wg1 speed is unknown, defaulting to 1000 [ 284.819589][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 286.011816][T11440] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 286.019476][T11440] dvmrp1: owner set to 0 [ 286.039258][T11440] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 286.044820][T11440] dvmrp1: linktype set to 773 [ 286.051185][T11440] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 286.216381][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 286.250638][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1402'. [ 286.331722][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 286.649910][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 286.658799][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 287.146131][T11484] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 287.169358][T11484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 287.190814][T11480] netlink: 'syz.1.1412': attribute type 12 has an invalid length. [ 287.199993][T11480] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1412'. [ 287.242200][T11488] netlink: 'syz.4.1415': attribute type 13 has an invalid length. [ 287.360769][T10309] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.369844][T10309] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.418990][T10309] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.457266][T10309] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.507624][T11502] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 287.767972][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 287.783028][T11518] wg1 speed is unknown, defaulting to 1000 [ 287.806292][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 287.930520][ T5966] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 287.987261][T11541] !: renamed from dummy0 [ 288.044571][T11541] netlink: 'syz.1.1431': attribute type 4 has an invalid length. [ 288.096093][T11546] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.110158][T11541] : renamed from bond0 [ 288.175216][T11546] wg1 speed is unknown, defaulting to 1000 [ 288.246167][T11550] wg1 speed is unknown, defaulting to 1000 [ 288.702183][T11573] netlink: 'syz.2.1439': attribute type 2 has an invalid length. [ 289.011074][T11582] Bluetooth: MGMT ver 1.23 [ 289.227390][T11590] dvmrp0: left allmulticast mode [ 289.249282][T11590] dvmrp8: left allmulticast mode [ 289.337348][T11594] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 289.777428][T11615] __nla_validate_parse: 6 callbacks suppressed [ 289.777453][T11615] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1449'. [ 289.793414][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 290.958183][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 290.975383][T11632] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 290.983881][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 291.204312][T11646] wg1 speed is unknown, defaulting to 1000 [ 291.247369][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1458'. [ 291.287378][T11650] netlink: 'syz.3.1458': attribute type 7 has an invalid length. [ 291.313574][T11650] netlink: 'syz.3.1458': attribute type 8 has an invalid length. [ 291.333841][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 291.597790][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 291.686557][T11668] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1462'. [ 292.007826][T11685] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1468'. [ 292.049690][T11685] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1468'. [ 292.081291][T11691] tipc: Invalid UDP bearer configuration [ 292.081344][T11691] tipc: Enabling of bearer rejected, failed to enable media [ 292.105486][T11691] syzkaller1: entered promiscuous mode [ 292.115093][T11691] syzkaller1: entered allmulticast mode [ 292.783309][T11723] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.860513][T11723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.380874][T11757] dvmrp8: entered allmulticast mode [ 293.424257][T11756] dvmrp8: left allmulticast mode [ 293.746126][T11759] wg1 speed is unknown, defaulting to 1000 [ 294.196680][T11784] wg1 speed is unknown, defaulting to 1000 [ 294.914398][T11805] sctp: [Deprecated]: syz.0.1501 (pid 11805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.914398][T11805] Use struct sctp_sack_info instead [ 295.501263][T11833] netlink: 'syz.1.1507': attribute type 13 has an invalid length. [ 295.531804][T11833] netlink: 'syz.1.1507': attribute type 17 has an invalid length. [ 295.639954][T11833] 8021q: adding VLAN 0 to HW filter on device  [ 295.648003][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.655835][T11833] tipc: Resetting bearer [ 295.671932][T11833] tipc: Resetting bearer [ 295.679867][T11833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.700500][T10313] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.760748][T11841] __nla_validate_parse: 3 callbacks suppressed [ 295.760764][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 295.958447][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1513'. [ 296.228436][T11849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1515'. [ 296.380938][T11853] wg1 speed is unknown, defaulting to 1000 [ 296.528423][T11870] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 296.766308][T11882] veth5: entered promiscuous mode [ 296.795693][T11878] wg1 speed is unknown, defaulting to 1000 [ 296.810664][T11890] ip6tnl1: entered promiscuous mode [ 296.816230][T11890] ip6tnl1: entered allmulticast mode [ 296.823721][T11890] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 296.923481][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 297.041765][T11899] wg1 speed is unknown, defaulting to 1000 [ 297.816529][T11909] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1531'. [ 297.827466][T11910] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1531'. [ 298.112962][T11914] lo speed is unknown, defaulting to 1000 [ 298.183996][T11914] lo speed is unknown, defaulting to 1000 [ 298.217638][T11914] lo speed is unknown, defaulting to 1000 [ 298.249466][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 298.274382][T11914] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.345071][T11914] lo speed is unknown, defaulting to 1000 [ 298.358511][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'. [ 298.405145][T11914] lo speed is unknown, defaulting to 1000 [ 298.665542][T11914] lo speed is unknown, defaulting to 1000 [ 298.685534][T11914] lo speed is unknown, defaulting to 1000 [ 298.739525][T11914] lo speed is unknown, defaulting to 1000 [ 298.740111][T11917] wg1 speed is unknown, defaulting to 1000 [ 298.747184][T11914] lo speed is unknown, defaulting to 1000 [ 298.759372][T11914] lo speed is unknown, defaulting to 1000 [ 298.968565][T11931] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 299.103024][T11931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.127292][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1539'. [ 299.316979][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 299.395112][T11961] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1543'. [ 299.602962][T11968] netlink: 'syz.0.1545': attribute type 13 has an invalid length. [ 299.610894][T11968] netlink: 'syz.0.1545': attribute type 17 has an invalid length. [ 299.779615][T11968] bridge0: port 1(syz_tun) entered blocking state [ 299.786211][T11968] bridge0: port 1(syz_tun) entered listening state [ 299.796890][T11968] 8021q: adding VLAN 0 to HW filter on device  [ 299.805259][T11968] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.824568][T11968] 0ªX¹¦À: left allmulticast mode [ 299.829896][T11968] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 299.856087][ T5966] syz1: Port: 1 Link ACTIVE [ 299.902245][T11978] wg1 speed is unknown, defaulting to 1000 [ 299.909529][T11979] wg1 speed is unknown, defaulting to 1000 [ 300.009048][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.915296][T11978] lo speed is unknown, defaulting to 1000 [ 300.968796][T12007] __nla_validate_parse: 2 callbacks suppressed [ 300.995241][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 301.078383][T12016] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.087204][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 301.127940][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1556'. [ 301.176621][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 301.196837][T12026] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 301.207057][T12026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1557'. [ 301.352047][T11979] lo speed is unknown, defaulting to 1000 [ 302.162879][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 302.188657][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 302.241573][T12057] tipc: Enabled bearer , priority 0 [ 302.459697][T12057] wg1 speed is unknown, defaulting to 1000 [ 302.903004][T12084] wg1 speed is unknown, defaulting to 1000 [ 303.081472][T12056] tipc: Disabling bearer [ 303.483581][T12120] netlink: 'syz.2.1582': attribute type 12 has an invalid length. [ 303.689920][T12057] lo speed is unknown, defaulting to 1000 [ 303.834762][T12133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1587'. [ 304.071392][T12141] wg1 speed is unknown, defaulting to 1000 [ 304.113910][T12084] lo speed is unknown, defaulting to 1000 [ 304.430566][T12153] vlan0: entered promiscuous mode [ 304.439425][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 304.565410][T12163] pim6reg: entered allmulticast mode [ 304.591760][T12163] tipc: Enabling of bearer rejected, failed to enable media [ 304.855295][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 305.253306][T12141] lo speed is unknown, defaulting to 1000 [ 305.395914][T12183] netlink: 'syz.2.1600': attribute type 21 has an invalid length. [ 306.253941][T12202] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 306.281815][T12203] __nla_validate_parse: 2 callbacks suppressed [ 306.281830][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 306.307731][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 306.375152][T12202] : (slave bridge0): Enslaving as an active interface with an up link [ 306.541673][T12207] : (slave bridge0): Releasing backup interface [ 306.557834][T12207] vlan4 (unregistering): left allmulticast mode [ 306.564868][T12207] bridge0 (unregistering): left allmulticast mode [ 306.577847][T12207] vlan4 (unregistering): left promiscuous mode [ 306.585064][T12207] bridge0 (unregistering): left promiscuous mode [ 306.592113][T12207] bridge1: port 1(vlan4) entered disabled state [ 308.809429][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.210177][ C1] bridge0: port 1(syz_tun) entered learning state [ 326.089162][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.568985][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 330.575615][ C0] bridge0: topology change detected, propagating [ 339.688924][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 352.259848][T12247] wg1 speed is unknown, defaulting to 1000 [ 352.343678][T12251] FAULT_INJECTION: forcing a failure. [ 352.343678][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 352.394397][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.3.1622 Not tainted syzkaller #0 PREEMPT(full) [ 352.394422][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.394436][T12251] Call Trace: [ 352.394443][T12251] [ 352.394451][T12251] dump_stack_lvl+0x189/0x250 [ 352.394477][T12251] ? __pfx____ratelimit+0x10/0x10 [ 352.394497][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.394515][T12251] ? __pfx__printk+0x10/0x10 [ 352.394542][T12251] ? __pfx___might_resched+0x10/0x10 [ 352.394557][T12251] ? fs_reclaim_acquire+0x7d/0x100 [ 352.394580][T12251] should_fail_ex+0x414/0x560 [ 352.394609][T12251] should_failslab+0xa8/0x100 [ 352.394634][T12251] __kmalloc_noprof+0xcb/0x4f0 [ 352.394654][T12251] ? kfree+0x4d/0x440 [ 352.394670][T12251] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 352.394693][T12251] tomoyo_realpath_from_path+0xe3/0x5d0 [ 352.394714][T12251] ? tomoyo_domain+0xd9/0x130 [ 352.394737][T12251] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 352.394760][T12251] tomoyo_path_number_perm+0x1e8/0x5a0 [ 352.394791][T12251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.394833][T12251] ? __lock_acquire+0xab9/0xd20 [ 352.394876][T12251] ? __fget_files+0x2a/0x420 [ 352.394895][T12251] ? __fget_files+0x2a/0x420 [ 352.394909][T12251] ? __fget_files+0x3a0/0x420 [ 352.394923][T12251] ? __fget_files+0x2a/0x420 [ 352.394942][T12251] security_file_ioctl+0xcb/0x2d0 [ 352.394967][T12251] __se_sys_ioctl+0x47/0x170 [ 352.394990][T12251] do_syscall_64+0xfa/0x3b0 [ 352.395008][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.395024][T12251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.395041][T12251] ? clear_bhb_loop+0x60/0xb0 [ 352.395061][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.395082][T12251] RIP: 0033:0x7f645278ec29 [ 352.395098][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.395112][T12251] RSP: 002b:00007f64535b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.395130][T12251] RAX: ffffffffffffffda RBX: 00007f64529d5fa0 RCX: 00007f645278ec29 [ 352.395142][T12251] RDX: 0000200000000040 RSI: 0000000000008b32 RDI: 0000000000000004 [ 352.395153][T12251] RBP: 00007f64535b8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.395164][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.395174][T12251] R13: 00007f64529d6038 R14: 00007f64529d5fa0 R15: 00007fff124b7578 [ 352.395203][T12251] [ 352.395211][T12251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.857122][T12279] netlink: 'syz.4.1630': attribute type 23 has an invalid length. [ 352.891371][T12247] lo speed is unknown, defaulting to 1000 [ 352.942924][T12284] syzkaller0: entered promiscuous mode [ 352.969064][T12284] syzkaller0: entered allmulticast mode [ 353.122050][T12276] sctp: [Deprecated]: syz.3.1629 (pid 12276) Use of int in max_burst socket option. [ 353.122050][T12276] Use struct sctp_assoc_value instead [ 353.365134][T12303] netlink: 'syz.2.1636': attribute type 4 has an invalid length. [ 353.556097][T12319] FAULT_INJECTION: forcing a failure. [ 353.556097][T12319] name failslab, interval 1, probability 0, space 0, times 0 [ 353.603306][T12321] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 353.612028][T12319] CPU: 1 UID: 0 PID: 12319 Comm: syz.3.1639 Not tainted syzkaller #0 PREEMPT(full) [ 353.612052][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.612063][T12319] Call Trace: [ 353.612070][T12319] [ 353.612078][T12319] dump_stack_lvl+0x189/0x250 [ 353.612103][T12319] ? __pfx____ratelimit+0x10/0x10 [ 353.612122][T12319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.612142][T12319] ? __pfx__printk+0x10/0x10 [ 353.612167][T12319] ? __pfx___might_resched+0x10/0x10 [ 353.612184][T12319] ? fs_reclaim_acquire+0x7d/0x100 [ 353.612206][T12319] should_fail_ex+0x414/0x560 [ 353.612235][T12319] should_failslab+0xa8/0x100 [ 353.612260][T12319] __kmalloc_noprof+0xcb/0x4f0 [ 353.612280][T12319] ? tomoyo_encode+0x28b/0x550 [ 353.612303][T12319] tomoyo_encode+0x28b/0x550 [ 353.612327][T12319] tomoyo_realpath_from_path+0x58d/0x5d0 [ 353.612347][T12319] ? tomoyo_domain+0xd9/0x130 [ 353.612370][T12319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 353.612390][T12319] tomoyo_path_number_perm+0x1e8/0x5a0 [ 353.612415][T12319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.612452][T12319] ? __lock_acquire+0xab9/0xd20 [ 353.612495][T12319] ? __fget_files+0x2a/0x420 [ 353.612513][T12319] ? __fget_files+0x2a/0x420 [ 353.612527][T12319] ? __fget_files+0x3a0/0x420 [ 353.612539][T12319] ? __fget_files+0x2a/0x420 [ 353.612557][T12319] security_file_ioctl+0xcb/0x2d0 [ 353.612580][T12319] __se_sys_ioctl+0x47/0x170 [ 353.612602][T12319] do_syscall_64+0xfa/0x3b0 [ 353.612618][T12319] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.612635][T12319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.612653][T12319] ? clear_bhb_loop+0x60/0xb0 [ 353.612672][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.612692][T12319] RIP: 0033:0x7f645278ec29 [ 353.612706][T12319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.612721][T12319] RSP: 002b:00007f6453597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.612738][T12319] RAX: ffffffffffffffda RBX: 00007f64529d6090 RCX: 00007f645278ec29 [ 353.612750][T12319] RDX: 0000200000000040 RSI: 0000000000008b32 RDI: 0000000000000004 [ 353.612762][T12319] RBP: 00007f6453597090 R08: 0000000000000000 R09: 0000000000000000 [ 353.612773][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.612783][T12319] R13: 00007f64529d6128 R14: 00007f64529d6090 R15: 00007fff124b7578 [ 353.612814][T12319] [ 353.612837][T12319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.668220][T12321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1641'. [ 354.058624][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 354.104972][T12332] netlink: 'syz.4.1645': attribute type 25 has an invalid length. [ 354.119286][T12332] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 354.127227][T12332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1645'. [ 354.154389][T12332] team0: Port device geneve0 added [ 354.160372][T10296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.175140][T10296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.184665][T10296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.196226][T10296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.332477][T12348] wg1 speed is unknown, defaulting to 1000 [ 354.450983][T12356] netlink: 'syz.0.1652': attribute type 4 has an invalid length. [ 354.664291][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 354.731125][T12360] wg1 speed is unknown, defaulting to 1000 [ 354.933467][T12348] lo speed is unknown, defaulting to 1000 [ 354.961290][T12371] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1656'. [ 355.165970][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 355.356892][T12360] lo speed is unknown, defaulting to 1000 [ 356.036362][T12393] tipc: Resetting bearer [ 356.067716][T12394] geneve3: entered promiscuous mode [ 356.073045][T12394] geneve3: entered allmulticast mode [ 356.084149][T10297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 356.093146][T10297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 356.101524][T10297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 356.109957][T10297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 356.285163][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 356.375359][T12405] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 356.388094][T12405] k›*·]‘: entered promiscuous mode [ 360.648995][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 434.888909][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.889024][ T31] INFO: task kworker/1:4:5966 blocked for more than 143 seconds. [ 514.896783][ T31] Not tainted syzkaller #0 [ 514.901890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.910615][ T31] task:kworker/1:4 state:D stack:23848 pid:5966 tgid:5966 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 514.922694][ T31] Workqueue: events rfkill_sync_work [ 514.927981][ T31] Call Trace: [ 514.931268][ T31] [ 514.934182][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 514.938673][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.944297][ T31] ? __pfx___schedule+0x10/0x10 [ 514.949217][ T31] ? schedule+0x91/0x360 [ 514.953468][ T31] schedule+0x165/0x360 [ 514.957634][ T31] schedule_preempt_disabled+0x13/0x30 [ 514.963216][ T31] __mutex_lock+0x7e6/0x1350 [ 514.967823][ T31] ? __mutex_lock+0x5bb/0x1350 [ 514.972678][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 514.977982][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 514.983136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.988344][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 514.994703][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 515.001156][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 515.006886][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 515.012057][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 515.017780][ T31] rfkill_set_block+0x1cf/0x440 [ 515.022772][ T31] rfkill_sync_work+0x114/0x200 [ 515.027630][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 515.033397][ T31] process_scheduled_works+0xae1/0x17b0 [ 515.039078][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.045114][ T31] worker_thread+0x8a0/0xda0 [ 515.049810][ T31] kthread+0x70e/0x8a0 [ 515.053926][ T31] ? __pfx_worker_thread+0x10/0x10 [ 515.068762][ T31] ? __pfx_kthread+0x10/0x10 [ 515.073382][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.078587][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.123050][ T31] ? __pfx_kthread+0x10/0x10 [ 515.127675][ T31] ret_from_fork+0x439/0x7d0 [ 515.132356][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.137455][ T31] ? __switch_to_asm+0x39/0x70 [ 515.142272][ T31] ? __switch_to_asm+0x33/0x70 [ 515.147017][ T31] ? __pfx_kthread+0x10/0x10 [ 515.151617][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.156371][ T31] [ 515.159492][ T31] INFO: task kworker/1:13:7690 blocked for more than 143 seconds. [ 515.167284][ T31] Not tainted syzkaller #0 [ 515.172244][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.180954][ T31] task:kworker/1:13 state:D stack:24424 pid:7690 tgid:7690 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 515.192978][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 515.199736][ T31] Call Trace: [ 515.203033][ T31] [ 515.205953][ T31] __schedule+0x1798/0x4cc0 [ 515.210816][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.216204][ T31] ? __pfx___schedule+0x10/0x10 [ 515.221167][ T31] ? schedule+0x91/0x360 [ 515.225409][ T31] schedule+0x165/0x360 [ 515.229583][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.235046][ T31] __mutex_lock+0x7e6/0x1350 [ 515.239732][ T31] ? __mutex_lock+0x5bb/0x1350 [ 515.244498][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 515.250796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.255808][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 515.261558][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 515.267275][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 515.273389][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 515.279124][ T31] process_scheduled_works+0xae1/0x17b0 [ 515.284663][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.290740][ T31] worker_thread+0x8a0/0xda0 [ 515.295342][ T31] kthread+0x70e/0x8a0 [ 515.299424][ T31] ? __pfx_worker_thread+0x10/0x10 [ 515.304513][ T31] ? __pfx_kthread+0x10/0x10 [ 515.309145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.314325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.319631][ T31] ? __pfx_kthread+0x10/0x10 [ 515.324203][ T31] ret_from_fork+0x439/0x7d0 [ 515.328864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.333985][ T31] ? __switch_to_asm+0x39/0x70 [ 515.338794][ T31] ? __switch_to_asm+0x33/0x70 [ 515.343551][ T31] ? __pfx_kthread+0x10/0x10 [ 515.348160][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.352983][ T31] [ 515.356015][ T31] INFO: task syz.1.1638:12304 blocked for more than 143 seconds. [ 515.363793][ T31] Not tainted syzkaller #0 [ 515.368820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.377479][ T31] task:syz.1.1638 state:D stack:26920 pid:12304 tgid:12304 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 515.389462][ T31] Call Trace: [ 515.392723][ T31] [ 515.395637][ T31] __schedule+0x1798/0x4cc0 [ 515.400154][ T31] ? validate_chain+0x897/0x2140 [ 515.405106][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.410028][ T31] ? __pfx___schedule+0x10/0x10 [ 515.414870][ T31] ? schedule+0x91/0x360 [ 515.419124][ T31] schedule+0x165/0x360 [ 515.423258][ T31] schedule_timeout+0x9a/0x270 [ 515.428016][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.433601][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.438866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.444056][ T31] ? wait_for_completion+0x267/0x5d0 [ 515.449450][ T31] wait_for_completion+0x2bf/0x5d0 [ 515.454579][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.460285][ T31] ? __flush_work+0xd2/0xbc0 [ 515.464901][ T31] ? __flush_work+0xd2/0xbc0 [ 515.469527][ T31] __flush_work+0x9b9/0xbc0 [ 515.474014][ T31] ? __flush_work+0xd2/0xbc0 [ 515.478586][ T31] ? __pfx___flush_work+0x10/0x10 [ 515.483667][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 515.488990][ T31] ? __pfx___cancel_work+0x10/0x10 [ 515.494081][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 515.499785][ T31] __cancel_work_sync+0xbe/0x110 [ 515.504717][ T31] rfkill_unregister+0x92/0x220 [ 515.509581][ T31] nfc_unregister_device+0x96/0x2a0 [ 515.514920][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 515.520709][ T31] virtual_ncidev_close+0x56/0x90 [ 515.525721][ T31] __fput+0x44c/0xa70 [ 515.529726][ T31] task_work_run+0x1d1/0x260 [ 515.534311][ T31] ? __pfx_task_work_run+0x10/0x10 [ 515.539690][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 515.545155][ T31] exit_to_user_mode_loop+0xec/0x110 [ 515.550481][ T31] do_syscall_64+0x2bd/0x3b0 [ 515.555069][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.560383][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.566449][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.571198][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.577086][ T31] RIP: 0033:0x7fc51ff8ec29 [ 515.581552][ T31] RSP: 002b:00007ffd9e46ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 515.589971][ T31] RAX: 0000000000000000 RBX: 00000000000563cb RCX: 00007fc51ff8ec29 [ 515.597938][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 515.605976][ T31] RBP: 00007fc5201d7da0 R08: 0000000000000001 R09: 0000001e9e46f14f [ 515.614236][ T31] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007fc5201d5fac [ 515.622327][ T31] R13: 00007fc5201d5fa0 R14: ffffffffffffffff R15: 00007ffd9e46ef70 [ 515.630345][ T31] [ 515.633367][ T31] INFO: task syz.3.1658:12378 blocked for more than 144 seconds. [ 515.643262][ T31] Not tainted syzkaller #0 [ 515.648183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.656961][ T31] task:syz.3.1658 state:D stack:22984 pid:12378 tgid:12377 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 515.668924][ T31] Call Trace: [ 515.672189][ T31] [ 515.675100][ T31] __schedule+0x1798/0x4cc0 [ 515.679622][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.684470][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.689434][ T31] ? __pfx___schedule+0x10/0x10 [ 515.694278][ T31] ? schedule+0x91/0x360 [ 515.698496][ T31] schedule+0x165/0x360 [ 515.702651][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.708090][ T31] __mutex_lock+0x7e6/0x1350 [ 515.712738][ T31] ? rcu_is_watching+0x15/0xb0 [ 515.717487][ T31] ? __mutex_lock+0x5bb/0x1350 [ 515.722259][ T31] ? rfkill_register+0x37/0x8e0 [ 515.727091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.732177][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 515.737098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.742296][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 515.747567][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 515.753257][ T31] rfkill_register+0x37/0x8e0 [ 515.757920][ T31] wiphy_register+0x2231/0x2aa0 [ 515.762889][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 515.768069][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 515.773241][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 515.779322][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 515.784802][ T31] ? ieee80211_register_hw+0x13b1/0x40a0 [ 515.790507][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 515.796299][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 515.802637][ T31] ? __hrtimer_setup+0x187/0x210 [ 515.807555][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 515.813464][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 515.819204][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 515.824502][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 515.830621][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 515.836150][ T31] ? __sock_sendmsg+0x21c/0x270 [ 515.841008][ T31] ? ____sys_sendmsg+0x505/0x830 [ 515.845932][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 515.851163][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 515.856891][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 515.862484][ T31] ? __nla_parse+0x40/0x60 [ 515.866911][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 515.873378][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 515.878945][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 515.885004][ T31] ? bpf_lsm_capable+0x9/0x20 [ 515.889736][ T31] ? security_capable+0x7e/0x2e0 [ 515.894666][ T31] genl_rcv_msg+0x60e/0x790 [ 515.899179][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.904193][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 515.909788][ T31] ? __asan_memcpy+0x40/0x70 [ 515.914360][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 515.919746][ T31] netlink_rcv_skb+0x208/0x470 [ 515.924494][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.929802][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.934842][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.940188][ T31] ? down_read+0x1ad/0x2e0 [ 515.944619][ T31] genl_rcv+0x28/0x40 [ 515.948608][ T31] netlink_unicast+0x82f/0x9e0 [ 515.953437][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 515.958754][ T31] ? netlink_sendmsg+0x642/0xb30 [ 515.963713][ T31] ? skb_put+0x11b/0x210 [ 515.967947][ T31] netlink_sendmsg+0x805/0xb30 [ 515.972766][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.978043][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 515.983129][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.988396][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.993736][ T31] __sock_sendmsg+0x21c/0x270 [ 515.998398][ T31] ____sys_sendmsg+0x505/0x830 [ 516.003168][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.008445][ T31] ? import_iovec+0x74/0xa0 [ 516.013002][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 516.017663][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.022886][ T31] ? __fget_files+0x2a/0x420 [ 516.027456][ T31] ? __fget_files+0x3a0/0x420 [ 516.032187][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 516.037111][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.042590][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.047339][ T31] ? do_syscall_64+0xbe/0x3b0 [ 516.052084][ T31] do_syscall_64+0xfa/0x3b0 [ 516.056570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.061782][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.067846][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.072621][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.078501][ T31] RIP: 0033:0x7f645278ec29 [ 516.082914][ T31] RSP: 002b:00007f64535b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.091573][ T31] RAX: ffffffffffffffda RBX: 00007f64529d5fa0 RCX: 00007f645278ec29 [ 516.099612][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 516.107588][ T31] RBP: 00007f6452811e41 R08: 0000000000000000 R09: 0000000000000000 [ 516.115685][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.123675][ T31] R13: 00007f64529d6038 R14: 00007f64529d5fa0 R15: 00007fff124b7578 [ 516.131715][ T31] [ 516.134730][ T31] INFO: task syz.3.1658:12381 blocked for more than 144 seconds. [ 516.142456][ T31] Not tainted syzkaller #0 [ 516.147364][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.156082][ T31] task:syz.3.1658 state:D stack:24584 pid:12381 tgid:12377 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 516.167986][ T31] Call Trace: [ 516.171400][ T31] [ 516.174317][ T31] __schedule+0x1798/0x4cc0 [ 516.178880][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.183734][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.188570][ T31] ? __pfx___schedule+0x10/0x10 [ 516.193485][ T31] ? schedule+0x91/0x360 [ 516.197718][ T31] schedule+0x165/0x360 [ 516.202007][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.207447][ T31] __mutex_lock+0x7e6/0x1350 [ 516.212093][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.216864][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.221595][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.226610][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.231832][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.236956][ T31] genl_rcv_msg+0x10d/0x790 [ 516.241500][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.246511][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 516.251755][ T31] ? __asan_memcpy+0x40/0x70 [ 516.256330][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.261722][ T31] netlink_rcv_skb+0x208/0x470 [ 516.266478][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.271401][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.276421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.281714][ T31] ? down_read+0x1ad/0x2e0 [ 516.286114][ T31] genl_rcv+0x28/0x40 [ 516.290146][ T31] netlink_unicast+0x82f/0x9e0 [ 516.294918][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.300212][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.305158][ T31] ? skb_put+0x11b/0x210 [ 516.309532][ T31] netlink_sendmsg+0x805/0xb30 [ 516.314284][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.319596][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.324543][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.329915][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.335184][ T31] __sock_sendmsg+0x21c/0x270 [ 516.339870][ T31] __sys_sendto+0x3bd/0x520 [ 516.344370][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.349548][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.354846][ T31] ? exc_page_fault+0x76/0xf0 [ 516.359534][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 516.364806][ T31] __x64_sys_sendto+0xde/0x100 [ 516.369627][ T31] do_syscall_64+0xfa/0x3b0 [ 516.374111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.379316][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.385360][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.390086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.395984][ T31] RIP: 0033:0x7f6452790abc [ 516.400406][ T31] RSP: 002b:00007f6453595ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 516.408944][ T31] RAX: ffffffffffffffda RBX: 00007f6453595fc0 RCX: 00007f6452790abc [ 516.416910][ T31] RDX: 0000000000000020 RSI: 00007f6453596010 RDI: 0000000000000003 [ 516.424985][ T31] RBP: 0000000000000000 R08: 00007f6453595f14 R09: 000000000000000c [ 516.433004][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 516.441010][ T31] R13: 00007f6453595f68 R14: 00007f6453596010 R15: 0000000000000000 [ 516.449085][ T31] [ 516.452102][ T31] INFO: task syz.0.1660:12387 blocked for more than 144 seconds. [ 516.459907][ T31] Not tainted syzkaller #0 [ 516.464833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.473541][ T31] task:syz.0.1660 state:D stack:28328 pid:12387 tgid:12386 ppid:5858 task_flags:0x400140 flags:0x00004004 [ 516.485455][ T31] Call Trace: [ 516.488794][ T31] [ 516.491712][ T31] __schedule+0x1798/0x4cc0 [ 516.496224][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.501106][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.505942][ T31] ? __pfx___schedule+0x10/0x10 [ 516.510877][ T31] ? schedule+0x91/0x360 [ 516.515231][ T31] schedule+0x165/0x360 [ 516.519396][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.524833][ T31] __mutex_lock+0x7e6/0x1350 [ 516.529550][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.534311][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.538989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.543999][ T31] ? stack_trace_save+0x9c/0xe0 [ 516.548916][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 516.554267][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.559440][ T31] genl_rcv_msg+0x10d/0x790 [ 516.563956][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.568877][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.573898][ T31] netlink_rcv_skb+0x208/0x470 [ 516.578636][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.583517][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.588548][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.593893][ T31] ? down_read+0x1ad/0x2e0 [ 516.598292][ T31] genl_rcv+0x28/0x40 [ 516.602272][ T31] netlink_unicast+0x82f/0x9e0 [ 516.607022][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.612349][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.617278][ T31] ? skb_put+0x11b/0x210 [ 516.621566][ T31] netlink_sendmsg+0x805/0xb30 [ 516.626349][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.631726][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.636650][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.642042][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.647350][ T31] __sock_sendmsg+0x21c/0x270 [ 516.652158][ T31] __sys_sendto+0x3bd/0x520 [ 516.656651][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.661719][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.667015][ T31] ? exc_page_fault+0x76/0xf0 [ 516.671769][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 516.677052][ T31] __x64_sys_sendto+0xde/0x100 [ 516.681836][ T31] do_syscall_64+0xfa/0x3b0 [ 516.686317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.691567][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.697614][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.702339][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.708253][ T31] RIP: 0033:0x7fdd28190abc [ 516.712740][ T31] RSP: 002b:00007fdd28fc5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 516.721174][ T31] RAX: ffffffffffffffda RBX: 00007fdd28fc5fc0 RCX: 00007fdd28190abc [ 516.729201][ T31] RDX: 0000000000000024 RSI: 00007fdd28fc6010 RDI: 0000000000000004 [ 516.737161][ T31] RBP: 0000000000000000 R08: 00007fdd28fc5f14 R09: 000000000000000c [ 516.745162][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 516.753263][ T31] R13: 00007fdd28fc5f68 R14: 00007fdd28fc6010 R15: 0000000000000000 [ 516.761253][ T31] [ 516.764267][ T31] INFO: task syz.0.1660:12390 blocked for more than 145 seconds. [ 516.772051][ T31] Not tainted syzkaller #0 [ 516.776973][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.785648][ T31] task:syz.0.1660 state:D stack:27872 pid:12390 tgid:12386 ppid:5858 task_flags:0x400040 flags:0x00004004 [ 516.797610][ T31] Call Trace: [ 516.800913][ T31] [ 516.803850][ T31] __schedule+0x1798/0x4cc0 [ 516.808342][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.813275][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.818114][ T31] ? __pfx___schedule+0x10/0x10 [ 516.823001][ T31] ? schedule+0x91/0x360 [ 516.827247][ T31] schedule+0x165/0x360 [ 516.831461][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.836903][ T31] __mutex_lock+0x7e6/0x1350 [ 516.841498][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.846248][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.850993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.856010][ T31] ? stack_trace_save+0x9c/0xe0 [ 516.860970][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 516.866356][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.871528][ T31] genl_rcv_msg+0x10d/0x790 [ 516.876017][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.880868][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.885882][ T31] netlink_rcv_skb+0x208/0x470 [ 516.890737][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.895572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.900618][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.905896][ T31] ? down_read+0x1ad/0x2e0 [ 516.910373][ T31] genl_rcv+0x28/0x40 [ 516.914341][ T31] netlink_unicast+0x82f/0x9e0 [ 516.919104][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.924380][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.929380][ T31] ? skb_put+0x11b/0x210 [ 516.933608][ T31] netlink_sendmsg+0x805/0xb30 [ 516.938354][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.943661][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.948600][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.953945][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.959238][ T31] __sock_sendmsg+0x21c/0x270 [ 516.963905][ T31] __sys_sendto+0x3bd/0x520 [ 516.968390][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.973716][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.979063][ T31] ? exc_page_fault+0x76/0xf0 [ 516.983741][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 516.989087][ T31] __x64_sys_sendto+0xde/0x100 [ 516.993835][ T31] do_syscall_64+0xfa/0x3b0 [ 516.998336][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.003537][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.009643][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.014306][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.020217][ T31] RIP: 0033:0x7fdd28190abc [ 517.024611][ T31] RSP: 002b:00007fdd28fa4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.033080][ T31] RAX: ffffffffffffffda RBX: 00007fdd28fa4fc0 RCX: 00007fdd28190abc [ 517.041052][ T31] RDX: 000000000000001c RSI: 00007fdd28fa5010 RDI: 0000000000000004 [ 517.049077][ T31] RBP: 0000000000000000 R08: 00007fdd28fa4f14 R09: 000000000000000c [ 517.057028][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 517.064992][ T31] R13: 00007fdd28fa4f68 R14: 00007fdd28fa5010 R15: 0000000000000000 [ 517.073052][ T31] [ 517.076067][ T31] INFO: task syz.2.1661:12395 blocked for more than 145 seconds. [ 517.083896][ T31] Not tainted syzkaller #0 [ 517.088919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.097579][ T31] task:syz.2.1661 state:D stack:25864 pid:12395 tgid:12392 ppid:5855 task_flags:0x400140 flags:0x00004004 [ 517.109571][ T31] Call Trace: [ 517.112836][ T31] [ 517.115749][ T31] __schedule+0x1798/0x4cc0 [ 517.120259][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.125097][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.130012][ T31] ? __pfx___schedule+0x10/0x10 [ 517.134848][ T31] ? schedule+0x91/0x360 [ 517.139098][ T31] schedule+0x165/0x360 [ 517.143241][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.148690][ T31] __mutex_lock+0x7e6/0x1350 [ 517.153389][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.158131][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.162810][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.167819][ T31] ? stack_trace_save+0x9c/0xe0 [ 517.172725][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 517.178080][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.183200][ T31] genl_rcv_msg+0x10d/0x790 [ 517.187688][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.192685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.197719][ T31] netlink_rcv_skb+0x208/0x470 [ 517.202525][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.207379][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.212504][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.217781][ T31] ? down_read+0x1ad/0x2e0 [ 517.222196][ T31] genl_rcv+0x28/0x40 [ 517.226162][ T31] netlink_unicast+0x82f/0x9e0 [ 517.230981][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.236250][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.241182][ T31] ? skb_put+0x11b/0x210 [ 517.245407][ T31] netlink_sendmsg+0x805/0xb30 [ 517.250228][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.255506][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.260438][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.265704][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.271039][ T31] __sock_sendmsg+0x21c/0x270 [ 517.275698][ T31] __sys_sendto+0x3bd/0x520 [ 517.280214][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.285224][ T31] ? count_memcg_event_mm+0x21/0x260 [ 517.290687][ T31] ? exc_page_fault+0x76/0xf0 [ 517.295355][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 517.300760][ T31] __x64_sys_sendto+0xde/0x100 [ 517.305522][ T31] do_syscall_64+0xfa/0x3b0 [ 517.310091][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.315271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.321355][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.326036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.331990][ T31] RIP: 0033:0x7f0e97b90abc [ 517.336396][ T31] RSP: 002b:00007f0e989f8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.344840][ T31] RAX: ffffffffffffffda RBX: 00007f0e989f8fc0 RCX: 00007f0e97b90abc [ 517.352884][ T31] RDX: 0000000000000024 RSI: 00007f0e989f9010 RDI: 000000000000000a [ 517.360868][ T31] RBP: 0000000000000000 R08: 00007f0e989f8f14 R09: 000000000000000c [ 517.368895][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 517.376849][ T31] R13: 00007f0e989f8f68 R14: 00007f0e989f9010 R15: 0000000000000000 [ 517.384834][ T31] [ 517.387848][ T31] INFO: task syz.4.1666:12407 blocked for more than 145 seconds. [ 517.395618][ T31] Not tainted syzkaller #0 [ 517.400565][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.409398][ T31] task:syz.4.1666 state:D stack:28328 pid:12407 tgid:12406 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 517.421328][ T31] Call Trace: [ 517.424594][ T31] [ 517.427527][ T31] __schedule+0x1798/0x4cc0 [ 517.432096][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.436941][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.441801][ T31] ? __pfx___schedule+0x10/0x10 [ 517.446637][ T31] ? schedule+0x91/0x360 [ 517.450922][ T31] schedule+0x165/0x360 [ 517.455069][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.460570][ T31] __mutex_lock+0x7e6/0x1350 [ 517.465164][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.470016][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.474683][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.479757][ T31] ? stack_trace_save+0x9c/0xe0 [ 517.484605][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 517.490062][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.495163][ T31] genl_rcv_msg+0x10d/0x790 [ 517.499675][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.504511][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.509586][ T31] netlink_rcv_skb+0x208/0x470 [ 517.514459][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.519421][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.524431][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.529801][ T31] ? down_read+0x1ad/0x2e0 [ 517.534199][ T31] genl_rcv+0x28/0x40 [ 517.538164][ T31] netlink_unicast+0x82f/0x9e0 [ 517.542935][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.548200][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.553177][ T31] ? skb_put+0x11b/0x210 [ 517.557404][ T31] netlink_sendmsg+0x805/0xb30 [ 517.562181][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.567447][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.572427][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.577708][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.583010][ T31] __sock_sendmsg+0x21c/0x270 [ 517.587672][ T31] __sys_sendto+0x3bd/0x520 [ 517.592271][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.597292][ T31] ? count_memcg_event_mm+0x21/0x260 [ 517.602637][ T31] ? exc_page_fault+0x76/0xf0 [ 517.607324][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 517.612672][ T31] __x64_sys_sendto+0xde/0x100 [ 517.617430][ T31] do_syscall_64+0xfa/0x3b0 [ 517.621941][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.627120][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.633330][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.638000][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.643938][ T31] RIP: 0033:0x7fcd97190abc [ 517.648342][ T31] RSP: 002b:00007fcd97fe5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.656834][ T31] RAX: ffffffffffffffda RBX: 00007fcd97fe5fc0 RCX: 00007fcd97190abc [ 517.664820][ T31] RDX: 0000000000000028 RSI: 00007fcd97fe6010 RDI: 0000000000000004 [ 517.672844][ T31] RBP: 0000000000000000 R08: 00007fcd97fe5f14 R09: 000000000000000c [ 517.680833][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 517.688988][ T31] R13: 00007fcd97fe5f68 R14: 00007fcd97fe6010 R15: 0000000000000000 [ 517.696980][ T31] [ 517.700056][ T31] INFO: task syz-executor:12414 blocked for more than 146 seconds. [ 517.707944][ T31] Not tainted syzkaller #0 [ 517.712941][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.721617][ T31] task:syz-executor state:D stack:28040 pid:12414 tgid:12414 ppid:1 task_flags:0x400040 flags:0x00004000 [ 517.733588][ T31] Call Trace: [ 517.736848][ T31] [ 517.739916][ T31] __schedule+0x1798/0x4cc0 [ 517.744411][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.749318][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.754153][ T31] ? __pfx___schedule+0x10/0x10 [ 517.759011][ T31] ? schedule+0x91/0x360 [ 517.763233][ T31] schedule+0x165/0x360 [ 517.767367][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.772898][ T31] __mutex_lock+0x7e6/0x1350 [ 517.777475][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.782256][ T31] ? rfkill_register+0x37/0x8e0 [ 517.787090][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.792178][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 517.797448][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 517.802855][ T31] ? device_initialize+0x24b/0x440 [ 517.807963][ T31] rfkill_register+0x37/0x8e0 [ 517.812749][ T31] hci_register_dev+0x3f5/0x890 [ 517.817599][ T31] vhci_create_device+0x39c/0x650 [ 517.822638][ T31] vhci_write+0x3ce/0x4a0 [ 517.826955][ T31] vfs_write+0x5c9/0xb30 [ 517.831255][ T31] ? __pfx_vhci_write+0x10/0x10 [ 517.836091][ T31] ? __pfx_vfs_write+0x10/0x10 [ 517.840865][ T31] ? count_memcg_event_mm+0x21/0x260 [ 517.846149][ T31] ksys_write+0x145/0x250 [ 517.850751][ T31] ? __pfx_ksys_write+0x10/0x10 [ 517.855597][ T31] ? do_syscall_64+0xbe/0x3b0 [ 517.860298][ T31] do_syscall_64+0xfa/0x3b0 [ 517.864789][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.870062][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.876112][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.880791][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.886668][ T31] RIP: 0033:0x7f5727d8d6a0 [ 517.891141][ T31] RSP: 002b:00007ffdc1091568 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 517.899568][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5727d8d6a0 [ 517.907525][ T31] RDX: 0000000000000002 RSI: 00007ffdc109157a RDI: 00000000000000ca [ 517.915577][ T31] RBP: 00007f5727fd67b8 R08: 0000000000000000 R09: 00007f5728b0d6c0 [ 517.923560][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 517.931592][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 517.939600][ T31] [ 517.942601][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 517.951679][ T31] INFO: task syz-executor:12417 blocked for more than 146 seconds. [ 517.959739][ T31] Not tainted syzkaller #0 [ 517.964655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.973444][ T31] task:syz-executor state:D stack:27240 pid:12417 tgid:12417 ppid:1 task_flags:0x400040 flags:0x00004000 [ 517.985376][ T31] Call Trace: [ 517.988636][ T31] [ 517.991657][ T31] __schedule+0x1798/0x4cc0 [ 517.996174][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.001042][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.005887][ T31] ? __pfx___schedule+0x10/0x10 [ 518.010954][ T31] ? schedule+0x91/0x360 [ 518.015182][ T31] schedule+0x165/0x360 [ 518.019354][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.024806][ T31] __mutex_lock+0x7e6/0x1350 [ 518.029461][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.034210][ T31] ? rfkill_register+0x37/0x8e0 [ 518.039099][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.044109][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 518.049454][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 518.054828][ T31] ? device_initialize+0x24b/0x440 [ 518.059937][ T31] rfkill_register+0x37/0x8e0 [ 518.064595][ T31] hci_register_dev+0x3f5/0x890 [ 518.069591][ T31] vhci_create_device+0x39c/0x650 [ 518.074611][ T31] vhci_write+0x3ce/0x4a0 [ 518.078971][ T31] vfs_write+0x5c9/0xb30 [ 518.083217][ T31] ? __pfx_vhci_write+0x10/0x10 [ 518.088082][ T31] ? __pfx_vfs_write+0x10/0x10 [ 518.092913][ T31] ? count_memcg_event_mm+0x21/0x260 [ 518.098188][ T31] ksys_write+0x145/0x250 [ 518.102533][ T31] ? __pfx_ksys_write+0x10/0x10 [ 518.107369][ T31] ? do_syscall_64+0xbe/0x3b0 [ 518.112144][ T31] do_syscall_64+0xfa/0x3b0 [ 518.116657][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.121856][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.127898][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.132642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.138515][ T31] RIP: 0033:0x7fc96818d6a0 [ 518.142925][ T31] RSP: 002b:00007ffcd13609f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 518.151417][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc96818d6a0 [ 518.159393][ T31] RDX: 0000000000000002 RSI: 00007ffcd1360a0a RDI: 00000000000000ca [ 518.167343][ T31] RBP: 00007fc9683d67b8 R08: 0000000000000000 R09: 00007fc968f0d6c0 [ 518.175383][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 518.183490][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 518.191536][ T31] [ 518.194536][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 518.203568][ T31] INFO: task syz-executor:12418 blocked for more than 146 seconds. [ 518.211517][ T31] Not tainted syzkaller #0 [ 518.216435][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.225123][ T31] task:syz-executor state:D stack:28040 pid:12418 tgid:12418 ppid:1 task_flags:0x400040 flags:0x00004000 [ 518.237082][ T31] Call Trace: [ 518.240400][ T31] [ 518.243334][ T31] __schedule+0x1798/0x4cc0 [ 518.247847][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.252801][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.257657][ T31] ? __pfx___schedule+0x10/0x10 [ 518.262515][ T31] ? schedule+0x91/0x360 [ 518.266744][ T31] schedule+0x165/0x360 [ 518.270946][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.276386][ T31] __mutex_lock+0x7e6/0x1350 [ 518.280987][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.285733][ T31] ? rfkill_register+0x37/0x8e0 [ 518.290714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.295721][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 518.301007][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 518.306377][ T31] ? device_initialize+0x24b/0x440 [ 518.311548][ T31] rfkill_register+0x37/0x8e0 [ 518.316212][ T31] hci_register_dev+0x3f5/0x890 [ 518.321082][ T31] vhci_create_device+0x39c/0x650 [ 518.326088][ T31] vhci_write+0x3ce/0x4a0 [ 518.330588][ T31] vfs_write+0x5c9/0xb30 [ 518.334818][ T31] ? __pfx_vhci_write+0x10/0x10 [ 518.339673][ T31] ? __pfx_vfs_write+0x10/0x10 [ 518.344438][ T31] ? count_memcg_event_mm+0x21/0x260 [ 518.349810][ T31] ksys_write+0x145/0x250 [ 518.354152][ T31] ? __pfx_ksys_write+0x10/0x10 [ 518.359071][ T31] ? do_syscall_64+0xbe/0x3b0 [ 518.363752][ T31] do_syscall_64+0xfa/0x3b0 [ 518.368234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.373512][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.379584][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.384243][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.390201][ T31] RIP: 0033:0x7f8ae438d6a0 [ 518.394604][ T31] RSP: 002b:00007ffec9e8cea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 518.403125][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8ae438d6a0 [ 518.411155][ T31] RDX: 0000000000000002 RSI: 00007ffec9e8ceba RDI: 00000000000000ca [ 518.419158][ T31] RBP: 00007f8ae45d67b8 R08: 0000000000000000 R09: 00007f8ae510d6c0 [ 518.427140][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 518.435245][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 518.443280][ T31] [ 518.446302][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 518.455390][ T31] [ 518.455390][ T31] Showing all locks held in the system: [ 518.463158][ T31] 1 lock held by khungtaskd/31: [ 518.467986][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 518.477903][ T31] 2 locks held by getty/5619: [ 518.482588][ T31] #0: ffff88814d71c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 518.492383][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 518.502492][ T31] 4 locks held by kworker/1:4/5966: [ 518.507673][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 518.519007][ T31] #1: ffffc900059b7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 518.531409][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 518.541466][ T31] #3: ffff88805c7b3100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 518.551148][ T31] 3 locks held by kworker/1:13/7690: [ 518.556416][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 518.567467][ T31] #1: ffffc9001c83fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 518.581031][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 518.592356][ T31] 2 locks held by kworker/u8:12/10297: [ 518.597803][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 518.609542][ T31] #1: ffffc9001bef7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 518.622305][ T31] 1 lock held by syz.1.1638/12304: [ 518.627407][ T31] #0: ffff88805c7b3100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 518.637292][ T31] 3 locks held by syz.3.1658/12378: [ 518.642530][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.650756][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.659736][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.669731][ T31] 2 locks held by syz.3.1658/12381: [ 518.674915][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.683102][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.692144][ T31] 2 locks held by syz.0.1660/12387: [ 518.697346][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.705531][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.714550][ T31] 2 locks held by syz.0.1660/12390: [ 518.719757][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.727926][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.737084][ T31] 2 locks held by syz.2.1661/12395: [ 518.742488][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.750779][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.759784][ T31] 2 locks held by syz.4.1666/12407: [ 518.764985][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.773303][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.782279][ T31] 2 locks held by syz-executor/12414: [ 518.787623][ T31] #0: ffff88802169c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.797681][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.807613][ T31] 2 locks held by syz-executor/12417: [ 518.813032][ T31] #0: ffff88802169d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.823031][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.833017][ T31] 2 locks held by syz-executor/12418: [ 518.838366][ T31] #0: ffff88805abc3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.848388][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.858432][ T31] 2 locks held by syz-executor/12421: [ 518.863836][ T31] #0: ffff888020e9d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.873906][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.883830][ T31] 2 locks held by syz-executor/12422: [ 518.889320][ T31] #0: ffff888020e9a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.899545][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.909516][ T31] 2 locks held by syz-executor/12425: [ 518.914861][ T31] #0: ffff88807ba1e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.924909][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.934842][ T31] 2 locks held by syz-executor/12430: [ 518.940263][ T31] #0: ffff88802909c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.950292][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.960325][ T31] 2 locks held by syz-executor/12431: [ 518.965672][ T31] #0: ffff88805c439918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 518.975752][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 518.985747][ T31] 2 locks held by syz-executor/12435: [ 518.991121][ T31] #0: ffff8880217aa118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.001184][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.011164][ T31] 2 locks held by syz-executor/12436: [ 519.016546][ T31] #0: ffff88805df0c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.026599][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.036541][ T31] 2 locks held by syz-executor/12438: [ 519.041950][ T31] #0: ffff88805df0f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.052073][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.062052][ T31] 2 locks held by syz-executor/12442: [ 519.067413][ T31] #0: ffff88807ba1a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.077510][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.087519][ T31] 2 locks held by syz-executor/12443: [ 519.092902][ T31] #0: ffff88805a1d3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.102936][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.112856][ T31] 2 locks held by syz-executor/12446: [ 519.118198][ T31] #0: ffff88805a1d4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.128227][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.138149][ T31] 2 locks held by syz-executor/12447: [ 519.143555][ T31] #0: ffff88805a1d3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 519.153569][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 519.163527][ T31] [ 519.165844][ T31] ============================================= [ 519.165844][ T31] [ 519.174260][ T31] NMI backtrace for cpu 0 [ 519.174270][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.174281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.174287][ T31] Call Trace: [ 519.174291][ T31] [ 519.174297][ T31] dump_stack_lvl+0x189/0x250 [ 519.174313][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.174324][ T31] ? __pfx__printk+0x10/0x10 [ 519.174344][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 519.174360][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 519.174374][ T31] ? __pfx__printk+0x10/0x10 [ 519.174389][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.174406][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.174421][ T31] watchdog+0xf93/0xfe0 [ 519.174437][ T31] ? watchdog+0x1de/0xfe0 [ 519.174453][ T31] kthread+0x70e/0x8a0 [ 519.174466][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.174479][ T31] ? __pfx_kthread+0x10/0x10 [ 519.174491][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.174500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.174509][ T31] ? __pfx_kthread+0x10/0x10 [ 519.174521][ T31] ret_from_fork+0x439/0x7d0 [ 519.174532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.174544][ T31] ? __switch_to_asm+0x39/0x70 [ 519.174556][ T31] ? __switch_to_asm+0x33/0x70 [ 519.174567][ T31] ? __pfx_kthread+0x10/0x10 [ 519.174579][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.174598][ T31] [ 519.174602][ T31] Sending NMI from CPU 0 to CPUs 1: [ 519.318963][ C1] NMI backtrace for cpu 1 [ 519.318979][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 519.318996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.319005][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 519.319027][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 519.319041][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 519.319055][ C1] RAX: be75e787ccc85300 RBX: ffffffff819683f8 RCX: be75e787ccc85300 [ 519.319067][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba56b RDI: ffffffff8be33f00 [ 519.319078][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 519.319089][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39030 [ 519.319101][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 519.319112][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 519.319124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.319135][ C1] CR2: 0000564e84f10000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 519.319149][ C1] Call Trace: [ 519.319155][ C1] [ 519.319161][ C1] default_idle+0x13/0x20 [ 519.319178][ C1] default_idle_call+0x74/0xb0 [ 519.319196][ C1] do_idle+0x1e8/0x510 [ 519.319210][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 519.319227][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.319242][ C1] ? __pfx_do_idle+0x10/0x10 [ 519.319261][ C1] ? do_idle+0x4ed/0x510 [ 519.319277][ C1] cpu_startup_entry+0x44/0x60 [ 519.319291][ C1] start_secondary+0x101/0x110 [ 519.319311][ C1] common_startup_64+0x13e/0x147 [ 519.319336][ C1] [ 519.320026][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 519.501179][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.510272][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.520317][ T31] Call Trace: [ 519.523591][ T31] [ 519.526507][ T31] dump_stack_lvl+0x99/0x250 [ 519.531085][ T31] ? __asan_memcpy+0x40/0x70 [ 519.535661][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.540843][ T31] ? __pfx__printk+0x10/0x10 [ 519.545426][ T31] vpanic+0x281/0x750 [ 519.549401][ T31] ? __pfx_vpanic+0x10/0x10 [ 519.553887][ T31] ? preempt_schedule+0xae/0xc0 [ 519.558754][ T31] ? preempt_schedule_common+0x83/0xd0 [ 519.564227][ T31] panic+0xb9/0xc0 [ 519.567931][ T31] ? __pfx_panic+0x10/0x10 [ 519.572355][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 519.577722][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 519.583863][ T31] watchdog+0xfd2/0xfe0 [ 519.588008][ T31] ? watchdog+0x1de/0xfe0 [ 519.592338][ T31] kthread+0x70e/0x8a0 [ 519.596398][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.601058][ T31] ? __pfx_kthread+0x10/0x10 [ 519.605640][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.610824][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.616000][ T31] ? __pfx_kthread+0x10/0x10 [ 519.620574][ T31] ret_from_fork+0x439/0x7d0 [ 519.625157][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.630255][ T31] ? __switch_to_asm+0x39/0x70 [ 519.635004][ T31] ? __switch_to_asm+0x33/0x70 [ 519.639751][ T31] ? __pfx_kthread+0x10/0x10 [ 519.644328][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.649091][ T31] [ 519.652347][ T31] Kernel Offset: disabled [ 519.656656][ T31] Rebooting in 86400 seconds..