last executing test programs: 22.86589443s ago: executing program 1 (id=1465): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @initdev, 0x0}, &(0x7f00000000c0)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r3 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000200012800e000100697036677265746170"], 0x40}}, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r10 = getuid() r11 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r13 = getgid() r14 = gettid() syz_open_procfs$namespace(r14, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) sendmsg$netlink(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)={0xcc, 0x3b, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@generic="af902369f100e823bca291e9e311516af5ae95a3eaf5b1e7034b5905f8ddaefba5990679029b9e377e799de7287f1f68137fc18a62d9ba1ea9a685846a3402e0afc89988742436818b35d214cf6a3a1f3c90070f21d72936932088e59adfc24a30fbac827518e34e608364ede83a3bba42a37dfb0415f3c21b94495deb6db20cb074d3770c42e2a104d91e0b7eab2690277a89c5177f8613f85ff89ceff251033e314337aff047004b18fa66810c252bfb1c005b", @typed={0x8, 0x62, 0x0, 0x0, @str='^,/\x00'}]}, 0xcc}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r0, @ANYBLOB="1c2bd951960001000000000000000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4040000}, 0x1040) r16 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, r1, 0x4, r16}, 0x10) 21.785684799s ago: executing program 1 (id=1485): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) 21.623741539s ago: executing program 1 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f00000001c0)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x34, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}}, 0x14}}, 0x8004) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000002}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xab}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x60}}, 0x0) 20.627202963s ago: executing program 1 (id=1508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000f3ac764c00b704000008000000850000001a0000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8cca27bd7000fddbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r4, @ANYBLOB="0a3bd8984905000100777061"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r5 = socket$inet(0x2, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="003bbea965043e7b092dcc3686a05c8327016e5776d736fa66504768babe40bcc45240b0652187b19a1a833c83a46562d80da089c600ef33dbc8828b24f263df776bbbaf7b13225011bf3b7b2802ae579f7c773867412d04ca601b1e2af07126e2a092da08e9e4642b97610197f1726ea9f77f384eb99e440a9c66011938cf2ba190ea641f75f0e169f8d9e4f9ec48a9b8e433ba4c1fcc3eeff9aeac3e11", @ANYRES8, @ANYBLOB="000128bd7000fddbdf25070000000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00', 0xfffffffd}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffff00000000000290780a010101ffffffff11009078e0000002000000024062d13c00"/54], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) recvmmsg(r5, &(0x7f0000000940)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/87, 0xffffffffffffff7d}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f00000009c0)=""/139, 0x8b}, {&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/95, 0x5f}], 0x8, &(0x7f0000000880)=""/45, 0x2d}, 0x9}], 0x1, 0x40000140, &(0x7f0000000980)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fddbdf250600000908000400ac1e000108000500e00000020f000700982e36fa6bd900b2b63dd0c4729d750e1d24e3d7a7e2fa640000121b58574c3dd76a8286defd757b787c2451e0ad035f98d4ce03333a18a34c1abaf9ba7cc194b8b96ed41e33c771ce38aa31a857ce0bcc3e7d170e210fb2e53c57ac95d46dd2d506d638c23730fb3b3f0b75e42808ff92be1530ddb0fe5510a88a09a7da740423d41acccf72cc5df28f771de48985749dc3ab429b8cab0796ad11832203a762e8"], 0x34}, 0x2, 0x34005, 0x0, 0x40}, 0x4) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82012}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="008a38c67100fedbdf25f82cac4c80a21c3453da96a00100000000000200fc0100000000000000000000009457d36e000100000000003c264cdcd2db6d601054f18b001472686d7b689c605bfc5c1cdf35000200fe8000000000000000000000001000bb5d1d43cd681ace77100b737a67ca949d2c2736f5fd611ea626344ff24404c4d9aa09382782329bc6a3550c40ed4be9f5cd1e7f56"], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05000000000000000000077400060800020000000000140003000000ce5bc3a100000000000000000001"], 0x30}, 0x1, 0xffffffff00000003}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x43, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20.508036831s ago: executing program 1 (id=1511): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) socket(0x200000100000011, 0x3, 0x0) (async) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1}, 0xc004) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) (async) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x50) 20.351920711s ago: executing program 1 (id=1513): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18.305506899s ago: executing program 4 (id=1548): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r0, 0x1}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}, @NFT_MSG_DELFLOWTABLE={0x154, 0x18, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd742}]}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xcc, 0x8, "e50e2c2b42234bff8aa1cdca667f926ef65dadfc629f887d8fb65a0f9589a3a594bdac209590dc9eb23ed235b5cb3a796737719cd8d0f6926b32d486f8df317152ce80eafc8891993233b15fb2e484acb12ba0e76c60d2b5d9902da915ddced4fbbd154146a290ab83eee4ba8133ea04ae39ee55420220a6b8d9335057adfc065f1976e918a2f0d8cb1714d7f02f4eb9ad6ae6e89fe1a8b45512b9350760808868b50bb44699b8218444ebbe53d01039f0ce16fe667df1f9371e39943f9ca8de06ccf21e194728d7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x300}}, 0x0) 18.255408796s ago: executing program 0 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000a80)=0x1df1, 0x12) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="52db1bebcb668c2a9aa2e44ad251b95c6d780d4738790ffe3b25f05d2977649bdfac69d2d035916db4ebfbeba91bd1c78df783885f651766e6812218587ba7248c4221e95089abde6ef2632e048b4c63cd8569a2aaa3f69ca09d96173c9bb2a7531a1e1b1f168a7c334790e207d0fd1ae4fa945ec2ac250f095200a2e0a04da468f7b33416d7cfc13dab45f6c6d2b832", 0x90}, {&(0x7f0000000300)="79f48179f614951dc4fcbd97ff5e3062e16a802d6c365087973a2d12da3e03b4b90ba9e4bc2d155929ffa76b6d445243e88fffc9ca18f72752d71781127d07594ed7c261b8e1eb", 0x47}, {&(0x7f0000000ac0)="aff4e4540e2f7c3add96015f85ee357d58bdb58f4c9e718b48024ed80a766dbfe25d6fea762499d509bf7a33f2f706f3a3627f00c15beb9814648f97849b956c052e032eeef3cc215a2f7bcee01ca5877f3680f6c3ddd2edeb1c9efc5e0657a7ce8503e7ad2e2d713e5326541f8cd22c9f4bff0be7f7f8478e98519eecd5116a34b6afd4aee52e662ac8a793c4cfba361431eabdd9641e334412051d53184ac3389ae7953ed1b51b25a68767189d14b4c0d96af89866a6c22048", 0xba}, {&(0x7f0000000440)="d0d76a9ec54bb9397873d208c9b0487da761d8cf70fdf5f181601bc078a084826764e84d2ecc95bb42cd311fd75db12443cfb010de31d8babc9f3e81ac8e22b6f30d0efcc6fb69609cd0293f2e39b11167213cf6b592c4784ca7898c28b980c3e87a141b498f556081b822b41946ee42804f29298ab88141fa0e916a04f077f79bc818eb5f2d00c10978d4b712fd0f49cb218576741c6ea99a209b4fcf3c7f4dddfead73854348bb6095d3ce8732d8ed25c9eebb7c052d368605a22824c1c6c3fede3cabc829b994979410f2f5df05f17c28ed8620811661d97fd04a749bf94c20", 0xe1}, {&(0x7f0000000540)="5b6a63ccd7a04424a13b7d81eff8f72c0a6a1c27ab85a116104fa239df2b0c374838cf10fe4d27e439a07847055c198c8716d46518e6653536ce3c94e174e741711aa0eb", 0x44}, {&(0x7f0000000700)="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", 0xfe}], 0x6, &(0x7f0000000800)=[{0x18, 0x116, 0xa, "09c164a4"}, {0x110, 0x102, 0x1, "8cb4d6539abb4969f7cbc3f3e8a2af673944a48de63a3ac36eff48c5f9ca0dea164babf4e246207e72b3cb1dc06c80659a969e8a21b547d6a7de7caa95d94392705251fdd7e006fd78b7d0cdcf320fbb501e053ca8d079b6bb8bf073dce0573d4fca9ab6619e35bbfc7bb1973fde7188c42b76eb0833bfd541d4ed454e566c4520a297de753307f3470be6ccde9f45ad48473e16c815090cdc3fed4bd4b48f445f3cf1e382990507d62fc10c5fa138f8f70a29c849aa3c459159149f1b41ad0d0d8ed5729412939b8bbf4dc75243815d279e50f745e8b603286d0e48b79481f1e8b85a1938d0a03bca0a7646f5b25151bd9e3964c986c9d717b347815ce5"}, {0x48, 0x6, 0x3, "76f84c7919fd840b263839776aab0beba3d7f7d02a31db7e773791cc7120dbb30a735c615281e0e1502e32102919145c135427b2"}, {0x98, 0x116, 0x8000, "0dd099fbb2fe2827b3a8c766bfd8bf34acb7df99123ed4edb81be4f87acb5da72616e7f5360ebd2a7571a4172597924024406cae1ab08885c6348bb392595835ed031b98bc4a0b7cc8ed5aa088c1887cf464cb3aaac035a713476f62015c19a1ef411f07a7a8a4bc0eeb5d61de8d8319983179ebea24ed17c7598535ce9e2827b9c28c"}], 0x208}, 0x20000080) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpu.idle\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000a80)=0x1df1, 0x12) (async) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="52db1bebcb668c2a9aa2e44ad251b95c6d780d4738790ffe3b25f05d2977649bdfac69d2d035916db4ebfbeba91bd1c78df783885f651766e6812218587ba7248c4221e95089abde6ef2632e048b4c63cd8569a2aaa3f69ca09d96173c9bb2a7531a1e1b1f168a7c334790e207d0fd1ae4fa945ec2ac250f095200a2e0a04da468f7b33416d7cfc13dab45f6c6d2b832", 0x90}, {&(0x7f0000000300)="79f48179f614951dc4fcbd97ff5e3062e16a802d6c365087973a2d12da3e03b4b90ba9e4bc2d155929ffa76b6d445243e88fffc9ca18f72752d71781127d07594ed7c261b8e1eb", 0x47}, {&(0x7f0000000ac0)="aff4e4540e2f7c3add96015f85ee357d58bdb58f4c9e718b48024ed80a766dbfe25d6fea762499d509bf7a33f2f706f3a3627f00c15beb9814648f97849b956c052e032eeef3cc215a2f7bcee01ca5877f3680f6c3ddd2edeb1c9efc5e0657a7ce8503e7ad2e2d713e5326541f8cd22c9f4bff0be7f7f8478e98519eecd5116a34b6afd4aee52e662ac8a793c4cfba361431eabdd9641e334412051d53184ac3389ae7953ed1b51b25a68767189d14b4c0d96af89866a6c22048", 0xba}, {&(0x7f0000000440)="d0d76a9ec54bb9397873d208c9b0487da761d8cf70fdf5f181601bc078a084826764e84d2ecc95bb42cd311fd75db12443cfb010de31d8babc9f3e81ac8e22b6f30d0efcc6fb69609cd0293f2e39b11167213cf6b592c4784ca7898c28b980c3e87a141b498f556081b822b41946ee42804f29298ab88141fa0e916a04f077f79bc818eb5f2d00c10978d4b712fd0f49cb218576741c6ea99a209b4fcf3c7f4dddfead73854348bb6095d3ce8732d8ed25c9eebb7c052d368605a22824c1c6c3fede3cabc829b994979410f2f5df05f17c28ed8620811661d97fd04a749bf94c20", 0xe1}, {&(0x7f0000000540)="5b6a63ccd7a04424a13b7d81eff8f72c0a6a1c27ab85a116104fa239df2b0c374838cf10fe4d27e439a07847055c198c8716d46518e6653536ce3c94e174e741711aa0eb", 0x44}, {&(0x7f0000000700)="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", 0xfe}], 0x6, &(0x7f0000000800)=[{0x18, 0x116, 0xa, "09c164a4"}, {0x110, 0x102, 0x1, "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"}, {0x48, 0x6, 0x3, "76f84c7919fd840b263839776aab0beba3d7f7d02a31db7e773791cc7120dbb30a735c615281e0e1502e32102919145c135427b2"}, {0x98, 0x116, 0x8000, "0dd099fbb2fe2827b3a8c766bfd8bf34acb7df99123ed4edb81be4f87acb5da72616e7f5360ebd2a7571a4172597924024406cae1ab08885c6348bb392595835ed031b98bc4a0b7cc8ed5aa088c1887cf464cb3aaac035a713476f62015c19a1ef411f07a7a8a4bc0eeb5d61de8d8319983179ebea24ed17c7598535ce9e2827b9c28c"}], 0x208}, 0x20000080) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) (async) 18.095264718s ago: executing program 4 (id=1552): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) (async) write$cgroup_freezer_state(r0, &(0x7f0000000280)='FROZEN\x00', 0x7) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x94) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0xda, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffd, 0xf, 0x101, 0x9}, 0x8, 0x0, 0x0, 0x5, 0x2, 0x16, 0x17, 0x14, 0x3, 0x8, {0xab, 0x3, 0x1, 0x1, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x2, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x4008000) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x1d, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000500000000000000000000001800000000ffffff000000000100000065a08000fcffffff1858000002000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000086f01000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000480000008641a36a21cdcb3f0000181104faffffff0000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000080000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029006edc00005f9533f2aa3a54dffd7aa8be5821d0ed4265fa9ff764c247e6615de142238ceb80"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@local, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) 18.036372521s ago: executing program 0 (id=1554): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80880) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 17.902370983s ago: executing program 4 (id=1555): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x2e, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfec8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @exit, @tail_call, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x2, 0xb, 0x5}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000480)=r1}, 0x20) 17.713477439s ago: executing program 4 (id=1557): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x70}}, 0x4004811) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r12, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) (async) getsockopt(r12, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 17.665982879s ago: executing program 0 (id=1558): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x36, 0x1, 0x9, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100000000000200000000000000", @ANYRES32=r2, @ANYBLOB="d98d01000820f60200200012800e0001006970366772657461700000000c000280040000004e2400"], 0x40}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x36, 0x1, 0x9, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100000000000200000000000000", @ANYRES32=r2, @ANYBLOB="d98d01000820f60200200012800e0001006970366772657461700000000c000280040000004e2400"], 0x40}}, 0x0) (async) 17.62070248s ago: executing program 0 (id=1560): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000e80)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0xfffffffffffffea4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20004004}], 0x1, 0x40800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a000000661e37fa4954d6d2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2, 0x8}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x7a5, 0x0, 0x8001, 0x0, r4}, 0x10) r5 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x2b, 0x6, 0x10, 0x3, 0x43, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0x9, 0x8}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000001040)=ANY=[@ANYRES8, @ANYBLOB="5656034f1d4c303541e08f0312d941915d6f43f9faf4e37d6cd2a5e82a9a6490f9d6a943b6bba3ac221a7a8f86b31b55af10eaf90ad8fa3e23e781b7d99e63bb5eaf5d9199983fd8ac72732b750f1f12014b8f0bfdc4bfc8bb2ff843ba4f66d94fe3e19b94d6905c000000005d1e0a60b6cc29f9129f9ca7c93930a44fd77a8e0a706612527e0e8cda8e3c319809a66a1c6fd5c7247fd205faf37b1fcb69d0af1db60400000058049abb6c71b25cdb0d19a3e8fd8ae1d171325b595da8c2002e100000000e5cb3dce4b26c65b720eec8e03b3ca1a46d288478047ab23fa34d8934cdf51ea078f1e620e856d6821b3ad276c289bfb0e5f47491c13a5ee273b49e141d44d606befb287aef8ab7d5c3fda4a31476ff0f1c2dc40c54aa42ffdb6b8bf9", @ANYRES8=r3], &(0x7f0000000f40)=""/60, 0x176, 0x3c, 0x1, 0x1000}, 0xffffffffffffffb3) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1e00000005000000ff0100000100000040200000", @ANYRES32, @ANYBLOB="7465000051e90000000000000000000000f5d900d30523adcf549ee06eb5614ed96a38860d2de1262ce80de0c21f28fd5427084726b0dc0ff5fc49b37e5731a37d52ff3836ea477dad3461d2b774ae1f4fff38dca53fb5a1044272eb9bcd4e6bb42fcfda110e8325f08ef0dae80ddf2ab25ed4fbe80418e8f3734578346ab3", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="01000000010000000400"/28], 0x50) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e21, 0x8, @mcast2, 0x9}, {0xa, 0x4e22, 0xc864, @mcast1, 0x4}, 0xffffffffffffffff, {[0x8, 0x7, 0x400, 0x0, 0x0, 0x3, 0x8, 0x7]}}, 0x5c) recvmsg$can_j1939(r5, &(0x7f0000000880)={&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/136, 0x88}, {&(0x7f0000000b00)=""/204, 0xcc}], 0x4, &(0x7f0000000c00)=""/241, 0xf1}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r10], 0x23c}}, 0x4004000) 17.48580298s ago: executing program 4 (id=1562): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000002c0)={0x10, 0x0, "8b6b114de3fdd1b70c21d74e9e141b80"}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r7, @ANYBLOB="020000000a000100aaaaaaaaaabb000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', r7, 0x7800, 0x8, 0x9, 0x3, {{0x12, 0x4, 0x0, 0x2e, 0x48, 0x68, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0xb, 0x4d, [@remote, @remote]}, @timestamp_addr={0x44, 0x14, 0xb4, 0x1, 0xd, [{@loopback, 0x2}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x1b, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r10, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x1}, 0x80000) r12 = accept4$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0xc0800) connect$inet(r12, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x34, &(0x7f00000000c0), 0x38) 17.306116166s ago: executing program 2 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0xe50}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 17.15621653s ago: executing program 4 (id=1567): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x81, 0x7, 0x20, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0xca6fb9a57c7ab11b, 0x81, 0xee8}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000000e0601020000000000cd0000080900020073797a3200000000050001000700000005000100070000000000009e11b75c2ac8c986"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000d40)=0x0) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) (rerun: 64) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e40)={0x1d0, 0x3, 0xb, 0x101, 0x70bd2b, 0x25dfdbfd, {0x3}, [@typed={0x8, 0x43, 0x0, 0x0, @fd=r2}, @generic="6068a4fdf9e6e99b0beb317954d6c933ca8b5db8dcf6f1f7152d38897c4face08500ed8426716feb7d298df44f55825d21f230440eb5a2e50d6bcf70d212faa6d6fd6ad4af964069182d5725a8e15aa3eb90e2169a636d5144957e247786b080d3a0e4f0295e6ecea5b21682250d2405683232abda1742271b0340a60ef7c6c5bd029006caed68e17ca2d5f9e38b4b71059b9fbeec84d25c2470e542b8c63625e9dfb0c6a3c2c05f3f6d1991ba9d32d0a34ac5058fd3e6f7d6dc039b5fbf5482151942f438a0a754ac7dea0d41f10839b23f0aabc16b1f1fca67b1f93786f97b85e2a591", @nested={0xac, 0x54, 0x0, 0x1, [@nested={0x4, 0x81}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x3e}, @generic="17b39fdf61c904055d793180b282f86e00d588f8987557742a5e3783917ecb8f1cbe04166543f1b3fc740732eae77487a55093c57652fdf7a7a5c567af4fee2e9f2795cf52e2bd126c4d47fd1f60d76cd6ca96437d9766c0eac047526ea5d8f98ccb7e80e783c0f3b03ffc1556fb11a5ee9478862464e769b2e572810a2e3536fba83ca780a1ba0f3dc5e87fc6e96e88b2f0aad172ed9ab9"]}, @typed={0x4, 0x16}, @nested={0x20, 0x52, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x132}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x6a}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x84}, 0x4048000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="6f366cf323e1bd89a7d8cc6206786ddfd202d721951e18efac277e46dec42becd6d97a8b80c1004dd1bac5fd667f69816cd11692d47732a1f6803960d8f153519c4bc26f13bc6a1186de308b1e949859ebf7be086f917d5bc0f4394cc0a4c329056a684099aaa8d18b7c7a70257c7abd79b1d71bf2d58733af4d5561bb544670be4bd52f8a25b89a8c8cfbf86c37bf51eccb054787", 0x95}, {&(0x7f00000002c0)="09b81c936583b5bede948310c8a84e165ae6cd83187e820f847625843574f15035d105395a4de619f641cbcc3fdc1aae6939c8797fb910208331424bbc395b7cb07005bbf25932d17a8f72687cb64628f2dcd51b835359a2c8b18c", 0x5b}, {&(0x7f0000000400)="1ba07d5f03cb6d2391648943a7464fa031189c04ee38a6946b88446e06a4d9923851761208b54d4eb99dfc56e7ee347a8ab8516c", 0x34}, {&(0x7f0000000440)="af10ce1014fbf4a6f697d1e11374415cf4aba95273ed536cf57138e8ff8ad26d6b9430cb733bc1701e068539850f71f84432e5048324edca0c83f2b67659560a22e18ab237bab0b225ac7f71ab999ec19523d646", 0x54}, {&(0x7f00000004c0)="68a7d08ae698c1dbcf86f4f9def4aecc5603d839fc1212c1c7fa2005e0f530107bb8e2db753aa9272592392ba913989c2d5a4128a2c834da40508e21e63d185c25d1c2a3bd441065abf422400d9c054f061053c113538df4a03e7dd39a8dfd4b64203ecf8b4c02c487b0d6834ff8b2cdff2ec824df73418c334778d48c5d18c1387c68aa100c7fb12dc64535a285793aef13924729994ee3a960237931adbf02", 0xa0}], 0x5, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000740)="17781ae6853aa708f47a4bcbd42151c28ded29d33797f797ca3775b58a4896100e00036737675ea32da7ad5d05e716e9652404e7dca5ba0ce2fb2f1a35bd381b350fb7642cc33b71b2727e3937a8ff1e2a1690a85c872d179a48c70b1ff89acc23d89044a164c189c1145e172c9e315660540cfd9efe9fa2f813a2cfaf876acce8bc3f9611533246d52bcda41d395957ba0e07d2bd590a32ad0571f113a6ccb9f265e08be3cc8f75bfabe04d0f4bfa2b608f6a9ea0d584c5e57b4787a8df68483d6fb418d3087b764d45230bacf75a0ab556fd4bb1e14d3629cd9d7b15", 0xdd}, {&(0x7f0000000840)="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", 0xff}, {&(0x7f0000000940)="3d3b630e071ff8cd8be28c7af2ce2154edd97cbd58c86bcbd64f0ee6b20c1a8d1c34a8bf5c9c7a16a5e35c1c72ae600daa4b4cf008d94193b68b7975bda5f40b459ee434cc7f44cda5042b80cd55ba8994fde6b56dfb290f0c6cc8876b4f4df5c8f13170c8ded7c4d14dcc9713bd3dadb3c18891f28859f2aebc77ecb5295f46eaa60707295eab555028b3fe3a93e2f2a7a09b8d47be5afe88bb0f2c02750664bbdb6cde0602873ea454cb3d88fb9a8e2d3535db99aba85505ffd56121c79c66d79b3b8b33b8ca718ed4213dda25050b3ab18459755cf9", 0xd7}, {&(0x7f0000000a40)="034dbb992c3f31e639fb39", 0xb}], 0x4, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @rand_addr=0x64010100}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x8e, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @broadcast]}, @ssrr={0x89, 0xb, 0xc, [@rand_addr=0x64010102, @broadcast]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x5, [0x5]}, @lsrr={0x83, 0x3, 0x82}, @rr={0x7, 0x1b, 0x8a, [@multicast2, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x94, 0x7, "fe0a1001a2"}, @noop, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xc0}}], 0x2, 0x20008004) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'veth1\x00'}) (async, rerun: 32) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$sock_int(r9, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000080000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r12, 0x1, 0x4c, 0x0, 0x0) (async) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) (rerun: 32) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000080)=0x400, 0x4) 17.153188949s ago: executing program 2 (id=1568): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) (async) ioctl$PPPIOCSMAXCID(r1, 0x4004743c, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @rand_addr=' \x01\x00', 0x7, 0x83}, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5cc0a57f32cd8caf80ff007a2f3ce32a", 0x28}], 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 17.013113954s ago: executing program 2 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000fee70bf77e6635e534ffffff000000000000000000c33bb8c1222268538727a279298d6711715baaa6c9b47167fe401774702556a4e82f9d936f9406230a8e76230858eda7a9b45c0ec2eb33676efd42a7006d5f1f893919e45b26847c7ffb2eb27311f22c76ec0e7c4c394906814a19e27e139765f86dc1fd8fc3c082e81b4e88e9d791b47d868332d00a1a9284d8b0a93645aeb0e22bfd1cf420be5fa1128d357debd6dbff340cb9cc82c8a944a300", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r5, @ANYBLOB="0a0003003a712f0756b80000"], 0x4c}}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9f, 0x30}, &(0x7f0000000f80)=0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r2, &(0x7f0000005200)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000fc0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000080)}}], 0x2, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x84, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x73, @empty, 0x3}, @in6={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000540)={r7, @in={{0x2, 0x4e20, @multicast1}}, [0x3, 0x0, 0x7, 0x0, 0x3, 0x8, 0x8, 0x5, 0x1, 0x7, 0x0, 0x8, 0xffffffff, 0x2, 0x8]}, &(0x7f0000000280)=0x100) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r10 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86e9, r11, 0x1, 0x62, 0x6, @multicast}, 0x14) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000080)={r11, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYBLOB], 0x40}}, 0x24008810) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x5, 0x82e, [0x0, 0x200000000640, 0x2000000008e4, 0x200000000cd0], 0x0, &(0x7f0000000400), &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2094]}, 0x8a6) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r13, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xbac5dc2103d84527}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r12, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 16.77783972s ago: executing program 2 (id=1574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) 16.732431332s ago: executing program 2 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) clock_gettime(0x0, &(0x7f0000001c40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, &(0x7f0000000180)=""/17, 0x11}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x2}, 0x3}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000005c0)=""/85, 0x55}], 0x4, &(0x7f0000000680)=""/63, 0x3f}, 0x4}, {{&(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000740)=""/14, 0xe}, {&(0x7f0000000780)=""/176, 0xb0}], 0x2, &(0x7f0000000880)=""/90, 0x5a}, 0x1}, {{&(0x7f0000000900)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/51, 0x33}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/221, 0xdd}], 0x4}, 0xf}], 0x5, 0x2, &(0x7f0000001c80)={r4, r5+60000000}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 16.653905545s ago: executing program 0 (id=1577): socket$kcm(0x21, 0x2, 0xa) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2010000069000b0040000000000000060001000100"/32], 0x20}}, 0x4000000) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="a86cae34efade1fdae8729d744e67087d17627ebc0b437c7a89663b72fa14d2a7e90f7e32102376e98d3cf2002b4ead4f16d087322a2e1566cf66a940c96c51a9d6f7b8b1e942bd8f0d3e70783ee50fc99e9976addc664a41aaadfb148375e1b77dd90e74ba7642dac15c9244c17d79c9536048e690b1ba44a5e297a711d31c542a257eeb86480", 0x87}, {&(0x7f0000000140)="13ef16e8ac3891343939bfba5b74264bf4f97f559ae0dcbe8ffdc65bb373cb62b26ead912ae8f412e737d218881f582562fd9cc6673c4ea512a33115650633d124cb2cd3cb95100bb2094f3e40c96b5d21ef7d9a852fd8ee29c0780cd22889ed5b829d4742ba0cce454096b98b38c1c059bfb3adb0021dc665", 0x79}, {&(0x7f00000002c0)="7d3c8ad2b5cdf72ef271882975cd3ec646bb9670f4efde7f9c799f8a2f788173a35d7ff452c4ec2bd9749e929c7c5939b76811b845871cf0e69a41d14ff2ba65", 0x40}], 0x3, &(0x7f0000000340)="acfd7955ad90b4f9297377493f7416928b711ec8c7dc3f456d4e782881f9480554c5a00791c275c1977825e52540b0ca4bf27c4b9ac32eb90c2520997db0d840b3a2b69d9c40b928e4af7b56d75d1c645ecb650ddae4446cb04ecad98107a17dce8a9006255ae9f6f69fe0f3a9cc2423e1e0192c4e3df10ab1", 0x79, 0x810}, 0x850) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000020}, 0x20000800) socket$kcm(0x21, 0x2, 0xa) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd32936ad234ced2e74e4ad6ea7dc496faeafc97b7e6c44a2ae9df7c3dc2ee589a220431da3889f2a8617e3ee2e6252399cbfaab83bfe7c05ec25b9816da44387027b7ab4d6bde8ec960f7bc1363de2cd59ca6081bdfd1440b92b196ddc631e1405c2b1751059bac64e882735ee5d1f01f1766c9212853b51fe09df9c4dafcd4756a7c9553fa2ac7038dcd44574a62a564f9a2f3674fcf8768a7d9618395b1c5e9698951427297c35dbcefc9f6821bd8d78c6ed2911", 0xb7}, {&(0x7f00000006c0)="68b48f6e8fcedde03262d09e8336fe0925b41aec1e5c1dd66e7df09aa3b6ada49cb7eb7de40db70ae04fccdaa3270e109e772a42dea152138454de50598125fab0bd414e4ab24f8c7e89442907af02fdc12640c1fae19672cc9454c6880ad498b1f54db9bb661bf8f35dec0918cf05a827634c190c86205d00900f8b02be53d84e911d60685e41d012cf614db01b7062d0e8f9c75c016eaef568f2f7eab95ed15b1486b9c45677b750e4c45cfd0d9d14fbe0ab54742c34825b29b79364c794a311637fd5a5f7002b3ec08ee4f2d99ebc35eb817250d7070cda76c7fdb5", 0xdd}, {&(0x7f00000007c0)="579762c9e8f003c3df65d0de2cad2a82224f4ac2b0faf82e435238de816bfbe9a43b7d2195f0f0556a6126c935193c2f8d090ecc05dc583ba59da484ccd5cd0a316c0c845fc3c32dc0cab99986e6335a246e8d5b3c102f5c103c0ae66fad19411edb4da31fa7b2a2f905deb1f2dae9e3ef53cddcd83edbe51a7947c834a7dcefff58795648e4f9aec42c7070e1978515da789f3773499abbddabd5840422a4b0762ade94375231034d8e7c015c1ebdbcd94de2c238d16e23d7bd28e9a2715801e592270f7f0fe141d72c151643d8", 0xce}, {&(0x7f0000003cc0)="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", 0xdd2}], 0x4, 0x0, 0x0, 0x4000000}], 0x1, 0x8081) 16.610048483s ago: executing program 0 (id=1578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x7fffffff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010077617377c90b89716800000000240002800800064000000011080007400000000108000440fffffffc08000240000000000900010073797a30000000000900020073797a3200009b12d907f7c771e39ba4b6000014000000110001000000000000000007f67c6f9036c7cedbc0f115d4ef86ea27328cffa91bd7571f640b693653bc7c82d02f3699bb2265ef418c78eccf5b394e60fd7f994b783262f22fd9bae2a30278af906ac76e04eeabb505"], 0x8c}}, 0x0) 16.373960597s ago: executing program 3 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x9}], &(0x7f0000000200)='GPL\x00'}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0x1, {{0x17, 0x4, 0x3, 0x3a, 0x5c, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @rr={0x7, 0xb, 0x7a, [@loopback, @remote]}, @rr={0x7, 0x7, 0x4b, [@multicast2]}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0x3, [{@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8d}, {@local, 0x80000000}, {@empty, 0x9b66}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x697}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xbc, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xbc, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 16.331339404s ago: executing program 3 (id=1583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r1) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x40, 0x8001, 0x7, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x11, 0x1, 0x2, [{@broadcast, 0xffff8000}, {@multicast1, 0x4}, {@private=0xa010100, 0x8}, {@loopback, 0x66ed0df9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}, {@broadcast, 0x4}, {@empty, 0x8}]}, @cipso={0x86, 0x20, 0x1, [{0x1, 0xf, "289969b0073716268f154d3202"}, {0x1, 0x6, "012457a6"}, {0x5, 0x5, "b8069f"}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @empty}, &(0x7f0000000140)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0xe5, 0x3, 0x8000, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x700, 0xffffffff, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x3, 0x4a7, {{0x2f, 0x4, 0x0, 0x1c, 0xbc, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x23, 0x4d, [@remote, @multicast2, @loopback, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @remote, @multicast1]}, @rr={0x7, 0x17, 0x44, [@private=0xa010100, @remote, @loopback, @local, @empty]}, @generic={0x89, 0xe, "85f68e5bcb7293949bb9bba8"}, @noop, @ssrr={0x89, 0xf, 0x37, [@rand_addr=0x64010102, @multicast1, @broadcast]}, @lsrr={0x83, 0x17, 0x12, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @multicast2, @remote]}, @timestamp_addr={0x44, 0x1c, 0xb4, 0x1, 0x9, [{@multicast2, 0x2}, {@multicast2, 0x55}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0x1, [{@multicast2, 0x301}, {@rand_addr=0x64010101, 0x3}, {@private=0xa010102, 0xff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x8f, 0x708b, {{0x29, 0x4, 0x1, 0x14, 0xa4, 0x67, 0x0, 0x10, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x17, 0x17, [@loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @cipso={0x86, 0x76, 0x2, [{0x7, 0xd, "af3057350fbbfc9915f339"}, {0x1, 0x4, "6496"}, {0x0, 0xb, "a4adeb7375efedc72f"}, {0x0, 0x10, "d0363431dfb44becedf35a274b3e"}, {0x1, 0xd, "fb6aa1e2d257617750dd0d"}, {0x5, 0xe, "d5f185d129839283b57ce079"}, {0x0, 0xc, "482dde27249467457aa4"}, {0x6, 0x9, "91050364446cd1"}, {0x5, 0x5, "5558aa"}, {0x7, 0xf, "fb909c72316ad778d90d5fdcf6"}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r7, 0x0, 0x0, 0x10000, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r9, 0x1, 0x49, 0x0, &(0x7f00000001c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) 16.229919769s ago: executing program 3 (id=1584): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) 16.229506999s ago: executing program 3 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) 16.147098195s ago: executing program 3 (id=1586): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) (async) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x9, 0x2}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x10, 0x5, 0x1ff, 0x101, 0xd3}, &(0x7f00000001c0)=0x14) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x8e, 0x8, "d51ac6a6ca4d9275b0d38d42bcecf22ec859ce8760c5f6943e8f61d0bcca77d9d608e5c07146082dba4c9592715da76aee7109397db01a1d1aad729d4fc2555a0a4c31d28a9571c600bf557127fc17e38b50e21a4ee373f7be9c87f5f70e59e0f0348b6438dba482d280df961c09e34e06201320dc73ca8f1d80d65e5d3306acd1fca79952679fd178c5"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc008}, 0xc051) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000003c0)={0x3, [0x8000, 0x5, 0x8]}, &(0x7f0000000400)=0xa) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x1, 0x7800, 0xda, 0x2, {{0xe, 0x4, 0x1, 0x33, 0x38, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x14, 0x7b, 0x1, 0xa, [{@loopback, 0x2}, {@multicast1, 0x3ce8}]}, @cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "ee543caf07"}]}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xac9, 0x80000001, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xf2, 0x3, 0x7, [{@multicast2, 0x9}, {@loopback, 0x4}, {@broadcast, 0x6}, {@rand_addr=0x64010100, 0x800}, {@multicast2, 0x8b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x458}, {@rand_addr=0x64010102, 0x8f}, {@empty, 0x6}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x7, 0xa, "4047de36641ff052"}, {0x2, 0x4, "e300"}, {0x7, 0x3, "e3"}, {0x1, 0xd, "98ba099669d107ae1bb3a7"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_macvtap\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x29, 0x94, 0xfa, 0xfffffff2, 0x2d, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8107, 0x1, 0x4}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1d8, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0xc5ffb91a8ada86f2) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000bc0)) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c00)={r2, 0x28e, 0x7, [0x8, 0x6, 0x1000, 0x9, 0x2, 0x3, 0x4]}, 0x16) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@multicast1, @in6=@empty, 0x4e24, 0x8, 0x4e23, 0x2a86, 0x2, 0x20, 0x20, 0x5e, r6, r14}, {0x7fffffffffffffff, 0xf, 0x8, 0x1, 0x8001, 0x80000000, 0x40, 0x2000000000000}, {0x6, 0x5, 0xdd93, 0x1fc}, 0xffffffff, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa8ef, 0x33}, 0xa, @in=@loopback, 0x3507, 0x1, 0x2, 0x7, 0x6, 0x80}}, 0xe8) (async) r15 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000e80)={@remote, @broadcast, @void, {@canfd={0xd, {{0x2}, 0x29, 0x2, 0x0, 0x0, "967ca0779135b8c037c56ad7da82ad74dd76eb7cc8c0aa4d6a411b5893be51aa0e2680398869434fe9c48770393ccc84753d5b72339b573f9eb8446ed7e24123"}}}}, &(0x7f0000000f00)={0x0, 0x4, [0x33d, 0xe75, 0x8d5, 0xa0c]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$MRT_ADD_VIF(r15, 0x0, 0xca, &(0x7f0000000f40)={0xffffffffffffffff, 0x4, 0x7, 0x2, @vifc_lcl_addr=@local, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000f80)={r1, 0x3ff}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000fc0)={r2, 0x3, 0x54b, 0xffffe305, 0x7ff, 0x6c6}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd27, 0x70e, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xe, 0x5}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x841) 16.060890269s ago: executing program 3 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r14, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x5, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.785698778s ago: executing program 2 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000009d"], 0x18}, 0xfc00) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x46, 0x3, [0x8, 0x4, 0x2]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r6, 0x6}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 5.118377039s ago: executing program 32 (id=1513): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.087090433s ago: executing program 33 (id=1567): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x81, 0x7, 0x20, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0xca6fb9a57c7ab11b, 0x81, 0xee8}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000000e0601020000000000cd0000080900020073797a3200000000050001000700000005000100070000000000009e11b75c2ac8c986"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000d40)=0x0) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) (rerun: 64) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e40)={0x1d0, 0x3, 0xb, 0x101, 0x70bd2b, 0x25dfdbfd, {0x3}, [@typed={0x8, 0x43, 0x0, 0x0, @fd=r2}, @generic="6068a4fdf9e6e99b0beb317954d6c933ca8b5db8dcf6f1f7152d38897c4face08500ed8426716feb7d298df44f55825d21f230440eb5a2e50d6bcf70d212faa6d6fd6ad4af964069182d5725a8e15aa3eb90e2169a636d5144957e247786b080d3a0e4f0295e6ecea5b21682250d2405683232abda1742271b0340a60ef7c6c5bd029006caed68e17ca2d5f9e38b4b71059b9fbeec84d25c2470e542b8c63625e9dfb0c6a3c2c05f3f6d1991ba9d32d0a34ac5058fd3e6f7d6dc039b5fbf5482151942f438a0a754ac7dea0d41f10839b23f0aabc16b1f1fca67b1f93786f97b85e2a591", @nested={0xac, 0x54, 0x0, 0x1, [@nested={0x4, 0x81}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x3e}, @generic="17b39fdf61c904055d793180b282f86e00d588f8987557742a5e3783917ecb8f1cbe04166543f1b3fc740732eae77487a55093c57652fdf7a7a5c567af4fee2e9f2795cf52e2bd126c4d47fd1f60d76cd6ca96437d9766c0eac047526ea5d8f98ccb7e80e783c0f3b03ffc1556fb11a5ee9478862464e769b2e572810a2e3536fba83ca780a1ba0f3dc5e87fc6e96e88b2f0aad172ed9ab9"]}, @typed={0x4, 0x16}, @nested={0x20, 0x52, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x132}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x6a}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x84}, 0x4048000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000200)="6f366cf323e1bd89a7d8cc6206786ddfd202d721951e18efac277e46dec42becd6d97a8b80c1004dd1bac5fd667f69816cd11692d47732a1f6803960d8f153519c4bc26f13bc6a1186de308b1e949859ebf7be086f917d5bc0f4394cc0a4c329056a684099aaa8d18b7c7a70257c7abd79b1d71bf2d58733af4d5561bb544670be4bd52f8a25b89a8c8cfbf86c37bf51eccb054787", 0x95}, {&(0x7f00000002c0)="09b81c936583b5bede948310c8a84e165ae6cd83187e820f847625843574f15035d105395a4de619f641cbcc3fdc1aae6939c8797fb910208331424bbc395b7cb07005bbf25932d17a8f72687cb64628f2dcd51b835359a2c8b18c", 0x5b}, {&(0x7f0000000400)="1ba07d5f03cb6d2391648943a7464fa031189c04ee38a6946b88446e06a4d9923851761208b54d4eb99dfc56e7ee347a8ab8516c", 0x34}, {&(0x7f0000000440)="af10ce1014fbf4a6f697d1e11374415cf4aba95273ed536cf57138e8ff8ad26d6b9430cb733bc1701e068539850f71f84432e5048324edca0c83f2b67659560a22e18ab237bab0b225ac7f71ab999ec19523d646", 0x54}, {&(0x7f00000004c0)="68a7d08ae698c1dbcf86f4f9def4aecc5603d839fc1212c1c7fa2005e0f530107bb8e2db753aa9272592392ba913989c2d5a4128a2c834da40508e21e63d185c25d1c2a3bd441065abf422400d9c054f061053c113538df4a03e7dd39a8dfd4b64203ecf8b4c02c487b0d6834ff8b2cdff2ec824df73418c334778d48c5d18c1387c68aa100c7fb12dc64535a285793aef13924729994ee3a960237931adbf02", 0xa0}], 0x5, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000740)="17781ae6853aa708f47a4bcbd42151c28ded29d33797f797ca3775b58a4896100e00036737675ea32da7ad5d05e716e9652404e7dca5ba0ce2fb2f1a35bd381b350fb7642cc33b71b2727e3937a8ff1e2a1690a85c872d179a48c70b1ff89acc23d89044a164c189c1145e172c9e315660540cfd9efe9fa2f813a2cfaf876acce8bc3f9611533246d52bcda41d395957ba0e07d2bd590a32ad0571f113a6ccb9f265e08be3cc8f75bfabe04d0f4bfa2b608f6a9ea0d584c5e57b4787a8df68483d6fb418d3087b764d45230bacf75a0ab556fd4bb1e14d3629cd9d7b15", 0xdd}, {&(0x7f0000000840)="13df3c776e51b8170ac2fc80f212ce9dba81a6aa74f87c3c4719975957ebfe8a895a53992209aa796ed71737e98a5e7b36b940cc729402dc2395f7abcfa08e7453f2776d7a7ee797c8e3d379a3c2ee2a7c9644726ddc41f0dc7f1dc066bb3565a303215acfcad934979a4d9cc3d711e72b0420cc5f21693109845491ad7805f4c9d4680395b0f32288d331c696f166056054a3048063d4e090464ee4279e96768945588f218cc8ac25ebca182905918cae726e7750c20557f3559d783dbcfaee7a9154fd2c5ec1b10338eb0ab3ef7653aeec44d539b022924df8a7f360d113f54c656f5fcfb0503da8c0f08231d004fb816818c7b06f36d5b875e8eb3f8737", 0xff}, {&(0x7f0000000940)="3d3b630e071ff8cd8be28c7af2ce2154edd97cbd58c86bcbd64f0ee6b20c1a8d1c34a8bf5c9c7a16a5e35c1c72ae600daa4b4cf008d94193b68b7975bda5f40b459ee434cc7f44cda5042b80cd55ba8994fde6b56dfb290f0c6cc8876b4f4df5c8f13170c8ded7c4d14dcc9713bd3dadb3c18891f28859f2aebc77ecb5295f46eaa60707295eab555028b3fe3a93e2f2a7a09b8d47be5afe88bb0f2c02750664bbdb6cde0602873ea454cb3d88fb9a8e2d3535db99aba85505ffd56121c79c66d79b3b8b33b8ca718ed4213dda25050b3ab18459755cf9", 0xd7}, {&(0x7f0000000a40)="034dbb992c3f31e639fb39", 0xb}], 0x4, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @rand_addr=0x64010100}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x8e, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @broadcast]}, @ssrr={0x89, 0xb, 0xc, [@rand_addr=0x64010102, @broadcast]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x5, [0x5]}, @lsrr={0x83, 0x3, 0x82}, @rr={0x7, 0x1b, 0x8a, [@multicast2, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x94, 0x7, "fe0a1001a2"}, @noop, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xc0}}], 0x2, 0x20008004) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'veth1\x00'}) (async, rerun: 32) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$sock_int(r9, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000080000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r12, 0x1, 0x4c, 0x0, 0x0) (async) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) (rerun: 32) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000080)=0x400, 0x4) 1.059755828s ago: executing program 34 (id=1578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x7fffffff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010077617377c90b89716800000000240002800800064000000011080007400000000108000440fffffffc08000240000000000900010073797a30000000000900020073797a3200009b12d907f7c771e39ba4b6000014000000110001000000000000000007f67c6f9036c7cedbc0f115d4ef86ea27328cffa91bd7571f640b693653bc7c82d02f3699bb2265ef418c78eccf5b394e60fd7f994b783262f22fd9bae2a30278af906ac76e04eeabb505"], 0x8c}}, 0x0) 38.48261ms ago: executing program 35 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000009d"], 0x18}, 0xfc00) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x46, 0x3, [0x8, 0x4, 0x2]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r6, 0x6}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 0s ago: executing program 36 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r14, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x5, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 85.073125][ T5851] cgroup: Unknown subsys name 'net' [ 85.268131][ T5851] cgroup: Unknown subsys name 'cpuset' [ 85.277936][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.022632][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.412331][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.422477][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.431294][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.441475][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.465433][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.473196][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.480864][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.492470][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.498555][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.500399][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.521252][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.529975][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.538100][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.545831][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.556163][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.567333][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.571934][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.584029][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.593764][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.601780][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.625582][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.633716][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.641395][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.649533][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.657262][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.956242][ T24] cfg80211: failed to load regulatory.db [ 92.289456][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 92.360618][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 92.414621][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.551497][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 92.562845][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.570799][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.578296][ T5870] bridge_slave_0: entered allmulticast mode [ 92.586267][ T5870] bridge_slave_0: entered promiscuous mode [ 92.633810][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.641203][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.648443][ T5870] bridge_slave_1: entered allmulticast mode [ 92.656008][ T5870] bridge_slave_1: entered promiscuous mode [ 92.765290][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.772486][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.780176][ T5865] bridge_slave_0: entered allmulticast mode [ 92.787839][ T5865] bridge_slave_0: entered promiscuous mode [ 92.796449][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.803585][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.811549][ T5865] bridge_slave_1: entered allmulticast mode [ 92.819196][ T5865] bridge_slave_1: entered promiscuous mode [ 92.857473][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 92.893974][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.944742][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.954029][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.961364][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.968797][ T5877] bridge_slave_0: entered allmulticast mode [ 92.976063][ T5877] bridge_slave_0: entered promiscuous mode [ 93.008322][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.031275][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.038854][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.046105][ T5877] bridge_slave_1: entered allmulticast mode [ 93.054915][ T5877] bridge_slave_1: entered promiscuous mode [ 93.090463][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.147889][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.155765][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.162922][ T5866] bridge_slave_0: entered allmulticast mode [ 93.171071][ T5866] bridge_slave_0: entered promiscuous mode [ 93.195623][ T5870] team0: Port device team_slave_0 added [ 93.223389][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.231629][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.238909][ T5866] bridge_slave_1: entered allmulticast mode [ 93.246901][ T5866] bridge_slave_1: entered promiscuous mode [ 93.255223][ T5865] team0: Port device team_slave_0 added [ 93.262594][ T5870] team0: Port device team_slave_1 added [ 93.285882][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.317265][ T5865] team0: Port device team_slave_1 added [ 93.339054][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.418218][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.425456][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.452225][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.495530][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.502730][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.510203][ T5880] bridge_slave_0: entered allmulticast mode [ 93.517515][ T5880] bridge_slave_0: entered promiscuous mode [ 93.529423][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.539366][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.546878][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.573545][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.575168][ T5878] Bluetooth: hci0: command tx timeout [ 93.586765][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.596900][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.623258][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.636052][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.637929][ T5878] Bluetooth: hci1: command tx timeout [ 93.643040][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.648962][ T5878] Bluetooth: hci3: command tx timeout [ 93.674962][ T51] Bluetooth: hci2: command tx timeout [ 93.680900][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.698682][ T5877] team0: Port device team_slave_0 added [ 93.705006][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.712207][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.714384][ T51] Bluetooth: hci4: command tx timeout [ 93.725066][ T5880] bridge_slave_1: entered allmulticast mode [ 93.732363][ T5880] bridge_slave_1: entered promiscuous mode [ 93.757421][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.781687][ T5877] team0: Port device team_slave_1 added [ 93.817698][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.860594][ T5866] team0: Port device team_slave_0 added [ 93.869382][ T5866] team0: Port device team_slave_1 added [ 93.890622][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.947090][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.954610][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.981243][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.994522][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.001498][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.027650][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.111359][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.118454][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.144997][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.163218][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.170768][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.197474][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.210339][ T5880] team0: Port device team_slave_0 added [ 94.219741][ T5880] team0: Port device team_slave_1 added [ 94.231294][ T5865] hsr_slave_0: entered promiscuous mode [ 94.237770][ T5865] hsr_slave_1: entered promiscuous mode [ 94.267181][ T5870] hsr_slave_0: entered promiscuous mode [ 94.273525][ T5870] hsr_slave_1: entered promiscuous mode [ 94.280399][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 94.286227][ T5870] Cannot create hsr debugfs directory [ 94.425758][ T5866] hsr_slave_0: entered promiscuous mode [ 94.432280][ T5866] hsr_slave_1: entered promiscuous mode [ 94.439085][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 94.445025][ T5866] Cannot create hsr debugfs directory [ 94.452708][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.459816][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.485787][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.498837][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.505947][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.532389][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.622632][ T5877] hsr_slave_0: entered promiscuous mode [ 94.629154][ T5877] hsr_slave_1: entered promiscuous mode [ 94.635573][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 94.641308][ T5877] Cannot create hsr debugfs directory [ 94.764415][ T5880] hsr_slave_0: entered promiscuous mode [ 94.770823][ T5880] hsr_slave_1: entered promiscuous mode [ 94.777361][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 94.783105][ T5880] Cannot create hsr debugfs directory [ 95.209931][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.222481][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.240938][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.260722][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.316813][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.336543][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.349830][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.363054][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.468733][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.489439][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.501390][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.513543][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.619333][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.636407][ T51] Bluetooth: hci0: command tx timeout [ 95.663520][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.683383][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.698235][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.712257][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.722461][ T51] Bluetooth: hci2: command tx timeout [ 95.728898][ T5878] Bluetooth: hci3: command tx timeout [ 95.734404][ T51] Bluetooth: hci1: command tx timeout [ 95.735455][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.771867][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.779143][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.795261][ T5878] Bluetooth: hci4: command tx timeout [ 95.846584][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.853695][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.910716][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.923601][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.945370][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.957336][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.969223][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.043628][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.070902][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.107143][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.114320][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.176443][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.183692][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.267900][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.317143][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.324366][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.381349][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388562][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.405638][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.451841][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.496889][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.542401][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.549575][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.591403][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.598594][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.610004][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.680596][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.687917][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.713874][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.721357][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.760548][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.894775][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.990287][ T5870] veth0_vlan: entered promiscuous mode [ 97.083217][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.151942][ T5865] veth0_vlan: entered promiscuous mode [ 97.168800][ T5870] veth1_vlan: entered promiscuous mode [ 97.251112][ T5865] veth1_vlan: entered promiscuous mode [ 97.359654][ T5870] veth0_macvtap: entered promiscuous mode [ 97.372931][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.402689][ T5870] veth1_macvtap: entered promiscuous mode [ 97.422147][ T5866] veth0_vlan: entered promiscuous mode [ 97.457886][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.486566][ T5865] veth0_macvtap: entered promiscuous mode [ 97.502873][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.537872][ T5866] veth1_vlan: entered promiscuous mode [ 97.548741][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.566082][ T5865] veth1_macvtap: entered promiscuous mode [ 97.602944][ T1108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.618172][ T1108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.666209][ T1108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.676522][ T1108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.719703][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.727204][ T5878] Bluetooth: hci0: command tx timeout [ 97.775893][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.795461][ T5878] Bluetooth: hci3: command tx timeout [ 97.798530][ T51] Bluetooth: hci2: command tx timeout [ 97.800900][ T5876] Bluetooth: hci1: command tx timeout [ 97.845835][ T5866] veth0_macvtap: entered promiscuous mode [ 97.864864][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.874785][ T5876] Bluetooth: hci4: command tx timeout [ 97.892996][ T5866] veth1_macvtap: entered promiscuous mode [ 97.909189][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.956971][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.966337][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.988037][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.996737][ T5877] veth0_vlan: entered promiscuous mode [ 98.008880][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.020202][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.066659][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.115769][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.126281][ T5877] veth1_vlan: entered promiscuous mode [ 98.155842][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166315][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.166398][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.183405][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.202844][ T5880] veth0_vlan: entered promiscuous mode [ 98.210918][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219471][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233271][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.315618][ T5880] veth1_vlan: entered promiscuous mode [ 98.316711][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.340063][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.348729][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.423972][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.457495][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.490234][ T5877] veth0_macvtap: entered promiscuous mode [ 98.519116][ T5877] veth1_macvtap: entered promiscuous mode [ 98.580870][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.590064][ T5982] Zero length message leads to an empty skb [ 98.607108][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.643339][ T5880] veth0_macvtap: entered promiscuous mode [ 98.699851][ T5880] veth1_macvtap: entered promiscuous mode [ 98.717764][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.782899][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.809731][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.840178][ T5993] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 98.858252][ T5989] syzkaller1: entered promiscuous mode [ 98.863795][ T5989] syzkaller1: entered allmulticast mode [ 98.881318][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.909752][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 98.915097][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.933369][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 98.955502][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.965394][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981101][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6'. [ 99.007999][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016984][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.051289][ T5995] syzkaller0: entered promiscuous mode [ 99.065180][ T5995] syzkaller0: entered allmulticast mode [ 99.076249][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.096843][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.214234][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.263301][ T6002] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 99.319091][ T6002] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.346919][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.356703][ T6004] trusted_key: syz.2.7 sent an empty control message without MSG_MORE. [ 99.376839][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.467797][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.500857][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.610244][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.624356][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.667703][ T6019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.696609][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.750589][ T6019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.796039][ T5876] Bluetooth: hci0: command tx timeout [ 99.829518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.855982][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.878643][ T5876] Bluetooth: hci2: command tx timeout [ 99.878664][ T51] Bluetooth: hci1: command tx timeout [ 99.884383][ T5876] Bluetooth: hci3: command tx timeout [ 99.954761][ T5876] Bluetooth: hci4: command tx timeout [ 100.059678][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 100.149195][ T6024] tipc: Started in network mode [ 100.167608][ T6024] tipc: Node identity ea6e17c21915, cluster identity 4711 [ 100.202890][ T6024] tipc: Enabled bearer , priority 0 [ 100.245336][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 100.264683][ T6024] tipc: Resetting bearer [ 100.272500][ T6024] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 100.280689][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'. [ 100.302672][ T6028] syzkaller0: entered promiscuous mode [ 100.318711][ T6028] syzkaller0: entered allmulticast mode [ 100.343621][ T6037] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 100.353779][ T6023] tipc: Resetting bearer [ 100.416081][ T6023] tipc: Disabling bearer [ 100.671658][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.699187][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.900553][ T6051] macvtap1: entered promiscuous mode [ 100.910390][ T6051] vlan0: entered promiscuous mode [ 100.921208][ T6051] macvtap1: entered allmulticast mode [ 100.931947][ T6051] vlan0: entered allmulticast mode [ 100.938280][ T6051] veth0_vlan: entered allmulticast mode [ 101.043109][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 101.287097][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 101.327715][ T6075] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 101.397646][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 101.470979][ T6080] vlan2: entered allmulticast mode [ 101.478801][ T6080] bridge0: entered allmulticast mode [ 101.684655][ T6089] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 101.740222][ T6089] netlink: 'syz.1.31': attribute type 2 has an invalid length. [ 101.756671][ T6094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 101.820222][ T6094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 102.356459][ T6122] Illegal XDP return value 256 on prog (id 10) dev syz_tun, expect packet loss! [ 103.169012][ T6157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 103.903300][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.943731][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.996720][ T1108] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.027196][ T1108] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.028800][ T6205] openvswitch: netlink: IPv4 tun info is not correct [ 104.206101][ T6215] __nla_validate_parse: 11 callbacks suppressed [ 104.206120][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 104.249940][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.541605][ T6225] netlink: 'syz.4.70': attribute type 29 has an invalid length. [ 104.551747][ T6225] netlink: 'syz.4.70': attribute type 29 has an invalid length. [ 104.562083][ T6225] netlink: 596 bytes leftover after parsing attributes in process `syz.4.70'. [ 104.620501][ T6225] warning: `syz.4.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.103938][ T6250] netlink: 80 bytes leftover after parsing attributes in process `syz.1.80'. [ 105.231664][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 105.305513][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 105.314757][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 106.073734][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 106.095664][ T6300] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 106.118025][ T6300] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 106.201721][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.239352][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.249814][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.703204][ T6328] veth0: entered promiscuous mode [ 106.771717][ T6332] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.782588][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.088673][ T6325] veth0: left promiscuous mode [ 107.234525][ T6020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.260673][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 107.334508][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 107.502721][ T6370] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 107.510755][ T6370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'. [ 107.519881][ T6370] dummy0: entered promiscuous mode [ 107.526980][ T6370] bridge0: port 3(dummy0) entered blocking state [ 107.533900][ T6370] bridge0: port 3(dummy0) entered disabled state [ 107.541245][ T6370] dummy0: entered allmulticast mode [ 107.550897][ T6370] bridge0: port 3(dummy0) entered blocking state [ 107.557802][ T6370] bridge0: port 3(dummy0) entered forwarding state [ 107.701004][ T6373] netlink: 'syz.2.116': attribute type 5 has an invalid length. [ 107.719242][ T6373] netlink: 'syz.2.116': attribute type 5 has an invalid length. [ 107.927971][ T6385] netlink: ct family unspecified [ 107.942405][ T6388] netlink: 'syz.4.121': attribute type 4 has an invalid length. [ 107.949782][ T6385] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.437629][ T6403] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 108.550165][ T6403] bond1 (unregistering): Released all slaves [ 108.740299][ T6422] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 108.866815][ T6424] vlan2: entered promiscuous mode [ 108.871912][ T6424] bridge0: entered promiscuous mode [ 108.899832][ T6427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.951353][ T6433] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 108.973955][ T6433] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 109.183024][ T6444] tipc: Started in network mode [ 109.203440][ T6444] tipc: Node identity 080211000001, cluster identity 4711 [ 109.212616][ T6444] tipc: Enabled bearer , priority 0 [ 109.240468][ T6447] __nla_validate_parse: 4 callbacks suppressed [ 109.240485][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.141'. [ 109.269637][ T6455] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 109.289790][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 109.299313][ T6455] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 109.324669][ T6458] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 109.426105][ T6455] tipc: Resetting bearer [ 109.612843][ T6471] tipc: Trying to set illegal importance in message [ 110.282991][ T5926] tipc: Node number set to 134418688 [ 110.354329][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.473010][ T6522] sit0: entered promiscuous mode [ 110.495837][ T6522] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 110.506822][ T6522] netlink: 1 bytes leftover after parsing attributes in process `syz.2.158'. [ 110.530017][ T6525] syzkaller0: entered promiscuous mode [ 110.549000][ T6524] netlink: 220 bytes leftover after parsing attributes in process `syz.0.159'. [ 110.562619][ T6525] syzkaller0: entered allmulticast mode [ 110.581324][ T5927] IPVS: starting estimator thread 0... [ 110.660338][ T6522] bridge_slave_0: left allmulticast mode [ 110.674427][ T6528] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.678303][ T6522] bridge_slave_0: left promiscuous mode [ 110.702150][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.724501][ T6536] openvswitch: netlink: IP tunnel dst address not specified [ 110.726595][ T6522] bridge_slave_1: left allmulticast mode [ 110.741469][ T6522] bridge_slave_1: left promiscuous mode [ 110.749073][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.772385][ T6522] bond0: (slave bond_slave_0): Releasing backup interface [ 110.792703][ T6522] bond0: (slave bond_slave_1): Releasing backup interface [ 110.816479][ T6522] team0: Port device team_slave_0 removed [ 110.830054][ T6522] team0: Port device team_slave_1 removed [ 110.837409][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.847359][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.856861][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.865611][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.882237][ T6531] tipc: Enabling of bearer rejected, failed to enable media [ 110.915937][ T6532] vlan3: entered promiscuous mode [ 110.921016][ T6532] bridge0: entered promiscuous mode [ 110.922664][ T6540] netlink: 108 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.962956][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.090206][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 111.101789][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 111.145918][ T6544] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 111.336874][ T5876] block nbd0: Receive control failed (result -32) [ 111.453065][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 111.500811][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 111.634596][ T6578] Bluetooth: MGMT ver 1.23 [ 111.720565][ T6584] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 111.772998][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.817831][ T6589] openvswitch: netlink: Flow key attr not present in new flow. [ 112.109747][ T6596] sctp: [Deprecated]: syz.0.181 (pid 6596) Use of int in max_burst socket option deprecated. [ 112.109747][ T6596] Use struct sctp_assoc_value instead [ 112.212654][ T6599] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 112.221629][ T6599] nbd: couldn't find device at index 1048576 [ 112.914358][ T5876] Bluetooth: hci1: command tx timeout [ 113.550651][ T6664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 113.569938][ T6664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 113.660357][ T6656] syzkaller0: entered promiscuous mode [ 113.684628][ T1213] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.744232][ T6656] syzkaller0: entered allmulticast mode [ 113.886706][ T6674] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 114.258132][ T6694] __nla_validate_parse: 14 callbacks suppressed [ 114.258154][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 114.312339][ T6695] 8021q: VLANs not supported on vcan0 [ 114.382410][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.435368][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.980694][ T6747] netlink: 'syz.4.222': attribute type 11 has an invalid length. [ 115.183232][ T6762] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 115.197741][ T6762] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.289960][ T6770] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 115.567399][ T6787] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 115.575487][ T6787] netlink: 212 bytes leftover after parsing attributes in process `syz.4.233'. [ 115.585074][ T6787] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 115.700371][ T6789] vxcan1: tx address claim with dest, not broadcast [ 115.720606][ T6791] vxcan1: tx address claim with dest, not broadcast [ 115.746682][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 115.788422][ T6789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.798298][ T6789] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.854854][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 115.958591][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.005327][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.109325][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.128470][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.148693][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.159680][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.177084][ T1167] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.188998][ T1167] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.845701][ T6836] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 116.906069][ T6834] netlink: 52 bytes leftover after parsing attributes in process `syz.0.247'. [ 116.907925][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.032893][ T6842] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 117.332649][ T6855] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.345365][ T6863] netlink: 9 bytes leftover after parsing attributes in process `syz.0.252'. [ 117.387633][ T5966] IPVS: starting estimator thread 0... [ 117.405163][ T6863] gretap0: entered promiscuous mode [ 117.432046][ T6855] 0{X: renamed from gretap0 [ 117.481039][ T6855] 0{X: left promiscuous mode [ 117.492947][ T6855] 0{X: entered allmulticast mode [ 117.501938][ T6855] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 117.520724][ T6864] IPVS: using max 27 ests per chain, 64800 per kthread [ 117.673247][ T6877] netlink: 'syz.1.261': attribute type 14 has an invalid length. [ 117.878059][ T6886] sctp: [Deprecated]: syz.2.263 (pid 6886) Use of int in max_burst socket option. [ 117.878059][ T6886] Use struct sctp_assoc_value instead [ 118.821331][ T30] audit: type=1800 audit(1758174937.192:2): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name=BF91 dev="tmpfs" ino=356 res=0 errno=0 [ 118.841630][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.987009][ T6958] netlink: 'syz.0.284': attribute type 12 has an invalid length. [ 119.029824][ T6963] netlink: 'syz.0.284': attribute type 12 has an invalid length. [ 119.074642][ T5876] Bluetooth: hci4: command tx timeout [ 119.202675][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.272997][ T6975] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 119.601893][ T6995] team0: Device gtp1 is of different type [ 119.606990][ T6997] __nla_validate_parse: 4 callbacks suppressed [ 119.607008][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 119.650603][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 119.685776][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 119.710126][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 119.905144][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 119.917787][ T7017] syzkaller1: entered promiscuous mode [ 119.923467][ T7017] syzkaller1: entered allmulticast mode [ 120.233972][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 120.265043][ T7048] nftables ruleset with unbound chain [ 120.829377][ T7035] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 120.842541][ T7035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.308'. [ 120.961925][ T7045] netlink: 204 bytes leftover after parsing attributes in process `syz.1.306'. [ 121.254544][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.317'. [ 121.283892][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 122.130854][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.326'. [ 122.721551][ T7131] ip6gretap0: entered promiscuous mode [ 123.085550][ T30] audit: type=1107 audit(1758174941.462:3): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ج?ډp-:' [ 123.144727][ T7151] netlink: 'syz.2.338': attribute type 21 has an invalid length. [ 123.328037][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 123.472494][ T7170] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.790223][ T5883] IPVS: starting estimator thread 0... [ 123.904758][ T7190] IPVS: using max 25 ests per chain, 60000 per kthread [ 124.327776][ T7209] FAULT_INJECTION: forcing a failure. [ 124.327776][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.349061][ T7209] CPU: 1 UID: 0 PID: 7209 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 124.349090][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.349110][ T7209] Call Trace: [ 124.349119][ T7209] [ 124.349128][ T7209] dump_stack_lvl+0x189/0x250 [ 124.349164][ T7209] ? __pfx____ratelimit+0x10/0x10 [ 124.349186][ T7209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.349211][ T7209] ? __pfx__printk+0x10/0x10 [ 124.349241][ T7209] ? __might_fault+0xb0/0x130 [ 124.349283][ T7209] should_fail_ex+0x414/0x560 [ 124.349321][ T7209] _copy_from_user+0x2d/0xb0 [ 124.349351][ T7209] ___sys_sendmsg+0x158/0x2a0 [ 124.349382][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.349450][ T7209] ? __fget_files+0x2a/0x420 [ 124.349467][ T7209] ? __fget_files+0x3a0/0x420 [ 124.349498][ T7209] __sys_sendmmsg+0x227/0x430 [ 124.349531][ T7209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.349570][ T7209] ? bpf_trace_run2+0x322/0x4b0 [ 124.349622][ T7209] ? rcu_is_watching+0x15/0xb0 [ 124.349649][ T7209] __x64_sys_sendmmsg+0xa0/0xc0 [ 124.349684][ T7209] do_syscall_64+0xfa/0x3b0 [ 124.349707][ T7209] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.349728][ T7209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.349750][ T7209] ? clear_bhb_loop+0x60/0xb0 [ 124.349776][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.349796][ T7209] RIP: 0033:0x7f152c78eba9 [ 124.349819][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.349836][ T7209] RSP: 002b:00007f152d6f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.349862][ T7209] RAX: ffffffffffffffda RBX: 00007f152c9d5fa0 RCX: 00007f152c78eba9 [ 124.349878][ T7209] RDX: 040000000000021c RSI: 00002000000030c0 RDI: 0000000000000003 [ 124.349892][ T7209] RBP: 00007f152d6f5090 R08: 0000000000000000 R09: 0000000000000000 [ 124.349905][ T7209] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.349918][ T7209] R13: 00007f152c9d6038 R14: 00007f152c9d5fa0 R15: 00007ffe0ff0bbe8 [ 124.349952][ T7209] [ 124.653825][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.735022][ T7220] __nla_validate_parse: 10 callbacks suppressed [ 124.735044][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 125.133880][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 125.155324][ T7243] netlink: 'syz.2.363': attribute type 6 has an invalid length. [ 125.626524][ T7232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.633026][ T7232] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 125.649821][ T7232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.667286][ T7266] FAULT_INJECTION: forcing a failure. [ 125.667286][ T7266] name failslab, interval 1, probability 0, space 0, times 1 [ 125.683086][ T7232] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 125.691795][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 125.691822][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.691836][ T7266] Call Trace: [ 125.691844][ T7266] [ 125.691852][ T7266] dump_stack_lvl+0x189/0x250 [ 125.691883][ T7266] ? __pfx____ratelimit+0x10/0x10 [ 125.691906][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.691932][ T7266] ? __pfx__printk+0x10/0x10 [ 125.691970][ T7266] ? __pfx___might_resched+0x10/0x10 [ 125.691996][ T7266] should_fail_ex+0x414/0x560 [ 125.692035][ T7266] should_failslab+0xa8/0x100 [ 125.692070][ T7266] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 125.692101][ T7266] ? __alloc_skb+0x112/0x2d0 [ 125.692131][ T7266] __alloc_skb+0x112/0x2d0 [ 125.692160][ T7266] tipc_msg_build+0x13b/0xcf0 [ 125.692189][ T7266] ? net_generic+0x1e/0x240 [ 125.692224][ T7266] ? __pfx_tipc_msg_build+0x10/0x10 [ 125.692252][ T7266] ? net_generic+0x1e/0x240 [ 125.692282][ T7266] ? net_generic+0x1e/0x240 [ 125.692316][ T7266] ? tipc_group_bc_cong+0x15f/0x210 [ 125.692347][ T7266] tipc_send_group_bcast+0x76c/0xa70 [ 125.692391][ T7266] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 125.692428][ T7266] ? __pfx_woken_wake_function+0x10/0x10 [ 125.692475][ T7266] __tipc_sendmsg+0x2d7/0x2960 [ 125.692509][ T7266] ? process_measurement+0x72d/0x1a40 [ 125.692548][ T7266] ? __pfx___tipc_sendmsg+0x10/0x10 [ 125.692581][ T7266] ? aa_label_sk_perm+0x4cd/0x630 [ 125.692625][ T7266] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 125.692688][ T7266] ? __lock_acquire+0xab9/0xd20 [ 125.692737][ T7266] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.692759][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.692783][ T7266] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.692804][ T7266] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 125.692837][ T7266] tipc_sendmsg+0x55/0x70 [ 125.692859][ T7266] ? __pfx_tipc_sendmsg+0x10/0x10 [ 125.692880][ T7266] __sock_sendmsg+0x21c/0x270 [ 125.692917][ T7266] ____sys_sendmsg+0x52d/0x830 [ 125.692951][ T7266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.692990][ T7266] ? import_iovec+0x74/0xa0 [ 125.693024][ T7266] ___sys_sendmsg+0x21f/0x2a0 [ 125.693055][ T7266] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.693124][ T7266] ? __fget_files+0x2a/0x420 [ 125.693143][ T7266] ? __fget_files+0x3a0/0x420 [ 125.693174][ T7266] __sys_sendmmsg+0x227/0x430 [ 125.693209][ T7266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.693234][ T7266] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 125.693289][ T7266] ? ksys_write+0x22a/0x250 [ 125.693321][ T7266] ? __pfx_ksys_write+0x10/0x10 [ 125.693347][ T7266] ? rcu_is_watching+0x15/0xb0 [ 125.693377][ T7266] __x64_sys_sendmmsg+0xa0/0xc0 [ 125.693408][ T7266] do_syscall_64+0xfa/0x3b0 [ 125.693436][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.693458][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.693480][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 125.693506][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.693527][ T7266] RIP: 0033:0x7f152c78eba9 [ 125.693545][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.693570][ T7266] RSP: 002b:00007f152d6d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.693592][ T7266] RAX: ffffffffffffffda RBX: 00007f152c9d6090 RCX: 00007f152c78eba9 [ 125.693607][ T7266] RDX: 040000000000021c RSI: 00002000000030c0 RDI: 0000000000000003 [ 125.693622][ T7266] RBP: 00007f152d6d4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.693635][ T7266] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.693654][ T7266] R13: 00007f152c9d6128 R14: 00007f152c9d6090 R15: 00007ffe0ff0bbe8 [ 125.693689][ T7266] [ 126.111029][ T7232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.118677][ T7232] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 126.143337][ T7232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.154949][ T7232] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 126.259854][ T7232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.318052][ T7232] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 126.656560][ T7280] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 126.812713][ T7281] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 127.214470][ T7294] bridge0: port 3(dummy0) entered disabled state [ 127.229372][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.237638][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.579557][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.643644][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.894904][ T7294] vlan2: left promiscuous mode [ 127.903499][ T7294] bridge0: left promiscuous mode [ 127.977071][ T7318] tipc: Started in network mode [ 127.982096][ T7318] tipc: Node identity 2e62db3a7a5e, cluster identity 4711 [ 127.994302][ T7318] tipc: Enabled bearer , priority 0 [ 128.011692][ T7324] syzkaller0: entered promiscuous mode [ 128.024163][ T7324] syzkaller0: entered allmulticast mode [ 128.059176][ T1167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.088596][ T1167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.133867][ T1167] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.167408][ T1167] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.295288][ T7232] tipc: Resetting bearer [ 128.358703][ T1167] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.375954][ T1167] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.386741][ T7324] tipc: Resetting bearer [ 128.415065][ T7324] tipc: Disabling bearer [ 128.441337][ T78] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.468270][ T78] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.720451][ T7382] netlink: 312 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.904814][ T7394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.390'. [ 129.030596][ T7407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.069757][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.098266][ T7410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.395'. [ 129.163766][ T7415] macvtap1: entered promiscuous mode [ 129.175082][ T7415] macvtap1: entered allmulticast mode [ 129.205192][ T7415] bond_slave_0: entered promiscuous mode [ 129.211106][ T7415] bond_slave_1: entered promiscuous mode [ 129.246994][ T7415] bond0: entered allmulticast mode [ 129.252248][ T7415] bond_slave_0: entered allmulticast mode [ 129.270358][ T7415] bond_slave_1: entered allmulticast mode [ 129.279282][ T7415] bond0: entered promiscuous mode [ 129.288681][ T7415] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 129.297475][ T7415] team0: Device macvtap1 failed to register rx_handler [ 129.355140][ T7415] bond0: left allmulticast mode [ 129.360152][ T7415] bond_slave_0: left allmulticast mode [ 129.375415][ T7415] bond_slave_1: left allmulticast mode [ 129.381207][ T7415] bond0: left promiscuous mode [ 129.392227][ T7415] bond_slave_0: left promiscuous mode [ 129.397808][ T7415] bond_slave_1: left promiscuous mode [ 129.535094][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'. [ 129.606784][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 130.672266][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 132.636606][ T7508] tipc: Started in network mode [ 132.656028][ T7508] tipc: Node identity c2e4b4d4d387, cluster identity 4711 [ 132.667456][ T7508] tipc: Enabled bearer , priority 0 [ 132.702308][ T7515] syzkaller0: entered promiscuous mode [ 132.727814][ T7515] syzkaller0: entered allmulticast mode [ 132.752349][ T7508] tipc: Resetting bearer [ 132.778083][ T7507] tipc: Resetting bearer [ 132.845003][ T7507] tipc: Disabling bearer [ 133.099719][ T7530] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 133.783418][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 134.202552][ T7586] netlink: 'syz.1.445': attribute type 8 has an invalid length. [ 134.234599][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.249293][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'. [ 134.256133][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.267637][ T7587] delete_channel: no stack [ 134.365888][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.404475][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.412480][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.481279][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.449'. [ 134.512974][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.529996][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.540361][ T7579] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 134.562829][ T7598] batadv0: entered promiscuous mode [ 134.569646][ T7598] batadv_slave_1: entered promiscuous mode [ 134.585927][ T7598] batadv_slave_1: left promiscuous mode [ 134.592046][ T7598] batadv0: left promiscuous mode [ 134.612299][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 134.642244][ T7602] netlink: 186448 bytes leftover after parsing attributes in process `syz.2.449'. [ 134.667760][ T7601] tipc: Started in network mode [ 134.687074][ T7601] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 134.710895][ T7601] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 134.751834][ T7601] tipc: Enabled bearer , priority 10 [ 134.857844][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 134.872613][ T7609] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.453'. [ 134.882565][ T7609] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 135.033354][ T7612] bond2: entered promiscuous mode [ 135.041394][ T7612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.132712][ T7617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.166974][ T7617] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 135.192918][ T7617] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 135.242167][ T7617] bond2: (slave wireguard0): making interface the new active one [ 135.259422][ T7617] wireguard0: entered promiscuous mode [ 135.297545][ T7617] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 135.529956][ T7632] xt_policy: too many policy elements [ 135.732270][ T7638] bond2 (unregistering): Released all slaves [ 135.744179][ T5883] tipc: Node number set to 1 [ 135.811775][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 135.865289][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 136.110833][ T7655] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.466'. [ 136.327477][ T7661] netlink: 'syz.3.468': attribute type 11 has an invalid length. [ 136.336049][ T7661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.468'. [ 136.590181][ T7676] batadv_slave_1: entered promiscuous mode [ 136.620557][ T7675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.474'. [ 136.635435][ T7674] batadv_slave_1: left promiscuous mode [ 136.660162][ T7675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.474'. [ 136.898455][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 137.011384][ T7684] bond2: entered allmulticast mode [ 137.037475][ T7684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.071379][ T7684] bridge0: port 1(bond2) entered blocking state [ 137.084401][ T7684] bridge0: port 1(bond2) entered disabled state [ 137.117593][ T7684] bond2: entered promiscuous mode [ 137.154935][ T7684] bridge0: port 1(bond2) entered blocking state [ 137.161680][ T7684] bridge0: port 1(bond2) entered forwarding state [ 137.240329][ T7678] geneve3: entered promiscuous mode [ 137.245707][ T7678] geneve3: entered allmulticast mode [ 137.316783][ T78] bridge0: port 1(bond2) entered disabled state [ 137.323768][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.351078][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.449484][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.490905][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.525593][ T7700] block nbd1: server does not support multiple connections per device. [ 137.549943][ T7700] block nbd1: shutting down sockets [ 137.734394][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 138.054560][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.675620][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 138.710084][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 138.919330][ T7778] validate_nla: 28 callbacks suppressed [ 138.919349][ T7778] netlink: 'syz.1.506': attribute type 7 has an invalid length. [ 138.960907][ T7779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.505'. [ 138.999906][ T7778] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 139.242689][ T7790] veth5: entered promiscuous mode [ 139.412009][ T7800] team0: No ports can be present during mode change [ 139.481728][ T7765] netlink: 'syz.2.501': attribute type 13 has an invalid length. [ 139.489815][ T7765] netlink: 'syz.2.501': attribute type 17 has an invalid length. [ 139.564339][ T7765] sit0: left promiscuous mode [ 139.687697][ T7765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.423992][ T7844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.609335][ T7858] netlink: 'syz.1.527': attribute type 2 has an invalid length. [ 140.715315][ T7862] vxcan1: tx address claim with dlc 0 [ 141.169184][ T7888] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 141.215333][ T7891] __nla_validate_parse: 3 callbacks suppressed [ 141.215352][ T7891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.537'. [ 141.308383][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 141.476252][ T7901] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 141.689145][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 141.747984][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 141.793813][ T7912] dummy0: left allmulticast mode [ 141.816991][ T7912] dummy0: left promiscuous mode [ 141.829654][ T7912] bridge0: port 3(dummy0) entered disabled state [ 141.850813][ T7912] bridge_slave_1: left allmulticast mode [ 141.861678][ T7912] bridge_slave_1: left promiscuous mode [ 141.870342][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.882923][ T7912] bridge_slave_0: left allmulticast mode [ 141.892733][ T7912] bridge_slave_0: left promiscuous mode [ 141.904340][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.923835][ T7922] IPVS: length: 90 != 8 [ 142.138326][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 142.172996][ T7923] syzkaller1: entered promiscuous mode [ 142.178818][ T7923] syzkaller1: entered allmulticast mode [ 142.337503][ T7942] xt_l2tp: unknown flags: 10 [ 142.480228][ T7952] netlink: 10 bytes leftover after parsing attributes in process `syz.0.559'. [ 142.506244][ T7948] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 142.619264][ T7948] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.743881][ T7960] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 142.920057][ T7976] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 142.930415][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 142.949528][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 142.965775][ T7961] bond5: (slave veth3): Enslaving as an active interface with a down link [ 143.068908][ T7964] veth5: entered promiscuous mode [ 143.095875][ T7964] bond5: (slave veth5): Enslaving as an active interface with a down link [ 143.098794][ T1213] IPVS: starting estimator thread 0... [ 143.144826][ T7948] vlan2: entered allmulticast mode [ 143.150116][ T7948] bond5: entered allmulticast mode [ 143.163988][ T7948] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 143.196946][ T7988] IPVS: using max 25 ests per chain, 60000 per kthread [ 143.215193][ T7985] tipc: Enabled bearer , priority 10 [ 143.234898][ T5876] Bluetooth: hci0: command tx timeout [ 143.435629][ T7997] syzkaller0: entered promiscuous mode [ 143.442640][ T7997] syzkaller0: entered allmulticast mode [ 143.461416][ T8004] net veth1_virt_wifi .: renamed from virt_wifi0 [ 143.502299][ T7997] tipc: Enabled bearer , priority 0 [ 143.571758][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 143.600829][ T8003] bridge: RTM_NEWNEIGH with invalid ether address [ 143.786368][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 143.838121][ T8022] macvtap1: entered promiscuous mode [ 143.843470][ T8022] vlan0: entered promiscuous mode [ 143.867152][ T8022] macvtap1: entered allmulticast mode [ 143.893254][ T8022] vlan0: entered allmulticast mode [ 143.923301][ T8022] veth0_vlan: entered allmulticast mode [ 144.193550][ T8039] netlink: 'syz.1.579': attribute type 5 has an invalid length. [ 144.207479][ T7996] tipc: Resetting bearer [ 144.627304][ T5883] tipc: Node number set to 4084930498 [ 145.423055][ T7996] tipc: Disabling bearer [ 145.437091][ T8039] geneve2: entered promiscuous mode [ 145.442599][ T8039] geneve2: entered allmulticast mode [ 145.495655][ T8016] batadv1: entered allmulticast mode [ 145.587257][ T8041] vlan3: entered allmulticast mode [ 145.592806][ T8041] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 145.620056][ T6767] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 145.650284][ T8062] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 145.664866][ T6767] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 145.673550][ T6767] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 145.768735][ T8066] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.788080][ T8066] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.800670][ T8066] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 145.882979][ T6767] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 145.969027][ T8078] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 146.196517][ T8091] atomic_op ffff888026e71198 conn xmit_atomic 0000000000000000 [ 146.206882][ T8091] veth1_to_bond: entered allmulticast mode [ 146.266550][ T8091] __nla_validate_parse: 4 callbacks suppressed [ 146.266568][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 146.299911][ T8090] veth1_to_bond: left allmulticast mode [ 146.382196][ T8105] tipc: Enabled bearer , priority 0 [ 146.398491][ T8105] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 146.425236][ T8105] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 146.443912][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 146.455542][ T8111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.456969][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.480942][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 146.520834][ T8109] bridge0: port 2(vlan2) entered blocking state [ 146.546102][ T8114] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 146.547584][ T8109] bridge0: port 2(vlan2) entered disabled state [ 146.565947][ T8109] vlan2: entered allmulticast mode [ 146.571247][ T8109] bridge0: entered allmulticast mode [ 146.578478][ T8114] netlink: 224 bytes leftover after parsing attributes in process `syz.2.598'. [ 146.584722][ T8109] vlan2: left allmulticast mode [ 146.587760][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 146.602965][ T8109] bridge0: left allmulticast mode [ 146.638265][ T8116] ip6gre1: entered allmulticast mode [ 146.801781][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 147.432751][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 147.494924][ T1213] tipc: Node number set to 291747028 [ 148.265771][ T8189] netlink: 'syz.0.618': attribute type 12 has an invalid length. [ 148.432824][ T7342] IPVS: starting estimator thread 0... [ 148.472215][ T8194] Bluetooth: MGMT ver 1.23 [ 148.555451][ T8196] IPVS: using max 27 ests per chain, 64800 per kthread [ 148.720798][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 148.753746][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 148.804471][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 149.319336][ T8222] openvswitch: netlink: Unknown nsh attribute 0 [ 149.338586][ T8222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.507312][ T8236] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 149.557574][ T8236] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 149.750844][ T8261] netlink: 'syz.1.642': attribute type 29 has an invalid length. [ 149.779678][ T8261] netlink: 'syz.1.642': attribute type 29 has an invalid length. [ 150.098545][ T8288] netlink: 'syz.4.648': attribute type 21 has an invalid length. [ 150.144349][ T8288] netlink: 'syz.4.648': attribute type 5 has an invalid length. [ 150.188190][ T8296] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.489254][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.514406][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.542808][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.573848][ T8312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.581762][ T8312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.211543][ T8355] IPVS: set_ctl: invalid protocol: 47 172.30.0.1:21 [ 151.463432][ T8371] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 151.514637][ T8371] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 151.599150][ T8373] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.636823][ T8375] __nla_validate_parse: 12 callbacks suppressed [ 151.636843][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.678'. [ 151.639784][ T8373] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.643219][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 151.652495][ T8373] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 151.720175][ T8380] lo speed is unknown, defaulting to 1000 [ 151.801331][ T8380] lo speed is unknown, defaulting to 1000 [ 151.803700][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.681'. [ 151.826675][ T8377] tipc: Enabled bearer , priority 0 [ 151.835790][ T8386] tipc: Enabling of bearer rejected, already enabled [ 151.858233][ T8380] lo speed is unknown, defaulting to 1000 [ 151.866088][ T8377] syzkaller0: entered promiscuous mode [ 151.888196][ T8377] syzkaller0: entered allmulticast mode [ 151.923544][ T8376] tipc: Resetting bearer [ 151.926287][ T8380] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.980332][ T8376] tipc: Disabling bearer [ 152.010904][ T8380] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.080209][ T8380] lo speed is unknown, defaulting to 1000 [ 152.096896][ T8380] lo speed is unknown, defaulting to 1000 [ 152.116287][ T8380] lo speed is unknown, defaulting to 1000 [ 152.148187][ T8380] lo speed is unknown, defaulting to 1000 [ 152.170213][ T8380] lo speed is unknown, defaulting to 1000 [ 152.179245][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.686'. [ 152.292112][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 152.322278][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 152.371755][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'. [ 152.400046][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 152.420494][ T8406] bond1: entered allmulticast mode [ 152.438850][ T8406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.475563][ T8406] bridge0: port 3(bond1) entered blocking state [ 152.491442][ T8406] bridge0: port 3(bond1) entered disabled state [ 152.527209][ T8406] bond1: entered promiscuous mode [ 152.532943][ T8406] bridge0: port 3(bond1) entered blocking state [ 152.539376][ T8406] bridge0: port 3(bond1) entered forwarding state [ 152.572838][ T8405] bond2: entered allmulticast mode [ 152.579004][ T8405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.586604][ T8405] bridge0: port 4(bond2) entered blocking state [ 152.593019][ T8405] bridge0: port 4(bond2) entered disabled state [ 152.602994][ T8405] bond2: entered promiscuous mode [ 152.608833][ T8405] bridge0: port 4(bond2) entered blocking state [ 152.615252][ T8405] bridge0: port 4(bond2) entered forwarding state [ 152.628688][ T8428] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 152.902279][ T1081] bridge0: port 3(bond1) entered disabled state [ 152.943262][ T1081] bridge0: port 4(bond2) entered disabled state [ 153.092851][ T8452] sctp: [Deprecated]: syz.4.699 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.092851][ T8452] Use struct sctp_sack_info instead [ 153.262106][ T8456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.362341][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 153.391576][ T8468] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 153.407233][ T8468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.453680][ T8471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.707'. [ 153.483737][ T8471] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 153.511484][ T8471] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 154.078793][ T8513] openvswitch: netlink: EtherType 0 is less than min 600 [ 154.753126][ T8553] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 155.032159][ T8577] pimreg3: entered allmulticast mode [ 155.056768][ T8575] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 155.072352][ T8575] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 155.456665][ T8613] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 155.491285][ T8613] syzkaller1: entered promiscuous mode [ 155.503992][ T8613] syzkaller1: entered allmulticast mode [ 155.523803][ T8616] netlink: 'syz.2.749': attribute type 83 has an invalid length. [ 155.783557][ T8633] netlink: 'syz.4.754': attribute type 11 has an invalid length. [ 156.619561][ T8698] tc_dump_action: action bad kind [ 156.763731][ T8705] tc_dump_action: action bad kind [ 156.900619][ T8709] tipc: Enabling of bearer rejected, media not registered [ 157.062642][ T8719] netlink: 'syz.4.779': attribute type 3 has an invalid length. [ 157.075935][ T8720] __nla_validate_parse: 18 callbacks suppressed [ 157.075953][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 157.084219][ T8719] netlink: 766 bytes leftover after parsing attributes in process `syz.4.779'. [ 157.186154][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 157.225220][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 157.263696][ T8722] netlink: 'syz.0.781': attribute type 10 has an invalid length. [ 157.312469][ T8722] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 157.527608][ T8741] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.825469][ T8754] netlink: 'syz.1.790': attribute type 21 has an invalid length. [ 157.843677][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 158.021905][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.793'. [ 158.105179][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.794'. [ 158.154749][ T8765] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 158.190172][ T8765] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.309703][ T8777] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.799'. [ 158.440027][ T8783] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 158.445225][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 158.459451][ T8783] netlink: 224 bytes leftover after parsing attributes in process `syz.0.801'. [ 158.483632][ T8781] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 158.511996][ T8781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.542537][ T8790] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 158.980644][ T8805] lo speed is unknown, defaulting to 1000 [ 159.154530][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.162551][ T8814] dvmrp0: entered allmulticast mode [ 159.182951][ T8820] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 159.186893][ T8814] dvmrp0: left allmulticast mode [ 159.285319][ T8820] bridge0: port 3(team0) entered blocking state [ 159.297917][ T8820] bridge0: port 3(team0) entered disabled state [ 159.319871][ T8820] team0: entered allmulticast mode [ 159.332754][ T8820] team_slave_0: entered allmulticast mode [ 159.372407][ T8820] team_slave_1: entered allmulticast mode [ 159.386424][ T8810] netlink: 'syz.1.809': attribute type 5 has an invalid length. [ 159.402372][ T8820] team0: entered promiscuous mode [ 159.410288][ T8820] team_slave_0: entered promiscuous mode [ 159.430524][ T8820] team_slave_1: entered promiscuous mode [ 159.448308][ T8820] bridge0: port 3(team0) entered blocking state [ 159.454776][ T8820] bridge0: port 3(team0) entered listening state [ 159.479371][ T8827] pimreg: entered allmulticast mode [ 159.498019][ T8811] pimreg: left allmulticast mode [ 159.940899][ T8858] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 160.092462][ T8869] gretap0: entered promiscuous mode [ 160.129605][ T8869] 0{X: renamed from gretap0 [ 160.335958][ T8869] 0{X: left promiscuous mode [ 160.341096][ T8869] 0{X: entered allmulticast mode [ 160.349984][ T8869] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 160.426575][ T8873] tipc: Enabling of bearer rejected, failed to enable media [ 160.460502][ T8888] lo speed is unknown, defaulting to 1000 [ 160.975473][ T8913] bridge_slave_0: invalid flags given to default FDB implementation [ 161.083225][ T8917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.610397][ T8952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 161.631047][ T8952] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 161.642432][ T8952] gretap0: entered promiscuous mode [ 161.647907][ T8952] gretap0: entered allmulticast mode [ 161.846435][ T8960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 161.945015][ T8970] 8021q: VLANs not supported on ip6tnl0 [ 162.146792][ T8986] __nla_validate_parse: 20 callbacks suppressed [ 162.146812][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 162.171420][ T8986] netlink: 50 bytes leftover after parsing attributes in process `syz.3.862'. [ 162.182137][ T8986] netlink: 50 bytes leftover after parsing attributes in process `syz.3.862'. [ 162.274984][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.866'. [ 162.841890][ T9030] validate_nla: 3 callbacks suppressed [ 162.841907][ T9030] netlink: 'syz.4.875': attribute type 3 has an invalid length. [ 162.856807][ T9026] netlink: 830 bytes leftover after parsing attributes in process `syz.2.874'. [ 163.148080][ T9049] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 163.190191][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 163.216716][ T9053] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 163.253910][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'. [ 163.618621][ T9080] netlink: 9 bytes leftover after parsing attributes in process `syz.4.890'. [ 163.624436][ T9083] netlink: 5 bytes leftover after parsing attributes in process `syz.4.890'. [ 163.678072][ T9083] 0{X: renamed from gretap0 (while UP) [ 163.713663][ T9083] 0{X: entered allmulticast mode [ 163.732357][ T9083] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 163.787811][ T9080] 0{X: entered promiscuous mode [ 163.802196][ T9080] 0{X: left allmulticast mode [ 164.157570][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 164.682657][ T9146] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 164.807515][ T9166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.815109][ T9166] IPv6: NLM_F_CREATE should be set when creating new route [ 164.973609][ T9177] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 164.992379][ T9177] netlink: 'syz.0.913': attribute type 39 has an invalid length. [ 165.138709][ T9183] netlink: 'syz.3.915': attribute type 3 has an invalid length. [ 166.000453][ T9204] vcan0: entered allmulticast mode [ 166.310704][ T9223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.332065][ T9223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 166.488101][ T9223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.505067][ T9223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 166.560842][ T9246] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 166.643223][ T9223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.657505][ T9223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 166.704636][ T9251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 166.836351][ T9223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.847111][ T9223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 167.021590][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 167.053279][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.123810][ T9165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 167.144204][ T9165] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.172891][ T9165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 167.185117][ T9165] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.274964][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 167.320764][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.414548][ T9289] __nla_validate_parse: 12 callbacks suppressed [ 167.414567][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.434768][ T9290] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.464934][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.491643][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.539493][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.592804][ T9297] netlink: 72 bytes leftover after parsing attributes in process `syz.3.950'. [ 167.644450][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.686551][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.721994][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.753938][ T9289] netlink: 22 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.939395][ T9314] openvswitch: netlink: IP tunnel dst address not specified [ 167.957416][ T9312] netlink: 'syz.3.953': attribute type 21 has an invalid length. [ 167.994430][ T9312] netlink: 'syz.3.953': attribute type 4 has an invalid length. [ 168.011616][ T9317] netlink: 'syz.3.953': attribute type 21 has an invalid length. [ 168.022853][ T9315] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 168.035046][ T9312] netlink: 'syz.3.953': attribute type 5 has an invalid length. [ 168.048615][ T9317] netlink: 'syz.3.953': attribute type 4 has an invalid length. [ 168.056708][ T9317] netlink: 'syz.3.953': attribute type 5 has an invalid length. [ 168.359432][ T9340] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 168.371858][ T9340] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 168.382919][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.390827][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.399128][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.406991][ T9339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.623257][ T9354] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 168.663311][ T9354] macvlan2: entered promiscuous mode [ 168.668892][ T9354] macvlan2: entered allmulticast mode [ 168.676653][ T9354] bond3: entered promiscuous mode [ 168.682491][ T9354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.692279][ T9354] bond3: left promiscuous mode [ 168.953109][ T9367] syzkaller1: entered promiscuous mode [ 168.958926][ T9367] syzkaller1: entered allmulticast mode [ 169.010580][ T9369] xt_l2tp: invalid flags combination: 0 [ 169.157291][ T9376] hsr_slave_0: left promiscuous mode [ 169.171805][ T9376] hsr_slave_1: left promiscuous mode [ 169.276071][ T9388] netlink: 'syz.4.973': attribute type 5 has an invalid length. [ 169.322684][ T9165] tipc: Subscription rejected, illegal request [ 169.360589][ T9391] netlink: 'syz.3.974': attribute type 20 has an invalid length. [ 169.828679][ T9416] veth7: entered promiscuous mode [ 171.049108][ T9493] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 171.098142][ T9503] lo speed is unknown, defaulting to 1000 [ 171.208392][ T9506] GUP no longer grows the stack in syz.3.1008 (9506): 200000006000-200000008000 (200000005000) [ 171.243400][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.3.1008 Not tainted syzkaller #0 PREEMPT(full) [ 171.243432][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.243446][ T9506] Call Trace: [ 171.243455][ T9506] [ 171.243465][ T9506] dump_stack_lvl+0x189/0x250 [ 171.243520][ T9506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.243549][ T9506] ? __pfx__printk+0x10/0x10 [ 171.243578][ T9506] ? find_vma+0xe7/0x160 [ 171.243627][ T9506] __get_user_pages+0x24d0/0x2ce0 [ 171.243653][ T9506] ? __lock_acquire+0xab9/0xd20 [ 171.243726][ T9506] ? __gup_longterm_locked+0xc68/0x1660 [ 171.243765][ T9506] __gup_longterm_locked+0xde9/0x1660 [ 171.243811][ T9506] ? sanity_check_pinned_pages+0x123a/0x1300 [ 171.243851][ T9506] gup_fast_fallback+0x1e6a/0x2010 [ 171.243921][ T9506] ? __pfx_gup_fast_fallback+0x10/0x10 [ 171.243956][ T9506] ? __lock_acquire+0xab9/0xd20 [ 171.243998][ T9506] ? pin_user_pages_fast+0x4d/0xb0 [ 171.244034][ T9506] iov_iter_extract_pages+0x35a/0x5e0 [ 171.244076][ T9506] extract_iter_to_sg+0xe46/0x24e0 [ 171.244119][ T9506] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 171.244144][ T9506] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.244166][ T9506] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.244192][ T9506] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.244216][ T9506] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 171.244246][ T9506] ? __asan_memset+0x22/0x50 [ 171.244275][ T9506] hash_sendmsg+0x4f4/0x11d0 [ 171.244336][ T9506] ? __pfx_hash_sendmsg+0x10/0x10 [ 171.244370][ T9506] __sock_sendmsg+0x21c/0x270 [ 171.244409][ T9506] ____sys_sendmsg+0x52d/0x830 [ 171.244445][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.244486][ T9506] ? import_iovec+0x74/0xa0 [ 171.244521][ T9506] ___sys_sendmsg+0x21f/0x2a0 [ 171.244554][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.244629][ T9506] ? __fget_files+0x2a/0x420 [ 171.244659][ T9506] ? __fget_files+0x3a0/0x420 [ 171.244699][ T9506] __sys_sendmmsg+0x227/0x430 [ 171.244735][ T9506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.244762][ T9506] ? do_futex+0x395/0x420 [ 171.244800][ T9506] ? fd_install+0x97/0x540 [ 171.244857][ T9506] ? rcu_is_watching+0x15/0xb0 [ 171.244888][ T9506] __x64_sys_sendmmsg+0xa0/0xc0 [ 171.244919][ T9506] do_syscall_64+0xfa/0x3b0 [ 171.244942][ T9506] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.244964][ T9506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.244985][ T9506] ? clear_bhb_loop+0x60/0xb0 [ 171.245012][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.245034][ T9506] RIP: 0033:0x7ffb75d8eba9 [ 171.245053][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.245071][ T9506] RSP: 002b:00007ffb76c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.245094][ T9506] RAX: ffffffffffffffda RBX: 00007ffb75fd6090 RCX: 00007ffb75d8eba9 [ 171.245110][ T9506] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 000000000000000c [ 171.245124][ T9506] RBP: 00007ffb75e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.245137][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.245150][ T9506] R13: 00007ffb75fd6128 R14: 00007ffb75fd6090 R15: 00007ffdf86fd958 [ 171.245186][ T9506] [ 172.272009][ T9547] tipc: MTU too low for tipc bearer [ 173.289403][ T9621] __nla_validate_parse: 51 callbacks suppressed [ 173.289424][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 173.317728][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 173.624656][ T9639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.656578][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 173.768541][ T9640] vcan0 (unregistering): left allmulticast mode [ 173.812919][ T9654] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 173.870611][ T9654] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 173.890510][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 173.909945][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 173.928964][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 173.939664][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 173.976831][ T9666] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1048'. [ 173.998910][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 174.019864][ T9667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1046'. [ 174.071380][ T9670] validate_nla: 3 callbacks suppressed [ 174.071399][ T9670] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 174.089372][ T9670] netlink: 'syz.4.1050': attribute type 2 has an invalid length. [ 174.515805][ C1] bridge0: port 3(team0) entered learning state [ 175.154329][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.638529][ T9820] macvlan0: entered promiscuous mode [ 176.664735][ T9820] batadv_slave_0: entered promiscuous mode [ 176.724468][ T9828] bond0: (slave rose0): Error: Device can not be enslaved while up [ 176.912464][ T9851] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 177.340072][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 177.423777][ T9893] raw_sendmsg: syz.3.1112 forgot to set AF_INET. Fix it! [ 177.727508][ T9905] openvswitch: netlink: IPv6 tunnel dst address is zero [ 178.231925][ T9929] netlink: 'syz.0.1123': attribute type 33 has an invalid length. [ 178.263596][ T9929] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 178.298720][ T9933] __nla_validate_parse: 15 callbacks suppressed [ 178.298738][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 178.338895][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 178.367433][ T9942] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 178.380433][ T9937] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1126'. [ 178.505372][ T9952] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 178.576017][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 178.595893][ T9959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1133'. [ 178.647120][ T9955] veth9: entered promiscuous mode [ 178.761753][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 178.830458][ T9967] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 178.906747][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 178.987772][ T9979] team1: entered promiscuous mode [ 178.996538][ T9979] team1: entered allmulticast mode [ 179.326468][T10000] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 179.338428][ T9999] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1145'. [ 179.416799][T10005] sctp: [Deprecated]: syz.1.1146 (pid 10005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.416799][T10005] Use struct sctp_sack_info instead [ 179.486668][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1143'. [ 179.490094][T10010] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1147'. [ 179.508768][T10000] 8021q: adding VLAN 0 to HW filter on device bond8 [ 179.509489][T10005] sctp: [Deprecated]: syz.1.1146 (pid 10005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.509489][T10005] Use struct sctp_sack_info instead [ 179.541861][T10010] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 179.671726][T10020] tipc: Enabling of bearer rejected, already enabled [ 179.691173][T10020] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 179.715666][T10020] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 179.760621][T10020] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 179.911822][T10031] tipc: Enabling of bearer rejected, already enabled [ 179.927671][T10031] syzkaller0: mtu less than device minimum [ 180.253249][T10057] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 180.272675][T10059] delete_channel: no stack [ 180.307697][T10060] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 180.445367][T10070] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 180.482268][T10074] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 180.532001][T10080] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 180.616310][T10070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.658448][T10076] bond3: (slave gretap0): making interface the new active one [ 180.680785][T10076] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 180.775142][T10083] vlan4: entered allmulticast mode [ 180.784096][T10083] bond3: entered allmulticast mode [ 180.800296][T10083] gretap0: entered allmulticast mode [ 180.815652][T10083] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 180.857931][T10095] : renamed from hsr0 [ 181.007861][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.041778][T10103] bridge_slave_1 (unregistering): left allmulticast mode [ 181.063907][T10103] bridge_slave_1 (unregistering): left promiscuous mode [ 181.073455][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.150448][T10106] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 181.439139][T10135] openvswitch: netlink: IP tunnel dst address not specified [ 181.557766][T10141] netlink: 'syz.2.1187': attribute type 3 has an invalid length. [ 181.654425][T10141] nbd1: detected capacity change from 0 to 127 [ 181.666995][ T5876] block nbd1: Receive control failed (result -32) [ 181.756557][T10152] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 182.521239][T10189] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 182.531111][T10189] openvswitch: netlink: Duplicate or invalid key (type 0). [ 182.544526][T10189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.791004][T10212] netlink: 'syz.3.1208': attribute type 7 has an invalid length. [ 182.810988][T10212] netlink: 'syz.3.1208': attribute type 8 has an invalid length. [ 182.929421][T10215] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 182.969208][T10215] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 183.141205][T10235] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 183.280204][T10237] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.292665][T10237] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 183.319127][T10249] __nla_validate_parse: 14 callbacks suppressed [ 183.319146][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 183.610769][T10262] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 183.666921][T10270] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1228'. [ 183.816031][T10282] xt_l2tp: invalid flags combination: 0 [ 183.833993][T10283] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1232'. [ 183.898864][T10285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1231'. [ 184.543837][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 184.661421][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 184.674385][T10338] validate_nla: 1 callbacks suppressed [ 184.674404][T10338] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 184.691290][T10338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1247'. [ 184.920820][T10356] tipc: Enabling of bearer rejected, already enabled [ 184.951401][T10356] tipc: Resetting bearer [ 185.312641][T10377] bridge0: port 4(syz_tun) entered blocking state [ 185.382121][T10377] bridge0: port 4(syz_tun) entered disabled state [ 185.383200][T10385] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 185.393317][T10384] netlink: 'syz.2.1255': attribute type 21 has an invalid length. [ 185.444296][T10384] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1255'. [ 185.459133][T10377] syz_tun: entered allmulticast mode [ 185.511258][T10377] syz_tun: entered promiscuous mode [ 185.549011][T10377] bridge0: port 4(syz_tun) entered blocking state [ 185.556040][T10377] bridge0: port 4(syz_tun) entered listening state [ 185.591288][T10384] netlink: 'syz.2.1255': attribute type 4 has an invalid length. [ 185.599716][T10384] netlink: 'syz.2.1255': attribute type 5 has an invalid length. [ 185.611413][T10384] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1255'. [ 185.622865][T10385] bridge0: port 4(syz_tun) entered disabled state [ 185.629581][T10385] bridge0: port 3(team0) entered disabled state [ 185.636060][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.643789][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.678745][T10385] bridge0: port 4(syz_tun) entered blocking state [ 185.685492][T10385] bridge0: port 4(syz_tun) entered listening state [ 185.692299][T10385] bridge0: port 3(team0) entered blocking state [ 185.698727][T10385] bridge0: port 3(team0) entered listening state [ 185.705422][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.712611][T10385] bridge0: port 2(bridge_slave_1) entered listening state [ 185.720086][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.727409][T10385] bridge0: port 1(bridge_slave_0) entered listening state [ 185.771120][T10385] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.828324][T10404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1265'. [ 186.179142][T10423] team0: No ports can be present during mode change [ 186.225970][T10431] netlink: 'syz.1.1275': attribute type 11 has an invalid length. [ 186.536447][T10448] ip6gre2: entered allmulticast mode [ 186.876731][T10480] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 186.906803][T10480] vlan2: entered promiscuous mode [ 186.912332][T10480] bridge0: entered promiscuous mode [ 187.195205][T10503] tipc: Enabled bearer , priority 10 [ 188.176042][T10560] IPVS: persistence engine module ip_vs_pe_ not found [ 188.342672][T10568] delete_channel: no stack [ 189.072538][T10607] netlink: 'syz.2.1324': attribute type 21 has an invalid length. [ 189.096891][T10607] __nla_validate_parse: 9 callbacks suppressed [ 189.096909][T10607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1324'. [ 189.410406][T10586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1318'. [ 189.498734][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1333'. [ 189.933503][T10673] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.070150][T10680] lo speed is unknown, defaulting to 1000 [ 190.305653][T10695] netlink: zone id is out of range [ 190.341500][T10697] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1349'. [ 190.421776][T10700] netlink: 194116 bytes leftover after parsing attributes in process `syz.3.1351'. [ 190.465530][T10700] netlink: 'syz.3.1351': attribute type 8 has an invalid length. [ 190.739277][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 190.749690][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 190.763049][T10721] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1359'. [ 190.772334][T10721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.866521][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 190.882651][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 191.327934][T10767] netlink: 'syz.4.1371': attribute type 15 has an invalid length. [ 191.549915][T10773] netlink: 'syz.3.1374': attribute type 22 has an invalid length. [ 191.567113][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.597592][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.613428][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.630839][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.639861][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.651721][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.681304][T10773] netlink: 'syz.3.1374': attribute type 22 has an invalid length. [ 191.695834][T10772] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 191.986068][T10800] : renamed from batadv_slave_1 (while UP) [ 192.061301][T10809] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.165569][T10812] macvtap1: entered promiscuous mode [ 192.182773][T10812] macvtap1: entered allmulticast mode [ 192.211443][T10812] bond_slave_0: entered promiscuous mode [ 192.217267][T10812] bond_slave_1: entered promiscuous mode [ 192.262704][T10812] bond0: entered allmulticast mode [ 192.271053][T10812] bond_slave_0: entered allmulticast mode [ 192.324461][T10812] bond_slave_1: entered allmulticast mode [ 192.356218][T10812] bond0: entered promiscuous mode [ 192.367046][T10812] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 192.394349][T10812] team0: Device macvtap1 failed to register rx_handler [ 192.450619][T10812] bond0: left allmulticast mode [ 192.455894][T10812] bond_slave_0: left allmulticast mode [ 192.462701][T10812] bond_slave_1: left allmulticast mode [ 192.471988][T10812] bond0: left promiscuous mode [ 192.477641][T10812] bond_slave_0: left promiscuous mode [ 192.483163][T10812] bond_slave_1: left promiscuous mode [ 192.572493][T10827] erspan0: entered promiscuous mode [ 192.581146][T10827] erspan0: left promiscuous mode [ 192.600758][ T1213] lo speed is unknown, defaulting to 1000 [ 192.787256][T10842] gretap1: entered allmulticast mode [ 193.186474][T10869] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.198919][T10869] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 193.409846][T10882] netlink: 'syz.4.1412': attribute type 4 has an invalid length. [ 193.676120][T10905] tipc: Enabled bearer , priority 0 [ 193.694481][T10905] syzkaller0: entered promiscuous mode [ 193.709510][T10905] syzkaller0: entered allmulticast mode [ 193.756058][T10912] mac80211_hwsim hwsim11 : renamed from wlan1 [ 193.791599][T10905] tipc: Resetting bearer [ 193.800656][T10903] tipc: Resetting bearer [ 193.822135][T10903] tipc: Disabling bearer [ 193.985163][T10921] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 194.045517][T10921] bond5: (slave bridge6): making interface the new active one [ 194.054620][T10921] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 194.222634][T10935] __nla_validate_parse: 26 callbacks suppressed [ 194.222654][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 194.331508][T10943] bond0: entered promiscuous mode [ 194.339895][T10943] bond_slave_0: entered promiscuous mode [ 194.347204][T10943] bond_slave_1: entered promiscuous mode [ 194.510572][T10954] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 194.626707][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 194.722971][T10965] netlink: 167536 bytes leftover after parsing attributes in process `syz.0.1432'. [ 195.293055][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 195.313062][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1445'. [ 195.580620][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 196.039875][T11026] tipc: Enabling of bearer rejected, already enabled [ 196.217463][ T30] audit: type=1107 audit(1758175014.582:4): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2oL-Ri9LƾUh9& S*yFx@d}AwmoaMG@oRSC̖ɡ42s$mW-5*0%j -X.3ܱShm2U(K;'J[0ÁJg)+-2=oԦ [ 196.217463][ T30] YT5ysj-njz_A' [ 196.381357][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 196.465946][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 196.709641][T11079] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1468'. [ 196.754778][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1465'. [ 196.900442][T11083] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 196.935209][T11083] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 197.125995][T11093] vlan3: entered promiscuous mode [ 197.263524][T11098] IPVS: Unknown mcast interface: vcan0 [ 197.343122][T11106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.524922][T11116] netlink: 'syz.0.1482': attribute type 15 has an invalid length. [ 197.557869][ T9595] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 197.557971][T11116] netlink: 'syz.0.1482': attribute type 15 has an invalid length. [ 197.572899][ T9595] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 197.602027][ T9595] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 197.612520][ T9595] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 197.930762][ T30] audit: type=1107 audit(1758175016.302:5): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 198.111713][T11150] netlink: 'syz.0.1493': attribute type 7 has an invalid length. [ 198.203890][T11143] bridge4: entered allmulticast mode [ 198.256150][T11150] netlink: 'syz.0.1493': attribute type 8 has an invalid length. [ 198.393922][T11160] netlink: 'syz.2.1498': attribute type 3 has an invalid length. [ 198.442170][T11163] netlink: 'syz.4.1497': attribute type 11 has an invalid length. [ 198.483868][T11163] netlink: 'syz.4.1497': attribute type 11 has an invalid length. [ 198.493197][ T1081] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.512614][ T1081] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.529573][ T1081] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.539904][T11170] delete_channel: no stack [ 198.546888][ T78] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.713650][T11181] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 198.798890][T11181] 8021q: adding VLAN 0 to HW filter on device bond10 [ 198.808675][T11181] bond9: (slave bond10): making interface the new active one [ 198.816901][T11181] bond9: (slave bond10): Enslaving as an active interface with an up link [ 198.880059][T11181] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 198.936211][T11186] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.409296][T11219] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 199.479733][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.860498][T11232] __nla_validate_parse: 19 callbacks suppressed [ 199.860521][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 199.895861][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 199.925854][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 199.936251][T11247] nbd: couldn't find a device at index -373156329 [ 200.157168][T11255] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 200.226951][T11255] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1526'. [ 200.445638][T11279] net_ratelimit: 33 callbacks suppressed [ 200.445656][T11279] openvswitch: netlink: EtherType 0 is less than min 600 [ 200.454587][T11278] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1533'. [ 200.754216][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 200.761652][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 200.768953][ C1] bridge0: port 3(team0) entered learning state [ 200.776153][ C1] bridge0: port 4(syz_tun) entered learning state [ 201.135856][T11330] tipc: Enabling of bearer rejected, already enabled [ 201.214856][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 201.229904][T11336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1547'. [ 201.239163][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 201.507836][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 201.518016][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 201.553860][T11360] macvlan2: entered promiscuous mode [ 201.560311][T11360] macvlan2: entered allmulticast mode [ 201.562867][T11361] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 201.568717][T11360] bond9: entered promiscuous mode [ 201.581723][T11360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.596738][T11360] bond9: left promiscuous mode [ 201.994962][T11390] batadv0: entered allmulticast mode [ 202.351819][T11415] syz.2.1568 (11415) used obsolete PPPIOCDETACH ioctl [ 202.802197][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.782775][T11496] validate_nla: 2 callbacks suppressed [ 203.782795][T11496] netlink: 'syz.2.1588': attribute type 5 has an invalid length. [ 207.154271][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.114482][ C1] bridge0: port 4(syz_tun) entered forwarding state [ 216.121105][ C1] bridge0: topology change detected, propagating [ 216.127790][ C1] bridge0: port 3(team0) entered forwarding state [ 216.134256][ C1] bridge0: topology change detected, propagating [ 216.140791][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.148036][ C1] bridge0: topology change detected, propagating [ 216.154559][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.161797][ C1] bridge0: topology change detected, propagating [ 260.917506][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.154325][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.357267][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.154637][ T31] INFO: task kworker/0:2:1213 blocked for more than 143 seconds. [ 351.162436][ T31] Not tainted syzkaller #0 [ 351.167601][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.176371][ T31] task:kworker/0:2 state:D stack:24552 pid:1213 tgid:1213 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 351.188719][ T31] Workqueue: events rfkill_sync_work [ 351.194172][ T31] Call Trace: [ 351.197472][ T31] [ 351.200412][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.204957][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.210485][ T31] ? __pfx___schedule+0x10/0x10 [ 351.216022][ T31] ? schedule+0x91/0x360 [ 351.220313][ T31] schedule+0x165/0x360 [ 351.224574][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.230067][ T31] __mutex_lock+0x7e6/0x1350 [ 351.235316][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.240130][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 351.254019][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.285535][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.290825][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.321378][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.328051][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.333827][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 351.339040][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.345413][ T31] rfkill_set_block+0x1d2/0x440 [ 351.350309][ T31] rfkill_sync_work+0x114/0x200 [ 351.355317][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.361146][ T31] process_scheduled_works+0xae1/0x17b0 [ 351.366791][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.372795][ T31] worker_thread+0x8a0/0xda0 [ 351.377677][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.384115][ T31] ? __kthread_parkme+0x7b/0x200 [ 351.389089][ T31] kthread+0x70e/0x8a0 [ 351.393169][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.398432][ T31] ? __pfx_kthread+0x10/0x10 [ 351.403074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.408671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.413910][ T31] ? __pfx_kthread+0x10/0x10 [ 351.418571][ T31] ret_from_fork+0x436/0x7d0 [ 351.423184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.428372][ T31] ? __switch_to_asm+0x39/0x70 [ 351.433163][ T31] ? __switch_to_asm+0x33/0x70 [ 351.438366][ T31] ? __pfx_kthread+0x10/0x10 [ 351.442994][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.447856][ T31] [ 351.450985][ T31] INFO: task kworker/0:16:7342 blocked for more than 143 seconds. [ 351.458843][ T31] Not tainted syzkaller #0 [ 351.463782][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.472701][ T31] task:kworker/0:16 state:D stack:25776 pid:7342 tgid:7342 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 351.484825][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 351.491548][ T31] Call Trace: [ 351.495088][ T31] [ 351.498028][ T31] __schedule+0x1798/0x4cc0 [ 351.502548][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.507973][ T31] ? __pfx___schedule+0x10/0x10 [ 351.512842][ T31] ? schedule+0x91/0x360 [ 351.517138][ T31] schedule+0x165/0x360 [ 351.521302][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.527245][ T31] __mutex_lock+0x7e6/0x1350 [ 351.531872][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.536704][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.542953][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.548228][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.554028][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.559779][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.566300][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.572094][ T31] process_scheduled_works+0xae1/0x17b0 [ 351.577704][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.583700][ T31] worker_thread+0x8a0/0xda0 [ 351.588335][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.594935][ T31] ? __kthread_parkme+0x7b/0x200 [ 351.599884][ T31] kthread+0x70e/0x8a0 [ 351.604009][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.609139][ T31] ? __pfx_kthread+0x10/0x10 [ 351.613738][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.619004][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.624598][ T31] ? __pfx_kthread+0x10/0x10 [ 351.629217][ T31] ret_from_fork+0x436/0x7d0 [ 351.633814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.639010][ T31] ? __switch_to_asm+0x39/0x70 [ 351.643782][ T31] ? __switch_to_asm+0x33/0x70 [ 351.648586][ T31] ? __pfx_kthread+0x10/0x10 [ 351.653189][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.658556][ T31] [ 351.661646][ T31] INFO: task syz.1.1513:11203 blocked for more than 143 seconds. [ 351.669423][ T31] Not tainted syzkaller #0 [ 351.674432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.683118][ T31] task:syz.1.1513 state:D stack:26920 pid:11203 tgid:11203 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 351.695525][ T31] Call Trace: [ 351.698837][ T31] [ 351.701787][ T31] __schedule+0x1798/0x4cc0 [ 351.706331][ T31] ? validate_chain+0x897/0x2140 [ 351.711285][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.716260][ T31] ? __pfx___schedule+0x10/0x10 [ 351.721234][ T31] ? schedule+0x91/0x360 [ 351.725873][ T31] schedule+0x165/0x360 [ 351.730056][ T31] schedule_timeout+0x9a/0x270 [ 351.734902][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 351.740309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.745541][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.750741][ T31] ? wait_for_completion+0x267/0x5d0 [ 351.756320][ T31] wait_for_completion+0x2bf/0x5d0 [ 351.761443][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 351.767326][ T31] ? __flush_work+0xd2/0xbc0 [ 351.771960][ T31] ? __flush_work+0xd2/0xbc0 [ 351.776596][ T31] __flush_work+0x9b9/0xbc0 [ 351.781110][ T31] ? __flush_work+0xd2/0xbc0 [ 351.785992][ T31] ? __pfx___flush_work+0x10/0x10 [ 351.791023][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 351.796468][ T31] ? __pfx___cancel_work+0x10/0x10 [ 351.801615][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 351.807339][ T31] __cancel_work_sync+0xbe/0x110 [ 351.812314][ T31] rfkill_unregister+0x92/0x220 [ 351.817428][ T31] nfc_unregister_device+0x96/0x2a0 [ 351.822669][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 351.828422][ T31] virtual_ncidev_close+0x56/0x90 [ 351.833455][ T31] __fput+0x449/0xa70 [ 351.837525][ T31] task_work_run+0x1d1/0x260 [ 351.842148][ T31] ? __pfx_task_work_run+0x10/0x10 [ 351.847570][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 351.853056][ T31] exit_to_user_mode_loop+0xec/0x110 [ 351.858407][ T31] do_syscall_64+0x2bd/0x3b0 [ 351.863021][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.868243][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.874908][ T31] ? clear_bhb_loop+0x60/0xb0 [ 351.879617][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.886236][ T31] RIP: 0033:0x7f9d1838eba9 [ 351.890653][ T31] RSP: 002b:00007ffebf8bbef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 351.899188][ T31] RAX: 0000000000000000 RBX: 00000000000309c3 RCX: 00007f9d1838eba9 [ 351.907421][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 351.915514][ T31] RBP: 00007f9d185d7da0 R08: 0000000000000001 R09: 00000005bf8bc1ef [ 351.923549][ T31] R10: 0000001b32520000 R11: 0000000000000246 R12: 00007f9d185d5fac [ 351.931570][ T31] R13: 00007f9d185d5fa0 R14: ffffffffffffffff R15: 00007ffebf8bc010 [ 351.939829][ T31] [ 351.942886][ T31] INFO: task syz.4.1567:11408 blocked for more than 144 seconds. [ 351.954812][ T31] Not tainted syzkaller #0 [ 351.959816][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.969310][ T31] task:syz.4.1567 state:D stack:26760 pid:11408 tgid:11407 ppid:5880 task_flags:0x400040 flags:0x00004004 [ 351.981316][ T31] Call Trace: [ 351.984878][ T31] [ 351.987838][ T31] __schedule+0x1798/0x4cc0 [ 351.992439][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.997584][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.002458][ T31] ? __pfx___schedule+0x10/0x10 [ 352.007359][ T31] ? schedule+0x91/0x360 [ 352.011624][ T31] schedule+0x165/0x360 [ 352.015825][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.021389][ T31] __mutex_lock+0x7e6/0x1350 [ 352.026255][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.031027][ T31] ? rfkill_register+0x37/0x8e0 [ 352.035940][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.040981][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 352.046392][ T31] ? device_initialize+0x24b/0x440 [ 352.051514][ T31] rfkill_register+0x37/0x8e0 [ 352.056589][ T31] nfc_register_device+0x14a/0x320 [ 352.061759][ T31] nci_register_device+0x87f/0x9d0 [ 352.066971][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 352.072637][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 352.077975][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 352.083355][ T31] virtual_ncidev_open+0x129/0x1a0 [ 352.088740][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 352.094614][ T31] misc_open+0x2bc/0x330 [ 352.098896][ T31] chrdev_open+0x4cc/0x5e0 [ 352.103325][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.108314][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.115140][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.120120][ T31] do_dentry_open+0x953/0x13f0 [ 352.124974][ T31] vfs_open+0x3b/0x340 [ 352.129061][ T31] ? path_openat+0x2ecd/0x3830 [ 352.133834][ T31] path_openat+0x2ee5/0x3830 [ 352.138470][ T31] ? arch_stack_walk+0xfc/0x150 [ 352.143354][ T31] ? stack_depot_save_flags+0x40/0x860 [ 352.149116][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.154102][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.160205][ T31] do_filp_open+0x1fa/0x410 [ 352.164828][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.169726][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.175109][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.179974][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.184471][ T31] do_sys_openat2+0x121/0x1c0 [ 352.189196][ T31] ? __se_sys_futex+0x36f/0x400 [ 352.194121][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.199436][ T31] ? rcu_is_watching+0x15/0xb0 [ 352.204797][ T31] __x64_sys_openat+0x138/0x170 [ 352.209698][ T31] do_syscall_64+0xfa/0x3b0 [ 352.214298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.219519][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.225624][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.230306][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.236449][ T31] RIP: 0033:0x7fb57d78eba9 [ 352.240897][ T31] RSP: 002b:00007fb57e638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.249362][ T31] RAX: ffffffffffffffda RBX: 00007fb57d9d5fa0 RCX: 00007fb57d78eba9 [ 352.257363][ T31] RDX: 0000000000000002 RSI: 0000200000000d80 RDI: ffffffffffffff9c [ 352.265593][ T31] RBP: 00007fb57d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.273564][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.281810][ T31] R13: 00007fb57d9d6038 R14: 00007fb57d9d5fa0 R15: 00007ffe74b40c68 [ 352.289851][ T31] [ 352.292893][ T31] INFO: task syz.0.1578:11453 blocked for more than 144 seconds. [ 352.300901][ T31] Not tainted syzkaller #0 [ 352.305915][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.314846][ T31] task:syz.0.1578 state:D stack:28328 pid:11453 tgid:11452 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 352.327135][ T31] Call Trace: [ 352.330422][ T31] [ 352.333382][ T31] __schedule+0x1798/0x4cc0 [ 352.337948][ T31] ? kasan_save_free_info+0x46/0x50 [ 352.343182][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.348085][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.352945][ T31] ? __pfx___schedule+0x10/0x10 [ 352.358057][ T31] ? schedule+0x91/0x360 [ 352.362304][ T31] schedule+0x165/0x360 [ 352.366771][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.372262][ T31] __mutex_lock+0x7e6/0x1350 [ 352.376897][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.381682][ T31] ? misc_open+0x51/0x330 [ 352.386281][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.391338][ T31] misc_open+0x51/0x330 [ 352.395567][ T31] chrdev_open+0x4cc/0x5e0 [ 352.400057][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.405051][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.411397][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.416703][ T31] do_dentry_open+0x953/0x13f0 [ 352.421490][ T31] vfs_open+0x3b/0x340 [ 352.425835][ T31] ? path_openat+0x2ecd/0x3830 [ 352.430659][ T31] path_openat+0x2ee5/0x3830 [ 352.435441][ T31] ? arch_stack_walk+0xfc/0x150 [ 352.440363][ T31] ? stack_depot_save_flags+0x40/0x860 [ 352.446193][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.451146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.457277][ T31] do_filp_open+0x1fa/0x410 [ 352.461818][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.466713][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.471775][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.477052][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.481470][ T31] do_sys_openat2+0x121/0x1c0 [ 352.486193][ T31] ? __se_sys_futex+0x36f/0x400 [ 352.491054][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.496331][ T31] ? rcu_is_watching+0x15/0xb0 [ 352.501125][ T31] __x64_sys_openat+0x138/0x170 [ 352.506246][ T31] do_syscall_64+0xfa/0x3b0 [ 352.510761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.516031][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.522122][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.526859][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.532755][ T31] RIP: 0033:0x7f152c78eba9 [ 352.537771][ T31] RSP: 002b:00007f152d6f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.546257][ T31] RAX: ffffffffffffffda RBX: 00007f152c9d5fa0 RCX: 00007f152c78eba9 [ 352.554275][ T31] RDX: 0000000000040241 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 352.562266][ T31] RBP: 00007f152c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.570543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.578544][ T31] R13: 00007f152c9d6038 R14: 00007f152c9d5fa0 R15: 00007ffe0ff0bbe8 [ 352.586597][ T31] [ 352.589653][ T31] INFO: task syz.3.1587:11483 blocked for more than 144 seconds. [ 352.597786][ T31] Not tainted syzkaller #0 [ 352.602740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.611442][ T31] task:syz.3.1587 state:D stack:28328 pid:11483 tgid:11482 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 352.623392][ T31] Call Trace: [ 352.626933][ T31] [ 352.629870][ T31] __schedule+0x1798/0x4cc0 [ 352.634443][ T31] ? kasan_save_free_info+0x46/0x50 [ 352.639669][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.644794][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.649677][ T31] ? __pfx___schedule+0x10/0x10 [ 352.654931][ T31] ? schedule+0x91/0x360 [ 352.659195][ T31] schedule+0x165/0x360 [ 352.663356][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.668846][ T31] __mutex_lock+0x7e6/0x1350 [ 352.673449][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.678259][ T31] ? misc_open+0x51/0x330 [ 352.682629][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.687935][ T31] misc_open+0x51/0x330 [ 352.692112][ T31] chrdev_open+0x4cc/0x5e0 [ 352.696567][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.701522][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.707947][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.712918][ T31] do_dentry_open+0x953/0x13f0 [ 352.718007][ T31] vfs_open+0x3b/0x340 [ 352.722082][ T31] ? path_openat+0x2ecd/0x3830 [ 352.726899][ T31] path_openat+0x2ee5/0x3830 [ 352.731501][ T31] ? arch_stack_walk+0xfc/0x150 [ 352.736399][ T31] ? stack_depot_save_flags+0x40/0x860 [ 352.741886][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.747097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.753195][ T31] do_filp_open+0x1fa/0x410 [ 352.757937][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.762821][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.767915][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.772775][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.777368][ T31] do_sys_openat2+0x121/0x1c0 [ 352.782058][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.787293][ T31] ? exc_page_fault+0x76/0xf0 [ 352.791978][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 352.797315][ T31] __x64_sys_openat+0x138/0x170 [ 352.802176][ T31] do_syscall_64+0xfa/0x3b0 [ 352.806930][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.812149][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.818246][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.822933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.828914][ T31] RIP: 0033:0x7ffb75d8eba9 [ 352.833352][ T31] RSP: 002b:00007ffb76ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.842112][ T31] RAX: ffffffffffffffda RBX: 00007ffb75fd5fa0 RCX: 00007ffb75d8eba9 [ 352.850146][ T31] RDX: 0000000000000800 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 352.858152][ T31] RBP: 00007ffb75e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.866713][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.874756][ T31] R13: 00007ffb75fd6038 R14: 00007ffb75fd5fa0 R15: 00007ffdf86fd958 [ 352.882764][ T31] [ 352.885832][ T31] INFO: task syz.3.1587:11484 blocked for more than 145 seconds. [ 352.893568][ T31] Not tainted syzkaller #0 [ 352.898762][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.907540][ T31] task:syz.3.1587 state:D stack:27816 pid:11484 tgid:11482 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 352.919612][ T31] Call Trace: [ 352.922932][ T31] [ 352.926132][ T31] __schedule+0x1798/0x4cc0 [ 352.930668][ T31] ? kasan_save_free_info+0x46/0x50 [ 352.935953][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.940853][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.945754][ T31] ? __pfx___schedule+0x10/0x10 [ 352.950619][ T31] ? schedule+0x91/0x360 [ 352.955237][ T31] schedule+0x165/0x360 [ 352.959419][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.964928][ T31] __mutex_lock+0x7e6/0x1350 [ 352.969538][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.974552][ T31] ? misc_open+0x51/0x330 [ 352.978929][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.984352][ T31] misc_open+0x51/0x330 [ 352.988537][ T31] chrdev_open+0x4cc/0x5e0 [ 352.992976][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.998253][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 353.004660][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 353.009624][ T31] do_dentry_open+0x953/0x13f0 [ 353.014802][ T31] vfs_open+0x3b/0x340 [ 353.018907][ T31] ? path_openat+0x2ecd/0x3830 [ 353.023724][ T31] path_openat+0x2ee5/0x3830 [ 353.028387][ T31] ? arch_stack_walk+0xfc/0x150 [ 353.033272][ T31] ? stack_depot_save_flags+0x40/0x860 [ 353.038789][ T31] ? __pfx_path_openat+0x10/0x10 [ 353.043738][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.050119][ T31] do_filp_open+0x1fa/0x410 [ 353.054691][ T31] ? __lock_acquire+0xab9/0xd20 [ 353.059591][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 353.064676][ T31] ? _raw_spin_unlock+0x28/0x50 [ 353.069580][ T31] ? alloc_fd+0x64c/0x6c0 [ 353.073986][ T31] do_sys_openat2+0x121/0x1c0 [ 353.078701][ T31] ? __se_sys_futex+0x36f/0x400 [ 353.083567][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 353.090562][ T31] ? rcu_is_watching+0x15/0xb0 [ 353.095445][ T31] __x64_sys_openat+0x138/0x170 [ 353.100385][ T31] do_syscall_64+0xfa/0x3b0 [ 353.105021][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.110230][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.116594][ T31] ? clear_bhb_loop+0x60/0xb0 [ 353.121284][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.127225][ T31] RIP: 0033:0x7ffb75d8eba9 [ 353.131654][ T31] RSP: 002b:00007ffb76c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 353.140098][ T31] RAX: ffffffffffffffda RBX: 00007ffb75fd6090 RCX: 00007ffb75d8eba9 [ 353.148347][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 353.156426][ T31] RBP: 00007ffb75e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 353.164552][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.172527][ T31] R13: 00007ffb75fd6128 R14: 00007ffb75fd6090 R15: 00007ffdf86fd958 [ 353.180779][ T31] [ 353.183815][ T31] INFO: task syz.2.1588:11492 blocked for more than 145 seconds. [ 353.191600][ T31] Not tainted syzkaller #0 [ 353.196786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.205731][ T31] task:syz.2.1588 state:D stack:27736 pid:11492 tgid:11491 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 353.217697][ T31] Call Trace: [ 353.220989][ T31] [ 353.223929][ T31] __schedule+0x1798/0x4cc0 [ 353.228498][ T31] ? kasan_save_free_info+0x46/0x50 [ 353.233726][ T31] ? __lock_acquire+0xab9/0xd20 [ 353.239182][ T31] ? __lock_acquire+0xab9/0xd20 [ 353.244089][ T31] ? __pfx___schedule+0x10/0x10 [ 353.248978][ T31] ? schedule+0x91/0x360 [ 353.253232][ T31] schedule+0x165/0x360 [ 353.257459][ T31] schedule_preempt_disabled+0x13/0x30 [ 353.262932][ T31] __mutex_lock+0x7e6/0x1350 [ 353.267875][ T31] ? __mutex_lock+0x5bb/0x1350 [ 353.272661][ T31] ? misc_open+0x51/0x330 [ 353.277054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 353.282134][ T31] misc_open+0x51/0x330 [ 353.286353][ T31] chrdev_open+0x4cc/0x5e0 [ 353.290802][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 353.296179][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 353.302664][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 353.307862][ T31] do_dentry_open+0x953/0x13f0 [ 353.312669][ T31] vfs_open+0x3b/0x340 [ 353.317049][ T31] ? path_openat+0x2ecd/0x3830 [ 353.321834][ T31] path_openat+0x2ee5/0x3830 [ 353.326676][ T31] ? arch_stack_walk+0xfc/0x150 [ 353.331556][ T31] ? stack_depot_save_flags+0x40/0x860 [ 353.337147][ T31] ? __pfx_path_openat+0x10/0x10 [ 353.342105][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.348217][ T31] do_filp_open+0x1fa/0x410 [ 353.352734][ T31] ? __lock_acquire+0xab9/0xd20 [ 353.357904][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 353.362957][ T31] ? _raw_spin_unlock+0x28/0x50 [ 353.367867][ T31] ? alloc_fd+0x64c/0x6c0 [ 353.372221][ T31] do_sys_openat2+0x121/0x1c0 [ 353.376972][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 353.382235][ T31] ? exc_page_fault+0x76/0xf0 [ 353.387170][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 353.392475][ T31] __x64_sys_openat+0x138/0x170 [ 353.397449][ T31] do_syscall_64+0xfa/0x3b0 [ 353.401993][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.407246][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.413325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 353.418632][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.424616][ T31] RIP: 0033:0x7fe70d38eba9 [ 353.429078][ T31] RSP: 002b:00007fe70e2fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 353.437592][ T31] RAX: ffffffffffffffda RBX: 00007fe70d5d5fa0 RCX: 00007fe70d38eba9 [ 353.445864][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 353.453850][ T31] RBP: 00007fe70d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 353.461869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.469889][ T31] R13: 00007fe70d5d6038 R14: 00007fe70d5d5fa0 R15: 00007ffea77ccb18 [ 353.478201][ T31] [ 353.481275][ T31] [ 353.481275][ T31] Showing all locks held in the system: [ 353.489047][ T31] 1 lock held by khungtaskd/31: [ 353.493928][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 353.503871][ T31] 4 locks held by kworker/0:2/1213: [ 353.509363][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.520387][ T31] #1: ffffc90003cdfbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.532946][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 353.543384][ T31] #3: ffff888078552100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 353.553208][ T31] 2 locks held by getty/5624: [ 353.558095][ T31] #0: ffff88802f7be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.568151][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 353.578308][ T31] 3 locks held by kworker/0:16/7342: [ 353.583606][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.594998][ T31] #1: ffffc9001af0fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.608576][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 353.619955][ T31] 1 lock held by syz.1.1513/11203: [ 353.625455][ T31] #0: ffff888078552100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 353.635512][ T31] 3 locks held by syz.4.1567/11408: [ 353.640731][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.649338][ T31] #1: ffff888053cac100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 353.659311][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 353.669314][ T31] 1 lock held by syz.0.1578/11453: [ 353.674522][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.683029][ T31] 1 lock held by syz.3.1587/11483: [ 353.688422][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.696936][ T31] 1 lock held by syz.3.1587/11484: [ 353.702051][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.710638][ T31] 1 lock held by syz.2.1588/11492: [ 353.716194][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.724728][ T31] 1 lock held by syz-executor/11499: [ 353.730026][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.738523][ T31] 1 lock held by syz-executor/11501: [ 353.743849][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.752702][ T31] 1 lock held by syz-executor/11503: [ 353.758026][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.766512][ T31] 1 lock held by syz-executor/11506: [ 353.771797][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.780548][ T31] 1 lock held by syz-executor/11507: [ 353.785868][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.794382][ T31] 1 lock held by syz-executor/11509: [ 353.799683][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.808437][ T31] 1 lock held by syz-executor/11511: [ 353.813753][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.822301][ T31] 1 lock held by syz-executor/11513: [ 353.827641][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.836558][ T31] 1 lock held by syz-executor/11516: [ 353.841875][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.850406][ T31] 1 lock held by syz-executor/11517: [ 353.855946][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.864853][ T31] 1 lock held by syz-executor/11519: [ 353.870155][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.878662][ T31] 1 lock held by syz-executor/11521: [ 353.884042][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.892540][ T31] 1 lock held by syz-executor/11523: [ 353.898109][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.906606][ T31] 1 lock held by syz-executor/11526: [ 353.911890][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.920396][ T31] 1 lock held by syz-executor/11527: [ 353.926039][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 353.934608][ T31] [ 353.936951][ T31] ============================================= [ 353.936951][ T31] [ 353.945714][ T31] NMI backtrace for cpu 1 [ 353.945731][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 353.945755][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.945768][ T31] Call Trace: [ 353.945775][ T31] [ 353.945784][ T31] dump_stack_lvl+0x189/0x250 [ 353.945817][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.945842][ T31] ? __pfx__printk+0x10/0x10 [ 353.945886][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 353.945921][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 353.945955][ T31] ? __pfx__printk+0x10/0x10 [ 353.945989][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.946026][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 353.946060][ T31] watchdog+0xf93/0xfe0 [ 353.946114][ T31] ? watchdog+0x1de/0xfe0 [ 353.946151][ T31] kthread+0x70e/0x8a0 [ 353.946182][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.946212][ T31] ? __pfx_kthread+0x10/0x10 [ 353.946237][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.946268][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.946283][ T31] ? __pfx_kthread+0x10/0x10 [ 353.946303][ T31] ret_from_fork+0x436/0x7d0 [ 353.946321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 353.946341][ T31] ? __switch_to_asm+0x39/0x70 [ 353.946361][ T31] ? __switch_to_asm+0x33/0x70 [ 353.946380][ T31] ? __pfx_kthread+0x10/0x10 [ 353.946400][ T31] ret_from_fork_asm+0x1a/0x30 [ 353.946432][ T31] [ 353.946438][ T31] Sending NMI from CPU 1 to CPUs 0: [ 354.094004][ C0] NMI backtrace for cpu 0 [ 354.094022][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 354.094042][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.094054][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 354.094085][ C0] Code: 8b 3d f4 65 fe 0b 48 89 de 5b e9 23 a1 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 b0 a0 92 65 8b 15 18 f1 e0 10 81 e2 00 01 ff 00 [ 354.094101][ C0] RSP: 0018:ffffc90000007ce8 EFLAGS: 00000046 [ 354.094118][ C0] RAX: ffffffff81b1cbe3 RBX: 0000000000000000 RCX: ffffffff8de95100 [ 354.094132][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.094143][ C0] RBP: 1ffff110170c5079 R08: ffffffff99b045eb R09: 1ffffffff33608bd [ 354.094157][ C0] R10: dffffc0000000000 R11: fffffbfff33608be R12: ffffffff8de07cd8 [ 354.094170][ C0] R13: ffff8880b86283c8 R14: dffffc0000000000 R15: ffff8880b86283e0 [ 354.094184][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 354.094199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.094212][ C0] CR2: 00005572fcf4f000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 354.094228][ C0] Call Trace: [ 354.094235][ C0] [ 354.094242][ C0] tick_nohz_handler+0x273/0x520 [ 354.094269][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 354.094291][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 354.094321][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 354.094339][ C0] ? read_tsc+0x9/0x20 [ 354.094372][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 354.094407][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 354.094432][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 354.094450][ C0] [ 354.094455][ C0] [ 354.094462][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.094483][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 354.094507][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 354.094522][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 354.094537][ C0] RAX: 64a9f21d1c0c0200 RBX: ffffffff819693f8 RCX: 64a9f21d1c0c0200 [ 354.094551][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9cf1 RDI: ffffffff8be33c00 [ 354.094564][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 354.094578][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a730 [ 354.094592][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 354.094607][ C0] ? do_idle+0x1e8/0x510 [ 354.094630][ C0] default_idle+0x13/0x20 [ 354.094651][ C0] default_idle_call+0x74/0xb0 [ 354.094672][ C0] do_idle+0x1e8/0x510 [ 354.094693][ C0] ? __pfx_do_idle+0x10/0x10 [ 354.094720][ C0] cpu_startup_entry+0x44/0x60 [ 354.094738][ C0] rest_init+0x2de/0x300 [ 354.094763][ C0] start_kernel+0x3a9/0x410 [ 354.094784][ C0] x86_64_start_reservations+0x24/0x30 [ 354.094810][ C0] x86_64_start_kernel+0x143/0x1c0 [ 354.094835][ C0] common_startup_64+0x13e/0x147 [ 354.094870][ C0] [ 354.095096][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 354.095115][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.095143][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.095159][ T31] Call Trace: [ 354.095170][ T31] [ 354.095180][ T31] dump_stack_lvl+0x99/0x250 [ 354.095244][ T31] ? __asan_memcpy+0x40/0x70 [ 354.095277][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.095307][ T31] ? __pfx__printk+0x10/0x10 [ 354.095359][ T31] vpanic+0x281/0x750 [ 354.095393][ T31] ? __pfx_vpanic+0x10/0x10 [ 354.095421][ T31] ? preempt_schedule+0xae/0xc0 [ 354.095448][ T31] ? preempt_schedule_common+0x83/0xd0 [ 354.095480][ T31] panic+0xb9/0xc0 [ 354.095509][ T31] ? __pfx_panic+0x10/0x10 [ 354.095540][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 354.095587][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 354.095627][ T31] watchdog+0xfd2/0xfe0 [ 354.095670][ T31] ? watchdog+0x1de/0xfe0 [ 354.095713][ T31] kthread+0x70e/0x8a0 [ 354.095749][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.095785][ T31] ? __pfx_kthread+0x10/0x10 [ 354.095819][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.095857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.095882][ T31] ? __pfx_kthread+0x10/0x10 [ 354.095915][ T31] ret_from_fork+0x436/0x7d0 [ 354.095945][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 354.095979][ T31] ? __switch_to_asm+0x39/0x70 [ 354.096010][ T31] ? __switch_to_asm+0x33/0x70 [ 354.096043][ T31] ? __pfx_kthread+0x10/0x10 [ 354.096075][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.096129][ T31] [ 354.556151][ T31] Kernel Offset: disabled [ 354.560489][ T31] Rebooting in 86400 seconds..