last executing test programs: 23.632033856s ago: executing program 2 (id=2388): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 23.18537029s ago: executing program 2 (id=2391): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @dev, @bcast, 0x0, [@netrom, @rose, @netrom, @null, @remote, @default]}, &(0x7f0000000080)=0x40, 0x100000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x100, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) r3 = socket(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x6b, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000ffdbdf2581208000000000000000000032f9d9d772de8ff50417261b97d50d174c14ae9c958b1aacdbf30205da8324f838d71f7b69327853b3d59f07f0a4e436d75a09518cc02f2ed88d3f178d"], 0x44}, 0x1, 0x0, 0x0, 0x8814}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000e00)={{}, r5, 0x2, @unused=[0x7, 0x1, 0x18d5, 0xf0], @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"07bf68ad057a3c8e3b29f3747f9e2970", 0x0, 0x0, {0x3c, 0x40}, {0xec, 0x7fff}, 0x8, [0xe4, 0x4, 0x8000, 0x2, 0xf018, 0x0, 0x129, 0xfffffffffffffff8, 0x4, 0xc, 0x1ff, 0xfffffffffffffffc, 0x5, 0x4, 0x9, 0xb]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"aaf477a100", r5, r6, {0x8, 0xc8}, {0x6c5, 0x8}, 0x6, [0x2, 0x1, 0x100000000, 0x7ff, 0x4, 0x3, 0x8, 0x100000001, 0x4, 0x3, 0x4, 0x3b8e, 0x6, 0x0, 0x10000, 0xffff]}) accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @dev, @bcast, 0x0, [@netrom, @rose, @netrom, @null, @remote, @default]}, &(0x7f0000000080)=0x40, 0x100000) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x100, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) unshare(0x2c020400) (async) socket(0x1d, 0x2, 0x7) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x6b, 0x8, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000ffdbdf2581208000000000000000000032f9d9d772de8ff50417261b97d50d174c14ae9c958b1aacdbf30205da8324f838d71f7b69327853b3d59f07f0a4e436d75a09518cc02f2ed88d3f178d"], 0x44}, 0x1, 0x0, 0x0, 0x8814}, 0x40) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000e00)={{}, r5, 0x2, @unused=[0x7, 0x1, 0x18d5, 0xf0], @name="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"}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"07bf68ad057a3c8e3b29f3747f9e2970", 0x0, 0x0, {0x3c, 0x40}, {0xec, 0x7fff}, 0x8, [0xe4, 0x4, 0x8000, 0x2, 0xf018, 0x0, 0x129, 0xfffffffffffffff8, 0x4, 0xc, 0x1ff, 0xfffffffffffffffc, 0x5, 0x4, 0x9, 0xb]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"aaf477a100", r5, r6, {0x8, 0xc8}, {0x6c5, 0x8}, 0x6, [0x2, 0x1, 0x100000000, 0x7ff, 0x4, 0x3, 0x8, 0x100000001, 0x4, 0x3, 0x4, 0x3b8e, 0x6, 0x0, 0x10000, 0xffff]}) (async) 22.874642172s ago: executing program 2 (id=2395): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002007836"], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair(0x55e3ec196f051364, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0xffef) recvfrom$inet(r4, &(0x7f00000002c0)=""/90, 0x5a, 0x100, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000580)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r8, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) 21.706883488s ago: executing program 1 (id=2406): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0xffe0, 0x3}}}, 0x24}}, 0x40) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async) unshare(0x64000600) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9", @ANYRES32], 0x48) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4900000076000d0b00400000000000000300000000000000080001000200000009000a00"], 0x28}}, 0x0) (async, rerun: 32) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}, {&(0x7f0000006740)=ANY=[@ANYBLOB="60110000190000042abd7000fcdbdf250800698004002c800574a443a64e158a2e01a873af15d4daa32f93e60a8ede8fb33dc7ca7cf7b783454eb1faaf4a3a7eda2865831bcf7a650ddd4d0c7234c0b6919a221d73d72f5359b94e57185432a949c6f134f795d1893ee987f73102dd4ce06384312bd911ff5739499d3424293e20d61ebecd00ee5e4adf2383827e7a8db2521a7c03e90f42dd3026d36d1b1b473444b72c56afac636010c2f46c4b59ebaf422f5086d43172cffb7ca35591730430d0d2f281e23fa31fb09953d3719841a15a5bf788e03fc08f79fbb072eb1adb7d41bcedf5e41c974d1fea62a5d21bf18c7709e46f6d859630de620c49f2752b0e08075106702af615ca9209d4f127c1254452957d619c5d867975289ccec39a747aaec62bc71da8975879d413d8b2b3a4691b9b464c3bce859687d99a69398808deee79ab4472c29e4929592ac4632cb2fe3d5cfb0664f51bea6280aeadc1377c1bdf24dd4e2eda89fd34d27b233962fa818866abb04752ac0556b91d0a06d71c2277ceba88cb42750042b3be4d94d61ec5b1dedb047da4b2af160032002e2f6367726f75702e6e65742f73797a30000000fc33c642fc4beab7930a82a120d21bd86aa9d3de7ac71b7f50f3cfab12b454f74a423c7b0999daff8eaaaed1f51bc5009ac397200ad3f3ccb5b4b1d3e3680f4220fcb332d1afee5b95d74f6bd968bbae671746a54aa6e44f343572c91d8ceed9ddf4d70b4737eebf0c846ef9bb23030a5b2f3a1135177d9a5d4429dfedce60bc8f1a6e8564c0a9af5516d3c7c89764b816a172677348a5914434cb1ce702f3ec40d2a95c4f4a08edffb8323f85a6948509b2351d41e5e5381d381446381fd40dcf8bed082755ba802a51f27280d812be017cccad121055620ada442d5c3be4e66d5ad1d15313d9fb13083ac5f2bf3ac18de7b217f1ed4016ecb9518917e7709eaee435c6f20f2391bd9f221e38db70b797c324fa3a911d74f67c9279d322af67b8ce2e040953d91bd6893c6de036de92172061fa48098739496ecd3153749652b2edde1423f4e335aae6da8441fe84567664b4e089815b52bca69943d824c1a75da947972b1ed85714411842c49a30436a51f807dc1a2970a24b288eaa5477d77bf370db6c910f057a9c04b859e87ed3a7aaf6ebc621ae9f9371ae21e7b2f9098a3292fede7c2d14ffcacafcfa4a0e3ddeb6fdb864579b0e5d29ae480918b0687731745a61947a6299b9959bc0ad4870db93256282d51ce64747fa89cbf9ac2697b43071172dab9cae45a9cac4e4147e50a6e3daaf428c844085cbd80f1b196486f11365162f4a3b1d51af6d7479671f4b701bb1e1d23300dfec7aac1b6dadebdbd1251f7cc2f8c8253dcf3f7e2adbcc72bfa64a26812193a4a2ccb16d22ea9ddfabf77fc0fae8633dc61280e13b91e0655b6b15076058c90a710660c24f4c808a3ca7b02b7439ee5d3e47b916f4fc2c503087c15e479d294ae4ec2af618927a86a7cc02a0b619b81a501c1daa6f55129a13137baf605dc5b92c70e720692b9fd05bddc89ab57c4376e2dd8789a2606021d1d7dca5c2cc61497293e888e923ec32b5c145ef5316a793cc23696c0d220b98b142a972de2ed8a7c29982692169d88b49188a222c8471fd1b0fc2212fb2c3c7091ba4babcbff0d07a6290cdb8d15551f9023225b72f8c3c73c5517ea4a12217bb0f554bfb6767733298e78d488637aa397842079c525e51d25efb852e2caf68a77f382fd22402a3696b2c7b621049274390fa5d007d359cde67be71a7e4788492c3e96c0010d51d8f50296752d940c49a215e242bf215692d8f3e3b3306e444ae37e14249e82f6befb71bdcc55bb5fb7f359115386274b28651cc60d5aba99be7a1150b27ef6326e8826f9240c108007827366f929508ab93b1b1e6a5bfa103843c6649f60738ea1026b5ac4a49bd09686803fb7d1ae1a262b45783b92d8d3e2bbd9d5f19c3b8f2bc5bcdbee4e49efe088caf3b81e4a875ab7bf36be8f411828135dfabd1cb18e3ab3cf6741a393cf65a08fa21e7d1bfba9b765ddadcf6af0b4eb2678ac1c68db5ebbbcf692e0c18538b1570e9c65d012109cd5895d5b861cad09bfb18238399a54c5c29f53154c36399189765db6ed3484c34301190e160f00b1e3f3cea85bebb67b677d98a0c6a6998f7d918b73b2e26ccfdc4a3cf7125b0df4c0330582bd202e3d9ababe91fe2b669ceb3a43b110e6d3b2f3645b892cd74a1c95c1337cb06167e38beef4b728b5593666210f48b2d2a386863aa232126636b8e2f97c75ba079b1f47300322649deab3567db82e5647632ca3ca9a8779aee912ac74b98a764c58f8cab6f1534b3350b2d5d5479d2dd080fd9063d13f67fb112843b0f99469ed5e5939c5c9687c46d6049d094281541fbc032c599d57a5b0dce37adbdee491b314d84ff47fec82865cd94a2baa0685a5ad95527dd8b39a5c99535874f179e04c4ba8b377affad43abe25bbe279d9580b4b40e7d59a7f51ccd7f3ed35324cb3f4eabdd01e9e2e5335af23d43f76b76c13180b8351b7bac232579ee42d4801eaf60beb48a0c2a071c5e2822539f82b67da560df5fd9d798878a35a2fd86c93eb577d968aa995501ba11049c275c906c67e47e3daa66d4c3f71d197cd36321c9a8bd7b62d0b68363e5c185cab35a8addc4cd08f02fa707176af8168d77b1c3b250542e4da602055e721a242240ffad0c59eb165ced801bbfcf9bd721398544ddf8c68a7e6b47fe1cf6f8d949f3cea5a1f232869679411b388b49a9c793c69c60ff512276de10e39384c376d2322bd7cfec7de6a407b8748c0654226bf3bb7d595b16b5a6130bc12a38ad5645700934c013b040adf71f6e1130c5e1c1078ff2b5782bf0ab839793e4ec77d5795fba25e486dbc408b7dddf91f1810c5ac705bdf92cadec5021632893ffaf3bead70832813fb82d174a60c58cd1edfa243a76221c5cc9018ad4902d9bfc21a2cc07d9f59c8601ab0a793a7bb6f1c53044d812e14e28cf9bf61734723e2d8f15f3958a9f4fef75ba3f05a027a913c50d88fa0c855cdfa8a7b39c18c6e9cdd4c6ca31b2c2d1208c8364925e95d3d314e4803578cab423d823d54b38f2a614630139312d107208302fee288f682580628708e0ba29451aa426fa96ac676517377e11a216ab01d6311b5f2087877e8116ee3d1dcbd23b947b0991141ced28c1128180bf6d8d5b626bf0bce3270241db4a3292540a50d295f843dd098da7337e900fb1562fa434b1395db6455812eef2baae82364d034115d360c44fb5a508f7be16ae14686e18530502132dad9dcd5d95e4c339efa73746fa4464914a0d0937b448b84bd70ca2d111d87ee47c8649697b5f76202ca535ea32deadf35c20ae10e403743c4488a37fa987d01192e19664a67d58c815a94eafae2a454c2fa743073ce860287dc302024087068c73b14e730376c450faf07849f9ca2afee85f4fe5d8b00bddc6e53299a116cd3b20fbeac32edfd59c52f7b92f8393ffa4acf24de7062d3a636b97ee12239455a19ec3d15e2dc4f6c265c9fc56047fc26126e6fa98a6382e3ccbd82c26abd7f6122fdbbdc39833ba05044a8621ede95c03e243f939b5932560f9ab42041b8ebc1e25c6327d2857a378f38fa386d3b03cc628eb97b2688ce1ae0d1cefbefc78687dc442ac5c192a096a92c2c92e09ac161fefd7d67bb4db55cc6eafbae886a83b84ff5b3ece197550473e8d85cec2bd5b15786173c13ef5bf3046102b11af3b968ad3ee11301d3ecb79fa3db5516bf9a9343a26e145a0905560fb97e807ddc574a512bb7830016022d74a991fcc03cb5c97ba0fad6f16cf7d9e45977779f5036e687a9e5115161d891dbf140d0135972d02ae5e2979d821745f3ca2e62ee9c3999fcc550613f48e2747e9c87796bad7306e678890a524f7f6a98537e988da691120f7fab90e7c276ea70780fb044a80232f05d6f020c4d164e8167652b750db12eb6b08c45cc0bd74df8a3fc6e62b152568868bde69fc39f9b923f566d5a233d0c34ea66dada0a6aaad8049b16bc88d8d856aec03bfde99ea77f8ed24341ec58f3e2130b320ad462f5f1c4044b22b63b2c92b33daceddcacc7fec723fbe2b7802b42766532d6fc12b0c348726fe71738a4c30dce5d046cc5334e71291ba537f2657d20883772963ca440832dde34b4156beb31bf32c79baacfae3ec6b31a481afd81e047828cf8cf0aa437b82a958a3f7ca8928af35188a59cea66394b68905a9bfe445c3cff730e989088a5195582e10c9470f5d43fb54b7a50aebcab71ec064a41fb5fc931ce948f19afd81e27d0867f98046df91bf8804348c3a199d1a18bc432bef991fff996eb7dfd0a5d64a5080bedeb9efca89fb21df777851ea7b80b6c42c58e90b2ef2fb5f83204b6a546495f7a9493f14e5cfe27585ac6f5c42bf9fbd6127af9bf2989feec17e0f111e7ac872821b6a68b4d2a7290b5f456041e882d7905eb002258043c00f90f8136f683f2aa0bf18bcba516f392924462277d9f04f8edd39fffb5036e5f6b1409a666a9f152fa88337527f2f38f4c21b648c87c6561af1e90ca2c901ea8868ba2deeff96273991c5b71d8ebd36ba6e8c31e4ef2dcab99a59cd74e304530c5bb400af333ae3e5c58a63604d91e521f1922e5acdd42284bf405ea41e2c013f2ab8cd827a571eb4cc25136399878e88117777e6ec71e298d15bf5af48a5c449993b4f34481b6ba25469724074f9aa59c6fe8f99e3f04c13e4cde359b0420aa7ef0f0cc1acee1e4cbcfe0e03249c80976ca925d466848cf16357bb3b5476eaf581b1badd66eea4935148746d5780b664143560ed3065347a46772b2629b23168d1457175675109636ec8ac3c1f3a67b575659a46402c8ed10e6cb96264fef082da8f0fb0045e5a3b929c1798e5c72fd21ae65f5ff6a8c146e3c9317e82de4c79387546c73e51f289f5bfc7d76f49ee5cc727e6a5f1b4be8e8dbe3578499bf1bee16dfda56f3c5da69e6ba099c718eb659d160880d68a0cec693db4c62a929918fed5de70b18c873d78ecba1850190feeaa5c5c4e325375232df5f4a05343cb090bbbd01addb6fa0a4807748008174c27de4fc554de07ffb0662361a32afd0235ab5b57beaaac375c7128c83810564df571a62ecc25510ed3484f1af74b16367e194f262e3c5f04d3d0f517433f8903240f1eccd29aa919942d71470edc0e5f860aea80b06dee44ed6910002747082aaababbc0f12c2c7d624c7af79f377ebe8700e0bafedb37d5d71022528945da839cf237d2ce4fc1c082eb2d8eaf38d389aee22c04d928682bdcb14c7d0425abe9abbf99b72f4a16e1513af8e5431a2f587e55da964fe51b547da74a7986e883c4160403e4d795bfca3adf9d66f0d0ad0e9da6377d721fecb9b470a18f33f663865c336261653607a77826858e831a3aa278a9d74a5ce45a8d06e8e413825d8afe3a953da0bf47a86f9564157c58845b23a7dbdefff88ec2edc53bc983ae350f1ef3c8d9b52592cc31f79ccfcce764129577ad3e28a8244405daf85cb3b47fd99f48f59036129f1ef8d62fc6a460e903d29c605e5214ed054c6dfda0b2bb0886682585998464a1b90228bb4d69b16951b019bac67d6de04a783a615a7d1c3bb8152a3026b420836828392fcc5da60030cf054ead1439bdf45512ca609be530ee379de44219353f5ce37153dc72a7b75614bbf1300e1e8054794f1ae634048281e4cee4f021d67b73ed62ea61adde85d8069fa513b3e936f0fa5dd6f6364bb8ff7f29830697731be0339c7da11f111243dcbfd1792a9fb729919c38ee5dfecd099769a0907c3b10a3e81ac51e5c5c1d4f49dfa793e210fba54e0e0104ae44706fc1c0bee35ed5839bae5702f090ae40cf271dc9a64a67b11909aae357e81c0074003fd30a8c5bfb9a6732d0ecfc07f84ae3aa04c6ab13c99a2940dea347ac77352bb1ec26b3301cecb6b2915e43dcb90abc1381dc582e11d816735083857a07b74721c0e893a3beee1ec18a7c52c83271362e7a5755f080883bf92e460f9d2f0354df231a7faee2d7898283126e77f49074428864f38624834a4d825403bab0e201cf77b2223b4bfeb6c6c911866c824009e5ae9feffc0e514afe853ceaf3b80975f9d678e203aaf673e68a65a66e1f41ad625588e0bfdc46bde4e8fba645bdfcef9b5889a874b6987acb951d36772d2588ec4437df6157652190653fa50c00cb8006002d007d0000000000"], 0x1160}], 0x2}, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) epoll_create(0x400) (async, rerun: 32) pipe(&(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x2}, 0x1023) (async) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000009c0)={0x3e4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 64) unshare(0x22020400) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x3, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) 21.467449843s ago: executing program 1 (id=2409): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0601000000000000c2040000001000"], 0x18) sendto$inet6(r0, &(0x7f0000000200)="c602cea8", 0x4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="493ec065b32d651a26a14cb1cf16d4f747ece67c19028cc45e", 0x19}, 0x1, 0x0, 0x0, 0x40881}, 0x80) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000400), &(0x7f00000004c0)=0x4) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3, @ANYBLOB="000325bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x404c00c}, 0x41) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) getpeername(r2, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r5, 0x2735c000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x11, 0xffffffffffffffff, 0x2000) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, r7, 0x25, 0xc, @val=@uprobe_multi={&(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)=[0x9], &(0x7f0000000680)=[0x4], 0x3fd8f5e8, 0x1}}, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r8) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000525000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34d0e50000009d32266ef20cd03e52833ce7cc0d1273374aa68e3a34115c4a77e59ee93b54a9127f6c16ba47bc571744057e202b0e599ff2b26e", @ANYRES64=r9, @ANYBLOB="040026bd7000ffdbdf87ae00000000000000014100000018001700000000000000096574683a65727370616e3000"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x14) 21.233716445s ago: executing program 1 (id=2411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df7105a7814ce4e1bbbc43de04", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.181117073s ago: executing program 1 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c0000001000abbaa04a129cf821030500003b884d004000040100da6b18", @ANYRES32=0x0, @ANYBLOB="15010000000000005c0012800e00010069703667726574617000000048000280060011004e23000014000700fe8000000000000000000000000000aa060018000200000006000e0000000000060010004e210000050017000000000006000f0000000000"], 0x7c}}, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x8, 0x3, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x64, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xd}, {[@rr={0x7, 0x7, 0x87, [@private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @ssrr={0x89, 0x1f, 0xca, [@multicast1, @local, @multicast2, @empty, @empty, @private=0xa010102, @loopback]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@empty, @private1, @empty, 0x8, 0x0, 0x2, 0x0, 0x3, 0x80000, r2}) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0xf, 0x20, 0x2f, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffd7, 0x0, 0x0}, 0xfffffffffffffe27) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="d48e5858764f755bc34d59badc14", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) sendmmsg$inet6(r7, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xb, @remote, 0x9}, 0x1c, 0x0}}], 0x1, 0x40000) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}, 0x3}, 0x1c) socket$packet(0x11, 0x0, 0x300) 20.933657656s ago: executing program 1 (id=2416): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000c0000000000000c0200000001000000090000000800000004000000060000000c00000003000000010000800200000004000000010000000100000005000000001000000b000000010000000100000007000000040000000c0800000100000000000001000000001c0046040a0000000000000700000000050000000000000801000000020000000000000700000000000000000200000d000000000c000000040000000c00000005000000000000000200000d0000000006000000010000000400000002000000003000"/243], &(0x7f0000000980)=""/138, 0xf3, 0x8a, 0x0, 0xffffb9ef, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xfffffffffffffeed, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2733f3ce9deb7698, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wg2\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x7ff}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x727}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_CLASSID={0x8, 0x1, {0xfffb, 0x6}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x32}, 0xb}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)='0', 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 20.053231902s ago: executing program 4 (id=2419): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0xd, 0x0, 0x7}, 0xfffffff9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x54}, {0x0, 0x0, 0x4}, {}, {0x6}]}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockname(r7, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x80) (async) write$tun(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xfca) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000001c0)=0x5, 0x4) (async, rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffdffff7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffba}]}, 0x2c}}, 0x4044810) 19.572389245s ago: executing program 4 (id=2422): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=':s', 0x2}], 0x1, &(0x7f0000001180)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x208, 0xe, 0xb576}}], 0x20, 0x20040005}, 0x20000140) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002052377aae00000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 19.523681189s ago: executing program 1 (id=2424): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) r1 = accept4$x25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100), 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xde}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)="d90e4b414b10b173f834d4380b04ef7f04e7160a8b6e53294b24c9d389d623031a2a121bdaf095db86b87c182cf746fdf20c183c76fc8b578400c1ff3bdca2ac0ca0ebaa31231e34e2ca30bda150f55713495d3a33a5609130cf29c83eb2864e714b7d8f31d51df3be170676ca152b4ba0355fdcffe09a46ae1ae742b4dd3597e571b0cf36ebbe33f9582a895da157162274145c7539951f28a3e16fba2240a7e449479ea1b551751190a0a36e22035be6c9cfccf3157defa23c9ef949ce8ff3ea02a1ef2731f00f18c2bf66c8f0824345f9434fe8689470de7c2f12c77db9fcdf9521fe52582a8d4c0b1d3bddc86664600d1eed274929242d91561087928276671a9fda74989a80154175ba183a57984d4ec2e0ef86c29ab33c63ab3edc9fa8668e1e639ecf1bd73e2be1f4802d01b1f443f43a77448a20c0b3002ce74a2dc1f11f9b6e019b5052be6ad9a97bb0b69f5301a550e44c6e1247ad43f052329e5cdfa187c4d0a8f3a2f969910636c807a22f4b2c3c6f11cd0b771a586f71657ec879d28a459108cb113494022d109c73237a0325f67ee8a738a2340c5701b035bddd97dade752d0514dd20118a75aff63d7dbbf556e7cd90a935d3899da52935883b6dde5b7c3748f26da629e41fcec7b8df9f1b4b305eba19887b9a0959954b9bd8cb9bfc2b694feb61566dbccf7bc16cb44905ba19af837a03d1fc8ea989846130e81196c05281b5fe94da9e4ebd2fd6615ddafdfe4c0a010a0683b0341169ef4d716d37706e9044ce7c9ec1feae9c6ad867412ce21bcb724ccc309c5393c2f7e877b57ce98220bbbcb0f816fa46450f5329ef37354382bbd52257537397468fae9f42f16095c066461be64ef441b1a244f5ac133324d23fc6c23d1add5acc21cc4266072d04ed54c4f4328566b76271d4910f00421c5f5012f6933e09b3487fc365ae561a9c1c8902d3f2ada8f60849063bd10e83d5bf36e407e94f3cfcfd6889fa4a272b04c04fc03b4953b2d174d6be9b49de3c167ef70d55e8dec25465ad2a906f5136ee91b472b304f7abb0ab6e10ec281035c088778e43c528df0f22a5b5fce8a66f6a25940aa4756bb1ace56b2b00b405ac3e4124f29c8d236ddeb01ad8024c022eee5c23c3ca6d4ba0b755afe991c0569f04de6ec0fe8f663eb8ab7b00fa6594840ca9177d69080d65baf723050765dcc512a64d4c12c080a97cbdad2af30363cfd0c497fd4add6f8eca3094dd70803277223074a3aac7242b94ea183063584ae34ffb106aa8b6be48de0cc065c17dde4cb725ad07c5211acf947954907000119b926e1ebbeba00eeec0529c8168b592a388ae633745c344e04653e8ea8e00a2b67778b8a0750e2018449e2db3b637b939f910376919aabab93199eea948e1dae70828b38b1082f97a3578e0b14f87ed3ade2734e87e0a06a8e16e8905eacb9d3e3ad46698a0cd3bd7d64da060ab52cf7300135a6894411b95e63520d8095c313cf430aeca1b81acf2359690b9f44d7c61e908e49e5ed4c7e1eb522d7b848debbfefef40c52eba5ee100245fc505b47f430787ace97af7b197ea1b270c169d252e47c7a5e227b10e3dd8521e0a05f101b0dad1ce9e80fa1181f7ba7d054ba7f0a00867fef1416bc5d3c7ffc27f728f3b66aec148dd9a450a510bd5f5381a3d66616c73e15d00dc1b6114a4cc7d80a736541d4e4341123f13a5354f003cc459162863eff47f1d94b88591e997de97a234c788b63f7add90eb7be4666b6f1abd64be264ed42c9c9e11721ca36d80b84923f747583aa91e4e8cacc3b53b4660a5a18a56682a07da2cb2fcb12a75c4d7f84f73fd71b96d82f00937d43ed69aabd37ed4344fd496b2e7f4ec09bcf3bc22e89848baeb3e04b3fa440158e2c1202845846bf39d7a98a3557f778c59621aa394c2ac48677e838a569a6d03a5da5badab23ea699c92515fe5a95e7c554627c11b4a63706bb9426f4b1eeceef22b2157081ff00cfd94980ccb9ac8d7a6a30fc6a247f57f7727fd80a8aa7e7e42ffbce40614470fc63fb1e5a8aac4492edbfc9df6037807bac0f41d8085981ec1cfc080e3770619b54b8e1e82cdded5ca2d71bcf6d13959d7929f4642bf4d70aa19fa36e18583c39921e7319cd8c987a5cb2cecf9091ce3d355994db66da5eb7033dd80c9e4b5666613264a2d3d4dfe6036a3fbf2482938ba9f6fcb1f0cf94f991503c47aafc6ebb5112e7ba3084ed502f28cd2640c78e46bb9ed416ca12685f8663c9dfdcfa0706d764e86ad747979389410a7168062932786f9a2a9fe60e6165f4de540d2fd81ae001f50c62d70baa40686ae7d1f24fdc40526937a7a8f939d2d5084f2583e941e36d5c31c3d53837eac206fd46909f9f19cf36cd3ac861b0421279cb26237e5c03c56b8de89aaa3dd080470644a1ccfbcb0b9a9973f94df703af19ac3254a40ad9ce7a62cbd5eeb3dccd4b1829351d7e753cb883003c59853d07919ad97d9a057c9d40a0c15864c32298c8a714734450b76bc2c3beee39f7ddde569525b7690c53155766817814ab8edb385b71e0204aaa726655dd2739dff9dfafd111bac192d3abd0484a59ee2e778aca5f941377d2a30efbf661eecb440710d4a362332c7b997558c52dfbdc9f3781e85c1f416f9aa17959c1359382fb47ef4b548a0d6cabd2f612555a6af8a5bda364635b3d06e3a1c830f5afd02af913eb1592d515373d25ab70e8867844c87594f381c3a1329d222eacf081d9536449ed565f33f5ca773893f48ec4b39e07d1fc5bc5f5eaa9f6344c7ac524c8d4f7d39b5b0944eb4b9620d0f9e52f5bbea2698fb0de42695b6faef0c32c419ab50175e23dcd1729f4f6c805f9723f9da6c3c62971b60a31651c855497cb48b93c94bef0e929eb957fa84bc5b64d7ff37127a797bdc6ccb633050ba4fd6fb01364319786e97fdbd37b84f38c6a8333ba83dca705af0cf4b7484accc80ffc4d11548fce1ae8e2b7c04d19e12618b9830a6927f6c5d07535306061d53e50cfaf8ca2dfdd1f9e76a765b7c0dd161c2da60589965587ae7fe72d9916a2cfa80324ff5499f5f9fb0f5fc9f857f69982617a8d304a21e101665a636bf2cc09b24b0aeed7db2c3f74c08bdaa80a020a997448197ceca5446ebe556d2842d6d2ce8474c314f3fca05068e5cdf599f82958ddac307315603e733cfb94c78be89a08a19e2895917771cee6523bab4ecd0b32870189c29fd37cdf745db6b91eb5fed3243aa14df8e64ff497d9888d78d1e0d28055e2e71d1506072ddbb8913ab3d65f2a36cdfa84c6c143e01b60c10cd37607c9359ec740fed2af02a4f951f0b1bc1f7abf8d4fc0e44890787a9ebcc4d80d78d154b1e4872886b20d65fc210475a3f9c797bd0236f65d6b062cae3cc3873c94d247c42831bb157b0066d7a05243337be954dfd57365f568c02aa8b07cb28317e26d131dcc24c0599f22d79cab56e28fe45045d1475b0684739976def57824cee036d78e0f5d149b8411eb7559835bcbdf07db04c4dbf0a8e8cbc2190b38f93818ef7d78d2a76113ab95fca19762292f08adc72996f075c1484232c1ed3769728f29d2f10b267b03928784c8dd7d7a0bb46064ee1c8d39dc137a282df1a2ba8d97d7d8a91fe53205ea72837ec1c54cb5f7593aeacaa8700f4c09175eb21bbdbb7e85f5605414879f864976d06ffd96a24953faa03d233cafb63ca9f029f6bb2e5f08664115fa560eaab9efab32197fd8c18a9146a37801b0ada2d5946cda3bf169bb08e4b9dea41427cc5fa34868749c44f5abf5bfc8a48546e3d25ca3eeadb6afa3e8bc8c8905025d7762e38d34c28f5503b1a2dbe70da3015f7fe18dc17f9c02fec96dd80d3b7bc9b409e8a423c8e46e6ce9b76b1efb9b32f9c9bc427f9f7971e491616a5c7a60801654e8cbdad10c6d1844177ecca26063659e44a820e49a9995ee115b7801dc1babbe259df6f9a47d7df1ae2d4aab4b8f7d3f9edad806ee43dddd419350ebf83180a26b04d4614f025afcdc95c0459afbb8782d76fb1e1a5227cc404b091bad0ae0d0a3374c245f59a71b86e7c5d36df1b1f4b59d7b202db3c3168a73aa02b10d6cf5b8a628c9ef68f0465f3755eefde83337687d22ebf03eb461ae6ba97f2f9c663410583329662827b59dbb7b12943f988d6c76ce603dc1e3bcecf49267b73a4035c31e500e18763cf3a990d5197d8cfc3437cb9abd93d406e838cb62a91b090d70745731bb3733cff10064257841a867f0cd6fd0c8ab2c32951b627099fbf21aaa2bff85eb88ce41ca04c76fb54a8b38d6c1ab4ee2c3697026103c3f2631933b0239ab8ab0d8faef67256c51fc8575928aa39db2b5e9db550bf10b31d62f5d7ae2991226a3e5f62ed2a22d8409d4b3f399ad93fe0c8a3e7fd3cf83f6d3e130e85a1f8fa01a16c819516340c0ca63ff3db2bdea90ceb3793c9826bd52c975f5768ac2230776e48e18b12317bd76263b259af76b60a651c731a96644695bc9706ba2092dc9d8e349699f2c56ebb8cb28a3b4f62c05fea7ec2d9809a2331aa8dda668fd5a1d60b981bc83ea1021322de3e4305fc9d97e6d20dc8e0993f6d3c4377c9766413b637f1e755d8ba0cd1356bdeea1ed4e932324f24ca4baef1849900e080b3935d46d0d90d82854d41705e0efd4674e1aad3c8b3cb6fe568dcc6212b1fe2c54067dce47c71b23020749e23791032c800b1b26b3c7c44d4f32a7ddb6497f7b2ed756a72446b50c671006cd191927273508b1a015ca87804cfea7f499eb18ec6578650a69927287429c26674756cf3d0230744ab3aca62abcdb42ace61fad5340a4e4454c317aeab571589e58f3251565aa39f5cab26b6a5483f3a5a7a6dd809fcbccafb8bcb41e4f3689f44781e89928f43bd42b1b15a9ea257298b3abf956fc325055484f07a47fdf75a10c6ad26bf6688a3b148ca847079412e24f9ae9ace67883b8e75d673bb55f82e4bbf76ed514993d2ba2238023c9251fecafccf1fefa1077f95b5ca7da6025f1ac89288b6481f796123ee14db52cf74bce402115a7859e28c5b2c820509f2ba749ff0ef635e7eeb401a25eaf53ee74b054eb35118783c1c6526a83c8c4a164aae9862e3a4cdb0f9ff1c366ebd07ee7a9f2cf23b35326bae44a7e57848c57aca3e27fc2b1ea97a46b2863e9b892c381b267fa825908d89ce14d359313db970ed7d812889a50f1036ace10913d6be5e75787fbc3e5be378c4e2febe9951d87d89dc859ab408b249dc856de28808392461a6b352fdbf828c91e52ac446c78eaaaffd687f15eb7419cf103de74d73e61d2a8fb9682f5a48f0ddf6ec93d3ddb5eb51a491d6525d108472ee5801906dd701eab5c5527996802de6210751bc2ac7ab4ddeb155371e82af01f2fd578e4b17ca330aa8a2f8178ceaf684fa3fb7537d54e3969b2345175615f1c85e69f4639f4860f6b716ba65c871352332017ac2b04ab880712d9d6fec616e4eb44a73873b3c9be3af79e297372bf7cad82ab8f30b485ed8ae2939b017dc3f77f872555db1a140ec6a47dff05f10572a2ff8f0ccaaa0d63fa090daed913f3b3a50509d0530e4eec9e119203c93847ba9f14d59d948becb4609122eb1ac6f93c63ea6369d20c2fcd27a37297a603999831e950bfd31fc8ad51b1f45cee389d03c20f527f19543d57e5f63544af6c25d23d45495f9cafba6101eecb985b4ec9039a213497826f525ab1effaf5c59cd4e6d7a2343746040a12f2de4dc0b26c3eb28d2b9ab5acd1ed4d91871eba7e2a7b55677edd2d6490f2444", 0x1000}, {&(0x7f0000001180)="b87d158ea8ccc5c327ccbf83079049bd147fdf517f3e35dcafb89777acb62e040bae5b44ef456a03b7550149837c414c8c11f4e004037fc8198a9b56637638302bb6b08c1ab8ed060ac37f0543dbbf83b109f9689aa37a785e506c16e0dd59ab3d6f4b51714f19ee2eb3f5a625f2f1a85329ada562e38ddde81c7a93862bc5beedec8c8498df5f0b60c7c25ef7394548611d5bb33bacb7effb17eb0024cfa655d2f4a6ec20c1ba1f38354d220a7e41b0d357b29da4955132e16282c157a6e809635b2d6e3f2de72b", 0xc8}, {&(0x7f0000001280)="7326cc5c489dfe79ce8ef73b6421f6afd1ab46d20761a53652bc50032c7c98c1e754812ba35e98b7a915ed19813a057d1c3d582d5d5fc0b2b8f23dc560b8f3", 0x3f}], 0x3, &(0x7f0000001300)=[@dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@ra, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0x8e, [0xfd59, 0x0]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xa}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x7, 0x0, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x5, 0xf801, [0x208, 0x3, 0x1000, 0x10, 0x3, 0x9, 0x0, 0x1]}}, @pad1, @ra={0x5, 0x2, 0x9c46}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0x158}}], 0x1, 0x4004480) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000014c0)=0x9, &(0x7f0000001500)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001540)="f4c90b150a167edbfb7ba0ad7854211ed58c47d3be2bb49a84bdca668564fe3994ae8e8519c96e38c981138c3e009ce75f49cdc44202f452d37921da3bec4824be5005ec5c63e9367cf86cc45b4276f0685ecb2e6914ef08027653cf27cdd2a455024c1d970d42e2", 0x68) connect(r3, &(0x7f00000015c0)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001640), &(0x7f00000016c0)=0x60, 0x800) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000001700)={{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e20, 0xae, @empty, 0xc4}, 0x0, {[0x1, 0x7, 0x10001, 0x7fffffff, 0xffffb871, 0x0, 0x6800, 0x1ff]}}, 0x5c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001780)={0x0}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001800)={r8, 0x5, 0x7, 0x6}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1cc, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "848b9bab6eb830ea10a55aa73496820f15d860f1eb12a22691ea41"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f480c9304f12af91afd27f3a32b9df9a88236b7aecdbc5c7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "42385dc86e7266aee4267301bd72a0bcbde5e3a2698945f9a9"}}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8447}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8014}, 0x4008000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40)={r2}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xc0, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_IE={0x95, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xa, 0x90}}, @tim={0x5, 0x89, {0x46, 0x99, 0x8, "0e5843d3411146d0d13cc19d14a880680bc2c334ddf4dccae79a41c1c472e708704fd6e984cfd242abcaf6a6ce13d72be85016c5db61cea890840cd368867e916dea90f6366854e0f30e9aa6a14a109e44f6e5f290e9e1ef5e41b452ad7baa96df555843ffb2499927873c5a137aebe72668942e82f5c727e47bbd407a7c1e80bd1b11b9b06c"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x801) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r12, 0x0, 0x0, &(0x7f0000001d40)="4822739f1cc912e96e048d1bf8c484576586de30b36ab0ac91cc29956286d1043a1948ce2bd28c841da98fd1b6de4d646be0bbeabf420c80b9919096ea757e2e7a698eb2a4b2a2a83d14f859bacf580ed6c2a94f5120f3274238b1477e2ac2bf3c2011a4b85ce80ca45b764fe9925233f8a9f99ae45f030657f173c9b84312d4ea12136a673d07efd0a474cdfaa3a6ad7a4bb245f1c50359bf79b203b1841abf2836d3dc4f45cadeaee997432a6b17570131cc7ccccd7fdd388c82157b7cba2057296c852b557217f3ae46704b2b6793b4b15bd758cac7739febbf60817f", 0xde) bind$bt_hci(r10, &(0x7f0000001e40)={0x1f, 0x4, 0x4}, 0x6) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) close(r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ec0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000001f00)={r8, @in6={{0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x8, 0x8001, 0xffffffff, 0x8, 0x20, 0x9, 0x1}, &(0x7f0000001fc0)=0x9c) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000002000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000020c0)={0xae, 0x8, 0x8, 0x0, 0x0, [{{r7}, 0x79ce}, {{r0}, 0x9}, {{r5}, 0x80000000}, {{r2}, 0x400}, {{}, 0x4}, {{r1}, 0x6}, {{}, 0x64ce}, {{}, 0x9322}]}) 19.353205032s ago: executing program 4 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000305fbffffff0000000000010000000000e3070001"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006110b5000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x94027088}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x24, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x1c}}, 0x40050) 19.310385956s ago: executing program 2 (id=2428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0c7b7c7dd719641aa2636c7fd108ce2a946f41a1cfd518ef17edf7fa83c0d18f4727f1d77b2a78a89a260f6c6b5c38dd68abb46f380f92edf8b7649b"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0) 19.096317354s ago: executing program 0 (id=2430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000", 0x4}], 0x1}, 0x48002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88d4704b", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x20, 0x70bd26, 0x6, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x177f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x10000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x4004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x7ed, 0x5, 0x7, 0xca8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x4}}, [0x3, 0xfffffffffffffff8, 0x5a, 0x760, 0xfe, 0x0, 0x1, 0x5, 0x163f, 0x0, 0x2, 0x0, 0x2, 0xd, 0x7]}, &(0x7f0000000300)=0x100) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000340)=0x2) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) recvmmsg(r6, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRESOCT=r9, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 19.017987362s ago: executing program 2 (id=2431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0), 0x0, 0x20044095) getsockname$packet(r8, 0x0, 0x0) connect$rose(r8, 0x0, 0x0) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 18.825745258s ago: executing program 0 (id=2433): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'veth1\x00', {0x5}}) 18.824525625s ago: executing program 4 (id=2434): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x40, 0xa, 0x0, 0xeac, 0x3}}, {0x4}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x54}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xf6c1dd63b3eedf31}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x184, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0xfffffffffffffec4, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x148, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffcc3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x841}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1ac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4082, 0xff2}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 18.7523113s ago: executing program 3 (id=2435): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) splice(r2, 0x0, r1, 0x0, 0x4, 0x5) 18.703850438s ago: executing program 0 (id=2436): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000021fc0)=@newtaction={0x18, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x4}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x230, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff7fff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff22}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 18.533549555s ago: executing program 3 (id=2437): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') write(r0, &(0x7f0000000040)="240000001a0057f9f407002a08883a711af6231f368147fcc0766d0008000000000000146cf167dc90f527000f007d00fb", 0x31) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 18.406282563s ago: executing program 3 (id=2438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000280)=""/182, &(0x7f00000001c0)=0xb6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008000"/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000580)="1ae2", &(0x7f0000000200)=""/30}, 0x20) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000ff000000c88b096973d17956c90e25670000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) 18.348412158s ago: executing program 0 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000063c0)={'vlan0\x00', 0x0}) (async, rerun: 32) r3 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a889f0ea74d9ef337306034c63ba1639"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x50010) (async) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x41448000) (async) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000002) 18.197436474s ago: executing program 3 (id=2440): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) 18.086985046s ago: executing program 0 (id=2441): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3dedc5d0bb6db118806c4adead98a13e991950d5b903d0", @ANYRES32=r1], 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000f00)=0x196, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, 0x0, 0x5f, 0x4001, &(0x7f0000000180)={0xa, 0x4e61, 0x8001, @loopback, 0x627bcafb}, 0x1c) sendfile(r0, r0, &(0x7f0000000040), 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000040), 0x4) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x178}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) accept(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000019000100000000000000000020010000000000000000000000000000fc00000000000000000000000000000000000000000000000a00000089000000", @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000044000000000000fcffffff0000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000100000000001501abcd6cee8c5032106ec20c4400050000000000000000000200000000000000000000003300000000000000ffffffff0000000000000000000000000103000000000000000000000000000008001ea355ba2a00"], 0x104}}, 0x0) 16.321708802s ago: executing program 0 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r2, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xf8, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) close(0x3) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000180)=""/167, &(0x7f0000000000)=0xa7) 16.279149644s ago: executing program 4 (id=2443): unshare(0x400) (async) unshare(0x400) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9ff0307633144bda80e1b03f9966bb5697e5a548084180053516c855c6e4d204b8b95917a4b62a551c8057bd67175a795cfc2f9239bef8ef3d03d534757eaea2972ac2e4065b5133cebebbc454b", 0x0, 0x3a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1f}, 0x16) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x6, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x81, 0x46}, {@multicast2, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5e}}, 0x44) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010006c50404e8dfa927785000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010006c50404e8dfa927785000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10}}, 0x4000811) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 16.168205308s ago: executing program 3 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @random="4838f3062527"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x2, 0x5}) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x61d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @random="4838f3062527"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async) socket(0x14, 0x2, 0x4) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x2, 0x5}) (async) epoll_create1(0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x61d1, 0x0) (async) 16.166604244s ago: executing program 4 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 15.838457531s ago: executing program 2 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x25dfdbfb, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) 15.663650314s ago: executing program 3 (id=2447): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) (async) unshare(0x2c020400) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) pwritev(r1, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b332cbd7000000000001500000008000300", @ANYRES32=r10], 0x1c}}, 0xd4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b332cbd7000000000001500000008000300", @ANYRES32=r10], 0x1c}}, 0xd4) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x4040000) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 3.542839969s ago: executing program 32 (id=2424): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) r1 = accept4$x25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100), 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xde}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="b87d158ea8ccc5c327ccbf83079049bd147fdf517f3e35dcafb89777acb62e040bae5b44ef456a03b7550149837c414c8c11f4e004037fc8198a9b56637638302bb6b08c1ab8ed060ac37f0543dbbf83b109f9689aa37a785e506c16e0dd59ab3d6f4b51714f19ee2eb3f5a625f2f1a85329ada562e38ddde81c7a93862bc5beedec8c8498df5f0b60c7c25ef7394548611d5bb33bacb7effb17eb0024cfa655d2f4a6ec20c1ba1f38354d220a7e41b0d357b29da4955132e16282c157a6e809635b2d6e3f2de72b", 0xc8}, {&(0x7f0000001280)="7326cc5c489dfe79ce8ef73b6421f6afd1ab46d20761a53652bc50032c7c98c1e754812ba35e98b7a915ed19813a057d1c3d582d5d5fc0b2b8f23dc560b8f3", 0x3f}], 0x3, &(0x7f0000001300)=[@dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@ra, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0x8e, [0xfd59, 0x0]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xa}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x7, 0x0, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x5, 0xf801, [0x208, 0x3, 0x1000, 0x10, 0x3, 0x9, 0x0, 0x1]}}, @pad1, @ra={0x5, 0x2, 0x9c46}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0x158}}], 0x1, 0x4004480) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000014c0)=0x9, &(0x7f0000001500)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001540)="f4c90b150a167edbfb7ba0ad7854211ed58c47d3be2bb49a84bdca668564fe3994ae8e8519c96e38c981138c3e009ce75f49cdc44202f452d37921da3bec4824be5005ec5c63e9367cf86cc45b4276f0685ecb2e6914ef08027653cf27cdd2a455024c1d970d42e2", 0x68) connect(r3, &(0x7f00000015c0)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001640), &(0x7f00000016c0)=0x60, 0x800) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000001700)={{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e20, 0xae, @empty, 0xc4}, 0x0, {[0x1, 0x7, 0x10001, 0x7fffffff, 0xffffb871, 0x0, 0x6800, 0x1ff]}}, 0x5c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001780)={0x0}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001800)={r8, 0x5, 0x7, 0x6}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1cc, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "848b9bab6eb830ea10a55aa73496820f15d860f1eb12a22691ea41"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f480c9304f12af91afd27f3a32b9df9a88236b7aecdbc5c7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "42385dc86e7266aee4267301bd72a0bcbde5e3a2698945f9a9"}}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8447}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8014}, 0x4008000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40)={r2}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xc0, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_IE={0x95, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xa, 0x90}}, @tim={0x5, 0x89, {0x46, 0x99, 0x8, "0e5843d3411146d0d13cc19d14a880680bc2c334ddf4dccae79a41c1c472e708704fd6e984cfd242abcaf6a6ce13d72be85016c5db61cea890840cd368867e916dea90f6366854e0f30e9aa6a14a109e44f6e5f290e9e1ef5e41b452ad7baa96df555843ffb2499927873c5a137aebe72668942e82f5c727e47bbd407a7c1e80bd1b11b9b06c"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x801) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r12, 0x0, 0x0, &(0x7f0000001d40)="4822739f1cc912e96e048d1bf8c484576586de30b36ab0ac91cc29956286d1043a1948ce2bd28c841da98fd1b6de4d646be0bbeabf420c80b9919096ea757e2e7a698eb2a4b2a2a83d14f859bacf580ed6c2a94f5120f3274238b1477e2ac2bf3c2011a4b85ce80ca45b764fe9925233f8a9f99ae45f030657f173c9b84312d4ea12136a673d07efd0a474cdfaa3a6ad7a4bb245f1c50359bf79b203b1841abf2836d3dc4f45cadeaee997432a6b17570131cc7ccccd7fdd388c82157b7cba2057296c852b557217f3ae46704b2b6793b4b15bd758cac7739febbf60817f", 0xde) bind$bt_hci(r10, &(0x7f0000001e40)={0x1f, 0x4, 0x4}, 0x6) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) close(r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ec0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000001f00)={r8, @in6={{0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x8, 0x8001, 0xffffffff, 0x8, 0x20, 0x9, 0x1}, &(0x7f0000001fc0)=0x9c) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000002000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000020c0)={0xae, 0x8, 0x8, 0x0, 0x0, [{{r7}, 0x79ce}, {{r0}, 0x9}, {{r5}, 0x80000000}, {{r2}, 0x400}, {{}, 0x4}, {{r1}, 0x6}, {{}, 0x64ce}, {{}, 0x9322}]}) 1.042340145s ago: executing program 33 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r2, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xf8, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) close(0x3) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000180)=""/167, &(0x7f0000000000)=0xa7) 986.773215ms ago: executing program 34 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 41.868967ms ago: executing program 35 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x25dfdbfb, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) 0s ago: executing program 36 (id=2447): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) (async) unshare(0x2c020400) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) pwritev(r1, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b332cbd7000000000001500000008000300", @ANYRES32=r10], 0x1c}}, 0xd4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b332cbd7000000000001500000008000300", @ANYRES32=r10], 0x1c}}, 0xd4) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x4040000) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) kernel console output (not intermixed with test programs): ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.026255][ T8565] RSP: 002b:00007ff38bfce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.026275][ T8565] RAX: ffffffffffffffda RBX: 00007ff38b3c5fa0 RCX: 00007ff38b18ebe9 [ 172.026289][ T8565] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 172.026301][ T8565] RBP: 00007ff38bfce090 R08: 0000000000000000 R09: 0000000000000000 [ 172.026313][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.026323][ T8565] R13: 00007ff38b3c6038 R14: 00007ff38b3c5fa0 R15: 00007ffd33ab6508 [ 172.026355][ T8565] [ 172.091708][ T8422] lo speed is unknown, defaulting to 1000 [ 172.337166][ T8578] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.699'. [ 172.556732][ T8200] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 172.568688][ T8586] netlink: 'syz.1.701': attribute type 42 has an invalid length. [ 172.582336][ T8200] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 173.078565][ T8422] lo speed is unknown, defaulting to 1000 [ 173.508354][ T8629] FAULT_INJECTION: forcing a failure. [ 173.508354][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 173.522068][ T8629] CPU: 1 UID: 0 PID: 8629 Comm: syz.1.712 Not tainted syzkaller #0 PREEMPT(full) [ 173.522095][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.522107][ T8629] Call Trace: [ 173.522115][ T8629] [ 173.522124][ T8629] dump_stack_lvl+0x189/0x250 [ 173.522153][ T8629] ? __pfx____ratelimit+0x10/0x10 [ 173.522173][ T8629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.522198][ T8629] ? __pfx__printk+0x10/0x10 [ 173.522229][ T8629] ? __pfx___might_resched+0x10/0x10 [ 173.522249][ T8629] ? fs_reclaim_acquire+0x7d/0x100 [ 173.522285][ T8629] should_fail_ex+0x414/0x560 [ 173.522319][ T8629] should_failslab+0xa8/0x100 [ 173.522350][ T8629] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 173.522379][ T8629] ? __alloc_skb+0x112/0x2d0 [ 173.522403][ T8629] __alloc_skb+0x112/0x2d0 [ 173.522428][ T8629] alloc_skb_with_frags+0xca/0x890 [ 173.522467][ T8629] sock_alloc_send_pskb+0x857/0x990 [ 173.522514][ T8629] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 173.522553][ T8629] ? iov_iter_advance+0x8b/0x1c0 [ 173.522578][ T8629] tun_get_user+0xa43/0x3e20 [ 173.522621][ T8629] ? aa_file_perm+0x44d/0x1550 [ 173.522642][ T8629] ? __pfx_tun_get_user+0x10/0x10 [ 173.522662][ T8629] ? _parse_integer_limit+0x1ae/0x1f0 [ 173.522710][ T8629] ? __lock_acquire+0xab9/0xd20 [ 173.522746][ T8629] ? ref_tracker_alloc+0x318/0x460 [ 173.522773][ T8629] ? __lock_acquire+0xab9/0xd20 [ 173.522804][ T8629] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.522840][ T8629] ? tun_get+0x1c/0x2f0 [ 173.522866][ T8629] ? tun_get+0x1c/0x2f0 [ 173.522886][ T8629] ? tun_get+0x1c/0x2f0 [ 173.522911][ T8629] tun_chr_write_iter+0x113/0x200 [ 173.522935][ T8629] vfs_write+0x5c6/0xb30 [ 173.522967][ T8629] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.522989][ T8629] ? __pfx_vfs_write+0x10/0x10 [ 173.523027][ T8629] ? __fget_files+0x2a/0x420 [ 173.523056][ T8629] ksys_write+0x145/0x250 [ 173.523089][ T8629] ? __pfx_ksys_write+0x10/0x10 [ 173.523112][ T8629] ? rcu_is_watching+0x15/0xb0 [ 173.523138][ T8629] ? do_syscall_64+0xbe/0x3b0 [ 173.523164][ T8629] do_syscall_64+0xfa/0x3b0 [ 173.523185][ T8629] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.523204][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.523224][ T8629] ? clear_bhb_loop+0x60/0xb0 [ 173.523249][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.523268][ T8629] RIP: 0033:0x7ff38b18ebe9 [ 173.523286][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.523302][ T8629] RSP: 002b:00007ff38bfce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.523323][ T8629] RAX: ffffffffffffffda RBX: 00007ff38b3c5fa0 RCX: 00007ff38b18ebe9 [ 173.523338][ T8629] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 173.523350][ T8629] RBP: 00007ff38bfce090 R08: 0000000000000000 R09: 0000000000000000 [ 173.523362][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.523374][ T8629] R13: 00007ff38b3c6038 R14: 00007ff38b3c5fa0 R15: 00007ffd33ab6508 [ 173.523404][ T8629] [ 174.781366][ T8667] netlink: 'syz.1.722': attribute type 3 has an invalid length. [ 174.806792][ T8667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.722'. [ 175.115820][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.0.729'. [ 175.212961][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.729'. [ 175.239790][ T8688] lo speed is unknown, defaulting to 1000 [ 175.241168][ T8691] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 175.364323][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 175.892329][ T8707] sit0: left promiscuous mode [ 175.998676][ T8707] bond0: left promiscuous mode [ 176.003711][ T8707] bond_slave_0: left promiscuous mode [ 176.067261][ T8707] bridge_slave_0: left promiscuous mode [ 176.128570][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.183137][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.268037][ T8736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.430531][ T8707] batman_adv: batadv0: Interface deactivated: vxlan0 [ 176.463207][ T8707] vlan0: left promiscuous mode [ 176.473920][ T8707] macvlan2: left promiscuous mode [ 176.528485][ T8483] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.565014][ T8483] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.594219][ T8483] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.613144][ T8483] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.683921][ T8481] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.696558][ T8481] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.755916][ T8481] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.779380][ T8481] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.823733][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 176.972240][ T8753] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 177.003737][ T8753] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 177.241300][ T8747] lo speed is unknown, defaulting to 1000 [ 177.866645][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 178.420545][ T8819] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 178.504029][ T8824] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 178.788229][ T8841] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 178.965386][ T8841] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 179.003909][ T8842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 179.270184][ T8855] mac80211_hwsim hwsim6 ;: renamed from wlan0 [ 179.278223][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.281540][ T8863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.775'. [ 179.294595][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.499724][ T8858] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.557048][ T8873] tipc: Enabled bearer , priority 0 [ 179.566336][ T8873] syzkaller0: entered promiscuous mode [ 179.571855][ T8873] syzkaller0: entered allmulticast mode [ 179.657183][ T8873] tipc: Resetting bearer [ 179.690606][ T8873] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 179.703089][ T8877] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 179.718887][ T8872] tipc: Resetting bearer [ 179.799849][ T8872] tipc: Disabling bearer [ 179.968412][ T8895] netlink: 'syz.2.785': attribute type 10 has an invalid length. [ 179.979525][ T8892] lo speed is unknown, defaulting to 1000 [ 180.049565][ T8895] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.360777][ T8921] __nla_validate_parse: 1 callbacks suppressed [ 181.360806][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 181.849158][ T8946] netlink: 76 bytes leftover after parsing attributes in process `syz.4.798'. [ 181.880787][ T8949] netlink: 'syz.3.799': attribute type 3 has an invalid length. [ 181.913652][ T8948] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 181.950038][ T8949] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.799'. [ 182.116972][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.134177][ T8948] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.261495][ T8958] netlink: 48 bytes leftover after parsing attributes in process `syz.1.802'. [ 182.286100][ T8958] netlink: 'syz.1.802': attribute type 39 has an invalid length. [ 182.665661][ T8970] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 182.730421][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.996677][ T9013] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 184.067404][ T9021] netlink: 'syz.4.819': attribute type 39 has an invalid length. [ 184.172606][ T9016] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 184.413220][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 184.510815][ T9032] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 185.076344][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 185.138455][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 185.164792][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 185.189123][ T9058] netlink: 'syz.4.826': attribute type 18 has an invalid length. [ 185.378067][ T9058] bridge2: port 1(veth5) entered blocking state [ 185.405503][ T9058] bridge2: port 1(veth5) entered disabled state [ 185.412123][ T9058] veth5: entered allmulticast mode [ 185.420432][ T9074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.829'. [ 185.465525][ T9058] veth5: entered promiscuous mode [ 185.706991][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 185.879139][ T9093] rdma_rxe: rxe_newlink: failed to add lo [ 186.866589][ T9093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.068321][ T9124] __nla_validate_parse: 1 callbacks suppressed [ 187.068342][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.838'. [ 187.156834][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 188.852324][ T9115] vxcan3: entered allmulticast mode [ 188.944000][ T9157] netlink: 'syz.4.842': attribute type 8 has an invalid length. [ 189.001029][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 189.786180][ T9193] netlink: 64 bytes leftover after parsing attributes in process `syz.2.854'. [ 189.882962][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 189.928741][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 189.937508][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.855'. [ 189.948463][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 189.999287][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.855'. [ 190.761843][ T9238] netlink: 76 bytes leftover after parsing attributes in process `syz.2.865'. [ 191.261068][ T9251] syz_tun: refused to change device tx_queue_len [ 191.288742][ T9251] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 191.512915][ T9258] wg1: entered promiscuous mode [ 191.526958][ T9258] wg1: entered allmulticast mode [ 192.255893][ T9292] __nla_validate_parse: 1 callbacks suppressed [ 192.255915][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.878'. [ 192.447382][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 192.510160][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.538911][ T9298] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.663759][ T9292] lo speed is unknown, defaulting to 1000 [ 193.003105][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 193.043274][ T9323] geneve2: entered promiscuous mode [ 193.061103][ T9323] geneve2: entered allmulticast mode [ 193.080549][ T8483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.098444][ T8483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.144877][ T8483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.162212][ T8483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.247702][ T9332] netlink: 'syz.2.891': attribute type 12 has an invalid length. [ 193.581926][ T9319] lo speed is unknown, defaulting to 1000 [ 194.345175][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 194.349276][ T9356] tipc: Enabled bearer , priority 0 [ 194.365243][ T9360] syzkaller0: entered promiscuous mode [ 194.368749][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 194.370858][ T9360] syzkaller0: entered allmulticast mode [ 194.645913][ T9366] netlink: 'syz.0.899': attribute type 3 has an invalid length. [ 194.673843][ T9366] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.899'. [ 195.322698][ T9389] syz_tun: entered allmulticast mode [ 195.356946][ T9391] dvmrp8: entered allmulticast mode [ 195.373776][ T9385] netlink: 'syz.0.905': attribute type 23 has an invalid length. [ 195.424110][ T5917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.464151][ T7209] tipc: Node number set to 2575489948 [ 195.470477][ T9397] lo speed is unknown, defaulting to 1000 [ 195.498156][ T862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.632626][ T9400] Bluetooth: MGMT ver 1.23 [ 195.717589][ T9402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.917440][ T9384] syz_tun: left allmulticast mode [ 195.934266][ T862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.963996][ T9384] dvmrp8: left allmulticast mode [ 196.040261][ T9423] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 196.123140][ T9427] lo speed is unknown, defaulting to 1000 [ 196.281555][ T9432] netlink: 696 bytes leftover after parsing attributes in process `syz.4.914'. [ 196.971267][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 197.168590][ T9457] delete_channel: no stack [ 197.219329][ T9453] bridge3: port 1(veth3) entered blocking state [ 197.243452][ T9453] bridge3: port 1(veth3) entered disabled state [ 197.263747][ T9453] veth3: entered allmulticast mode [ 197.277993][ T9453] veth3: entered promiscuous mode [ 197.570319][ T9451] bridge3: port 2(veth0_to_bond) entered blocking state [ 197.596030][ T9451] bridge3: port 2(veth0_to_bond) entered disabled state [ 197.611810][ T9451] veth0_to_bond: entered allmulticast mode [ 197.622505][ T9451] veth0_to_bond: entered promiscuous mode [ 197.652524][ T9460] vlan2: entered allmulticast mode [ 197.666872][ T9460] veth1: entered allmulticast mode [ 197.672834][ T9472] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 197.697139][ T9475] IPv6: sit1: Disabled Multicast RS [ 197.979242][ T9491] netlink: 696 bytes leftover after parsing attributes in process `syz.3.929'. [ 198.323354][ T9507] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.933'. [ 198.333189][ T9511] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.933'. [ 198.364249][ T9507] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 198.398920][ T9511] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 198.419009][ T9507] openvswitch: netlink: Message has 1 unknown bytes. [ 198.439067][ T9515] netlink: 696 bytes leftover after parsing attributes in process `syz.4.936'. [ 198.456630][ T9511] openvswitch: netlink: Message has 1 unknown bytes. [ 198.735474][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 198.821380][ T9531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.954296][ T9538] bridge0: port 3(erspan0) entered blocking state [ 199.011291][ T9538] bridge0: port 3(erspan0) entered disabled state [ 199.029133][ T9538] erspan0: entered allmulticast mode [ 199.041088][ T9542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.088177][ T9538] erspan0: left allmulticast mode [ 199.205876][ T9533] lo speed is unknown, defaulting to 1000 [ 199.564407][ T9558] netlink: 696 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.716738][ T9567] tipc: Enabled bearer , priority 0 [ 199.740888][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.747113][ T9567] syzkaller0: entered promiscuous mode [ 199.765070][ T9567] syzkaller0: entered allmulticast mode [ 199.964769][ T9577] xt_time: unknown flags 0xf4 [ 199.983006][ T9580] tipc: Resetting bearer [ 200.020020][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 200.505078][ T9566] tipc: Resetting bearer [ 200.570989][ T9566] tipc: Disabling bearer [ 200.752478][ T9605] lo speed is unknown, defaulting to 1000 [ 200.760866][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 200.776623][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 200.790982][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 201.117095][ T9621] netem: invalid attributes len -16 [ 201.123822][ T9621] netem: change failed [ 201.605304][ T9647] vxcan1: entered allmulticast mode [ 201.619519][ T9652] netlink: 'syz.2.971': attribute type 13 has an invalid length. [ 201.633806][ T9652] netlink: 'syz.2.971': attribute type 17 has an invalid length. [ 201.680511][ T9652] gretap0: refused to change device tx_queue_len [ 201.701434][ T9652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.740818][ T7210] lo speed is unknown, defaulting to 1000 [ 202.311489][ T9681] netlink: 'syz.2.979': attribute type 7 has an invalid length. [ 202.337462][ T9681] netlink: 'syz.2.979': attribute type 8 has an invalid length. [ 202.429220][ T9681] bond0: entered promiscuous mode [ 202.439780][ T9681] bridge0: entered promiscuous mode [ 202.447060][ T9681] team0: entered promiscuous mode [ 202.460842][ T9681] ip6gretap0: entered promiscuous mode [ 202.483186][ T9681] bond0: left promiscuous mode [ 202.491035][ T9681] bridge0: left promiscuous mode [ 202.512337][ T9681] team0: left promiscuous mode [ 202.533947][ T9681] ip6gretap0: left promiscuous mode [ 202.915888][ T9721] netlink: 'syz.2.984': attribute type 16 has an invalid length. [ 202.952473][ T9721] netlink: 'syz.2.984': attribute type 17 has an invalid length. [ 203.179717][ T9721] tipc: Resetting bearer [ 203.281468][ T7210] lo speed is unknown, defaulting to 1000 [ 203.295775][ T7210] syz0: Port: 1 Link DOWN [ 203.399122][ T8485] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.429715][ T8485] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.455137][ T7218] lo speed is unknown, defaulting to 1000 [ 203.455193][ T3161] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.530149][ T3161] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.819470][ T9765] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 203.833932][ T7209] IPVS: starting estimator thread 0... [ 203.860929][ T9765] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 203.883922][ T9765] __nla_validate_parse: 75 callbacks suppressed [ 203.883945][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 203.901899][ T9771] netlink: 'syz.2.1000': attribute type 2 has an invalid length. [ 203.918341][ T9765] IPVS: lc: FWM 3 0x00000003 - no destination available [ 203.943917][ T9769] IPVS: using max 24 ests per chain, 57600 per kthread [ 203.995450][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 204.048563][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.084108][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.114999][ T9771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.158156][ T7213] lo speed is unknown, defaulting to 1000 [ 204.184904][ T7213] syz0: Port: 1 Link ACTIVE [ 204.197483][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.229857][ T7213] lo speed is unknown, defaulting to 1000 [ 204.313277][ T9771] veth0_to_team: entered promiscuous mode [ 204.322119][ T9771] veth0_to_team: entered allmulticast mode [ 204.400043][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 204.484795][ T9784] geneve2: entered promiscuous mode [ 204.490089][ T9784] geneve2: entered allmulticast mode [ 204.576069][ T8477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.595442][ T8477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.631781][ T8477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.649517][ T8477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.997063][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 205.009409][ T9782] lo speed is unknown, defaulting to 1000 [ 205.034274][ T8475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.057843][ T9816] netlink: 3552 bytes leftover after parsing attributes in process `syz.2.1011'. [ 205.254280][ T7213] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.062258][ T8479] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.112964][ T8479] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.114854][ T9846] netlink: 'syz.3.1018': attribute type 21 has an invalid length. [ 206.205540][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 206.262462][ T9852] lo speed is unknown, defaulting to 1000 [ 206.412684][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 206.575275][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 206.633228][ T9874] netlink: 'syz.3.1026': attribute type 16 has an invalid length. [ 206.661827][ T9874] netlink: 'syz.3.1026': attribute type 17 has an invalid length. [ 206.855843][ T7209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.933788][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 206.951991][ T9895] netlink: 'syz.1.1030': attribute type 29 has an invalid length. [ 206.967023][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 207.112163][ T8477] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.153076][ T8477] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.194490][ T8477] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.225038][ T8477] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.370777][ T9908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.592969][ T9928] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 207.637595][ T9927] pimreg: entered allmulticast mode [ 207.661350][ T9927] pimreg: left allmulticast mode [ 207.894995][ T9935] syzkaller0: entered promiscuous mode [ 207.905106][ T9935] syzkaller0: entered allmulticast mode [ 207.928636][ T9935] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.029269][ T9937] lo speed is unknown, defaulting to 1000 [ 209.014147][ T9970] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 209.147992][ T9970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.180272][ T9973] vlan2: entered allmulticast mode [ 209.187266][ T9973] macvtap0: entered allmulticast mode [ 209.219479][ T9973] bond3: (slave vlan2): Opening slave failed [ 209.236801][ T9970] __nla_validate_parse: 6 callbacks suppressed [ 209.236821][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 209.656414][ T9996] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 209.676675][ T9995] lo speed is unknown, defaulting to 1000 [ 210.088290][ T9996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.293637][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.419029][ T9989] bond2: (slave gretap1): making interface the new active one [ 210.468034][ T9989] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 210.825832][T10031] Bluetooth: MGMT ver 1.23 [ 210.859481][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 211.230771][T10038] openvswitch: netlink: Key type 6681 is out of range max 32 [ 211.263168][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 211.595139][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 211.741124][T10056] lo speed is unknown, defaulting to 1000 [ 212.057384][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 212.057408][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 212.064055][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 212.201813][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 212.243508][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 212.252455][T10068] netlink: 'syz.1.1079': attribute type 11 has an invalid length. [ 212.273300][T10062] lo speed is unknown, defaulting to 1000 [ 212.277229][T10070] netlink: 'syz.2.1081': attribute type 22 has an invalid length. [ 212.311117][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 212.312061][T10073] tipc: Started in network mode [ 212.325430][T10073] tipc: Node identity 6ef8fa047144, cluster identity 4711 [ 212.332792][T10073] tipc: Enabled bearer , priority 0 [ 212.356139][T10068] netlink: 'syz.1.1079': attribute type 14 has an invalid length. [ 212.437158][T10073] syzkaller0: entered promiscuous mode [ 212.443050][T10073] syzkaller0: entered allmulticast mode [ 212.524072][T10073] tipc: Resetting bearer [ 212.704571][T10071] tipc: Resetting bearer [ 212.763893][T10071] tipc: Disabling bearer [ 213.263026][T10067] lo speed is unknown, defaulting to 1000 [ 213.623172][T10088] lo speed is unknown, defaulting to 1000 [ 213.992368][ T7212] lo speed is unknown, defaulting to 1000 [ 214.014965][ T7212] syz0: Port: 1 Link DOWN [ 214.091672][ T7212] lo speed is unknown, defaulting to 1000 [ 214.745385][T10121] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 215.011497][T10133] netlink: 'syz.2.1095': attribute type 4 has an invalid length. [ 215.793020][T10166] tipc: Enabled bearer , priority 0 [ 215.926543][T10166] syzkaller0: entered promiscuous mode [ 215.932606][T10166] syzkaller0: entered allmulticast mode [ 215.939271][T10166] tipc: Resetting bearer [ 216.016969][T10166] tipc: Resetting bearer [ 216.830857][T10191] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 216.873997][ T8197] tipc: Node number set to 532478468 [ 217.647475][T10166] tipc: Disabling bearer [ 217.797999][T10191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.841056][T10192] bond4: (slave gretap1): making interface the new active one [ 217.850730][T10192] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 217.900023][T10189] lo speed is unknown, defaulting to 1000 [ 218.069817][T10205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 218.123001][T10212] pimreg: entered allmulticast mode [ 218.141059][T10212] sctp: [Deprecated]: syz.1.1120 (pid 10212) Use of int in maxseg socket option. [ 218.141059][T10212] Use struct sctp_assoc_value instead [ 218.348722][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1122'. [ 218.472438][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1122'. [ 218.850560][T10233] netlink: 'syz.3.1126': attribute type 13 has an invalid length. [ 218.903598][T10233] netlink: 'syz.3.1126': attribute type 17 has an invalid length. [ 218.911473][T10233] netlink: 'syz.3.1126': attribute type 27 has an invalid length. [ 218.933591][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.100766][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 219.163123][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1131'. [ 219.208618][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1131'. [ 219.211252][T10248] netlink: 'syz.4.1132': attribute type 30 has an invalid length. [ 219.250996][T10248] dummy0: entered allmulticast mode [ 219.261362][T10247] dummy0: left allmulticast mode [ 219.349972][T10258] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1135'. [ 219.411332][T10260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1136'. [ 219.420854][T10260] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1136'. [ 219.437017][T10260] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1136'. [ 219.618769][T10265] tipc: Enabling of bearer rejected, already enabled [ 219.632796][T10269] tipc: Enabling of bearer rejected, already enabled [ 219.729674][T10265] tipc: Resetting bearer [ 220.082470][T10283] tipc: Enabling of bearer rejected, already enabled [ 220.172892][T10292] syzkaller0: mtu less than device minimum [ 220.582661][T10300] lo speed is unknown, defaulting to 1000 [ 220.625207][ T30] audit: type=1804 audit(1756984327.069:3): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1150" name="/newroot/251/cgroup.controllers" dev="tmpfs" ino=1300 res=1 errno=0 [ 220.689015][ T30] audit: type=1800 audit(1756984327.069:4): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1150" name="cgroup.controllers" dev="tmpfs" ino=1300 res=0 errno=0 [ 223.224151][T10386] bond0: (slave bridge0): Releasing backup interface [ 223.245387][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.290747][T10386] bond0: (slave team0): Releasing backup interface [ 223.309019][T10386] bond0: (slave macvlan0): Releasing backup interface [ 223.320174][T10389] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 223.320643][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.340685][T10386] bond2: (slave gretap1): Releasing active interface [ 223.444848][T10389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.579390][T10395] lo speed is unknown, defaulting to 1000 [ 224.230994][T10428] sctp: [Deprecated]: syz.2.1186 (pid 10428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.230994][T10428] Use struct sctp_sack_info instead [ 224.800622][T10445] __nla_validate_parse: 4 callbacks suppressed [ 224.800643][T10445] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1190'. [ 224.911711][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1193'. [ 225.087247][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 225.213655][T10463] netlink: 'syz.1.1196': attribute type 16 has an invalid length. [ 225.232976][T10463] netlink: 'syz.1.1196': attribute type 17 has an invalid length. [ 225.276715][T10463] tipc: Resetting bearer [ 225.363030][T10471] IPv6: NLM_F_REPLACE set, but no existing node found! [ 225.392795][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 225.430697][T10466] syzkaller0: entered promiscuous mode [ 225.464149][T10466] syzkaller0: entered allmulticast mode [ 225.546530][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'. [ 225.751556][T10491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.919259][T10500] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1209'. [ 226.009382][T10503] netlink: 'syz.4.1210': attribute type 13 has an invalid length. [ 226.224419][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 226.729333][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'. [ 226.801329][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 226.815122][T10546] erspan0: entered allmulticast mode [ 227.031737][T10559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.079479][T10562] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1232'. [ 227.190290][T10576] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 227.255367][ T8477] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 227.373829][ T8468] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.297686][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 228.942144][T10641] tipc: Enabling of bearer rejected, already enabled [ 229.177898][T10651] ip6gre1: entered allmulticast mode [ 229.772962][T10674] lo speed is unknown, defaulting to 1000 [ 229.892096][T10680] __nla_validate_parse: 7 callbacks suppressed [ 229.892115][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 230.202949][T10685] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 230.274142][T10685] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1267'. [ 230.829507][T10690] lo speed is unknown, defaulting to 1000 [ 231.474580][T10720] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1279'. [ 231.519580][T10729] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 231.612962][T10725] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 231.655463][T10729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.734732][T10725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.748305][T10723] lo speed is unknown, defaulting to 1000 [ 231.799883][T10731] bond6: (slave gretap2): making interface the new active one [ 231.833229][T10731] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 232.602627][T10730] lo speed is unknown, defaulting to 1000 [ 233.514928][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 233.535141][T10784] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1293'. [ 234.106539][ T44] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 234.124634][ T44] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 234.175907][ T44] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 234.856310][T10832] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 235.188793][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.197592][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.380974][T10835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.395929][T10835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.616012][T10850] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1308'. [ 235.796915][ T8468] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.831171][ T8468] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.917663][ T8468] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.961623][ T8468] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.044015][T10868] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 236.115572][T10868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.160244][T10866] lo speed is unknown, defaulting to 1000 [ 236.213656][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.365018][T10885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1314'. [ 236.619563][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 236.929141][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 236.999858][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 237.099116][T10878] lo speed is unknown, defaulting to 1000 [ 237.524317][T10871] lo speed is unknown, defaulting to 1000 [ 237.884538][T10917] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1325'. [ 237.927615][T10899] lo speed is unknown, defaulting to 1000 [ 238.150645][T10925] tipc: Enabling of bearer rejected, already enabled [ 238.380749][T10927] syzkaller0: entered promiscuous mode [ 238.390348][T10927] syzkaller0: entered allmulticast mode [ 240.520969][T10948] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 240.532379][T10947] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1333'. [ 240.550642][T10948] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 240.759254][T10954] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1336'. [ 240.956560][T10965] lo speed is unknown, defaulting to 1000 [ 241.177497][T10978] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 241.246746][T10978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.648779][T10988] vti0: entered promiscuous mode [ 241.660341][T10988] vti0: entered allmulticast mode [ 241.692382][T10975] lo speed is unknown, defaulting to 1000 [ 242.142584][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 242.524244][T11021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1356'. [ 242.591434][T11010] : entered promiscuous mode [ 242.696041][T11028] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 242.704163][T11028] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1354'. [ 242.730418][T11021] team0: Port device team_slave_0 removed [ 242.856260][T11028] netlink: 'syz.2.1354': attribute type 4 has an invalid length. [ 242.856806][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 242.881510][T11028] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 242.904074][T11028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1354'. [ 243.043084][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1359'. [ 243.190391][T11041] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 243.198283][T11041] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1358'. [ 243.208324][T11041] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1358'. [ 243.354584][T11046] tipc: Resetting bearer [ 243.379269][T11046] syzkaller0: left promiscuous mode [ 243.411642][T11046] syzkaller0: left allmulticast mode [ 243.441433][T11046] vlan2: left allmulticast mode [ 243.447162][T11046] veth1: left allmulticast mode [ 243.478165][T11046] vti0: left promiscuous mode [ 243.483062][T11046] vti0: left allmulticast mode [ 243.506713][T11050] bond0: (slave netdevsim0): Releasing backup interface [ 243.524370][ T7209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.581474][T11052] IPVS: Error connecting to the multicast addr [ 243.609395][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1361'. [ 243.641869][T11054] team0: Failed to send options change via netlink (err -105) [ 243.649677][T11054] team0: Mode changed to "loadbalance" [ 243.671362][T11060] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 243.682604][T11056] 8021q: VLANs not supported on ip6gre0 [ 244.035187][T11078] Unsupported ieee802154 address type: 0 [ 244.536725][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.621173][T11113] pimreg: entered allmulticast mode [ 244.631191][T11113] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 244.987504][T11136] netlink: ct family unspecified [ 244.997688][T11136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.109922][T11147] netlink: 'syz.0.1388': attribute type 13 has an invalid length. [ 245.137352][T11147] netlink: 'syz.0.1388': attribute type 5 has an invalid length. [ 245.205189][T11152] geneve2: entered promiscuous mode [ 245.210667][T11152] geneve2: entered allmulticast mode [ 245.226401][ T8485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.238662][ T8485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.256792][ T8485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.275930][ T8485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.542227][T11166] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.782340][T11185] tipc: Enabled bearer , priority 0 [ 245.801062][T11183] syzkaller0: entered promiscuous mode [ 245.819264][T11183] syzkaller0: entered allmulticast mode [ 246.035567][T11183] tipc: Resetting bearer [ 246.160512][T11197] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 246.391287][T11204] tipc: Enabling of bearer rejected, failed to enable media [ 246.406809][T11204] __nla_validate_parse: 10 callbacks suppressed [ 246.406829][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 246.469228][T11182] tipc: Resetting bearer [ 246.572879][T11182] tipc: Disabling bearer [ 246.643121][T11210] IPv6: sit2: Disabled Multicast RS [ 247.015487][T11231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1414'. [ 247.077305][T11231] pimreg3: entered allmulticast mode [ 247.219270][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 247.222789][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 247.272531][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 247.342340][T11242] tipc: Enabled bearer , priority 0 [ 247.349615][T11241] tipc: Enabling of bearer rejected, already enabled [ 247.358684][T11242] syzkaller0: entered promiscuous mode [ 247.365558][T11242] syzkaller0: entered allmulticast mode [ 247.396335][T11242] tipc: Resetting bearer [ 247.416099][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1419'. [ 247.426492][T11239] tipc: Resetting bearer [ 247.467311][T11239] tipc: Disabling bearer [ 247.818109][T11263] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1424'. [ 247.954626][T11266] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 248.113908][T11269] tipc: Enabled bearer , priority 0 [ 248.206630][T11275] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.242869][T11269] syzkaller0: entered promiscuous mode [ 248.261931][T11269] syzkaller0: entered allmulticast mode [ 248.282587][T11269] tipc: Resetting bearer [ 248.330667][T11264] tipc: Resetting bearer [ 248.368055][T11282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 249.963888][T11264] tipc: Disabling bearer [ 249.980285][T11285] ip6tnl3: entered allmulticast mode [ 249.992747][T11289] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 249.993681][T11291] team0: Unable to change to the same mode the team is in [ 250.018571][ T7209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.216387][T11310] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 250.257903][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 250.272667][T11313] vlan2: entered promiscuous mode [ 250.278110][T11313] macvtap0: entered promiscuous mode [ 250.502808][T11309] team0 (unregistering): Port device team_slave_0 removed [ 250.511854][T11309] team0 (unregistering): Port device team_slave_1 removed [ 250.553668][ T7209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.652958][T11332] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 250.846572][T11342] lo speed is unknown, defaulting to 1000 [ 250.917834][T11349] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1448'. [ 251.185108][T11358] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 251.207148][T11358] team0: Port device dummy0 added [ 251.224264][T11358] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 251.240428][T11358] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 251.277421][T11358] team0: Port device dummy0 removed [ 251.287067][T11358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 251.405890][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 251.597631][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 251.654663][T11371] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 251.894079][T11375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.972094][T11376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.002495][T11376] bond7: (slave macvlan2): Enslaving as a backup interface with an up link [ 252.016271][ T8485] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.036379][T11375] bridge_slave_0: left allmulticast mode [ 252.064943][T11375] bridge_slave_0: left promiscuous mode [ 252.081212][T11375] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.102010][T11375] bridge_slave_1: left allmulticast mode [ 252.107937][T11375] bridge_slave_1: left promiscuous mode [ 252.114989][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.128557][T11375] bond0: (slave 77): Releasing backup interface [ 252.148604][T11375] bond0: (slave bond_slave_1): Releasing backup interface [ 252.156392][ T8485] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.172876][T11375] team0: Port device team_slave_1 removed [ 252.181185][T11375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.187082][T11399] netlink: 'syz.1.1463': attribute type 2 has an invalid length. [ 252.196603][T11399] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 252.198922][T11375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.205063][T11399] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 252.221965][T11375] bond1: (slave bridge1): Releasing active interface [ 252.235184][T11375] veth5: left allmulticast mode [ 252.240475][T11375] veth5: left promiscuous mode [ 252.251143][T11375] bridge2: port 1(veth5) entered disabled state [ 252.268395][T11375] bond6: (slave gretap2): Releasing active interface [ 252.279528][T11375] bond7: (slave macvlan2): Removing an active aggregator [ 252.292334][T11375] bond7: (slave macvlan2): Releasing backup interface [ 252.489709][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 252.515340][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1467'. [ 252.618158][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'. [ 252.633315][T11420] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 252.642882][T11421] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 252.676827][T11420] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.776055][T11420] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.783589][T11420] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 252.796368][T11420] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 252.876257][T11438] netlink: 'syz.1.1476': attribute type 21 has an invalid length. [ 252.890278][T11438] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1476'. [ 252.900001][T11438] netlink: 'syz.1.1476': attribute type 4 has an invalid length. [ 252.917192][T11438] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1476'. [ 253.036821][T11445] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1478'. [ 253.041575][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 253.078496][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 253.100771][T11440] validate_nla: 1 callbacks suppressed [ 253.100791][T11440] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 253.118772][T11440] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1477'. [ 253.175495][T11440] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.182402][T11440] block nbd1: shutting down sockets [ 253.197150][T11454] netlink: 'syz.0.1479': attribute type 2 has an invalid length. [ 253.248896][T11454] : entered promiscuous mode [ 253.419219][T11466] netlink: 'syz.2.1484': attribute type 39 has an invalid length. [ 253.522353][T11463] lo speed is unknown, defaulting to 1000 [ 253.606398][T11470] sctp: [Deprecated]: syz.4.1485 (pid 11470) Use of int in max_burst socket option. [ 253.606398][T11470] Use struct sctp_assoc_value instead [ 253.660271][T11473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.937514][T11452] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 254.127708][ T8201] IPVS: starting estimator thread 0... [ 254.233985][T11500] IPVS: using max 25 ests per chain, 60000 per kthread [ 254.617443][T11512] ip6tnl0: entered promiscuous mode [ 254.633898][T11512] ip6tnl0: entered allmulticast mode [ 254.652215][T11512] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 254.757818][T11522] tun0: tun_chr_ioctl cmd 2147767520 [ 255.173673][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 257.519429][T11570] netlink: 'syz.1.1508': attribute type 4 has an invalid length. [ 257.600994][T11573] lo speed is unknown, defaulting to 1000 [ 257.674170][T11576] __nla_validate_parse: 5 callbacks suppressed [ 257.674190][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 258.148396][T11570] lo speed is unknown, defaulting to 1000 [ 258.354451][T11602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.635059][T11613] FAULT_INJECTION: forcing a failure. [ 258.635059][T11613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.674053][T11613] CPU: 1 UID: 0 PID: 11613 Comm: syz.3.1522 Not tainted syzkaller #0 PREEMPT(full) [ 258.674084][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.674097][T11613] Call Trace: [ 258.674106][T11613] [ 258.674114][T11613] dump_stack_lvl+0x189/0x250 [ 258.674144][T11613] ? __pfx____ratelimit+0x10/0x10 [ 258.674166][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.674189][T11613] ? __pfx__printk+0x10/0x10 [ 258.674214][T11613] ? __might_fault+0xb0/0x130 [ 258.674254][T11613] should_fail_ex+0x414/0x560 [ 258.674288][T11613] _copy_from_user+0x2d/0xb0 [ 258.674313][T11613] ___sys_sendmsg+0x158/0x2a0 [ 258.674341][T11613] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.674405][T11613] ? __fget_files+0x2a/0x420 [ 258.674422][T11613] ? __fget_files+0x3a0/0x420 [ 258.674452][T11613] __sys_sendmmsg+0x227/0x430 [ 258.674483][T11613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 258.674504][T11613] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 258.674555][T11613] ? ksys_write+0x22a/0x250 [ 258.674586][T11613] ? __pfx_ksys_write+0x10/0x10 [ 258.674610][T11613] ? rcu_is_watching+0x15/0xb0 [ 258.674637][T11613] __x64_sys_sendmmsg+0xa0/0xc0 [ 258.674664][T11613] do_syscall_64+0xfa/0x3b0 [ 258.674685][T11613] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.674703][T11613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.674721][T11613] ? clear_bhb_loop+0x60/0xb0 [ 258.674747][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.674766][T11613] RIP: 0033:0x7f9e6978ebe9 [ 258.674786][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.674804][T11613] RSP: 002b:00007f9e6a5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 258.674825][T11613] RAX: ffffffffffffffda RBX: 00007f9e699c5fa0 RCX: 00007f9e6978ebe9 [ 258.674840][T11613] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 258.674853][T11613] RBP: 00007f9e6a5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 258.674865][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.674876][T11613] R13: 00007f9e699c6038 R14: 00007f9e699c5fa0 R15: 00007ffdbc256688 [ 258.674909][T11613] [ 258.676056][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'. [ 259.009211][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 259.158750][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1523'. [ 259.800971][T11659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'. [ 259.848222][T11653] lo speed is unknown, defaulting to 1000 [ 260.866021][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 261.731346][T11706] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 261.799517][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 262.028731][T11706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.172736][T11708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.180497][T11708] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.200433][T11708] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 262.562333][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 262.578715][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1549'. [ 262.630250][T11731] netlink: 'syz.1.1550': attribute type 6 has an invalid length. [ 262.791079][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 262.977150][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.079656][T11750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.088612][T11750] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 263.116128][T11745] IPVS: Scheduler module ip_vs_sip not found [ 263.126351][T11750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.162258][T11750] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 263.205428][T11750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.231746][T11750] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 263.280442][T11750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.286716][T11750] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 263.393231][T11767] veth5: entered allmulticast mode [ 263.517019][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 263.711814][T11786] lo speed is unknown, defaulting to 1000 [ 263.797259][T11794] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1571'. [ 263.972233][T11801] syzkaller1: entered promiscuous mode [ 263.994389][T11801] syzkaller1: entered allmulticast mode [ 264.068611][T11801] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 264.144323][T11801] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 264.161968][T11812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1576'. [ 264.260296][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 264.284254][T11809] lo speed is unknown, defaulting to 1000 [ 265.634859][T11858] tipc: Enabling of bearer rejected, already enabled [ 265.679154][T11858] tipc: Resetting bearer [ 265.873344][T11866] lo speed is unknown, defaulting to 1000 [ 266.064101][T11873] tap0: tun_chr_ioctl cmd 1074025677 [ 266.070855][T11873] tap0: linktype set to 800 [ 266.413652][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1603'. [ 267.238258][T11940] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 267.317563][T11940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.387125][T11939] lo speed is unknown, defaulting to 1000 [ 267.533238][T11950] openvswitch: netlink: IP tunnel TTL not specified. [ 267.585943][T11950] openvswitch: netlink: IP tunnel TTL not specified. [ 267.811460][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 268.338392][T11966] lo speed is unknown, defaulting to 1000 [ 268.690903][T11986] syz.0.1621 (11986) used greatest stack depth: 17864 bytes left [ 268.927658][T12003] FAULT_INJECTION: forcing a failure. [ 268.927658][T12003] name failslab, interval 1, probability 0, space 0, times 0 [ 268.980889][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.4.1625 Not tainted syzkaller #0 PREEMPT(full) [ 268.980922][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.980934][T12003] Call Trace: [ 268.980943][T12003] [ 268.980952][T12003] dump_stack_lvl+0x189/0x250 [ 268.980983][T12003] ? __pfx____ratelimit+0x10/0x10 [ 268.981005][T12003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.981029][T12003] ? __pfx__printk+0x10/0x10 [ 268.981065][T12003] ? __pfx___might_resched+0x10/0x10 [ 268.981085][T12003] ? fs_reclaim_acquire+0x7d/0x100 [ 268.981122][T12003] should_fail_ex+0x414/0x560 [ 268.981157][T12003] should_failslab+0xa8/0x100 [ 268.981197][T12003] __kmalloc_cache_noprof+0x70/0x3d0 [ 268.981224][T12003] ? tcf_block_get_ext+0x68d/0x17d0 [ 268.981261][T12003] tcf_block_get_ext+0x68d/0x17d0 [ 268.981296][T12003] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.981319][T12003] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 268.981358][T12003] tcf_block_get+0x67/0xa0 [ 268.981375][T12003] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 268.981401][T12003] htb_init+0x1ce/0xce0 [ 268.981424][T12003] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 268.981451][T12003] ? is_dynamic_key+0xd6/0x1c0 [ 268.981478][T12003] ? qdisc_alloc+0x789/0xaa0 [ 268.981494][T12003] ? qdisc_create+0x12c/0xea0 [ 268.981519][T12003] ? tc_modify_qdisc+0x1538/0x20e0 [ 268.981544][T12003] ? rtnetlink_rcv_msg+0x779/0xb70 [ 268.981562][T12003] ? netlink_rcv_skb+0x205/0x470 [ 268.981580][T12003] ? netlink_unicast+0x82c/0x9e0 [ 268.981607][T12003] ? netlink_sendmsg+0x805/0xb30 [ 268.981626][T12003] ? __sock_sendmsg+0x219/0x270 [ 268.981654][T12003] ? __pfx_htb_init+0x10/0x10 [ 268.981670][T12003] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 268.981692][T12003] ? do_syscall_64+0xfa/0x3b0 [ 268.981712][T12003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.981754][T12003] ? lockdep_rtnl_is_held+0x26/0x40 [ 268.981780][T12003] ? qdisc_lookup+0x36d/0x6d0 [ 268.981808][T12003] ? __pfx_htb_init+0x10/0x10 [ 268.981828][T12003] qdisc_create+0x7a9/0xea0 [ 268.981866][T12003] tc_modify_qdisc+0x1538/0x20e0 [ 268.981914][T12003] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 268.981978][T12003] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 268.982005][T12003] rtnetlink_rcv_msg+0x779/0xb70 [ 268.982024][T12003] ? __lock_acquire+0xab9/0xd20 [ 268.982056][T12003] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 268.982076][T12003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.982116][T12003] netlink_rcv_skb+0x205/0x470 [ 268.982134][T12003] ? __lock_acquire+0xab9/0xd20 [ 268.982164][T12003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.982193][T12003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.982227][T12003] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.982257][T12003] netlink_unicast+0x82c/0x9e0 [ 268.982298][T12003] ? __pfx_netlink_unicast+0x10/0x10 [ 268.982332][T12003] ? netlink_sendmsg+0x642/0xb30 [ 268.982349][T12003] ? skb_put+0x11b/0x210 [ 268.982376][T12003] netlink_sendmsg+0x805/0xb30 [ 268.982407][T12003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.982431][T12003] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.982453][T12003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.982474][T12003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.982497][T12003] __sock_sendmsg+0x219/0x270 [ 268.982529][T12003] ____sys_sendmsg+0x52d/0x830 [ 268.982558][T12003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.982591][T12003] ? import_iovec+0x74/0xa0 [ 268.982620][T12003] ___sys_sendmsg+0x21f/0x2a0 [ 268.982645][T12003] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.982710][T12003] ? __fget_files+0x2a/0x420 [ 268.982728][T12003] ? __fget_files+0x3a0/0x420 [ 268.982758][T12003] __sys_sendmmsg+0x227/0x430 [ 268.982789][T12003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.982810][T12003] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 268.982865][T12003] ? ksys_write+0x22a/0x250 [ 268.982895][T12003] ? __pfx_ksys_write+0x10/0x10 [ 268.982919][T12003] ? rcu_is_watching+0x15/0xb0 [ 268.982947][T12003] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.982974][T12003] do_syscall_64+0xfa/0x3b0 [ 268.982994][T12003] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.983015][T12003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.983041][T12003] ? clear_bhb_loop+0x60/0xb0 [ 268.983067][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.983086][T12003] RIP: 0033:0x7f75e2d8ebe9 [ 268.983105][T12003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.983122][T12003] RSP: 002b:00007f75e3b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.983144][T12003] RAX: ffffffffffffffda RBX: 00007f75e2fc5fa0 RCX: 00007f75e2d8ebe9 [ 268.983158][T12003] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 268.983172][T12003] RBP: 00007f75e3b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.983191][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.983204][T12003] R13: 00007f75e2fc6038 R14: 00007f75e2fc5fa0 R15: 00007fff2f5d4f68 [ 268.983238][T12003] [ 269.916173][T12017] erspan1: entered promiscuous mode [ 270.133649][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 270.277076][T12023] syzkaller1: entered promiscuous mode [ 270.282616][T12023] syzkaller1: entered allmulticast mode [ 270.893972][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 271.025922][T12048] FAULT_INJECTION: forcing a failure. [ 271.025922][T12048] name failslab, interval 1, probability 0, space 0, times 0 [ 271.062497][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.3.1639 Not tainted syzkaller #0 PREEMPT(full) [ 271.062534][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.062548][T12048] Call Trace: [ 271.062558][T12048] [ 271.062569][T12048] dump_stack_lvl+0x189/0x250 [ 271.062604][T12048] ? __pfx____ratelimit+0x10/0x10 [ 271.062629][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.062657][T12048] ? __pfx__printk+0x10/0x10 [ 271.062700][T12048] ? __pfx___might_resched+0x10/0x10 [ 271.062730][T12048] should_fail_ex+0x414/0x560 [ 271.062768][T12048] should_failslab+0xa8/0x100 [ 271.062821][T12048] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 271.062857][T12048] ? __alloc_skb+0x112/0x2d0 [ 271.062879][T12048] ? __pfx_netlink_unicast+0x10/0x10 [ 271.062919][T12048] __alloc_skb+0x112/0x2d0 [ 271.062950][T12048] netlink_sendmsg+0x5c6/0xb30 [ 271.062988][T12048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.063017][T12048] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.063044][T12048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.063070][T12048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.063097][T12048] __sock_sendmsg+0x219/0x270 [ 271.063136][T12048] ____sys_sendmsg+0x52d/0x830 [ 271.063172][T12048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.063213][T12048] ? import_iovec+0x74/0xa0 [ 271.063246][T12048] ___sys_sendmsg+0x21f/0x2a0 [ 271.063278][T12048] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.063367][T12048] ? __might_fault+0xb0/0x130 [ 271.063405][T12048] __sys_sendmmsg+0x227/0x430 [ 271.063440][T12048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.063465][T12048] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 271.063525][T12048] ? ksys_write+0x22a/0x250 [ 271.063561][T12048] ? __pfx_ksys_write+0x10/0x10 [ 271.063590][T12048] ? rcu_is_watching+0x15/0xb0 [ 271.063624][T12048] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.063655][T12048] do_syscall_64+0xfa/0x3b0 [ 271.063680][T12048] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.063704][T12048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.063728][T12048] ? clear_bhb_loop+0x60/0xb0 [ 271.063758][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.063781][T12048] RIP: 0033:0x7f9e6978ebe9 [ 271.063801][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.063830][T12048] RSP: 002b:00007f9e6a5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.063857][T12048] RAX: ffffffffffffffda RBX: 00007f9e699c5fa0 RCX: 00007f9e6978ebe9 [ 271.063874][T12048] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 271.063890][T12048] RBP: 00007f9e6a5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 271.063904][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.063918][T12048] R13: 00007f9e699c6038 R14: 00007f9e699c5fa0 R15: 00007ffdbc256688 [ 271.063956][T12048] [ 271.510323][T12063] netlink: 'syz.3.1643': attribute type 32 has an invalid length. [ 271.700524][T12068] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1644'. [ 271.889264][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 273.170815][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 273.188790][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 273.294843][T12076] batman_adv: batadv0: Removing interface: macvtap1 [ 273.301449][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 273.362308][ T8475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.371792][ T8475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.389944][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 273.401325][ T8475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.424633][ T8475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.445067][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 273.576807][T12092] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1650'. [ 273.636026][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 273.977275][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 274.005839][T12117] netlink: 'syz.1.1654': attribute type 2 has an invalid length. [ 274.781647][T12133] lo speed is unknown, defaulting to 1000 [ 274.967887][T12144] tipc: Enabling of bearer rejected, already enabled [ 274.995584][T12142] syzkaller0: entered promiscuous mode [ 275.010793][T12142] syzkaller0: entered allmulticast mode [ 275.386136][T12157] FAULT_INJECTION: forcing a failure. [ 275.386136][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 275.414460][T12157] CPU: 0 UID: 0 PID: 12157 Comm: syz.4.1669 Not tainted syzkaller #0 PREEMPT(full) [ 275.414491][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.414504][T12157] Call Trace: [ 275.414512][T12157] [ 275.414521][T12157] dump_stack_lvl+0x189/0x250 [ 275.414552][T12157] ? __pfx____ratelimit+0x10/0x10 [ 275.414575][T12157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.414600][T12157] ? __pfx__printk+0x10/0x10 [ 275.414635][T12157] ? __pfx___might_resched+0x10/0x10 [ 275.414661][T12157] should_fail_ex+0x414/0x560 [ 275.414695][T12157] should_failslab+0xa8/0x100 [ 275.414727][T12157] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.414764][T12157] ? __alloc_skb+0x112/0x2d0 [ 275.414791][T12157] __alloc_skb+0x112/0x2d0 [ 275.414816][T12157] netlink_sendmsg+0x5c6/0xb30 [ 275.414849][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.414874][T12157] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.414896][T12157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.414918][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.414941][T12157] __sock_sendmsg+0x219/0x270 [ 275.414974][T12157] ____sys_sendmsg+0x52d/0x830 [ 275.415005][T12157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.415040][T12157] ? import_iovec+0x74/0xa0 [ 275.415068][T12157] ___sys_sendmsg+0x21f/0x2a0 [ 275.415095][T12157] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.415161][T12157] ? __fget_files+0x2a/0x420 [ 275.415178][T12157] ? __fget_files+0x3a0/0x420 [ 275.415208][T12157] __sys_sendmmsg+0x227/0x430 [ 275.415238][T12157] ? __pfx___sys_sendmmsg+0x10/0x10 [ 275.415260][T12157] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 275.415312][T12157] ? ksys_write+0x22a/0x250 [ 275.415341][T12157] ? __pfx_ksys_write+0x10/0x10 [ 275.415366][T12157] ? rcu_is_watching+0x15/0xb0 [ 275.415394][T12157] __x64_sys_sendmmsg+0xa0/0xc0 [ 275.415420][T12157] do_syscall_64+0xfa/0x3b0 [ 275.415441][T12157] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.415460][T12157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.415479][T12157] ? clear_bhb_loop+0x60/0xb0 [ 275.415502][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.415521][T12157] RIP: 0033:0x7f75e2d8ebe9 [ 275.415538][T12157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.415554][T12157] RSP: 002b:00007f75e3b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.415576][T12157] RAX: ffffffffffffffda RBX: 00007f75e2fc5fa0 RCX: 00007f75e2d8ebe9 [ 275.415590][T12157] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 275.415604][T12157] RBP: 00007f75e3b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 275.415616][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.415627][T12157] R13: 00007f75e2fc6038 R14: 00007f75e2fc5fa0 R15: 00007fff2f5d4f68 [ 275.415659][T12157] [ 275.822709][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 276.952311][T12195] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 277.104214][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 277.595742][T12236] FAULT_INJECTION: forcing a failure. [ 277.595742][T12236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.644354][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.3.1696 Not tainted syzkaller #0 PREEMPT(full) [ 277.644385][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.644398][T12236] Call Trace: [ 277.644406][T12236] [ 277.644415][T12236] dump_stack_lvl+0x189/0x250 [ 277.644446][T12236] ? __pfx____ratelimit+0x10/0x10 [ 277.644468][T12236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.644493][T12236] ? __pfx__printk+0x10/0x10 [ 277.644522][T12236] ? __might_fault+0xb0/0x130 [ 277.644573][T12236] should_fail_ex+0x414/0x560 [ 277.644607][T12236] _copy_from_iter+0x1de/0x1790 [ 277.644637][T12236] ? rcu_is_watching+0x15/0xb0 [ 277.644660][T12236] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 277.644691][T12236] ? __pfx__copy_from_iter+0x10/0x10 [ 277.644714][T12236] ? __build_skb_around+0x257/0x3e0 [ 277.644740][T12236] ? netlink_sendmsg+0x642/0xb30 [ 277.644760][T12236] ? skb_put+0x11b/0x210 [ 277.644786][T12236] netlink_sendmsg+0x6b2/0xb30 [ 277.644818][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.644843][T12236] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.644866][T12236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.644887][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.644910][T12236] __sock_sendmsg+0x219/0x270 [ 277.644943][T12236] ____sys_sendmsg+0x52d/0x830 [ 277.644973][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.645008][T12236] ? import_iovec+0x74/0xa0 [ 277.645036][T12236] ___sys_sendmsg+0x21f/0x2a0 [ 277.645064][T12236] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.645151][T12236] ? __fget_files+0x2a/0x420 [ 277.645168][T12236] ? __fget_files+0x3a0/0x420 [ 277.645203][T12236] __sys_sendmmsg+0x227/0x430 [ 277.645234][T12236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.645255][T12236] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 277.645307][T12236] ? ksys_write+0x22a/0x250 [ 277.645338][T12236] ? __pfx_ksys_write+0x10/0x10 [ 277.645363][T12236] ? rcu_is_watching+0x15/0xb0 [ 277.645391][T12236] __x64_sys_sendmmsg+0xa0/0xc0 [ 277.645417][T12236] do_syscall_64+0xfa/0x3b0 [ 277.645438][T12236] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.645458][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.645478][T12236] ? clear_bhb_loop+0x60/0xb0 [ 277.645503][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.645523][T12236] RIP: 0033:0x7f9e6978ebe9 [ 277.645550][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.645566][T12236] RSP: 002b:00007f9e6a5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.645588][T12236] RAX: ffffffffffffffda RBX: 00007f9e699c5fa0 RCX: 00007f9e6978ebe9 [ 277.645603][T12236] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 277.645617][T12236] RBP: 00007f9e6a5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 277.645630][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.645642][T12236] R13: 00007f9e699c6038 R14: 00007f9e699c5fa0 R15: 00007ffdbc256688 [ 277.645676][T12236] [ 278.348626][T12251] lo speed is unknown, defaulting to 1000 [ 278.359224][T12245] netlink: 'syz.2.1700': attribute type 9 has an invalid length. [ 278.368626][T12248] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 278.412966][T12245] netlink: 'syz.2.1700': attribute type 7 has an invalid length. [ 278.432952][T12245] netlink: 'syz.2.1700': attribute type 8 has an invalid length. [ 278.609361][T12248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.766456][T12250] lo speed is unknown, defaulting to 1000 [ 278.899640][T12268] __nla_validate_parse: 1 callbacks suppressed [ 278.899661][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1705'. [ 279.186898][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 279.208444][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 279.624914][T12284] FAULT_INJECTION: forcing a failure. [ 279.624914][T12284] name failslab, interval 1, probability 0, space 0, times 0 [ 279.671311][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 279.679996][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.1.1709 Not tainted syzkaller #0 PREEMPT(full) [ 279.680032][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.680046][T12284] Call Trace: [ 279.680055][T12284] [ 279.680065][T12284] dump_stack_lvl+0x189/0x250 [ 279.680100][T12284] ? __pfx____ratelimit+0x10/0x10 [ 279.680126][T12284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.680153][T12284] ? __pfx__printk+0x10/0x10 [ 279.680202][T12284] ? __pfx___might_resched+0x10/0x10 [ 279.680222][T12284] ? fs_reclaim_acquire+0x7d/0x100 [ 279.680265][T12284] should_fail_ex+0x414/0x560 [ 279.680303][T12284] should_failslab+0xa8/0x100 [ 279.680332][T12284] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 279.680359][T12284] ? __alloc_skb+0x112/0x2d0 [ 279.680385][T12284] __alloc_skb+0x112/0x2d0 [ 279.680408][T12284] netlink_ack+0x146/0xa50 [ 279.680425][T12284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.680463][T12284] netlink_rcv_skb+0x28c/0x470 [ 279.680480][T12284] ? __lock_acquire+0xab9/0xd20 [ 279.680513][T12284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.680537][T12284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.680576][T12284] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.680612][T12284] netlink_unicast+0x82c/0x9e0 [ 279.680657][T12284] ? __pfx_netlink_unicast+0x10/0x10 [ 279.680694][T12284] ? netlink_sendmsg+0x642/0xb30 [ 279.680714][T12284] ? skb_put+0x11b/0x210 [ 279.680743][T12284] netlink_sendmsg+0x805/0xb30 [ 279.680777][T12284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.680805][T12284] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.680831][T12284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.680857][T12284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.680883][T12284] __sock_sendmsg+0x219/0x270 [ 279.680919][T12284] ____sys_sendmsg+0x52d/0x830 [ 279.680952][T12284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.680991][T12284] ? import_iovec+0x74/0xa0 [ 279.681023][T12284] ___sys_sendmsg+0x21f/0x2a0 [ 279.681053][T12284] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.681124][T12284] ? __fget_files+0x2a/0x420 [ 279.681143][T12284] ? __fget_files+0x3a0/0x420 [ 279.681176][T12284] __sys_sendmmsg+0x227/0x430 [ 279.681220][T12284] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.681242][T12284] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 279.681298][T12284] ? ksys_write+0x22a/0x250 [ 279.681331][T12284] ? __pfx_ksys_write+0x10/0x10 [ 279.681370][T12284] __x64_sys_sendmmsg+0xa0/0xc0 [ 279.681401][T12284] do_syscall_64+0xfa/0x3b0 [ 279.681424][T12284] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.681447][T12284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.681469][T12284] ? clear_bhb_loop+0x60/0xb0 [ 279.681497][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.681521][T12284] RIP: 0033:0x7ff38b18ebe9 [ 279.681543][T12284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.681562][T12284] RSP: 002b:00007ff38bfce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.681587][T12284] RAX: ffffffffffffffda RBX: 00007ff38b3c5fa0 RCX: 00007ff38b18ebe9 [ 279.681605][T12284] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 279.681621][T12284] RBP: 00007ff38bfce090 R08: 0000000000000000 R09: 0000000000000000 [ 279.681635][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.681649][T12284] R13: 00007ff38b3c6038 R14: 00007ff38b3c5fa0 R15: 00007ffd33ab6508 [ 279.681686][T12284] [ 280.063993][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 280.149626][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1711'. [ 280.703734][T12312] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 280.994943][T12312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.020711][T12310] lo speed is unknown, defaulting to 1000 [ 281.048243][T12320] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1719'. [ 281.237806][T12327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1722'. [ 282.026846][T12364] netlink: 'syz.0.1732': attribute type 16 has an invalid length. [ 282.045240][T12364] netlink: 'syz.0.1732': attribute type 17 has an invalid length. [ 282.102678][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 282.339874][T12377] netlink: 'syz.0.1737': attribute type 10 has an invalid length. [ 282.383840][T12377] syz_tun: entered promiscuous mode [ 282.395619][T12377] syz_tun: entered allmulticast mode [ 282.408282][T12377] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 282.537633][T12393] syzkaller0: entered promiscuous mode [ 282.549237][T12393] syzkaller0: entered allmulticast mode [ 282.881338][T12417] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 283.049066][T12424] netlink: 'syz.2.1747': attribute type 3 has an invalid length. [ 283.091593][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 283.217619][T12429] lo speed is unknown, defaulting to 1000 [ 283.298494][T12438] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 283.390105][T12447] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 283.458367][T12449] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 283.468474][T12438] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.702590][T12463] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 283.790077][T12463] macvlan1: entered allmulticast mode [ 283.813859][T12463] veth1_vlan: entered allmulticast mode [ 283.829679][T12463] team0: Port device macvlan1 added [ 284.068021][T12475] __nla_validate_parse: 9 callbacks suppressed [ 284.068044][T12475] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1761'. [ 284.096768][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 284.119945][T12480] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1761'. [ 284.172448][T12476] delete_channel: no stack [ 284.339084][T12490] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 284.430665][T12490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.619333][T12494] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 284.667283][T12494] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 284.765597][T12494] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.787467][T12494] syzkaller1: linktype set to 823 [ 285.135027][T12523] lo speed is unknown, defaulting to 1000 [ 285.211681][T12516] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 285.334078][T12516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.602282][T12536] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1779'. [ 286.403242][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 286.445130][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 286.636839][T12557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.680355][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1785'. [ 286.992848][T12577] IPv6: Can't replace route, no match found [ 287.132208][T12589] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1789'. [ 287.277285][T12599] veth1_vlan: left allmulticast mode [ 287.304769][T12602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1790'. [ 287.387972][T12601] lo speed is unknown, defaulting to 1000 [ 287.418966][T12596] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 287.596439][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 287.686437][T12596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.130360][T12626] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 288.241064][T12626] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.007758][T12668] bond0: Device is already in use. [ 289.228552][T12669] __nla_validate_parse: 4 callbacks suppressed [ 289.228571][T12669] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1814'. [ 289.320968][T12690] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1819'. [ 289.481371][T12694] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.1821'. [ 289.495922][T12694] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 289.730660][T12704] erspan0: left allmulticast mode [ 289.752680][T12704] syz_tun: left promiscuous mode [ 289.758554][T12704] macvlan1: left allmulticast mode [ 289.767524][T12704] veth5: left allmulticast mode [ 290.078817][T12724] netlink: 'syz.2.1829': attribute type 1 has an invalid length. [ 290.108887][T12723] lo speed is unknown, defaulting to 1000 [ 290.251432][T12724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.775517][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 291.576633][ T51] Bluetooth: hci4: command tx timeout [ 292.179700][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 292.321705][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 292.332138][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.341275][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.362726][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.379573][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 292.461290][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.835965][T12809] tun0: tun_chr_ioctl cmd 2147767520 [ 292.915021][T12812] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1853'. [ 293.167295][T12828] lo speed is unknown, defaulting to 1000 [ 293.192196][T12822] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 293.740723][T12856] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 293.793927][T12856] veth0_vlan: left promiscuous mode [ 293.800489][T12856] veth0_vlan: entered promiscuous mode [ 293.923276][T12856] team0: Device veth0_vlan failed to register rx_handler [ 294.324982][T12866] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 294.552647][T12873] lo speed is unknown, defaulting to 1000 [ 294.554784][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 294.670641][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 294.817375][T12895] netlink: 'syz.4.1877': attribute type 39 has an invalid length. [ 294.856811][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 294.878827][T12895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1877'. [ 295.366798][T12914] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1882'. [ 295.391392][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 295.405949][T12914] netlink: 'syz.2.1882': attribute type 2 has an invalid length. [ 295.535499][T12922] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 295.569939][T12922] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 295.591529][T12922] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 295.601683][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 295.707565][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 295.775172][T12941] netlink: 'syz.0.1889': attribute type 21 has an invalid length. [ 295.794468][T12941] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1889'. [ 295.901003][T12949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1892'. [ 296.066759][T12954] team0: Mode changed to "activebackup" [ 296.112591][T12960] lo speed is unknown, defaulting to 1000 [ 296.167634][T12956] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 297.010370][T12966] syzkaller0: left promiscuous mode [ 297.046905][T12970] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 297.885024][T12999] netlink: 'syz.4.1907': attribute type 16 has an invalid length. [ 297.927120][T12998] !: renamed from dummy0 [ 298.630664][T13008] netem: change failed [ 299.882709][T13062] __nla_validate_parse: 5 callbacks suppressed [ 299.882731][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 300.039776][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 300.100614][T13072] macvlan1: entered promiscuous mode [ 300.119818][T13072] ipvlan0: entered promiscuous mode [ 300.127518][T13072] ipvlan0: left promiscuous mode [ 300.142916][T13072] macvlan1: left promiscuous mode [ 300.201963][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1931'. [ 300.232317][T13075] syzkaller1: entered promiscuous mode [ 300.242835][T13075] syzkaller1: entered allmulticast mode [ 300.567069][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 300.585248][T13094] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.892395][T13105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 300.946630][T13109] macsec0: entered promiscuous mode [ 300.973158][T13109] bridge0: entered promiscuous mode [ 301.000371][T13109] bridge0: left promiscuous mode [ 301.066541][T13116] nbd1: detected capacity change from 0 to 127 [ 301.147575][ T51] block nbd1: Receive control failed (result -32) [ 301.439286][T13142] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 301.454941][T13142] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 301.592468][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 301.800608][T13144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1948'. [ 301.853627][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 301.942149][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.975672][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.983209][T13169] netlink: 'syz.4.1954': attribute type 13 has an invalid length. [ 302.010698][T13169] netlink: 'syz.4.1954': attribute type 17 has an invalid length. [ 302.010749][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.076204][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.197617][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.369508][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.417554][T13169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.444205][T13170] xfrm0: entered promiscuous mode [ 302.449465][T13170] xfrm0: entered allmulticast mode [ 304.202488][T13189] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1957'. [ 304.249326][T13185] lo speed is unknown, defaulting to 1000 [ 304.823861][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 304.848627][T13215] IPv6: Can't replace route, no match found [ 305.045168][T13223] FAULT_INJECTION: forcing a failure. [ 305.045168][T13223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.085139][T13220] lo speed is unknown, defaulting to 1000 [ 305.122911][T13223] CPU: 1 UID: 0 PID: 13223 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(full) [ 305.122942][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.122968][T13223] Call Trace: [ 305.122977][T13223] [ 305.122987][T13223] dump_stack_lvl+0x189/0x250 [ 305.123017][T13223] ? __pfx____ratelimit+0x10/0x10 [ 305.123038][T13223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.123064][T13223] ? __pfx__printk+0x10/0x10 [ 305.123093][T13223] ? __might_fault+0xb0/0x130 [ 305.123134][T13223] should_fail_ex+0x414/0x560 [ 305.123190][T13223] _copy_from_user+0x2d/0xb0 [ 305.123217][T13223] do_sock_getsockopt+0x17d/0x450 [ 305.123245][T13223] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 305.123268][T13223] ? write_ibpb+0x30/0x40 [ 305.123288][T13223] ? __fget_files+0x3a0/0x420 [ 305.123306][T13223] ? __fget_files+0x2a/0x420 [ 305.123335][T13223] __x64_sys_getsockopt+0x1a5/0x250 [ 305.123358][T13223] ? write_ibpb+0x30/0x40 [ 305.123379][T13223] ? write_ibpb+0x30/0x40 [ 305.123404][T13223] do_syscall_64+0xfa/0x3b0 [ 305.123424][T13223] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.123444][T13223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.123464][T13223] ? clear_bhb_loop+0x60/0xb0 [ 305.123489][T13223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.123509][T13223] RIP: 0033:0x7f75e2d8ebe9 [ 305.123527][T13223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.123546][T13223] RSP: 002b:00007f75e3b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 305.123567][T13223] RAX: ffffffffffffffda RBX: 00007f75e2fc5fa0 RCX: 00007f75e2d8ebe9 [ 305.123581][T13223] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 305.123593][T13223] RBP: 00007f75e3b6e090 R08: 00002000000000c0 R09: 0000000000000000 [ 305.123606][T13223] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 305.123618][T13223] R13: 00007f75e2fc6038 R14: 00007f75e2fc5fa0 R15: 00007fff2f5d4f68 [ 305.123658][T13223] [ 305.591071][T13230] __nla_validate_parse: 1 callbacks suppressed [ 305.591092][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 306.593324][T13230] bond7: option mode: unable to set because the bond device is up [ 306.772977][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'. [ 306.960662][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 307.199673][T13280] macsec1: entered promiscuous mode [ 307.205406][T13280] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 307.218862][T13280] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 307.244232][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 307.787613][T13297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1991'. [ 307.809409][T13297] openvswitch: netlink: Flow key attr not present in new flow. [ 307.840563][T13298] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1989'. [ 307.864769][T13300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'. [ 307.885165][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 308.034980][T13312] netlink: 'syz.1.1994': attribute type 21 has an invalid length. [ 308.078414][T13312] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1994'. [ 308.858170][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 309.247804][T13364] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 309.594787][T13382] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.624749][T13412] ip6tnl0: left promiscuous mode [ 310.642384][T13412] ip6tnl0: left allmulticast mode [ 310.670614][T13412] wg1: left promiscuous mode [ 310.690181][T13412] wg1: left allmulticast mode [ 310.715696][T13412] veth0_to_team: left promiscuous mode [ 310.734964][T13412] veth0_to_team: left allmulticast mode [ 310.763239][T13412] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 310.811214][T13412] geneve2: left promiscuous mode [ 310.827959][T13431] __nla_validate_parse: 1 callbacks suppressed [ 310.827980][T13431] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2019'. [ 310.848751][T13412] geneve2: left allmulticast mode [ 310.857594][T13412] ip6gre1: left allmulticast mode [ 311.132964][ T8472] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.196542][ T8472] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.230734][ T8472] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.320813][T13449] netlink: 'syz.1.2023': attribute type 39 has an invalid length. [ 311.344704][ T8472] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.571389][T13452] lo speed is unknown, defaulting to 1000 [ 311.735882][T13467] netlink: 'syz.2.2027': attribute type 2 has an invalid length. [ 311.809282][T13467] netlink: 'syz.2.2027': attribute type 2 has an invalid length. [ 312.211354][T13492] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2033'. [ 312.261614][T13448] lo speed is unknown, defaulting to 1000 [ 312.468372][T13500] netlink: 'syz.0.2036': attribute type 29 has an invalid length. [ 312.484036][T13500] netlink: 'syz.0.2036': attribute type 29 has an invalid length. [ 312.501021][T13497] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2035'. [ 312.519857][T13500] netlink: 524 bytes leftover after parsing attributes in process `syz.0.2036'. [ 313.229539][T13509] lo speed is unknown, defaulting to 1000 [ 313.483869][T13527] netlink: 'syz.1.2044': attribute type 3 has an invalid length. [ 313.491675][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 313.784673][T13534] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2046'. [ 314.019034][T13538] netlink: 'syz.1.2047': attribute type 21 has an invalid length. [ 314.027673][T13538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2047'. [ 314.073693][T13540] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 314.105335][T13540] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2048'. [ 314.119713][T13538] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 314.150283][T13544] netlink: 'syz.0.2049': attribute type 3 has an invalid length. [ 314.168608][T13544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2049'. [ 314.265603][T13550] syzkaller0: left promiscuous mode [ 314.273207][T13550] geneve2: left promiscuous mode [ 314.822435][T13565] tipc: Enabling of bearer rejected, already enabled [ 315.061526][T13580] tipc: Enabling of bearer rejected, already enabled [ 315.071541][T13580] syzkaller0: entered promiscuous mode [ 315.088700][T13580] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 315.385859][T13598] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2066'. [ 315.497407][T13601] lo speed is unknown, defaulting to 1000 [ 315.859855][T13617] netlink: 'syz.1.2071': attribute type 4 has an invalid length. [ 316.673020][T13605] lo speed is unknown, defaulting to 1000 [ 317.215958][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2077'. [ 317.789169][T13618] lo speed is unknown, defaulting to 1000 [ 318.077830][T13670] netlink: 'syz.0.2083': attribute type 16 has an invalid length. [ 318.096460][T13670] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2083'. [ 318.447877][T13671] "syz.0.2083" (13671) uses obsolete ecb(arc4) skcipher [ 319.930402][T13701] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 319.995730][T13706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2090'. [ 320.373407][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 320.597596][T13725] lo speed is unknown, defaulting to 1000 [ 320.624353][T13730] tipc: Enabling of bearer rejected, already enabled [ 320.646329][T13730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 320.668811][T13730] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 321.038538][T13737] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 321.384978][T13739] lo speed is unknown, defaulting to 1000 [ 321.574297][T13752] netlink: 'syz.0.2101': attribute type 15 has an invalid length. [ 321.759029][T13754] vxcan2: entered promiscuous mode [ 321.832990][T13758] syzkaller0: entered promiscuous mode [ 321.859695][T13758] syzkaller0: entered allmulticast mode [ 321.938688][T13764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2104'. [ 322.084410][T13744] lo speed is unknown, defaulting to 1000 [ 322.094789][T13771] : entered promiscuous mode [ 322.307711][T13777] tipc: Enabled bearer , priority 0 [ 322.316174][T13777] syzkaller0: entered promiscuous mode [ 322.321839][T13777] syzkaller0: entered allmulticast mode [ 322.352844][T13777] tipc: Resetting bearer [ 322.362140][T13776] tipc: Resetting bearer [ 322.387618][T13776] tipc: Disabling bearer [ 322.412524][T13756] siw: device registration error -23 [ 322.663968][T13787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2111'. [ 322.948522][T13791] netlink: 'syz.0.2113': attribute type 13 has an invalid length. [ 322.995761][T13791] netlink: 'syz.0.2113': attribute type 17 has an invalid length. [ 323.129892][T13799] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2114'. [ 323.193793][T13799] netlink: 'syz.3.2114': attribute type 2 has an invalid length. [ 323.217323][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2114'. [ 323.303250][T13791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.318327][T13791] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.334408][T13791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.498687][ T8477] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 323.634007][T13794] lo speed is unknown, defaulting to 1000 [ 323.703315][T13807] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2116'. [ 324.152034][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 324.164840][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 324.175740][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 326.207601][T13817] siw: device registration error -23 [ 326.658793][T13860] "syz.1.2132" (13860) uses obsolete ecb(arc4) skcipher [ 326.788746][T13869] netlink: 'syz.2.2134': attribute type 4 has an invalid length. [ 326.821475][T13869] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2134'. [ 326.853954][T13869] : renamed from bond0 (while UP) [ 327.557554][T13894] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2140'. [ 330.449760][T13907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2143'. [ 330.501980][T13912] tipc: Enabling of bearer rejected, already enabled [ 330.625454][T13916] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 330.661670][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 330.681428][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 330.962008][ T30] audit: type=1107 audit(1756984437.429:5): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Dnp "L1JxUnCZ@芸 0&V#'/0!֬pL;Y&:qة_?,kJ%4!DCTJw.'qiFbؖLrmSPu\Qvff`E΁s:{EϪ [ 330.962008][ T30] ] 2^DkώއEe5%' [ 331.452907][T13953] tipc: Enabling of bearer rejected, already enabled [ 331.482461][T13957] IPv6: sit2: Disabled Multicast RS [ 331.892482][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 331.904496][T13968] team0: Mode changed to "broadcast" [ 331.915833][T13968] tipc: Enabled bearer , priority 0 [ 332.112966][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 332.158882][T13982] netlink: 'syz.2.2165': attribute type 19 has an invalid length. [ 332.185288][T13985] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2166'. [ 332.185865][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 332.247242][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 332.272448][T13982] netlink: 'syz.2.2165': attribute type 19 has an invalid length. [ 332.317118][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2167'. [ 332.364171][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 332.411202][T13992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.418555][T13992] IPv6: NLM_F_CREATE should be set when creating new route [ 332.425827][T13992] IPv6: NLM_F_CREATE should be set when creating new route [ 333.460555][T14041] netlink: 'syz.1.2182': attribute type 32 has an invalid length. [ 333.490079][T14041] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 333.750805][T14058] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 333.990319][T14071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.271404][T14087] lo speed is unknown, defaulting to 1000 [ 334.450559][T14093] bridge_slave_0: left allmulticast mode [ 334.456503][T14093] bridge_slave_0: left promiscuous mode [ 334.462364][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.488020][T14093] bridge_slave_1: left allmulticast mode [ 334.510659][T14093] bridge_slave_1: left promiscuous mode [ 334.511931][T14092] rdma_op ffff8880583689f0 conn xmit_rdma 0000000000000000 [ 334.521871][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.547571][T14092] netlink: 'syz.3.2195': attribute type 10 has an invalid length. [ 334.775103][T14093] bond0: (slave bond_slave_0): Releasing backup interface [ 334.947865][T14093] bond0: (slave bond_slave_1): Releasing backup interface [ 335.011776][T14093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.085563][T14093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.123026][T14093] bond1: (slave gretap1): Releasing active interface [ 335.141138][T14092] bond0: (slave wlan1): Opening slave failed [ 335.217535][T14100] lo speed is unknown, defaulting to 1000 [ 335.866712][T14127] netlink: 'syz.4.2204': attribute type 29 has an invalid length. [ 335.934354][T14128] netlink: 'syz.4.2204': attribute type 29 has an invalid length. [ 335.978869][T14128] netlink: 'syz.4.2204': attribute type 29 has an invalid length. [ 336.006931][T14129] __nla_validate_parse: 13 callbacks suppressed [ 336.006955][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 336.007063][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 336.080898][T14128] netlink: 'syz.4.2204': attribute type 29 has an invalid length. [ 336.162199][T14133] team0: entered promiscuous mode [ 336.172928][T14133] team0: entered allmulticast mode [ 336.178596][T14126] lo speed is unknown, defaulting to 1000 [ 336.178701][T14128] netlink: 'syz.4.2204': attribute type 29 has an invalid length. [ 336.761485][T14138] lo speed is unknown, defaulting to 1000 [ 337.179530][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2210'. [ 337.258183][T14152] IPVS: Error connecting to the multicast addr [ 337.282367][T14163] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2210'. [ 337.317111][T14163] openvswitch: netlink: Flow key attr not present in new flow. [ 337.840914][T14165] lo speed is unknown, defaulting to 1000 [ 338.311944][T14189] tipc: Enabling of bearer rejected, failed to enable media [ 338.962634][T14203] tipc: Enabling of bearer rejected, already enabled [ 339.001827][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 339.389576][T14214] lo speed is unknown, defaulting to 1000 [ 339.590935][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 340.529858][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2239'. [ 341.190258][T14266] lo speed is unknown, defaulting to 1000 [ 341.271427][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'. [ 342.053880][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 342.410539][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'. [ 343.071558][T14336] lo speed is unknown, defaulting to 1000 [ 343.093546][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.320193][T14349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'. [ 343.527271][T14356] batadv_slave_0: entered allmulticast mode [ 343.547539][T14356] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 343.589102][T14357] tipc: Enabled bearer , priority 0 [ 343.602403][T14359] syzkaller0: entered promiscuous mode [ 343.608548][T14359] syzkaller0: entered allmulticast mode [ 343.752675][T14357] tipc: Resetting bearer [ 343.791414][T14354] tipc: Resetting bearer [ 343.878736][T14354] tipc: Disabling bearer [ 344.168227][T14378] sock: sock_set_timeout: `syz.0.2272' (pid 14378) tries to set negative timeout [ 344.369841][T14387] lo speed is unknown, defaulting to 1000 [ 344.411447][T14389] validate_nla: 32 callbacks suppressed [ 344.411472][T14389] netlink: 'syz.3.2276': attribute type 5 has an invalid length. [ 344.945048][T14336] netlink: 'syz.2.2260': attribute type 9 has an invalid length. [ 345.232127][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2286'. [ 345.243391][T14417] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 345.361661][T14417] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 345.613128][T14434] : renamed from bond_slave_0 [ 345.802275][T14438] tipc: Enabled bearer , priority 0 [ 345.866724][T14446] syzkaller0: entered promiscuous mode [ 345.911364][T14446] syzkaller0: entered allmulticast mode [ 345.935929][T14438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2291'. [ 346.010450][T14438] tipc: Resetting bearer [ 346.038528][T14437] tipc: Resetting bearer [ 346.107414][T14437] tipc: Disabling bearer [ 346.162163][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 346.199333][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 346.223973][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 346.240717][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 346.304219][T14442] lo speed is unknown, defaulting to 1000 [ 346.759343][T14470] __nla_validate_parse: 11 callbacks suppressed [ 346.759364][T14470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2299'. [ 346.797449][T14470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 347.275662][T14493] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 347.376731][T14493] netlink: 'syz.0.2295': attribute type 4 has an invalid length. [ 347.386790][T14493] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2295'. [ 347.482664][T14459] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 347.526889][T14459] netlink: 'syz.0.2295': attribute type 4 has an invalid length. [ 347.577090][T14459] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2295'. [ 347.740768][T14506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.816038][T14514] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2309'. [ 347.976684][T14514] vlan2: entered allmulticast mode [ 347.981858][T14514] gretap0: entered allmulticast mode [ 348.115146][T14506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.503022][T14506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.588403][T14524] lo speed is unknown, defaulting to 1000 [ 348.602468][T14538] netlink: 'syz.2.2314': attribute type 10 has an invalid length. [ 348.625178][T14538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2314'. [ 348.637640][T14506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.672242][T14538] veth0_vlan: entered allmulticast mode [ 348.736664][T14538] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 348.879370][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2315'. [ 348.920472][ T6072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.923206][T14543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2315'. [ 348.943554][ T6072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.017563][T14543] geneve0: entered promiscuous mode [ 349.024907][ T6072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.035325][ T6072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.055629][ T6072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.108896][ T6072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.137712][ T6072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.194166][ T6072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.809958][T14596] netlink: 5448 bytes leftover after parsing attributes in process `syz.0.2327'. [ 351.401336][T14600] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 351.470920][T14618] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 351.633115][T14615] lo speed is unknown, defaulting to 1000 [ 352.137933][T14600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.330320][T14631] syzkaller1: entered promiscuous mode [ 352.355448][T14631] syzkaller1: entered allmulticast mode [ 352.645604][T14643] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 352.687905][T14645] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 352.695534][T14640] lo speed is unknown, defaulting to 1000 [ 352.711888][T14645] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 352.774097][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.810671][T14649] xfrm1: entered allmulticast mode [ 352.821204][T14654] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 353.024951][T14654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.068886][T14634] lo speed is unknown, defaulting to 1000 [ 353.127546][T14656] tipc: Resetting bearer [ 353.144888][T14657] tipc: Resetting bearer [ 353.202264][T14658] bond6: (slave geneve3): making interface the new active one [ 353.219046][T14658] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 353.292822][T14671] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2343'. [ 353.293777][ T44] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.610088][T14681] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2346'. [ 353.752258][T14681] netlink: 'syz.3.2346': attribute type 2 has an invalid length. [ 353.951473][T14683] lo speed is unknown, defaulting to 1000 [ 354.443546][ T30] audit: type=1800 audit(1756984460.889:6): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2349" name="memory.events" dev="tmpfs" ino=2185 res=0 errno=0 [ 355.100744][T14720] sctp: [Deprecated]: syz.3.2356 (pid 14720) Use of int in max_burst socket option deprecated. [ 355.100744][T14720] Use struct sctp_assoc_value instead [ 355.217239][T14723] netlink: 'syz.4.2357': attribute type 3 has an invalid length. [ 355.228799][T14723] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2357'. [ 355.443095][T14725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 355.513988][T14727] lo speed is unknown, defaulting to 1000 [ 356.339738][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2368'. [ 356.407435][T14760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'. [ 356.584371][T14761] batman_adv: batadv0: Adding interface: ip6gretap2 [ 356.605458][T14761] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.783290][T14761] batman_adv: batadv0: Interface activated: ip6gretap2 [ 360.265783][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 360.362076][T14780] netlink: 4904 bytes leftover after parsing attributes in process `syz.4.2375'. [ 360.602090][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 360.668002][T14801] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 360.688454][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2379'. [ 360.705933][T14800] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 360.714400][T14800] CPU: 1 UID: 0 PID: 14800 Comm: syz.0.2379 Not tainted syzkaller #0 PREEMPT(full) [ 360.714432][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.714446][T14800] Call Trace: [ 360.714455][T14800] [ 360.714465][T14800] dump_stack_lvl+0x189/0x250 [ 360.714501][T14800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.714527][T14800] ? __pfx__printk+0x10/0x10 [ 360.714564][T14800] ? kernfs_path_from_node+0x2f/0x290 [ 360.714587][T14800] ? kernfs_path_from_node+0x250/0x290 [ 360.714609][T14800] ? kernfs_path_from_node+0x2f/0x290 [ 360.714637][T14800] sysfs_warn_dup+0x8e/0xa0 [ 360.714672][T14800] sysfs_do_create_link_sd+0xc0/0x110 [ 360.714698][T14800] device_add_class_symlinks+0x1cf/0x240 [ 360.714727][T14800] device_add+0x475/0xb50 [ 360.714755][T14800] wiphy_register+0x1ba6/0x28d0 [ 360.714797][T14800] ? __pfx_wiphy_register+0x10/0x10 [ 360.714818][T14800] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 360.714855][T14800] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 360.714897][T14800] ieee80211_register_hw+0x3425/0x4080 [ 360.714947][T14800] ? ieee80211_register_hw+0x13f1/0x4080 [ 360.714991][T14800] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 360.715025][T14800] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.715067][T14800] ? __hrtimer_setup+0x187/0x210 [ 360.715086][T14800] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 360.715128][T14800] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 360.715195][T14800] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 360.715222][T14800] ? trace_kmalloc+0x1f/0xd0 [ 360.715247][T14800] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 360.715276][T14800] ? kstrndup+0xbf/0x160 [ 360.715311][T14800] hwsim_new_radio_nl+0xea4/0x1b10 [ 360.715343][T14800] ? __pfx___nla_validate_parse+0x10/0x10 [ 360.715394][T14800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.715449][T14800] ? __nla_parse+0x40/0x60 [ 360.715486][T14800] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 360.715526][T14800] genl_family_rcv_msg_doit+0x215/0x300 [ 360.715564][T14800] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.715609][T14800] ? bpf_lsm_capable+0x9/0x20 [ 360.715636][T14800] ? security_capable+0x7e/0x2e0 [ 360.715686][T14800] genl_rcv_msg+0x60e/0x790 [ 360.715722][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.715751][T14800] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.715798][T14800] netlink_rcv_skb+0x205/0x470 [ 360.715817][T14800] ? __lock_acquire+0xab9/0xd20 [ 360.715848][T14800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.715877][T14800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.715922][T14800] ? down_read+0x1ad/0x2e0 [ 360.715949][T14800] genl_rcv+0x28/0x40 [ 360.715973][T14800] netlink_unicast+0x82c/0x9e0 [ 360.716016][T14800] ? __pfx_netlink_unicast+0x10/0x10 [ 360.716050][T14800] ? netlink_sendmsg+0x642/0xb30 [ 360.716069][T14800] ? skb_put+0x11b/0x210 [ 360.716095][T14800] netlink_sendmsg+0x805/0xb30 [ 360.716129][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.716155][T14800] ? aa_sock_msg_perm+0xf1/0x1d0 [ 360.716177][T14800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.716199][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.716222][T14800] __sock_sendmsg+0x219/0x270 [ 360.716257][T14800] ____sys_sendmsg+0x505/0x830 [ 360.716289][T14800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.716326][T14800] ? import_iovec+0x74/0xa0 [ 360.716355][T14800] ___sys_sendmsg+0x21f/0x2a0 [ 360.716383][T14800] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.716454][T14800] ? __fget_files+0x2a/0x420 [ 360.716471][T14800] ? __fget_files+0x3a0/0x420 [ 360.716503][T14800] __x64_sys_sendmsg+0x19b/0x260 [ 360.716531][T14800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.716569][T14800] ? rcu_is_watching+0x15/0xb0 [ 360.716597][T14800] ? do_syscall_64+0xbe/0x3b0 [ 360.716625][T14800] do_syscall_64+0xfa/0x3b0 [ 360.716649][T14800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.716676][T14800] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.716699][T14800] ? clear_bhb_loop+0x60/0xb0 [ 360.716725][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.716747][T14800] RIP: 0033:0x7f397738ebe9 [ 360.716766][T14800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.716784][T14800] RSP: 002b:00007f39782a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.716806][T14800] RAX: ffffffffffffffda RBX: 00007f39775c5fa0 RCX: 00007f397738ebe9 [ 360.716822][T14800] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 360.716836][T14800] RBP: 00007f3977411e19 R08: 0000000000000000 R09: 0000000000000000 [ 360.716848][T14800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.716861][T14800] R13: 00007f39775c6038 R14: 00007f39775c5fa0 R15: 00007ffca5de1d38 [ 360.716898][T14800] [ 360.720625][T14801] bond0: (slave wlan1): Opening slave failed [ 360.874504][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 360.944622][T14795] syzkaller0: left allmulticast mode [ 361.314263][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 361.779673][T14828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2385'. [ 361.782414][T14827] lo speed is unknown, defaulting to 1000 [ 362.422409][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2388'. [ 362.690315][T14863] syz_tun: refused to change device tx_queue_len [ 362.998397][T14877] team0: Device gtp0 is of different type [ 363.061684][T14880] batadv_slave_1: entered promiscuous mode [ 363.313074][T14891] lo speed is unknown, defaulting to 1000 [ 363.327865][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 363.373531][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 364.205409][T14923] tipc: Enabled bearer , priority 0 [ 364.228327][T14922] tipc: Enabling of bearer rejected, already enabled [ 364.248313][T14923] syzkaller0: entered promiscuous mode [ 364.254578][T14923] syzkaller0: entered allmulticast mode [ 364.405539][T14922] tipc: Resetting bearer [ 364.483670][T14879] batadv_slave_1: left promiscuous mode [ 364.535047][T14921] tipc: Resetting bearer [ 364.631600][T14921] tipc: Disabling bearer [ 364.815277][T14935] lo speed is unknown, defaulting to 1000 [ 365.139004][T14959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.572356][T14962] tipc: Resetting bearer [ 366.199523][T14975] pim6reg1: entered promiscuous mode [ 366.205393][T14975] pim6reg1: entered allmulticast mode [ 366.332920][T14978] __nla_validate_parse: 5 callbacks suppressed [ 366.332940][T14978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2422'. [ 366.551723][T14991] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 366.806539][T15010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2430'. [ 366.908606][T15012] lo speed is unknown, defaulting to 1000 [ 366.980755][T15014] bridge_slave_1: entered promiscuous mode [ 367.219993][T15020] syzkaller0: entered promiscuous mode [ 367.236234][T15020] syzkaller0: entered allmulticast mode [ 367.298364][T15027] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2437'. [ 367.320992][T15029] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 367.840400][T15045] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 368.048056][T15046] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2441'. [ 369.423866][T15042] batadv1: entered promiscuous mode [ 481.333814][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.413863][ T31] INFO: task kworker/1:1:44 blocked for more than 143 seconds. [ 511.421481][ T31] Not tainted syzkaller #0 [ 511.426487][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.435689][ T31] task:kworker/1:1 state:D stack:23160 pid:44 tgid:44 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 511.447826][ T31] Workqueue: events rfkill_sync_work [ 511.453168][ T31] Call Trace: [ 511.456539][ T31] [ 511.459517][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.464404][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.469828][ T31] ? __pfx___schedule+0x10/0x10 [ 511.475080][ T31] ? schedule+0x91/0x360 [ 511.479388][ T31] schedule+0x165/0x360 [ 511.483633][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.489130][ T31] __mutex_lock+0x7e6/0x1350 [ 511.494512][ T31] ? __mutex_lock+0x5bb/0x1350 [ 511.499345][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 511.504833][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.509914][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.515191][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 511.568215][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.574927][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 511.580709][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 511.602756][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 511.608817][ T31] rfkill_set_block+0x1d2/0x440 [ 511.614084][ T31] rfkill_sync_work+0x114/0x200 [ 511.619054][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 511.624891][ T31] process_scheduled_works+0xae1/0x17b0 [ 511.630502][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.636585][ T31] worker_thread+0x8a0/0xda0 [ 511.641231][ T31] kthread+0x70e/0x8a0 [ 511.645685][ T31] ? __pfx_worker_thread+0x10/0x10 [ 511.650830][ T31] ? __pfx_kthread+0x10/0x10 [ 511.655682][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.660964][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.666252][ T31] ? __pfx_kthread+0x10/0x10 [ 511.670895][ T31] ret_from_fork+0x3f9/0x770 [ 511.675826][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.680962][ T31] ? __switch_to_asm+0x39/0x70 [ 511.685898][ T31] ? __switch_to_asm+0x33/0x70 [ 511.690718][ T31] ? __pfx_kthread+0x10/0x10 [ 511.695422][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.700428][ T31] [ 511.704007][ T31] INFO: task kworker/1:8:7209 blocked for more than 143 seconds. [ 511.711768][ T31] Not tainted syzkaller #0 [ 511.716793][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.725550][ T31] task:kworker/1:8 state:D stack:23528 pid:7209 tgid:7209 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 511.737899][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 511.744779][ T31] Call Trace: [ 511.748104][ T31] [ 511.751109][ T31] __schedule+0x1798/0x4cc0 [ 511.755720][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.761127][ T31] ? __pfx___schedule+0x10/0x10 [ 511.766401][ T31] ? schedule+0x91/0x360 [ 511.770707][ T31] schedule+0x165/0x360 [ 511.775152][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.780741][ T31] __mutex_lock+0x7e6/0x1350 [ 511.785411][ T31] ? __mutex_lock+0x5bb/0x1350 [ 511.790298][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 511.796831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.801883][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 511.807670][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 511.813497][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 511.819706][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 511.825841][ T31] process_scheduled_works+0xae1/0x17b0 [ 511.831499][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.837562][ T31] worker_thread+0x8a0/0xda0 [ 511.842262][ T31] kthread+0x70e/0x8a0 [ 511.846421][ T31] ? __pfx_worker_thread+0x10/0x10 [ 511.851658][ T31] ? __pfx_kthread+0x10/0x10 [ 511.856558][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.861843][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.867113][ T31] ? __pfx_kthread+0x10/0x10 [ 511.871749][ T31] ret_from_fork+0x3f9/0x770 [ 511.876415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.881562][ T31] ? __switch_to_asm+0x39/0x70 [ 511.886883][ T31] ? __switch_to_asm+0x33/0x70 [ 511.891692][ T31] ? __pfx_kthread+0x10/0x10 [ 511.896340][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.901144][ T31] [ 511.904326][ T31] INFO: task syz.1.2424:14982 blocked for more than 143 seconds. [ 511.912070][ T31] Not tainted syzkaller #0 [ 511.917429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.926188][ T31] task:syz.1.2424 state:D stack:26536 pid:14982 tgid:14979 ppid:5859 task_flags:0x400140 flags:0x00004004 [ 511.938208][ T31] Call Trace: [ 511.941526][ T31] [ 511.944837][ T31] __schedule+0x1798/0x4cc0 [ 511.949402][ T31] ? validate_chain+0x897/0x2140 [ 511.954425][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.959333][ T31] ? __pfx___schedule+0x10/0x10 [ 511.964281][ T31] ? schedule+0x91/0x360 [ 511.968590][ T31] schedule+0x165/0x360 [ 511.972777][ T31] schedule_timeout+0x9a/0x270 [ 511.978128][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 511.986022][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.991340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.996604][ T31] ? wait_for_completion+0x267/0x5d0 [ 512.001926][ T31] wait_for_completion+0x2bf/0x5d0 [ 512.007318][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 512.012989][ T31] ? __flush_work+0xd2/0xbc0 [ 512.017836][ T31] ? __flush_work+0xd2/0xbc0 [ 512.022509][ T31] __flush_work+0x9b9/0xbc0 [ 512.027090][ T31] ? __flush_work+0xd2/0xbc0 [ 512.031702][ T31] ? __pfx___flush_work+0x10/0x10 [ 512.037090][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 512.042410][ T31] ? __pfx___cancel_work+0x10/0x10 [ 512.047619][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 512.055654][ T31] __cancel_work_sync+0xbe/0x110 [ 512.060644][ T31] rfkill_unregister+0x92/0x220 [ 512.065981][ T31] nfc_unregister_device+0x96/0x2a0 [ 512.071347][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 512.077401][ T31] virtual_ncidev_close+0x56/0x90 [ 512.082467][ T31] __fput+0x449/0xa70 [ 512.086698][ T31] fput_close_sync+0x119/0x200 [ 512.091497][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 512.097087][ T31] __x64_sys_close+0x7f/0x110 [ 512.101826][ T31] do_syscall_64+0xfa/0x3b0 [ 512.106396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.111634][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.117852][ T31] ? clear_bhb_loop+0x60/0xb0 [ 512.122608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.129189][ T31] RIP: 0033:0x7ff38b18ebe9 [ 512.133705][ T31] RSP: 002b:00007ff38bfce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 512.142541][ T31] RAX: ffffffffffffffda RBX: 00007ff38b3c5fa0 RCX: 00007ff38b18ebe9 [ 512.150614][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 512.158884][ T31] RBP: 00007ff38b211e19 R08: 0000000000000000 R09: 0000000000000000 [ 512.167061][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.175105][ T31] R13: 00007ff38b3c6038 R14: 00007ff38b3c5fa0 R15: 00007ffd33ab6508 [ 512.183131][ T31] [ 512.186563][ T31] [ 512.186563][ T31] Showing all locks held in the system: [ 512.196782][ T31] 1 lock held by khungtaskd/31: [ 512.201672][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.211705][ T31] 4 locks held by kworker/1:1/44: [ 512.217127][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 512.228242][ T31] #1: ffffc90000b47bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 512.240710][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 512.251307][ T31] #3: ffff8880287b1100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 512.261146][ T31] 2 locks held by getty/5623: [ 512.265985][ T31] #0: ffff888033a570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.276043][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 512.286261][ T31] 3 locks held by kworker/1:8/7209: [ 512.291491][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 512.302538][ T31] #1: ffffc90019c27bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 512.316297][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 512.327759][ T31] 1 lock held by syz.1.2424/14982: [ 512.332905][ T31] #0: ffff8880287b1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 512.342722][ T31] 3 locks held by syz.0.2442/15050: [ 512.348177][ T31] #0: ffffffff8f59e390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.356525][ T31] #1: ffffffff8f59e1a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.366455][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 512.376710][ T31] 2 locks held by syz.4.2445/15061: [ 512.381929][ T31] #0: ffffffff8f59e390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.390445][ T31] #1: ffffffff8f59e1a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.399771][ T31] 2 locks held by syz.2.2446/15070: [ 512.405230][ T31] #0: ffffffff8f59e390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.414077][ T31] #1: ffffffff8f59e1a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.423149][ T31] 2 locks held by syz.2.2446/15071: [ 512.428541][ T31] #0: ffffffff8f59e390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 512.436909][ T31] #1: ffffffff8f59e1a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 512.446287][ T31] 3 locks held by syz.3.2447/15074: [ 512.451516][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.460057][ T31] #1: ffff88804f3d3100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 512.469735][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 512.480026][ T31] 1 lock held by syz-executor/15083: [ 512.485383][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.494066][ T31] 1 lock held by syz-executor/15088: [ 512.499392][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.508160][ T31] 1 lock held by syz-executor/15089: [ 512.513544][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.522055][ T31] 1 lock held by syz-executor/15093: [ 512.527383][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.536227][ T31] 1 lock held by syz-executor/15094: [ 512.541535][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.550043][ T31] 1 lock held by syz-executor/15096: [ 512.555372][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.564220][ T31] 1 lock held by syz-executor/15100: [ 512.569549][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.578082][ T31] 1 lock held by syz-executor/15101: [ 512.583578][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.592093][ T31] 1 lock held by syz-executor/15103: [ 512.597767][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.606512][ T31] 1 lock held by syz-executor/15105: [ 512.611844][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.620415][ T31] 1 lock held by syz-executor/15110: [ 512.625961][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.634477][ T31] 1 lock held by syz-executor/15113: [ 512.639790][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.648303][ T31] 1 lock held by syz-executor/15114: [ 512.654220][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.662889][ T31] 1 lock held by syz-executor/15116: [ 512.668275][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.676818][ T31] 1 lock held by syz-executor/15119: [ 512.682215][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 512.690991][ T31] 2 locks held by dhcpcd/15120: [ 512.695994][ T31] #0: ffff888024f08260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 512.705764][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 512.717107][ T31] [ 512.719538][ T31] ============================================= [ 512.719538][ T31] [ 512.728437][ T31] NMI backtrace for cpu 0 [ 512.728468][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.728497][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.728510][ T31] Call Trace: [ 512.728517][ T31] [ 512.728526][ T31] dump_stack_lvl+0x189/0x250 [ 512.728559][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.728584][ T31] ? __pfx__printk+0x10/0x10 [ 512.728625][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 512.728653][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 512.728685][ T31] ? __pfx__printk+0x10/0x10 [ 512.728718][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.728753][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 512.728786][ T31] watchdog+0xf93/0xfe0 [ 512.728821][ T31] ? watchdog+0x1de/0xfe0 [ 512.728856][ T31] kthread+0x70e/0x8a0 [ 512.728885][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.728913][ T31] ? __pfx_kthread+0x10/0x10 [ 512.728939][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.728972][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.728990][ T31] ? __pfx_kthread+0x10/0x10 [ 512.729014][ T31] ret_from_fork+0x3f9/0x770 [ 512.729037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.729063][ T31] ? __switch_to_asm+0x39/0x70 [ 512.729087][ T31] ? __switch_to_asm+0x33/0x70 [ 512.729194][ T31] ? __pfx_kthread+0x10/0x10 [ 512.729223][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.729266][ T31] [ 512.729275][ T31] Sending NMI from CPU 0 to CPUs 1: [ 512.876851][ C1] NMI backtrace for cpu 1 [ 512.876870][ C1] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 512.876890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.876901][ C1] Workqueue: bat_events batadv_nc_worker [ 512.876933][ C1] RIP: 0010:_raw_spin_unlock_bh+0x7/0x40 [ 512.876960][ C1] Code: 00 00 cc e8 1b f8 b6 f5 5b e9 45 4c 00 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 <48> 89 fb 48 83 c7 18 4c 8b 74 24 10 4c 89 f6 e8 95 9c 20 f6 48 89 [ 512.876975][ C1] RSP: 0018:ffffc9000210f970 EFLAGS: 00000293 [ 512.876990][ C1] RAX: ffffffff8b48370e RBX: ffffffff8b483900 RCX: ffff88801b7c8000 [ 512.877003][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807a66d340 [ 512.877014][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 512.877024][ C1] R10: dffffc0000000000 R11: fffff52000421f20 R12: ffff888028139a68 [ 512.877036][ C1] R13: dffffc0000000000 R14: ffff88802497f840 R15: ffff88802497f850 [ 512.877050][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 512.877063][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.877074][ C1] CR2: 00005586cadc8168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 512.877091][ C1] Call Trace: [ 512.877098][ C1] [ 512.877104][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 512.877135][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 512.877170][ C1] batadv_nc_worker+0x369/0x610 [ 512.877196][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 512.877215][ C1] process_scheduled_works+0xae1/0x17b0 [ 512.877248][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.877274][ C1] worker_thread+0x8a0/0xda0 [ 512.877293][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.877323][ C1] ? __kthread_parkme+0x7b/0x200 [ 512.877347][ C1] kthread+0x70e/0x8a0 [ 512.877369][ C1] ? __pfx_worker_thread+0x10/0x10 [ 512.877386][ C1] ? __pfx_kthread+0x10/0x10 [ 512.877407][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.877432][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.877448][ C1] ? __pfx_kthread+0x10/0x10 [ 512.877469][ C1] ret_from_fork+0x3f9/0x770 [ 512.877488][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 512.877515][ C1] ? __switch_to_asm+0x39/0x70 [ 512.877537][ C1] ? __switch_to_asm+0x33/0x70 [ 512.877558][ C1] ? __pfx_kthread+0x10/0x10 [ 512.877579][ C1] ret_from_fork_asm+0x1a/0x30 [ 512.877611][ C1] [ 512.877872][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 513.126526][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 513.135751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.145831][ T31] Call Trace: [ 513.149137][ T31] [ 513.152090][ T31] dump_stack_lvl+0x99/0x250 [ 513.156712][ T31] ? __asan_memcpy+0x40/0x70 [ 513.161444][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.166680][ T31] ? __pfx__printk+0x10/0x10 [ 513.171312][ T31] vpanic+0x281/0x750 [ 513.175320][ T31] ? __pfx_vpanic+0x10/0x10 [ 513.179848][ T31] ? preempt_schedule+0xae/0xc0 [ 513.184730][ T31] ? preempt_schedule_common+0x83/0xd0 [ 513.190226][ T31] panic+0xb9/0xc0 [ 513.193968][ T31] ? __pfx_panic+0x10/0x10 [ 513.198399][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 513.203787][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 513.209956][ T31] watchdog+0xfd2/0xfe0 [ 513.214157][ T31] ? watchdog+0x1de/0xfe0 [ 513.218530][ T31] kthread+0x70e/0x8a0 [ 513.222632][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.227334][ T31] ? __pfx_kthread+0x10/0x10 [ 513.231959][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.237205][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.242442][ T31] ? __pfx_kthread+0x10/0x10 [ 513.247067][ T31] ret_from_fork+0x3f9/0x770 [ 513.251681][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.256828][ T31] ? __switch_to_asm+0x39/0x70 [ 513.261633][ T31] ? __switch_to_asm+0x33/0x70 [ 513.266434][ T31] ? __pfx_kthread+0x10/0x10 [ 513.271064][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.275877][ T31] [ 513.279240][ T31] Kernel Offset: disabled [ 513.283647][ T31] Rebooting in 86400 seconds..