last executing test programs: 20.211437376s ago: executing program 4 (id=1058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="4eaa0000000000007110a00000e1ffff940000000000000052fed21136ea76d41bbc82b0012e5bb513d839ed0fb8f203644090b1467fe900cba7bbfba643a17a1c9c390a74d3644b6d4b8ce86ecf6af90f1058"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100000000000000000002000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000400)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/244, 0xf4, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f000000f1c0), r7) sendmsg$FOU_CMD_DEL(r7, &(0x7f000000f300)={0x0, 0x0, &(0x7f000000f2c0)={&(0x7f000000f200)={0x40, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000014}, 0x4098) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/74, 0x304000, 0x1000, 0x7}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r10, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendto$ax25(r10, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) socket$netlink(0x10, 0x3, 0x7) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x10, r12, 0x80000000}, 0x10) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) 19.888476559s ago: executing program 4 (id=1063): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) 19.864226842s ago: executing program 2 (id=1064): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x3ff, 0x7, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x88, 0x3, 'f'}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x0, 0x8, 0x8, 0x8000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, r1}, 0x38) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r0, {0xfff4, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x1, 0x1, 0x2}}]}}]}, 0x44}}, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000008000000ff000000faffffff00200000b3360ac7ac78d3e1280275f60edf0edd065a0d68214b599e8e0b8a261c59ed8ff85a3b99daa01a1cd247a8ddca6733ab38e3a404e44089e4e213976275d623278910007b64bd264f7f5ce33915363440111063113357fcda5316d9d05eaaf8d7e4a17a739ec30cf6c6710515b23dd7d76d4dfce803000000402ed8660e85a1993de878680d6a9da117023fdc8138dbfe1206f6585cae5cd43b2a1300"/191, @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="02000000000000000300"/28], 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000180)={@xdp={0x2c, 0xc, r11, 0x5}, {&(0x7f0000000080)=""/249, 0xf9}, &(0x7f0000000000), 0x7f}, 0xa0) (async, rerun: 32) sendmsg$sock(r7, &(0x7f0000000740)={&(0x7f0000000400)=@in={0x2, 0x4e20, @private=0xa010102}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)="418e0c", 0x3}, {&(0x7f00000004c0)="3b096ec1ad9fcffbf3c303a145fda0b29ebe5fd3f7785f2a32f58cd216a463a2ea5ff701ba40a93fe1b5707a3f6f1ba3a672ddb22ef9f81a70bd950f5879392e8b6f51c43861d199b9218874770ea6d83a8717d55359c84a62c336a5574d40874b942ca7924e724b8fdf10f38fdd8798a646151b800188ce5d321b56169ba6879323b474db3d9e9c975877f7193559d47338333315ca64df09d31b90178887800e4b2579db844d0b11569559d73bef7bddfc5c2774de73cc549a6ebc2e691b99c25c29d05c3fee7393d3efb0c935a1a6d1f38f96b72daf8fcbd926d598993e3924cb942fa703", 0xe6}], 0x2, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x885}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0xffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xc0}, 0x20000004) (rerun: 32) 19.791572558s ago: executing program 4 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x1d, 0x3, 0x8) 19.449571402s ago: executing program 2 (id=1072): r0 = socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) 19.296840509s ago: executing program 2 (id=1073): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20], 0x20}}, 0x48040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="652d5a58b96325edf88ea4a3f1d6e6ad92b981d81dc61fd2", @ANYBLOB="000329bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r3, 0x0, 0x30845aa81b581fea) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12, @ANYBLOB="55a8332e3fc71dba46db4f5b1e89872e2d2fd7fa0e617b1a98e323343530b31422876e1e058a96d64793c03d2dc962d040f4fc12bf03899a4af6933edc3ea530edf9d59e35b1072eef81ccf347345fbde8580a00"/93], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 18.871335526s ago: executing program 3 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a400030000003400ac00135ec1fefc4f5ba6be6c1af4ea7e19da007981ee1bce56c1bd23c1d1ae6eb6a5682a7927bc133d5be7d045b94f1146c608001400", @ANYRESDEC=r0, @ANYBLOB="a3a5bf2218ef0b5e773da3ebed7e661b5580f8d58d0a64829cfd28"], 0xa0}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x1e, 0x3, 0x3}}]}, 0x120}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x1, r7, 0x0, r5}, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x28}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f"], 0x40}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x9361, 0x6) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_ct={0x2c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff0000, 0x8, 0xd, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0x100006, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x93, 0x0, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x4b, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x814}, 0x800) 18.732658309s ago: executing program 0 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0xfffffff8, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 18.440920433s ago: executing program 4 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc074) r2 = socket(0xa, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES32=r2], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18.300755464s ago: executing program 3 (id=1082): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20140", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @local, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@mcast1, @remote]}]}}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000340)) unshare(0x2c060000) unshare(0x24020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 18.300179626s ago: executing program 2 (id=1083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xe0, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x31}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x63}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8f}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) epoll_create1(0x0) (async, rerun: 64) socket$kcm(0x2, 0x5, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="665d7f3b4cbb1804ad87d6c6880a000000000000631122f4ffffff0018000000004d0100d8000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0x1f, r7}]}, 0x44}}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000480)={0x0, 0x0, 0xa9, "7a78afd8510d03973729293ccfdc20f010a146a4d620cf7eb204a96e50e3488e204d09dc2fe84166c5fff309cae62bb3a9f97b6ac9407a23968564e950c4bf8257bdadf9e107d50f15147dbaaa0d791361a48c144ae68d5aefb47ed020b52b45a146a9169cbd6236c17a3f51badfd083d3f4bf8a53315303706334494be5ebc8858d535375f357ea27bf2d7941807da7d2d5296788b8247882499056ac38144a9eb1244f81bf473499"}, 0xb1) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000400)=0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) 18.223268393s ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) 18.193387341s ago: executing program 1 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r0}, 0x38) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x1ce0ef95c5c0bdc8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb18, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x850, 0x888, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb78) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, r3, 0x41514000) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xc000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000300000000000000", @ANYRES32=r5, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120008000100", @ANYRES32=r5, @ANYBLOB="06000e00ffffff7f"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x3) 18.057788743s ago: executing program 4 (id=1086): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/24, 0x18}], 0x2, &(0x7f0000000140)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x3, &(0x7f00000022c0)=""/171, 0xab}, 0x7}, {{&(0x7f0000002380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002400)=""/246, 0xf6}, {&(0x7f0000002500)=""/241, 0xf1}], 0x2, &(0x7f0000002640)=""/156, 0x9c}, 0x2}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f00000027c0)=""/21, 0x15}, {&(0x7f0000002800)=""/53, 0x35}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/84, 0x54}, {&(0x7f00000038c0)=""/11, 0xb}, {&(0x7f0000003900)=""/95, 0x5f}, {&(0x7f0000003980)=""/132, 0x84}, {&(0x7f0000003a40)=""/71, 0x47}, {&(0x7f0000003ac0)=""/105, 0x69}], 0xa, &(0x7f0000003c00)=""/174, 0xae}, 0x8}], 0x4, 0x40000060, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003e40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000003f40)={&(0x7f0000003dc0), 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x70, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x14}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x100080c0}, 0x4044001) accept(r1, &(0x7f0000003f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004000)=0x80) (async) r4 = accept(r1, &(0x7f0000003f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004000)=0x80) getsockname$packet(r4, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004080)=0x14) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000040c0), &(0x7f0000004100)=0x4) (async) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000040c0), &(0x7f0000004100)=0x4) pipe(&(0x7f0000004140)) (async) pipe(&(0x7f0000004140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000004180)={0x80fb, 0x2}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004200), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7fff, 0x5]}]}, 0x20}}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000004300), &(0x7f0000004340)=0x8) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000004380)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0xffff7fff, 0x4, 0x7, 0x0, 0x4, 0x100000, r5}) socket$inet_sctp(0x2, 0x5, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004440)={0x0, 0x200}, &(0x7f0000004480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000044c0)={0x4, 0xf, 0x7250, 0x44, r9}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000044c0)={0x4, 0xf, 0x7250, 0x44, r9}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000004500), r1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000004540)={0x9}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000004580)={0x3}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000004580)={0x3}, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000045c0)={r9, 0x5, 0x8001, 0x8, 0x4, 0x1}, &(0x7f0000004600)=0x14) sendto$inet(r6, &(0x7f0000004640)="25ee248376c8342c726c0983c8ba1cb5e8a38625e2a71cb76c702b99b9744b3cea8242d32b4392dbe88cd47e0774406d26c14a192655613e463c", 0x3a, 0x40810, &(0x7f0000004680)={0x2, 0x4e22, @loopback}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f00000046c0)={0x7, 0x7, 0x3}, &(0x7f0000004700)=0x28) setsockopt(r1, 0x3, 0xadaa, &(0x7f0000004740)="5526959f8e0efebc08a513c008365a951339f7e3f28e6dbf7632547b1bd2cf6cc4af5f696cc6fb702278b18300beb5dc15d582a7664d2c7ce290cd69b8f65b", 0x3f) (async) setsockopt(r1, 0x3, 0xadaa, &(0x7f0000004740)="5526959f8e0efebc08a513c008365a951339f7e3f28e6dbf7632547b1bd2cf6cc4af5f696cc6fb702278b18300beb5dc15d582a7664d2c7ce290cd69b8f65b", 0x3f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004880)={&(0x7f0000004780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0xb, [@ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x5, 0x8, 0x0, 0x6, 0x4, [{0x6, 0x23}, {0xc, 0x2}, {0xa, 0xe}, {0xb, 0xd}, {0xf, 0xffffffff}, {0xa, 0x2}, {0xf, 0x7}, {0x3, 0x6}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f0000004840)=""/11, 0x97, 0xb, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000004900), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x4c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x4c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 18.05699642s ago: executing program 2 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r1, 0x4c466994d56c53cd, 0x70bd28}, 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x823d, 0x3, 0x8, 0x3, 0x10, 0xfbff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xc806, 0xff19, 0x3, 0xf, 0x10, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x4, 0x1, 0x1, 0x1, 0x3, 0x12, 0x2, 0x3, 0xb, 0xc, 0x4, 0x48, 0x0, 0x0, 0x36, 0x3, 0x12, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x9, 0xcc, 0x7ff, 0xc24, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0x1ff, 0x6, 0x1, 0x7, 0x8, 0x9, 0x1]}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) 17.956507323s ago: executing program 2 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000001000000ff01000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x130}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 17.7814091s ago: executing program 0 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2001000030b43b96626b88d2285d5232ea9ed30007012bbd7000fedbdf0416303b9fd8d635dc2813bba04e8b149d25037cbd3141af"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x9, 0x5, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x8000, 0x5350810b, 0x5764}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 17.196542688s ago: executing program 3 (id=1090): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x3fe, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b40200005100000061114c0000000000080000000000f96b3e2b010000950000c3395a2584bb3dc23951ea65239e8c6e03d65900fcc7c1ad0672cf56575f95930e162ad99eecef03ce3f3f45c7c96dae57409e864674e09c7329671a4ae00256cc9fa00d0dfcf26cff6bf9f25862bf74652c9e8df6e683686373b965ea948a91cc4f9e3ba588"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0x6, 0xfffffffffffffff7}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={r0, r2, 0x401, 0xca, &(0x7f0000000180)="6c8907847862b68c2bf123f59cd5c19db5027bd7eac5012b496166f3016d67573d22e435d6a691f24779398544a68b2c435d3d87390968d78ebb774514cb3ac783f72b880246950c5f932a57742fce0a013ee35c1032ef675d320570a64e975d8b33e9fd07c10e5a88faa5f8e7e85e0fb77525d0201d1feb7f6992f826e869cf665fe2d220adb03fea1b212f997c59c82106a484990fdbaf918c895ed608203c064a5f98e8696de50a8a4a7e9396c21b2fdb4f92a3d9c5a16b1248b144609c9b88e4bc09b44900af57b4", 0x8, 0xb4, 0x7, 0x1, 0x81, 0x1, 0x67, 'syz0\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) r7 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendto$packet(r7, &(0x7f0000000080)="24785466124cebc6c81c38c136a9", 0xe, 0x4000040, &(0x7f00000001c0)={0x11, 0xf8, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) r8 = socket(0x22, 0x5, 0x4) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r9 = socket(0x2a, 0x5, 0x2) getsockopt(r9, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0xb) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}, 0x500}], 0x1, 0x4040000) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0xb169, 0x9, 0xfffffffd, 0x4, 0x9, 0x8, 0x20000, 0xfff, 0xffff, 0x8000, 0x7, 0x4, 0x8, 0x6, 0x5, 0x5, 0xfffffffd, 0x2400, 0x3, 0x9, 0xede, 0x80000000}}) 17.15095612s ago: executing program 1 (id=1091): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x40040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r6, 0x29, 0x80, 0x2, 0x1, 0x1, @local, @empty, 0x7, 0x18, 0x8, 0xfffffff9}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) close(r4) 17.005284664s ago: executing program 0 (id=1092): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.812741705s ago: executing program 3 (id=1093): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x5, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x2f0, 0x138, 0x0, 0x0, 0x0, 0x0, 0x258, 0x1f0, 0x1f0, 0x258, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@ttl={{0x28}, {0x1, 0x5}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xf801, 0x7ffffffd, 0x7bd, '\x00', 'syz0\x00', {0x1000}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_batadv\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x7]}, {0x0, [], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x350) 16.811966818s ago: executing program 0 (id=1094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0x40000, 0x8000000009ffffc}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0xfffffffffffffff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc815}, 0x811) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x140e, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x4000004) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$ax25(r0, &(0x7f0000000580)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000009c0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x4, 0xf10, 0x5, 0x7ff, 0x8, 0x8}, {0x4, 0x4, 0x8, 0x9, 0x7bf}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073790531000000000800270072786500140033006970766c616e30000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000200)={0x20}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x55}, 0x50) 16.735255347s ago: executing program 3 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000b40)={&(0x7f0000000100), 0xc, &(0x7f0000000b00)={&(0x7f0000000140)={0x28, r6, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='.', 0x1, 0x801, 0x0, 0x0) 16.601019269s ago: executing program 3 (id=1096): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth0_to_team\x00', 0x4000}) 16.416898429s ago: executing program 1 (id=1097): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0xa00, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x4, 0x0, {0x9}}, 0x14}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0xb4, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18400}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8b324}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x400}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xbde}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x17b}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc5f}, @IFLA_MAP={0x24, 0xe, {0x6, 0x6, 0x76d, 0x331, 0x0, 0x78}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0xa00, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) (async) unshare(0x6a040000) (async) socket(0x8, 0x3, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x4, 0x0, {0x9}}, 0x14}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0xb4, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18400}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8b324}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x400}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xbde}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x17b}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc5f}, @IFLA_MAP={0x24, 0xe, {0x6, 0x6, 0x76d, 0x331, 0x0, 0x78}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) (async) 15.922418848s ago: executing program 0 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x1, @default, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES16=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) 15.745508852s ago: executing program 0 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_mtu=0x2}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc55115de70782e9c}, 0x48080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f00000000c0)="bdd1238d8cf5d86c0e8ef102cc6ced73526d439d6e54303efbccd8e7dd39bf88e869a72bf70e85") sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8001}}]}}]}, 0x84}}, 0x20000000) 15.516781s ago: executing program 1 (id=1100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) recvmmsg(r0, &(0x7f0000000500), 0x0, 0x2040, &(0x7f0000000540)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/89, 0x59}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2}}], 0x2, 0x10000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40440c0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x5, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x40d7}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x34ff, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xb, 0x49, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6", 0x5}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) sendto$llc(r2, &(0x7f0000000300)="8e4403c991697ac3a791238124cc89355c7a000228cd954039a00585240ad1aa4173b54e8d704b9c277c3bec82edfcb3154f477e13ec133e136a4549ea8ef6acc642973287483123cb63de12898cfc49ba493de2b490f01d4eb0cd0b93ff058c6371d2c53ed355f8e0117b8ac38117d39b07aefc8f92003f668a75ed884f6af6c616c5d962fadf4e6013d613877f0b69326c40c7b14a114ed7f71ce0b2672a368d", 0xa1, 0x10, &(0x7f0000000480)={0x1a, 0x335, 0x15, 0x6b, 0x0, 0x1, @multicast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="791e32581be0b3a8fa4278be0bd847c821b16e831b424c4ae8073425cc65daf2fe84638c7f2c0146157e28a54597ec1416f32d1fcd8d1df70249b66b92210c740a6a43958280ec6ad481afeabbe09fb27e2b9ea5d963ee0769955bbef28841077f20406c09f8feffc84f09ef088e259f940d7832f1fc89cd1504ae525184854de2fdc9e32fe1d411bdce4da30ec71ffbc1839eebe5d7553b9294410af5da9ac8eafe23875f99573e", 0xa8}, {&(0x7f0000000700)}, {&(0x7f0000003140)="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", 0x346}], 0x3}}], 0x1, 0x480e0) 15.483801862s ago: executing program 1 (id=1101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bf28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5, 0x1000000}, 0x20) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd995", 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = accept4$alg(r4, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001", @ANYRESHEX=r10], 0x114}], 0x1}, 0x40c2) listen(r10, 0xa1) close(r10) listen(0xffffffffffffffff, 0x0) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001380)}}], 0x1, 0x800) read$alg(r9, &(0x7f0000002300)=""/4128, 0x1020) 15.313827026s ago: executing program 1 (id=1102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$FICLONE(r0, 0x40049409, r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) (async) ioctl$FICLONE(r0, 0x40049409, r0) (async) 2.116521251s ago: executing program 32 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000001000000ff01000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x130}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 2.072022831s ago: executing program 33 (id=1086): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/24, 0x18}], 0x2, &(0x7f0000000140)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x3, &(0x7f00000022c0)=""/171, 0xab}, 0x7}, {{&(0x7f0000002380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002400)=""/246, 0xf6}, {&(0x7f0000002500)=""/241, 0xf1}], 0x2, &(0x7f0000002640)=""/156, 0x9c}, 0x2}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f00000027c0)=""/21, 0x15}, {&(0x7f0000002800)=""/53, 0x35}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/84, 0x54}, {&(0x7f00000038c0)=""/11, 0xb}, {&(0x7f0000003900)=""/95, 0x5f}, {&(0x7f0000003980)=""/132, 0x84}, {&(0x7f0000003a40)=""/71, 0x47}, {&(0x7f0000003ac0)=""/105, 0x69}], 0xa, &(0x7f0000003c00)=""/174, 0xae}, 0x8}], 0x4, 0x40000060, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003e40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000003f40)={&(0x7f0000003dc0), 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x70, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x14}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x100080c0}, 0x4044001) accept(r1, &(0x7f0000003f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004000)=0x80) (async) r4 = accept(r1, &(0x7f0000003f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004000)=0x80) getsockname$packet(r4, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004080)=0x14) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000040c0), &(0x7f0000004100)=0x4) (async) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000040c0), &(0x7f0000004100)=0x4) pipe(&(0x7f0000004140)) (async) pipe(&(0x7f0000004140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000004180)={0x80fb, 0x2}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004200), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7fff, 0x5]}]}, 0x20}}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000004300), &(0x7f0000004340)=0x8) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000004380)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0xffff7fff, 0x4, 0x7, 0x0, 0x4, 0x100000, r5}) socket$inet_sctp(0x2, 0x5, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004440)={0x0, 0x200}, &(0x7f0000004480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000044c0)={0x4, 0xf, 0x7250, 0x44, r9}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000044c0)={0x4, 0xf, 0x7250, 0x44, r9}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000004500), r1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000004540)={0x9}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000004580)={0x3}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000004580)={0x3}, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000045c0)={r9, 0x5, 0x8001, 0x8, 0x4, 0x1}, &(0x7f0000004600)=0x14) sendto$inet(r6, &(0x7f0000004640)="25ee248376c8342c726c0983c8ba1cb5e8a38625e2a71cb76c702b99b9744b3cea8242d32b4392dbe88cd47e0774406d26c14a192655613e463c", 0x3a, 0x40810, &(0x7f0000004680)={0x2, 0x4e22, @loopback}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f00000046c0)={0x7, 0x7, 0x3}, &(0x7f0000004700)=0x28) setsockopt(r1, 0x3, 0xadaa, &(0x7f0000004740)="5526959f8e0efebc08a513c008365a951339f7e3f28e6dbf7632547b1bd2cf6cc4af5f696cc6fb702278b18300beb5dc15d582a7664d2c7ce290cd69b8f65b", 0x3f) (async) setsockopt(r1, 0x3, 0xadaa, &(0x7f0000004740)="5526959f8e0efebc08a513c008365a951339f7e3f28e6dbf7632547b1bd2cf6cc4af5f696cc6fb702278b18300beb5dc15d582a7664d2c7ce290cd69b8f65b", 0x3f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004880)={&(0x7f0000004780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0xb, [@ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x5, 0x8, 0x0, 0x6, 0x4, [{0x6, 0x23}, {0xc, 0x2}, {0xa, 0xe}, {0xb, 0xd}, {0xf, 0xffffffff}, {0xa, 0x2}, {0xf, 0x7}, {0x3, 0x6}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f0000004840)=""/11, 0x97, 0xb, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000004900), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x4c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x4c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 1.060951759s ago: executing program 34 (id=1096): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth0_to_team\x00', 0x4000}) 30.071683ms ago: executing program 35 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8919, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_mtu=0x2}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc55115de70782e9c}, 0x48080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f00000000c0)="bdd1238d8cf5d86c0e8ef102cc6ced73526d439d6e54303efbccd8e7dd39bf88e869a72bf70e85") sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8001}}]}}]}, 0x84}}, 0x20000000) 0s ago: executing program 36 (id=1102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$FICLONE(r0, 0x40049409, r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) (async) ioctl$FICLONE(r0, 0x40049409, r0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 83.714419][ T5816] cgroup: Unknown subsys name 'net' [ 83.824303][ T5816] cgroup: Unknown subsys name 'cpuset' [ 83.833087][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.636406][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.126230][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.135514][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.143598][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.171684][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.179713][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.220115][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.231286][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.239265][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.258197][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.266517][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.311786][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.320167][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.330403][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.339765][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.348168][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.422335][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.432064][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.451697][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.460633][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.480984][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.489306][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.540814][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.557041][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.572327][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.581391][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.913505][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.102841][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.309920][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.325896][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.335221][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.344247][ T5828] bridge_slave_0: entered allmulticast mode [ 89.351831][ T5828] bridge_slave_0: entered promiscuous mode [ 89.400500][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.408104][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.416019][ T5828] bridge_slave_1: entered allmulticast mode [ 89.424507][ T5828] bridge_slave_1: entered promiscuous mode [ 89.480593][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.488370][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.496075][ T5832] bridge_slave_0: entered allmulticast mode [ 89.505133][ T5832] bridge_slave_0: entered promiscuous mode [ 89.544522][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.559937][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.573095][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.582965][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.591231][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.598572][ T5832] bridge_slave_1: entered allmulticast mode [ 89.606413][ T5832] bridge_slave_1: entered promiscuous mode [ 89.703078][ T5828] team0: Port device team_slave_0 added [ 89.761525][ T5828] team0: Port device team_slave_1 added [ 89.781409][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.833961][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.843684][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.852242][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.860005][ T5835] bridge_slave_0: entered allmulticast mode [ 89.867676][ T5835] bridge_slave_0: entered promiscuous mode [ 89.875790][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.900873][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.908384][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.935399][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.976910][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.984571][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.992666][ T5835] bridge_slave_1: entered allmulticast mode [ 89.999798][ T5835] bridge_slave_1: entered promiscuous mode [ 90.024967][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.032071][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.059370][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.082358][ T5832] team0: Port device team_slave_0 added [ 90.143522][ T5832] team0: Port device team_slave_1 added [ 90.181434][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.191031][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.198658][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.206702][ T5837] bridge_slave_0: entered allmulticast mode [ 90.214518][ T5837] bridge_slave_0: entered promiscuous mode [ 90.222043][ T52] Bluetooth: hci0: command tx timeout [ 90.258315][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.287778][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295366][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.301079][ T52] Bluetooth: hci1: command tx timeout [ 90.303266][ T5837] bridge_slave_1: entered allmulticast mode [ 90.315895][ T5837] bridge_slave_1: entered promiscuous mode [ 90.336659][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.343995][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.372038][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.383237][ T52] Bluetooth: hci2: command tx timeout [ 90.394751][ T5828] hsr_slave_0: entered promiscuous mode [ 90.402113][ T5828] hsr_slave_1: entered promiscuous mode [ 90.442630][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.452345][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.479777][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.507145][ T5835] team0: Port device team_slave_0 added [ 90.540856][ T52] Bluetooth: hci3: command tx timeout [ 90.552552][ T5835] team0: Port device team_slave_1 added [ 90.558911][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.566920][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.574469][ T5838] bridge_slave_0: entered allmulticast mode [ 90.582278][ T5838] bridge_slave_0: entered promiscuous mode [ 90.592790][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.606062][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.620389][ T52] Bluetooth: hci4: command tx timeout [ 90.652752][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.660745][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.668022][ T5838] bridge_slave_1: entered allmulticast mode [ 90.675724][ T5838] bridge_slave_1: entered promiscuous mode [ 90.730862][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.738175][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.765847][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.824104][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.831264][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.858759][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.889510][ T5832] hsr_slave_0: entered promiscuous mode [ 90.896013][ T5832] hsr_slave_1: entered promiscuous mode [ 90.903263][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 90.909393][ T5832] Cannot create hsr debugfs directory [ 90.917195][ T5837] team0: Port device team_slave_0 added [ 90.955390][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.968255][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.979200][ T5837] team0: Port device team_slave_1 added [ 91.101622][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.108960][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.136614][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.163504][ T5838] team0: Port device team_slave_0 added [ 91.192627][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.200108][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.226170][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.267774][ T5838] team0: Port device team_slave_1 added [ 91.288728][ T5835] hsr_slave_0: entered promiscuous mode [ 91.295380][ T5835] hsr_slave_1: entered promiscuous mode [ 91.302048][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 91.308148][ T5835] Cannot create hsr debugfs directory [ 91.390647][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.397915][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.424653][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.437482][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.444931][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.472549][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.567791][ T5837] hsr_slave_0: entered promiscuous mode [ 91.575177][ T5837] hsr_slave_1: entered promiscuous mode [ 91.581827][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 91.587677][ T5837] Cannot create hsr debugfs directory [ 91.738269][ T5838] hsr_slave_0: entered promiscuous mode [ 91.745309][ T5838] hsr_slave_1: entered promiscuous mode [ 91.752081][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 91.757831][ T5838] Cannot create hsr debugfs directory [ 91.859162][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.873121][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.911152][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.951725][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.095631][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.138105][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.149665][ T1219] cfg80211: failed to load regulatory.db [ 92.156199][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.189827][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.285821][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.300507][ T52] Bluetooth: hci0: command tx timeout [ 92.320397][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.332972][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.344134][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.380552][ T52] Bluetooth: hci1: command tx timeout [ 92.444065][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.462263][ T52] Bluetooth: hci2: command tx timeout [ 92.474993][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.489484][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.512534][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.589591][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.620469][ T52] Bluetooth: hci3: command tx timeout [ 92.632434][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.683403][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.696632][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.700466][ T52] Bluetooth: hci4: command tx timeout [ 92.714362][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.733116][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.747479][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.754964][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.770262][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.777701][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.792458][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.803682][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.854595][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.863846][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.871093][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.917355][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.924503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.973284][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.028464][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.035750][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.105745][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.113002][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.236166][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.348433][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.361382][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.425301][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.432691][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.459256][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.472980][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.496287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.503500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.544677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.552032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.603836][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.611221][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.768574][ T5828] veth0_vlan: entered promiscuous mode [ 93.779487][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.792651][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.805592][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.828142][ T5828] veth1_vlan: entered promiscuous mode [ 94.005112][ T5828] veth0_macvtap: entered promiscuous mode [ 94.035699][ T5828] veth1_macvtap: entered promiscuous mode [ 94.083554][ T5832] veth0_vlan: entered promiscuous mode [ 94.089562][ T5835] veth0_vlan: entered promiscuous mode [ 94.117016][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.147757][ T5832] veth1_vlan: entered promiscuous mode [ 94.163252][ T5835] veth1_vlan: entered promiscuous mode [ 94.189240][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.226763][ T1088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.266805][ T1088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277677][ T1088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.292495][ T1088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.344798][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.384293][ T52] Bluetooth: hci0: command tx timeout [ 94.405654][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.419800][ T5832] veth0_macvtap: entered promiscuous mode [ 94.434698][ T5832] veth1_macvtap: entered promiscuous mode [ 94.459023][ T5835] veth0_macvtap: entered promiscuous mode [ 94.466393][ T52] Bluetooth: hci1: command tx timeout [ 94.517896][ T5835] veth1_macvtap: entered promiscuous mode [ 94.544464][ T52] Bluetooth: hci2: command tx timeout [ 94.552217][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.566021][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.581839][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.607291][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.632654][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.684186][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.701138][ T52] Bluetooth: hci3: command tx timeout [ 94.716147][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727508][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750907][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.758964][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.775463][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.795259][ T52] Bluetooth: hci4: command tx timeout [ 94.795438][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.829596][ T1342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839068][ T1342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849784][ T1342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858768][ T1342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.876824][ T5838] veth0_vlan: entered promiscuous mode [ 94.930145][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.972666][ T5838] veth1_vlan: entered promiscuous mode [ 95.095564][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.109458][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.147370][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.155947][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.244276][ T5837] veth0_vlan: entered promiscuous mode [ 95.262095][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.268084][ T5837] veth1_vlan: entered promiscuous mode [ 95.277748][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.336115][ T5838] veth0_macvtap: entered promiscuous mode [ 95.383882][ T5838] veth1_macvtap: entered promiscuous mode [ 95.405511][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.417888][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.503666][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.590335][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.622887][ T5837] veth0_macvtap: entered promiscuous mode [ 95.691961][ T5837] veth1_macvtap: entered promiscuous mode [ 95.713149][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.756237][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779904][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803442][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.857544][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.984505][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 96.025957][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.159666][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194381][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.218553][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.262882][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284433][ T5967] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 96.305864][ T5975] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 96.463308][ T52] Bluetooth: hci0: command tx timeout [ 96.503861][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.513587][ T5983] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 96.527294][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.550988][ T52] Bluetooth: hci1: command tx timeout [ 96.622099][ T5986] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.636463][ T52] Bluetooth: hci2: command tx timeout [ 96.752303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.790626][ T52] Bluetooth: hci3: command tx timeout [ 96.800296][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.848520][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 96.864256][ T52] Bluetooth: hci4: command tx timeout [ 96.892040][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.946845][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 96.979566][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.988684][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.041436][ T5993] Zero length message leads to an empty skb [ 97.091819][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.123831][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.352371][ T6004] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 97.367831][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.660081][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.946914][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 98.173391][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.247054][ T6034] openvswitch: netlink: Unknown nsh attribute 0 [ 98.278818][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.301627][ T6044] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 98.441903][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 98.456190][ T6052] tipc: Trying to set illegal importance in message [ 98.508934][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 98.594211][ T6046] veth3: entered promiscuous mode [ 98.664791][ T6051] caif0: entered promiscuous mode [ 98.715721][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 98.761892][ T6072] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.904377][ T6080] netlink: 'syz.1.35': attribute type 39 has an invalid length. [ 99.134892][ T6086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.169369][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.177983][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.714494][ T6111] syzkaller0: entered promiscuous mode [ 99.720664][ T6111] syzkaller0: entered allmulticast mode [ 100.089400][ T6124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.311562][ T6128] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 101.313769][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.322229][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.346346][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.353617][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.362048][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.369361][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.387763][ T6141] __nla_validate_parse: 4 callbacks suppressed [ 101.387851][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 101.391914][ T6128] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.399535][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 101.530661][ T6141] tipc: Started in network mode [ 101.535902][ T6141] tipc: Node identity 9612cc426b0b, cluster identity 4711 [ 101.567742][ T6141] tipc: Enabled bearer , priority 0 [ 101.594274][ T6141] syzkaller0: MTU too low for tipc bearer [ 101.600149][ T6141] tipc: Disabling bearer [ 101.775335][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 101.922471][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 101.960494][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 101.990176][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 102.021563][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 102.182251][ T6177] syzkaller1: entered promiscuous mode [ 102.187977][ T6177] syzkaller1: entered allmulticast mode [ 102.626256][ T6202] IPVS: set_ctl: invalid protocol: 72 0.0.0.2:20002 [ 102.703433][ T6205] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 102.713440][ T6205] bond1: option packets_per_slave: allowed values 0 - 65535 [ 102.720988][ T6211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.70'. [ 102.789715][ T6205] bond1 (unregistering): Released all slaves [ 102.836522][ T6216] tipc: Started in network mode [ 102.841705][ T6216] tipc: Node identity 266e3991f352, cluster identity 4711 [ 102.849658][ T6216] tipc: Enabled bearer , priority 0 [ 102.857937][ T6216] syzkaller0: entered promiscuous mode [ 102.864117][ T6216] syzkaller0: entered allmulticast mode [ 102.876679][ T6216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.008581][ T6223] tipc: Resetting bearer [ 103.051340][ T6215] tipc: Resetting bearer [ 103.123081][ T6230] delete_channel: no stack [ 103.149026][ T6215] tipc: Disabling bearer [ 103.376765][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 103.472702][ T6246] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.068915][ T6272] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 104.077495][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.89'. [ 104.096638][ T6272] team0: Port device geneve0 added [ 104.997551][ T6298] netlink: 'syz.2.96': attribute type 15 has an invalid length. [ 105.271451][ T6314] netlink: 'syz.1.102': attribute type 29 has an invalid length. [ 105.434667][ T6321] netlink: 'syz.1.102': attribute type 29 has an invalid length. [ 105.435979][ T6320] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 105.655428][ T6323] can: request_module (can-proto-3) failed. [ 106.339216][ T6361] vlan2: entered promiscuous mode [ 106.358267][ T6361] geneve1: entered promiscuous mode [ 106.426149][ T6361] vlan2: entered allmulticast mode [ 106.475986][ T6361] geneve1: entered allmulticast mode [ 106.742884][ T6381] team0: No ports can be present during mode change [ 107.134289][ T6404] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 107.398863][ T6421] __nla_validate_parse: 6 callbacks suppressed [ 107.398884][ T6421] netlink: 220 bytes leftover after parsing attributes in process `syz.3.132'. [ 107.548720][ T6426] xt_l2tp: v2 doesn't support IP mode [ 107.671081][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.136'. [ 107.689833][ T6433] openvswitch: netlink: Flow key attr not present in new flow. [ 107.824370][ T6442] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 107.875836][ T6442] bond1 (unregistering): Released all slaves [ 107.936850][ T6445] ip6tnl1: entered promiscuous mode [ 107.942383][ T6445] ip6tnl1: entered allmulticast mode [ 108.030836][ T6444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.137'. [ 108.837672][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 108.856035][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 108.896182][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 109.025306][ T6465] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 109.061500][ T6465] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 109.063698][ T6464] netlink: 'syz.3.144': attribute type 4 has an invalid length. [ 109.077807][ T6464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.144'. [ 109.294519][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'. [ 109.320475][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.328069][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.653375][ T6491] IPv6: Can't replace route, no match found [ 109.683552][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.697314][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.829798][ T6464] `: renamed from bond0 (while UP) [ 109.870545][ T5977] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.897087][ T5977] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.007173][ T5977] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.071002][ T5977] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.287388][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 110.287605][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 110.652691][ T1157] nci: nci_rx_work: unknown MT 0x7 [ 110.752834][ T6548] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 110.774225][ T6550] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 110.787897][ T6550] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.007061][ T6561] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 111.817736][ T6587] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 112.059455][ T6604] warning: `syz.0.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.389426][ T6616] netlink: 'syz.3.187': attribute type 21 has an invalid length. [ 112.407741][ T6616] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.424035][ T6616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.431532][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 112.438962][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 112.446732][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 112.491705][ T6621] bridge: RTM_NEWNEIGH with unconfigured vlan 18 on bridge0 [ 112.733728][ T6634] syz.0.189: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.796186][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 112.796215][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.796236][ T6634] Call Trace: [ 112.796246][ T6634] [ 112.796255][ T6634] dump_stack_lvl+0x189/0x250 [ 112.796296][ T6634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.796323][ T6634] ? __pfx__printk+0x10/0x10 [ 112.796346][ T6634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.796382][ T6634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.796413][ T6634] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 112.796444][ T6634] warn_alloc+0x214/0x310 [ 112.796473][ T6634] ? stack_depot_save_flags+0x41b/0x860 [ 112.796506][ T6634] ? __pfx_warn_alloc+0x10/0x10 [ 112.796534][ T6634] ? kasan_save_track+0x3e/0x80 [ 112.796561][ T6634] ? __kasan_kmalloc+0x93/0xb0 [ 112.796591][ T6634] ? xsk_setsockopt+0x4dc/0x8d0 [ 112.796613][ T6634] ? do_sock_setsockopt+0x17c/0x1b0 [ 112.796631][ T6634] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 112.796648][ T6634] ? do_syscall_64+0xfa/0xfa0 [ 112.796672][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.796702][ T6634] __vmalloc_node_range_noprof+0x125/0x12d0 [ 112.796764][ T6634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.796793][ T6634] ? __kasan_kmalloc+0x93/0xb0 [ 112.796826][ T6634] vmalloc_user_noprof+0xad/0xf0 [ 112.796858][ T6634] ? xskq_create+0xbf/0x170 [ 112.796883][ T6634] xskq_create+0xbf/0x170 [ 112.796908][ T6634] xsk_init_queue+0xb0/0x110 [ 112.796936][ T6634] xsk_setsockopt+0x4dc/0x8d0 [ 112.796962][ T6634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.796985][ T6634] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.797015][ T6634] ? aa_sock_opt_perm+0xff/0x1b0 [ 112.797049][ T6634] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 112.797067][ T6634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.797092][ T6634] do_sock_setsockopt+0x17c/0x1b0 [ 112.797116][ T6634] __x64_sys_setsockopt+0x13f/0x1b0 [ 112.797143][ T6634] do_syscall_64+0xfa/0xfa0 [ 112.797166][ T6634] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.797192][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.797210][ T6634] ? clear_bhb_loop+0x60/0xb0 [ 112.797233][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.797252][ T6634] RIP: 0033:0x7fe9fb78f6c9 [ 112.797269][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.797284][ T6634] RSP: 002b:00007fe9fc586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.797305][ T6634] RAX: ffffffffffffffda RBX: 00007fe9fb9e5fa0 RCX: 00007fe9fb78f6c9 [ 112.797317][ T6634] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 112.797329][ T6634] RBP: 00007fe9fb811f91 R08: 0000000000000004 R09: 0000000000000000 [ 112.797340][ T6634] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.797351][ T6634] R13: 00007fe9fb9e6038 R14: 00007fe9fb9e5fa0 R15: 00007ffe37600088 [ 112.797395][ T6634] [ 112.797404][ T6634] Mem-Info: [ 112.837601][ T6639] __nla_validate_parse: 9 callbacks suppressed [ 112.837620][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 112.916438][ T6634] active_anon:5995 inactive_anon:0 isolated_anon:0 [ 112.916438][ T6634] active_file:2372 inactive_file:39878 isolated_file:0 [ 112.916438][ T6634] unevictable:768 dirty:99 writeback:0 [ 112.916438][ T6634] slab_reclaimable:10444 slab_unreclaimable:95337 [ 112.916438][ T6634] mapped:29041 shmem:1356 pagetables:1185 [ 112.916438][ T6634] sec_pagetables:0 bounce:0 [ 112.916438][ T6634] kernel_misc_reclaimable:0 [ 112.916438][ T6634] free:1333771 free_pcp:16475 free_cma:0 [ 112.998448][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 113.095551][ T6634] Node 0 active_anon:23880kB inactive_anon:0kB active_file:9488kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116164kB dirty:396kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11844kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 113.290856][ T6634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 113.321959][ T6649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.365946][ T6634] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.460424][ T6634] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 113.499309][ T6634] Node 0 DMA32 free:1438228kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23900kB inactive_anon:0kB active_file:9488kB inactive_file:159324kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:41060kB local_pcp:19028kB free_cma:0kB [ 113.552047][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 113.616045][ T6634] lowmem_reserve[]: 0 0 0 0 0 [ 113.650148][ T6634] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.754389][ T6634] lowmem_reserve[]: 0 0 0 0 0 [ 113.759296][ T6634] Node 1 Normal free:3883540kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22784kB local_pcp:9184kB free_cma:0kB [ 113.800392][ T6634] lowmem_reserve[]: 0 0 0 0 0 [ 113.805863][ T6634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.835553][ T6669] netlink: 108 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.858799][ T6634] Node 0 DMA32: 422*4kB (UM) 264*8kB (UME) 37*16kB (UME) 53*32kB (UM) 28*64kB (UM) 13*128kB (UME) 6*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 4*2048kB (ME) 344*4096kB (M) = 1438024kB [ 113.899690][ T6669] netlink: 108 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.936798][ T6669] netlink: 108 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.940456][ T6634] Node 0 [ 113.947429][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.970863][ T6634] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.997298][ T6634] Node 1 Normal: 181*4kB (UE) 52*8kB (UME) 44*16kB (UME) 73*32kB (UME) 19*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3883540kB [ 114.036686][ T6669] syzkaller0: entered promiscuous mode [ 114.042830][ T6634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.060778][ T6634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.070039][ T6669] syzkaller0: entered allmulticast mode [ 114.075419][ T6634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.087885][ T6634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.098203][ T6634] 43605 total pagecache pages [ 114.139273][ T6634] 0 pages in swap cache [ 114.159010][ T6634] Free swap = 124996kB [ 114.177422][ T6634] Total swap = 124996kB [ 114.184560][ T6634] 2097051 pages RAM [ 114.193742][ T6634] 0 pages HighMem/MovableOnly [ 114.199405][ T6634] 424119 pages reserved [ 114.206931][ T6634] 0 pages cma reserved [ 114.236036][ T6687] tipc: Enabled bearer , priority 0 [ 114.245831][ T6687] syzkaller0: entered promiscuous mode [ 114.259685][ T6687] syzkaller0: entered allmulticast mode [ 114.311046][ T6687] tipc: Resetting bearer [ 114.334036][ T6685] tipc: Resetting bearer [ 114.359506][ T6685] tipc: Disabling bearer [ 114.378998][ T6690] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 114.404328][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 114.472702][ T6691] netlink: 'syz.2.209': attribute type 3 has an invalid length. [ 114.503133][ T6693] syzkaller0: entered promiscuous mode [ 114.508926][ T6693] syzkaller0: entered allmulticast mode [ 114.518956][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 114.524940][ T6694] tipc: Started in network mode [ 114.535049][ T6694] tipc: Node identity , cluster identity 4711 [ 114.544392][ T6694] tipc: Failed to obtain node identity [ 114.556600][ T6697] openvswitch: netlink: IP tunnel dst address not specified [ 114.565787][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 114.576389][ T6693] tipc: Started in network mode [ 114.583122][ T6693] tipc: Node identity , cluster identity 4711 [ 114.595374][ T6693] tipc: Failed to obtain node identity [ 114.601933][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 115.482788][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 116.323729][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.474785][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.991514][ T6769] syzkaller1: entered promiscuous mode [ 116.997328][ T6769] syzkaller1: entered allmulticast mode [ 117.973447][ T6822] __nla_validate_parse: 4 callbacks suppressed [ 117.973466][ T6822] netlink: 92 bytes leftover after parsing attributes in process `syz.1.247'. [ 118.017560][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 118.367946][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 118.621333][ T6856] Bluetooth: MGMT ver 1.23 [ 118.668618][ T6856] netlink: 104 bytes leftover after parsing attributes in process `syz.3.255'. [ 119.327811][ T6893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.730600][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 119.828710][ T6912] Illegal XDP return value 4294967274 on prog (id 48) dev N/A, expect packet loss! [ 120.166017][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 120.827429][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.3.278'. [ 120.862158][ T6957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.578899][ T6998] IPVS: length: 118 != 24 [ 122.284170][ T7033] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20001 [ 122.464255][ T7004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.495289][ T7004] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 122.556759][ T7045] trusted_key: syz.4.302 sent an empty control message without MSG_MORE. [ 122.610542][ T7004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.629220][ T7004] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 122.699363][ T7004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.742989][ T7004] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 122.750058][ T7054] netlink: 'syz.4.304': attribute type 1 has an invalid length. [ 122.843278][ T7004] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.849234][ T7004] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 122.879133][ T7055] bond1: (slave geneve2): making interface the new active one [ 122.889138][ T7055] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 122.915651][ T5977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.938534][ T5977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.938734][ T7063] netlink: 1 bytes leftover after parsing attributes in process `syz.3.305'. [ 122.950091][ T5977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.967744][ T5977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 123.363527][ T7076] tipc: Enabling of bearer rejected, failed to enable media [ 124.081191][ T7103] : renamed from hsr0 (while UP) [ 124.452507][ T7117] tipc: Enabled bearer , priority 0 [ 124.487817][ T7117] syzkaller0: entered promiscuous mode [ 124.520341][ T7117] syzkaller0: entered allmulticast mode [ 124.686791][ T7116] tipc: Resetting bearer [ 124.845792][ T7116] tipc: Disabling bearer [ 124.876861][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 125.028738][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'. [ 125.493299][ T7170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.335'. [ 125.561429][ T7174] syzkaller0: entered promiscuous mode [ 125.590339][ T7174] syzkaller0: entered allmulticast mode [ 125.868331][ T7183] netlink: 88 bytes leftover after parsing attributes in process `syz.4.340'. [ 126.144293][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 126.350490][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 126.533539][ T7219] netlink: 'syz.2.349': attribute type 7 has an invalid length. [ 126.546438][ T7221] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 126.695553][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.351'. [ 126.775488][ T7226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.351'. [ 126.867348][ T7231] macvtap1: entered promiscuous mode [ 126.917196][ T7231] vlan0: entered promiscuous mode [ 126.927579][ T7231] macvtap1: entered allmulticast mode [ 126.947694][ T7231] vlan0: entered allmulticast mode [ 126.957844][ T7231] veth0_vlan: entered allmulticast mode [ 127.021337][ T7226] gretap1: entered promiscuous mode [ 127.030313][ T7226] gretap1: entered allmulticast mode [ 127.096454][ T7245] netlink: 'syz.2.355': attribute type 17 has an invalid length. [ 127.105243][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 127.141387][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 127.212267][ T7247] x_tables: duplicate entry at hook 2 [ 127.391208][ T7245] erspan0: entered promiscuous mode [ 127.469647][ T7245] erspan0: left promiscuous mode [ 127.585740][ T7251] : entered promiscuous mode [ 127.675095][ T7269] tipc: Enabled bearer , priority 0 [ 127.686314][ T7269] syzkaller0: entered promiscuous mode [ 127.706157][ T7269] syzkaller0: entered allmulticast mode [ 127.744318][ T7269] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.799121][ T7269] tipc: Resetting bearer [ 127.842686][ T7277] netlink: 'syz.0.362': attribute type 21 has an invalid length. [ 127.869821][ T7268] tipc: Resetting bearer [ 127.941186][ T7268] tipc: Disabling bearer [ 127.989711][ T5977] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.997596][ T7277] netlink: 'syz.0.362': attribute type 21 has an invalid length. [ 128.145339][ T5977] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.175035][ T5977] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.214508][ T5977] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.917762][ T7312] nbd: must specify an index to disconnect [ 129.214031][ T5904] IPVS: starting estimator thread 0... [ 129.311471][ T7318] IPVS: using max 24 ests per chain, 57600 per kthread [ 130.180336][ T7316] netlink: 'syz.3.373': attribute type 5 has an invalid length. [ 130.346441][ T7327] __nla_validate_parse: 4 callbacks suppressed [ 130.346460][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 130.940093][ T7354] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 131.064533][ T7353] syzkaller0: entered promiscuous mode [ 131.078105][ T7353] syzkaller0: entered allmulticast mode [ 131.326098][ T7360] bond0: (slave gretap1): making interface the new active one [ 131.368550][ T7360] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 131.879320][ T7395] macvtap1: entered promiscuous mode [ 131.897219][ T7395] vlan0: entered promiscuous mode [ 131.922434][ T7395] macvtap1: entered allmulticast mode [ 131.928092][ T7395] vlan0: entered allmulticast mode [ 131.985106][ T7395] veth0_vlan: entered allmulticast mode [ 132.055100][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 132.104024][ T7410] netem: change failed [ 132.659514][ T7436] netlink: 401 bytes leftover after parsing attributes in process `syz.2.398'. [ 132.716784][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 132.744084][ T7436] netlink: 401 bytes leftover after parsing attributes in process `syz.2.398'. [ 132.921098][ T7441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.400'. [ 132.938057][ T7448] netlink: 76 bytes leftover after parsing attributes in process `syz.3.400'. [ 133.105313][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113436][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 133.124291][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324614][ T7468] netlink: 64 bytes leftover after parsing attributes in process `syz.3.405'. [ 133.347236][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 134.396835][ T7517] tunl0: entered promiscuous mode [ 134.423317][ T7517] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 134.729265][ T7534] netlink: 'syz.0.423': attribute type 17 has an invalid length. [ 134.745070][ T7476] infiniband syû: set active [ 134.793715][ T7476] infiniband syû: added bond_slave_0 [ 134.823313][ T7476] syû: rxe_create_cq: returned err = -12 [ 134.850702][ T7476] infiniband syû: Couldn't create ib_mad CQ [ 134.858129][ T7476] infiniband syû: Couldn't open port 1 [ 134.947952][ T7476] RDS/IB: syû: added [ 134.954978][ T7476] smc: adding ib device syû with port count 1 [ 134.962165][ T7476] smc: ib device syû port 1 has no pnetid [ 160.636256][ T7584] __nla_validate_parse: 5 callbacks suppressed [ 160.636275][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 160.663995][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 160.697697][ T7588] netlink: 'syz.2.430': attribute type 9 has an invalid length. [ 160.712711][ T7588] netlink: 'syz.2.430': attribute type 11 has an invalid length. [ 160.731209][ T7588] netlink: 'syz.2.430': attribute type 12 has an invalid length. [ 160.752610][ T7588] netlink: 210060 bytes leftover after parsing attributes in process `syz.2.430'. [ 160.790077][ T7586] bond1 (unregistering): Released all slaves [ 160.990838][ T7608] netlink: 'syz.4.436': attribute type 28 has an invalid length. [ 161.033315][ T7608] netlink: 'syz.4.436': attribute type 3 has an invalid length. [ 161.082021][ T7609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.122646][ T7608] netlink: 132 bytes leftover after parsing attributes in process `syz.4.436'. [ 161.555888][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.442'. [ 161.577145][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.585387][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.966326][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 161.993700][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 162.039074][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 162.054917][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.071995][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.083769][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.100400][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.703594][ T7665] tipc: Enabling of bearer rejected, failed to enable media [ 163.191056][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 163.243036][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 163.555570][ T7710] netlink: 'syz.1.467': attribute type 22 has an invalid length. [ 163.611977][ T7710] netlink: 'syz.1.467': attribute type 22 has an invalid length. [ 163.626044][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.627713][ T7715] netlink: 'syz.4.469': attribute type 7 has an invalid length. [ 163.650330][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.695614][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.707354][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.542615][ T7762] syzkaller0: entered promiscuous mode [ 164.563713][ T7762] syzkaller0: entered allmulticast mode [ 164.647243][ T7762] tipc: Started in network mode [ 164.652945][ T7762] tipc: Node identity 6aec03b1c678, cluster identity 4711 [ 164.686882][ T7762] tipc: Enabled bearer , priority 0 [ 164.733363][ T7756] tipc: Resetting bearer [ 164.836848][ T7756] tipc: Disabling bearer [ 165.289697][ T7787] vlan2: entered promiscuous mode [ 165.324625][ T7787] vlan2: entered allmulticast mode [ 165.344514][ T7787] hsr_slave_1: entered allmulticast mode [ 165.739161][ T7812] netlink: 'syz.2.499': attribute type 12 has an invalid length. [ 165.796689][ T7814] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.994444][ T7816] bond1: entered allmulticast mode [ 166.001403][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.043102][ T7819] macvtap2: entered promiscuous mode [ 166.077011][ T7819] vlan0: entered promiscuous mode [ 166.099379][ T7819] macvtap2: entered allmulticast mode [ 166.105380][ T7819] vlan0: entered allmulticast mode [ 166.111127][ T7819] veth0_vlan: entered allmulticast mode [ 166.146834][ T7828] __nla_validate_parse: 8 callbacks suppressed [ 166.146857][ T7828] netlink: 165 bytes leftover after parsing attributes in process `syz.0.504'. [ 166.152204][ T7823] macvtap3: entered promiscuous mode [ 166.182314][ T7823] macvtap3: entered allmulticast mode [ 166.344414][ T7836] wireguard: wg1: Could not create IPv4 socket [ 169.875735][ T7875] veth0: entered promiscuous mode [ 169.917231][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 169.990309][ T7875] veth0 (unregistering): left promiscuous mode [ 170.200419][ T7886] syzkaller0: entered allmulticast mode [ 170.505430][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 170.897611][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 170.981398][ T7905] netlink: 'syz.2.524': attribute type 13 has an invalid length. [ 171.005533][ T7905] gretap0: refused to change device tx_queue_len [ 171.021004][ T7905] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.463214][ T7929] macvtap2: entered promiscuous mode [ 171.468668][ T7929] macvtap2: entered allmulticast mode [ 171.627100][ T7936] macvtap2: entered promiscuous mode [ 171.644983][ T7936] macvtap2: entered allmulticast mode [ 171.741246][ T7942] netlink: 240 bytes leftover after parsing attributes in process `syz.0.536'. [ 172.090840][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 174.985183][ T7979] netlink: 'syz.4.541': attribute type 2 has an invalid length. [ 175.262150][ T7993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.326875][ T8000] tipc: Started in network mode [ 175.335456][ T8000] tipc: Node identity ac14140f, cluster identity 4711 [ 175.353115][ T8000] tipc: New replicast peer: 255.255.255.255 [ 175.377377][ T8000] tipc: Enabled bearer , priority 10 [ 175.393719][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 175.761938][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.552'. [ 175.791089][ T8038] netlink: 'syz.1.555': attribute type 24 has an invalid length. [ 175.924807][ T8048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.557'. [ 176.045802][ T8057] netlink: 'syz.3.558': attribute type 29 has an invalid length. [ 176.070450][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 176.119144][ T8057] netlink: 'syz.3.558': attribute type 29 has an invalid length. [ 176.149721][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 176.184328][ T8060] syzkaller1: entered promiscuous mode [ 176.206754][ T8060] syzkaller1: entered allmulticast mode [ 176.486125][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 176.501949][ T5896] tipc: Node number set to 2886997007 [ 176.528103][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 176.704672][ T1157] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.738423][ T1157] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.771692][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.802519][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.848338][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 177.047867][ T8121] netlink: 'syz.3.576': attribute type 7 has an invalid length. [ 177.113114][ T8118] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 177.221334][ T8130] netlink: 'syz.2.582': attribute type 11 has an invalid length. [ 177.250961][ T8132] netlink: 80 bytes leftover after parsing attributes in process `syz.0.581'. [ 177.272147][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 177.350941][ T8132] syz_tun: entered allmulticast mode [ 177.514426][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 177.612247][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 177.642512][ T8152] netlink: 224 bytes leftover after parsing attributes in process `syz.3.589'. [ 177.751730][ T8150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.777175][ T8161] syz.2.588: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.838310][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) [ 177.838341][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.838353][ T8161] Call Trace: [ 177.838361][ T8161] [ 177.838370][ T8161] dump_stack_lvl+0x189/0x250 [ 177.838407][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.838434][ T8161] ? __pfx__printk+0x10/0x10 [ 177.838456][ T8161] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.838483][ T8161] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.838511][ T8161] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 177.838536][ T8161] warn_alloc+0x214/0x310 [ 177.838558][ T8161] ? stack_depot_save_flags+0x40/0x860 [ 177.838586][ T8161] ? __pfx_warn_alloc+0x10/0x10 [ 177.838609][ T8161] ? kasan_save_track+0x3e/0x80 [ 177.838628][ T8161] ? __kasan_kmalloc+0x93/0xb0 [ 177.838650][ T8161] ? xsk_setsockopt+0x4dc/0x8d0 [ 177.838667][ T8161] ? do_sock_setsockopt+0x17c/0x1b0 [ 177.838682][ T8161] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 177.838695][ T8161] ? do_syscall_64+0xfa/0xfa0 [ 177.838714][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.838737][ T8161] __vmalloc_node_range_noprof+0x125/0x12d0 [ 177.838791][ T8161] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.838824][ T8161] ? __kasan_kmalloc+0x93/0xb0 [ 177.838851][ T8161] vmalloc_user_noprof+0xad/0xf0 [ 177.838872][ T8161] ? xskq_create+0xbf/0x170 [ 177.838891][ T8161] xskq_create+0xbf/0x170 [ 177.838914][ T8161] xsk_init_queue+0xb0/0x110 [ 177.838935][ T8161] xsk_setsockopt+0x4dc/0x8d0 [ 177.838957][ T8161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.838978][ T8161] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.839002][ T8161] ? aa_sock_opt_perm+0xff/0x1b0 [ 177.839028][ T8161] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.839042][ T8161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.839063][ T8161] do_sock_setsockopt+0x17c/0x1b0 [ 177.839083][ T8161] __x64_sys_setsockopt+0x13f/0x1b0 [ 177.839104][ T8161] do_syscall_64+0xfa/0xfa0 [ 177.839122][ T8161] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.839142][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.839155][ T8161] ? clear_bhb_loop+0x60/0xb0 [ 177.839173][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.839187][ T8161] RIP: 0033:0x7ff88e78f6c9 [ 177.839202][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.839214][ T8161] RSP: 002b:00007ff88f56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.839231][ T8161] RAX: ffffffffffffffda RBX: 00007ff88e9e6090 RCX: 00007ff88e78f6c9 [ 177.839242][ T8161] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 177.839250][ T8161] RBP: 00007ff88e811f91 R08: 0000000000000004 R09: 0000000000000000 [ 177.839260][ T8161] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.839268][ T8161] R13: 00007ff88e9e6128 R14: 00007ff88e9e6090 R15: 00007ffd0cecdf08 [ 177.839295][ T8161] [ 177.880037][ T8161] Mem-Info: [ 178.144318][ T8180] delete_channel: no stack [ 178.146114][ T8161] active_anon:5807 inactive_anon:0 isolated_anon:0 [ 178.146114][ T8161] active_file:2500 inactive_file:39901 isolated_file:0 [ 178.146114][ T8161] unevictable:768 dirty:84 writeback:0 [ 178.146114][ T8161] slab_reclaimable:10503 slab_unreclaimable:100698 [ 178.146114][ T8161] mapped:30145 shmem:1357 pagetables:1177 [ 178.146114][ T8161] sec_pagetables:0 bounce:0 [ 178.146114][ T8161] kernel_misc_reclaimable:0 [ 178.146114][ T8161] free:1322365 free_pcp:19476 free_cma:0 [ 178.198603][ T8161] Node 0 active_anon:23220kB inactive_anon:0kB active_file:10000kB inactive_file:159404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120492kB dirty:336kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12080kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.232314][ T8161] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.269330][ T8161] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.300483][ T8161] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 178.306538][ T8161] Node 0 DMA32 free:1393452kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23220kB inactive_anon:0kB active_file:10000kB inactive_file:159404kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:53036kB local_pcp:20000kB free_cma:0kB [ 178.340954][ T8161] lowmem_reserve[]: 0 0 0 0 0 [ 178.345939][ T8161] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.376688][ T8161] lowmem_reserve[]: 0 0 0 0 0 [ 178.382120][ T8161] Node 1 Normal free:3883540kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23104kB local_pcp:9408kB free_cma:0kB [ 178.415355][ T8161] lowmem_reserve[]: 0 0 0 0 0 [ 178.420271][ T8161] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.433461][ T8161] Node 0 DMA32: 1065*4kB (UM) 396*8kB (UME) 167*16kB (UM) 292*32kB (UME) 73*64kB (UME) 45*128kB (UME) 18*256kB (UM) 6*512kB (M) 3*1024kB (UM) 5*2048kB (UME) 328*4096kB (M) = 1394356kB [ 178.452533][ T8161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.466096][ T8161] Node 1 Normal: 181*4kB (UE) 52*8kB (UME) 44*16kB (UME) 73*32kB (UME) 19*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3883540kB [ 178.516370][ T8161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.526771][ T8161] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.537303][ T8161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.581460][ T8161] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.625798][ T8161] 43754 total pagecache pages [ 178.676924][ T8161] 0 pages in swap cache [ 178.690804][ T8161] Free swap = 124996kB [ 178.718870][ T8161] Total swap = 124996kB [ 178.729172][ T8161] 2097051 pages RAM [ 178.740779][ T8161] 0 pages HighMem/MovableOnly [ 178.745515][ T8161] 424119 pages reserved [ 178.755113][ T8194] netlink: 164 bytes leftover after parsing attributes in process `syz.3.598'. [ 178.774415][ T8161] 0 pages cma reserved [ 178.822711][ T8197] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 179.004647][ T8209] ip6t_srh: unknown srh invflags 4000 [ 179.026669][ T8210] ip6t_srh: unknown srh invflags 4000 [ 179.284979][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 180.044194][ T8272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.618'. [ 180.240739][ T8278] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 180.262716][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.269959][ T8278] bridge0: port 2(bridge_slave_1) entered listening state [ 180.277640][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.285198][ T8278] bridge0: port 1(bridge_slave_0) entered listening state [ 180.298700][ T8278] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 180.476694][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 180.909825][ T8308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.975488][ T8313] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 181.722015][ T8339] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 181.757674][ T8339] : entered promiscuous mode [ 182.131678][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 182.150368][ T8356] netlink: 'syz.4.643': attribute type 7 has an invalid length. [ 182.168443][ T8356] netlink: 'syz.4.643': attribute type 8 has an invalid length. [ 182.186719][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 182.212909][ T8356] team0: entered promiscuous mode [ 182.229337][ T8356] team_slave_0: entered promiscuous mode [ 182.240804][ T8356] team_slave_1: entered promiscuous mode [ 182.259840][ T8356] bond0: entered promiscuous mode [ 182.282029][ T8356] bond_slave_0: entered promiscuous mode [ 182.300883][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 182.309369][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 182.322354][ T8356] bond_slave_1: entered promiscuous mode [ 182.328332][ T8356] bridge0: entered promiscuous mode [ 182.420004][ T8356] gretap0: entered promiscuous mode [ 182.439057][ T8356] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 182.473734][ T8356] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 182.515102][ T8356] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 182.547258][ T8356] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 182.632354][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 183.071433][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 183.201426][ T8403] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.658'. [ 183.314514][ T8404] netlink: 'syz.2.660': attribute type 5 has an invalid length. [ 183.478039][ T8415] netlink: 'syz.3.662': attribute type 32 has an invalid length. [ 183.565045][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.665'. [ 183.751427][ T8431] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.130409][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.668'. [ 184.345113][ T8460] netlink: 'syz.1.672': attribute type 2 has an invalid length. [ 184.370352][ T8460] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 184.380580][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.388049][ C1] bridge0: topology change detected, propagating [ 184.395961][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.403436][ C1] bridge0: topology change detected, propagating [ 184.864522][ T8485] netlink: 'syz.4.677': attribute type 21 has an invalid length. [ 184.879973][ T8485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.677'. [ 184.992535][ T8489] raw_sendmsg: syz.3.680 forgot to set AF_INET. Fix it! [ 185.184319][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 185.334385][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 185.435699][ T8470] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 185.451652][ T8516] unsupported nlmsg_type 40 [ 186.232010][ T8571] syzkaller1: entered promiscuous mode [ 186.240663][ T8571] syzkaller1: entered allmulticast mode [ 186.839806][ T8599] tipc: Enabling of bearer rejected, failed to enable media [ 186.879548][ T8605] tipc: Enabling of bearer rejected, failed to enable media [ 187.578469][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.586243][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.229079][ T8622] vlan0: left allmulticast mode [ 188.234355][ T8622] veth0_vlan: left allmulticast mode [ 188.239950][ T8622] vlan0: left promiscuous mode [ 188.257236][ T8623] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 188.299028][ T8631] tipc: Enabling of bearer rejected, failed to enable media [ 188.339031][ T1157] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.365593][ T1157] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.375136][ T1157] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.400270][ T1157] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.427361][ T1157] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.460375][ T1157] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.577900][ T1157] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.606900][ T1157] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.624508][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.632033][ T8679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.640152][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.647650][ T8679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.263315][ T8717] __nla_validate_parse: 5 callbacks suppressed [ 190.263338][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.731'. [ 190.291339][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 190.323753][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 190.343798][ T8717] team1: entered promiscuous mode [ 190.349073][ T8717] team1: entered allmulticast mode [ 190.590989][ T5904] IPVS: starting estimator thread 0... [ 190.603978][ T8736] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 190.683353][ T8741] IPVS: using max 25 ests per chain, 60000 per kthread [ 190.745025][ T8745] syzkaller1: entered promiscuous mode [ 190.751480][ T8745] syzkaller1: entered allmulticast mode [ 191.017380][ T8765] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 191.042643][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.752'. [ 191.052523][ T8764] syzkaller1: entered promiscuous mode [ 191.058660][ T8764] syzkaller1: entered allmulticast mode [ 191.073760][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.753'. [ 191.107236][ T8765] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 191.121642][ T8765] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 191.141557][ T8765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.164698][ T8775] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 191.491210][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.507066][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.521847][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.555785][ T8793] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 191.618477][ T8793] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 191.655335][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.668075][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.679681][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.698085][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.704876][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.707652][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.732972][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.747506][ T8810] syz.4.765: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.763346][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.766521][ T8793] wlan0 speed is unknown, defaulting to 1000 [ 191.774212][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(full) [ 191.774237][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.774247][ T8810] Call Trace: [ 191.774255][ T8810] [ 191.774262][ T8810] dump_stack_lvl+0x189/0x250 [ 191.774295][ T8810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.774319][ T8810] ? __pfx__printk+0x10/0x10 [ 191.774339][ T8810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 191.774363][ T8810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 191.774389][ T8810] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 191.774415][ T8810] warn_alloc+0x214/0x310 [ 191.774441][ T8810] ? stack_depot_save_flags+0x40/0x860 [ 191.774470][ T8810] ? __pfx_warn_alloc+0x10/0x10 [ 191.774496][ T8810] ? kasan_save_track+0x3e/0x80 [ 191.774517][ T8810] ? __kasan_kmalloc+0x93/0xb0 [ 191.774542][ T8810] ? xsk_setsockopt+0x4dc/0x8d0 [ 191.774560][ T8810] ? do_sock_setsockopt+0x17c/0x1b0 [ 191.774577][ T8810] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 191.774592][ T8810] ? do_syscall_64+0xfa/0xfa0 [ 191.774636][ T8810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.774664][ T8810] __vmalloc_node_range_noprof+0x125/0x12d0 [ 191.774720][ T8810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.774748][ T8810] ? __kasan_kmalloc+0x93/0xb0 [ 191.774779][ T8810] vmalloc_user_noprof+0xad/0xf0 [ 191.774803][ T8810] ? xskq_create+0xbf/0x170 [ 191.774826][ T8810] xskq_create+0xbf/0x170 [ 191.774852][ T8810] xsk_init_queue+0xb0/0x110 [ 191.774876][ T8810] xsk_setsockopt+0x4dc/0x8d0 [ 191.774900][ T8810] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.774925][ T8810] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.774950][ T8810] ? aa_sock_opt_perm+0xff/0x1b0 [ 191.774978][ T8810] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 191.774994][ T8810] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.775016][ T8810] do_sock_setsockopt+0x17c/0x1b0 [ 191.775039][ T8810] __x64_sys_setsockopt+0x13f/0x1b0 [ 191.775069][ T8810] do_syscall_64+0xfa/0xfa0 [ 191.775091][ T8810] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.775113][ T8810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.775129][ T8810] ? clear_bhb_loop+0x60/0xb0 [ 191.775150][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.775166][ T8810] RIP: 0033:0x7fdcef98f6c9 [ 191.775183][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.775197][ T8810] RSP: 002b:00007fdcf07f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.775222][ T8810] RAX: ffffffffffffffda RBX: 00007fdcefbe5fa0 RCX: 00007fdcef98f6c9 [ 191.775234][ T8810] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 191.775245][ T8810] RBP: 00007fdcefa11f91 R08: 0000000000000004 R09: 0000000000000000 [ 191.775255][ T8810] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.775265][ T8810] R13: 00007fdcefbe6038 R14: 00007fdcefbe5fa0 R15: 00007fffc1907118 [ 191.775297][ T8810] [ 191.775371][ T8810] Mem-Info: [ 191.962400][ T8815] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 192.025467][ T8810] active_anon:4623 inactive_anon:0 isolated_anon:0 [ 192.025467][ T8810] active_file:2628 inactive_file:39907 isolated_file:0 [ 192.025467][ T8810] unevictable:768 dirty:110 writeback:0 [ 192.025467][ T8810] slab_reclaimable:10829 slab_unreclaimable:98892 [ 192.025467][ T8810] mapped:28899 shmem:1357 pagetables:1109 [ 192.025467][ T8810] sec_pagetables:0 bounce:0 [ 192.025467][ T8810] kernel_misc_reclaimable:0 [ 192.025467][ T8810] free:1312472 free_pcp:31399 free_cma:0 [ 192.154916][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 192.168566][ T8810] Node 0 active_anon:18560kB inactive_anon:0kB active_file:10512kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119564kB dirty:440kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12996kB pagetables:4504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.201858][ T8810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.232751][ T8810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.286801][ T8810] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 192.293162][ T8810] Node 0 DMA32 free:1360044kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18600kB inactive_anon:0kB active_file:10512kB inactive_file:159428kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:93916kB local_pcp:25840kB free_cma:0kB [ 192.349925][ T8810] lowmem_reserve[]: 0 0 0 0 0 [ 192.357493][ T8810] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.387917][ T8810] lowmem_reserve[]: 0 0 0 0 0 [ 192.393257][ T8810] Node 1 Normal free:3883540kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23104kB local_pcp:9408kB free_cma:0kB [ 192.429069][ T8810] lowmem_reserve[]: 0 0 0 0 0 [ 192.436581][ T8810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.450542][ T8810] Node 0 DMA32: 723*4kB (UME) 870*8kB (UM) 732*16kB (UM) 806*32kB (UME) 253*64kB (UME) 71*128kB (UME) 28*256kB (UM) 17*512kB (UME) 7*1024kB (UM) 5*2048kB (UM) 306*4096kB (M) = 1359292kB [ 192.489293][ T8810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.502595][ T8810] Node 1 Normal: 181*4kB (UE) 52*8kB (UME) 44*16kB (UME) 73*32kB (UME) 19*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3883540kB [ 192.524434][ T8810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.534934][ T8810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.544667][ T8810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.554798][ T8810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.577633][ T8810] 43888 total pagecache pages [ 192.584281][ T8810] 0 pages in swap cache [ 192.588698][ T8810] Free swap = 124996kB [ 192.593264][ T8810] Total swap = 124996kB [ 192.597546][ T8810] 2097051 pages RAM [ 192.602071][ T8810] 0 pages HighMem/MovableOnly [ 192.607046][ T8810] 424119 pages reserved [ 192.615337][ T8810] 0 pages cma reserved [ 192.623630][ T8813] bond2 (unregistering): Released all slaves [ 192.653906][ T8822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.663637][ T8822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.675783][ T8822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.690003][ T8822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.729886][ T8831] ip6tnl1: entered promiscuous mode [ 192.736534][ T8831] ip6tnl1: entered allmulticast mode [ 192.767474][ T8842] bridge1: entered promiscuous mode [ 192.773085][ T8842] bridge1: entered allmulticast mode [ 193.084581][ T8862] tipc: Enabled bearer , priority 2 [ 193.176342][ T8871] rdma_op ffff88807cc471f0 conn xmit_rdma 0000000000000000 [ 193.190281][ T52] Bluetooth: hci0: command tx timeout [ 193.283110][ T8879] tipc: Can't bind to reserved service type 2 [ 193.432799][ T8890] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 194.049141][ T8935] sch_fq: defrate 0 ignored. [ 194.272649][ T8643] tipc: Node number set to 4246326338 [ 194.396459][ T8914] wlan0 speed is unknown, defaulting to 1000 [ 194.547370][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.554334][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566132][ T8965] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 194.575748][ T8965] netlink: 'syz.2.808': attribute type 7 has an invalid length. [ 194.590037][ T8965] netlink: 'syz.2.808': attribute type 8 has an invalid length. [ 195.052676][ T8980] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 195.080894][ T8980] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 195.099895][ T8980] bond0: (slave wlan1): Opening slave failed [ 195.256843][ T8988] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 195.342228][ T8990] __nla_validate_parse: 31 callbacks suppressed [ 195.342249][ T8990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 195.571992][ T8995] netlink: 208 bytes leftover after parsing attributes in process `syz.2.821'. [ 195.741789][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 195.768641][ T9015] vlan2: entered allmulticast mode [ 195.840139][ T9017] team1: entered promiscuous mode [ 195.848064][ T9017] team1: entered allmulticast mode [ 196.059142][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 196.356344][ T9059] IPVS: Unknown mcast interface: batadv_slave_1 [ 196.483554][ T9066] netlink: 'syz.3.841': attribute type 30 has an invalid length. [ 196.509367][ T9066] bond2: option arp_missed_max: invalid value (0) [ 196.516230][ T9066] bond2: option arp_missed_max: allowed values 1 - 255 [ 196.525683][ T9066] bond2 (unregistering): Released all slaves [ 196.684797][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 196.928442][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 197.136134][ T9099] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 197.233851][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 197.322732][ T9106] bond2: Invalid ad_actor_system MAC address. [ 197.331816][ T9106] bond2: option ad_actor_system: invalid value (1) [ 197.349063][ T9106] bond2 (unregistering): Released all slaves [ 197.611573][ T9122] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 197.654399][ T9122] veth7: entered promiscuous mode [ 197.763404][ T9135] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 197.793395][ T9135] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 197.824101][ T9135] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 197.976015][ T9152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.867'. [ 198.096249][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 198.128728][ T9156] syzkaller0: entered promiscuous mode [ 198.135137][ T9156] syzkaller0: entered allmulticast mode [ 198.183714][ T9159] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.870'. [ 198.682639][ T9179] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 200.259883][ T9219] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 200.266885][ T9216] netlink: 'syz.3.882': attribute type 21 has an invalid length. [ 200.282290][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.290238][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.345654][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.353040][ T9219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.360732][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.367957][ T9219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.385124][ T9219] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 200.643430][ T9236] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 200.691496][ T9236] bond18: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.706416][ T9236] bond18 (unregistering): Released all slaves [ 200.759697][ T9244] syzkaller0: entered promiscuous mode [ 200.768254][ T9244] syzkaller0: entered allmulticast mode [ 200.779486][ T9182] wlan0 speed is unknown, defaulting to 1000 [ 200.819531][ T9242] __nla_validate_parse: 4 callbacks suppressed [ 200.819553][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.891'. [ 201.120538][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 201.227999][ T9265] Set syz1 is full, maxelem 14 reached [ 201.355367][ T9269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.468824][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 201.622946][ T9280] netlink: 596 bytes leftover after parsing attributes in process `syz.1.906'. [ 201.771369][ T9290] tipc: Enabling of bearer rejected, failed to enable media [ 201.813227][ T9290] netlink: 'syz.3.907': attribute type 12 has an invalid length. [ 201.822711][ T9290] netlink: 'syz.3.907': attribute type 29 has an invalid length. [ 201.833937][ T9290] netlink: 148 bytes leftover after parsing attributes in process `syz.3.907'. [ 201.848160][ T9295] netlink: 'syz.0.909': attribute type 13 has an invalid length. [ 201.859642][ T9290] netlink: 'syz.3.907': attribute type 2 has an invalid length. [ 201.878431][ T9297] netlink: 'syz.4.910': attribute type 33 has an invalid length. [ 201.880589][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 201.886847][ T9297] netlink: 152 bytes leftover after parsing attributes in process `syz.4.910'. [ 201.896636][ T9290] netlink: 23 bytes leftover after parsing attributes in process `syz.3.907'. [ 201.917959][ T9295] veth0_macvtap: left promiscuous mode [ 201.926102][ T9295] macvtap0: entered allmulticast mode [ 201.935790][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 201.963687][ T9295] macvtap0: refused to change device tx_queue_len [ 202.081371][ T9301] syzkaller0: entered promiscuous mode [ 202.087173][ T9301] syzkaller0: entered allmulticast mode [ 202.114153][ T9301] set match dimension is over the limit! [ 202.341102][ T9314] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 202.380106][ T9314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.415282][ T9319] tipc: Enabled bearer , priority 0 [ 202.446669][ T9319] syzkaller0: entered promiscuous mode [ 202.464149][ T9319] syzkaller0: entered allmulticast mode [ 202.515234][ T9319] xt_l2tp: invalid flags combination: 8 [ 202.524907][ T9319] tipc: Resetting bearer [ 202.539611][ T9318] tipc: Resetting bearer [ 202.611409][ T9318] tipc: Disabling bearer [ 202.765894][ T9344] netlink: 200 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.794601][ T9340] bond3: entered allmulticast mode [ 202.802996][ T9340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.810910][ T9340] bridge0: port 3(bond3) entered blocking state [ 202.817606][ T9340] bridge0: port 3(bond3) entered disabled state [ 202.828202][ T9340] bond3: entered promiscuous mode [ 202.834673][ T9340] bridge0: port 3(bond3) entered blocking state [ 202.841263][ T9340] bridge0: port 3(bond3) entered forwarding state [ 203.053379][ T9362] syz.2.931 (9362) used obsolete PPPIOCDETACH ioctl [ 203.114211][ T5977] bridge0: port 3(bond3) entered disabled state [ 203.387227][ T9388] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 203.407799][ T9388] xt_limit: Overflow, try lower: 271964/0 [ 203.472904][ T9391] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 203.517333][ T9395] x_tables: duplicate underflow at hook 2 [ 203.608780][ T9399] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 203.650519][ T9399] 8021q: adding VLAN 0 to HW filter on device bond18 [ 203.684844][ T9399] bond18: (slave gretap1): making interface the new active one [ 203.695235][ T9399] bond18: (slave gretap1): Enslaving as an active interface with an up link [ 203.800984][ T9412] dvmrp0: entered allmulticast mode [ 204.003230][ T9427] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 204.080961][ T9427] bond19: (slave gretap2): making interface the new active one [ 204.089756][ T9427] bond19: (slave gretap2): Enslaving as an active interface with an up link [ 204.108606][ T9430] SET target dimension over the limit! [ 204.113059][ T9434] netlink: 'syz.4.954': attribute type 3 has an invalid length. [ 205.093149][ T9492] tipc: Enabled bearer , priority 0 [ 205.111295][ T9492] syzkaller0: entered promiscuous mode [ 205.125791][ T9492] syzkaller0: entered allmulticast mode [ 205.167537][ T9492] tipc: Resetting bearer [ 205.210630][ T9491] tipc: Resetting bearer [ 205.262763][ T9491] tipc: Disabling bearer [ 205.294702][ T9464] wlan0 speed is unknown, defaulting to 1000 [ 205.439609][ T9513] veth1_to_bond: entered allmulticast mode [ 205.804961][ T9509] syzkaller0: entered promiscuous mode [ 205.810691][ T9509] syzkaller0: entered allmulticast mode [ 207.265047][ T9512] veth1_to_bond: left allmulticast mode [ 207.307520][ T9533] policy can only be matched on NF_INET_PRE_ROUTING [ 207.307544][ T9533] unable to load match [ 207.409595][ T9547] __nla_validate_parse: 15 callbacks suppressed [ 207.409617][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 207.431354][ T9545] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 207.751123][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 208.071197][ T9595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.997'. [ 208.162446][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 208.399902][ T9613] xt_hashlimit: size too large, truncated to 1048576 [ 208.515469][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 208.918954][ T9631] validate_nla: 1 callbacks suppressed [ 208.919009][ T9631] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 208.939884][ T9623] vlan2: entered promiscuous mode [ 208.957660][ T9623] bond0: entered promiscuous mode [ 208.963488][ T9623] bond_slave_0: entered promiscuous mode [ 208.969770][ T9623] bond_slave_1: entered promiscuous mode [ 208.976197][ T9623] bridge0: entered promiscuous mode [ 208.983068][ T9623] bond0: (slave vlan2): Opening slave failed [ 209.146147][ T9638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.345416][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 209.360911][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1015'. [ 209.476532][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1017'. [ 209.486280][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 209.537513][ T9658] bond2: option arp_validate: invalid value (134217728) [ 209.552217][ T9658] bond2 (unregistering): Released all slaves [ 209.592945][ T9664] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 209.604663][ T9665] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 209.626918][ T9661] tipc: Enabled bearer , priority 0 [ 209.636174][ T9661] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 209.750208][ T9663] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 209.763203][ T9663] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 209.824678][ T9661] bond4: (slave gretap1): making interface the new active one [ 209.836578][ T9661] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 209.861647][ T9672] gretap2: entered promiscuous mode [ 209.876846][ T9672] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 209.878197][ T9674] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 209.898668][ T9674] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 209.947797][ T9660] tipc: Disabling bearer [ 209.959537][ T9674] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1021'. [ 210.807659][ T9718] xt_policy: too many policy elements [ 211.279232][ T9748] sctp: [Deprecated]: syz.3.1043 (pid 9748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.279232][ T9748] Use struct sctp_sack_info instead [ 212.089561][ T9794] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 212.417085][ T9813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.516731][ T9818] sch_fq: defrate 0 ignored. [ 212.615018][ T9822] __nla_validate_parse: 8 callbacks suppressed [ 212.615037][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 212.882619][ T9840] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 212.891581][ T9840] bond3: option packets_per_slave: allowed values 0 - 65535 [ 212.903239][ T9840] bond3 (unregistering): Released all slaves [ 213.548189][ T9868] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 213.563015][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1078'. [ 213.638722][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 213.749480][ T9878] tipc: Enabled bearer , priority 0 [ 213.771583][ T9878] syzkaller0: entered promiscuous mode [ 213.785708][ T9878] syzkaller0: entered allmulticast mode [ 213.904509][ T9883] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1079'. [ 213.939797][ T9874] tipc: Resetting bearer [ 214.000644][ T9873] tipc: Resetting bearer [ 214.125750][ T9873] tipc: Disabling bearer [ 214.200822][ T9905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.225714][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 214.409558][ T9900] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 214.480419][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 215.513925][ T9960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.580899][ T9962] netlink: 'syz.0.1094': attribute type 39 has an invalid length. [ 215.632421][ T9965] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1095'. [ 215.744594][ T9968] netlink: 'syz.3.1096': attribute type 21 has an invalid length. [ 215.749607][ T9950] wlan0 speed is unknown, defaulting to 1000 [ 215.753438][ T9968] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1096'. [ 215.907920][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 216.109598][ T9972] wlan0 speed is unknown, defaulting to 1000 [ 216.466280][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 217.053136][T10004] netlink: 'syz.1.1102': attribute type 29 has an invalid length. [ 255.983481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.989926][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.424714][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431351][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.540525][ T31] INFO: task kworker/0:9:8641 blocked for more than 143 seconds. [ 370.548418][ T31] Not tainted syzkaller #0 [ 370.553434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.562180][ T31] task:kworker/0:9 state:D stack:22504 pid:8641 tgid:8641 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 370.574790][ T31] Workqueue: events rfkill_sync_work [ 370.580168][ T31] Call Trace: [ 370.583475][ T31] [ 370.586426][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 370.591253][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.596760][ T31] ? __pfx___schedule+0x10/0x10 [ 370.601941][ T31] ? schedule+0x91/0x360 [ 370.606478][ T31] schedule+0x165/0x360 [ 370.610760][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.616342][ T31] __mutex_lock+0x7e6/0x1350 [ 370.621010][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.628773][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 370.660196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.665321][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.692202][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 370.698187][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.704727][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 370.710884][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 370.716040][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 370.722004][ T31] rfkill_set_block+0x1d2/0x440 [ 370.726893][ T31] rfkill_sync_work+0x114/0x200 [ 370.731886][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.737806][ T31] process_scheduled_works+0xae1/0x17b0 [ 370.743521][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.749525][ T31] worker_thread+0x8a0/0xda0 [ 370.754248][ T31] kthread+0x711/0x8a0 [ 370.758338][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.763721][ T31] ? __pfx_kthread+0x10/0x10 [ 370.768675][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.773919][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.779297][ T31] ? __pfx_kthread+0x10/0x10 [ 370.784010][ T31] ret_from_fork+0x4bc/0x870 [ 370.788667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.793852][ T31] ? __switch_to_asm+0x39/0x70 [ 370.798719][ T31] ? __switch_to_asm+0x33/0x70 [ 370.803525][ T31] ? __pfx_kthread+0x10/0x10 [ 370.808302][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.813113][ T31] [ 370.816157][ T31] INFO: task kworker/0:11:8643 blocked for more than 143 seconds. [ 370.824032][ T31] Not tainted syzkaller #0 [ 370.829102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.837905][ T31] task:kworker/0:11 state:D stack:24456 pid:8643 tgid:8643 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 370.850449][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 370.857269][ T31] Call Trace: [ 370.861066][ T31] [ 370.864166][ T31] __schedule+0x1798/0x4cc0 [ 370.868772][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.874216][ T31] ? __pfx___schedule+0x10/0x10 [ 370.879109][ T31] ? schedule+0x91/0x360 [ 370.883513][ T31] schedule+0x165/0x360 [ 370.887679][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.893543][ T31] __mutex_lock+0x7e6/0x1350 [ 370.898225][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.903028][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.909389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.914467][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.920360][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.926214][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.932423][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.938207][ T31] process_scheduled_works+0xae1/0x17b0 [ 370.944002][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.950013][ T31] worker_thread+0x8a0/0xda0 [ 370.954863][ T31] kthread+0x711/0x8a0 [ 370.958966][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.964341][ T31] ? __pfx_kthread+0x10/0x10 [ 370.969142][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.974652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.980049][ T31] ? __pfx_kthread+0x10/0x10 [ 370.984707][ T31] ret_from_fork+0x4bc/0x870 [ 370.989331][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.994530][ T31] ? __switch_to_asm+0x39/0x70 [ 370.999482][ T31] ? __switch_to_asm+0x33/0x70 [ 371.004288][ T31] ? __pfx_kthread+0x10/0x10 [ 371.008968][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.013938][ T31] [ 371.016980][ T31] INFO: task syz.4.1086:9907 blocked for more than 143 seconds. [ 371.024794][ T31] Not tainted syzkaller #0 [ 371.029929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.039004][ T31] task:syz.4.1086 state:D stack:25960 pid:9907 tgid:9907 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 371.051064][ T31] Call Trace: [ 371.054467][ T31] [ 371.057520][ T31] __schedule+0x1798/0x4cc0 [ 371.062111][ T31] ? validate_chain+0x897/0x2140 [ 371.067272][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.072344][ T31] ? __pfx___schedule+0x10/0x10 [ 371.077207][ T31] ? schedule+0x91/0x360 [ 371.081566][ T31] schedule+0x165/0x360 [ 371.085725][ T31] schedule_timeout+0x9a/0x270 [ 371.090525][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 371.095987][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.101519][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.108028][ T31] ? wait_for_completion+0x267/0x5d0 [ 371.113438][ T31] wait_for_completion+0x2bf/0x5d0 [ 371.118698][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 371.124367][ T31] ? __flush_work+0xd2/0xbc0 [ 371.128966][ T31] ? __flush_work+0xd2/0xbc0 [ 371.133721][ T31] __flush_work+0x9b9/0xbc0 [ 371.138267][ T31] ? __flush_work+0xd2/0xbc0 [ 371.142930][ T31] ? __pfx___flush_work+0x10/0x10 [ 371.147986][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 371.153340][ T31] ? __pfx___cancel_work+0x10/0x10 [ 371.158562][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 371.164241][ T31] __cancel_work_sync+0xbe/0x110 [ 371.169204][ T31] rfkill_unregister+0x92/0x220 [ 371.174184][ T31] nfc_unregister_device+0x96/0x2a0 [ 371.179532][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 371.185642][ T31] virtual_ncidev_close+0x56/0x90 [ 371.191008][ T31] __fput+0x44c/0xa70 [ 371.195188][ T31] task_work_run+0x1d4/0x260 [ 371.199901][ T31] ? __pfx_task_work_run+0x10/0x10 [ 371.205107][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 371.210769][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 371.216143][ T31] do_syscall_64+0x2bd/0xfa0 [ 371.221023][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.226418][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.232707][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.237763][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.243707][ T31] RIP: 0033:0x7fdcef98f6c9 [ 371.248296][ T31] RSP: 002b:00007fffc1907278 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 371.257193][ T31] RAX: 0000000000000000 RBX: 00007fdcefbe7da0 RCX: 00007fdcef98f6c9 [ 371.265598][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 371.273913][ T31] RBP: 00007fdcefbe7da0 R08: 0000000000000000 R09: 00000028c190756f [ 371.282177][ T31] R10: 000000000003fc28 R11: 0000000000000246 R12: 0000000000034806 [ 371.290448][ T31] R13: 00007fdcefbe6090 R14: ffffffffffffffff R15: 00007fffc1907390 [ 371.298773][ T31] [ 371.301895][ T31] INFO: task syz.2.1088:9922 blocked for more than 144 seconds. [ 371.309553][ T31] Not tainted syzkaller #0 [ 371.314885][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.323991][ T31] task:syz.2.1088 state:D stack:25352 pid:9922 tgid:9921 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 371.336077][ T31] Call Trace: [ 371.339354][ T31] [ 371.342684][ T31] __schedule+0x1798/0x4cc0 [ 371.347195][ T31] ? security_file_open+0xb1/0x270 [ 371.352391][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.357267][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.362250][ T31] ? __pfx___schedule+0x10/0x10 [ 371.367213][ T31] ? schedule+0x91/0x360 [ 371.371761][ T31] schedule+0x165/0x360 [ 371.376006][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.381535][ T31] __mutex_lock+0x7e6/0x1350 [ 371.386327][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.391371][ T31] ? misc_open+0x51/0x350 [ 371.395748][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.400959][ T31] misc_open+0x51/0x350 [ 371.405305][ T31] chrdev_open+0x4cc/0x5e0 [ 371.409742][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.414892][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.421386][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.426329][ T31] do_dentry_open+0x953/0x13f0 [ 371.431485][ T31] vfs_open+0x3b/0x340 [ 371.435614][ T31] ? path_openat+0x2ecd/0x3830 [ 371.440580][ T31] path_openat+0x2ee5/0x3830 [ 371.445372][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.450464][ T31] do_filp_open+0x1fa/0x410 [ 371.455412][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.460421][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.465593][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.470654][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.475214][ T31] do_sys_openat2+0x121/0x1c0 [ 371.479906][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.485618][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.490761][ T31] __x64_sys_openat+0x138/0x170 [ 371.495649][ T31] do_syscall_64+0xfa/0xfa0 [ 371.500395][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.505645][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.511793][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.516565][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.522814][ T31] RIP: 0033:0x7ff88e78f6c9 [ 371.527419][ T31] RSP: 002b:00007ff88f590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.535999][ T31] RAX: ffffffffffffffda RBX: 00007ff88e9e5fa0 RCX: 00007ff88e78f6c9 [ 371.544605][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 371.552792][ T31] RBP: 00007ff88e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.560862][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.568948][ T31] R13: 00007ff88e9e6038 R14: 00007ff88e9e5fa0 R15: 00007ffd0cecdf08 [ 371.577042][ T31] [ 371.580480][ T31] INFO: task syz.2.1088:9929 blocked for more than 144 seconds. [ 371.588320][ T31] Not tainted syzkaller #0 [ 371.593520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.602342][ T31] task:syz.2.1088 state:D stack:26344 pid:9929 tgid:9921 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 371.614547][ T31] Call Trace: [ 371.617861][ T31] [ 371.621039][ T31] __schedule+0x1798/0x4cc0 [ 371.625679][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.630765][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.635801][ T31] ? __pfx___schedule+0x10/0x10 [ 371.640700][ T31] ? schedule+0x91/0x360 [ 371.644947][ T31] schedule+0x165/0x360 [ 371.649208][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.654757][ T31] __mutex_lock+0x7e6/0x1350 [ 371.659367][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.664399][ T31] ? rfkill_register+0x37/0x8e0 [ 371.669456][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.674522][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 371.679895][ T31] ? device_initialize+0x24b/0x440 [ 371.685057][ T31] rfkill_register+0x37/0x8e0 [ 371.689774][ T31] nfc_register_device+0x14a/0x320 [ 371.694999][ T31] nci_register_device+0x87f/0x9d0 [ 371.700252][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 371.706012][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 371.711490][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 371.716975][ T31] virtual_ncidev_open+0x129/0x1a0 [ 371.722255][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 371.728026][ T31] misc_open+0x2d5/0x350 [ 371.732309][ T31] chrdev_open+0x4cc/0x5e0 [ 371.736836][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.741964][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.748370][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.753558][ T31] do_dentry_open+0x953/0x13f0 [ 371.758491][ T31] vfs_open+0x3b/0x340 [ 371.762720][ T31] ? path_openat+0x2ecd/0x3830 [ 371.767511][ T31] path_openat+0x2ee5/0x3830 [ 371.772181][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.777247][ T31] do_filp_open+0x1fa/0x410 [ 371.782111][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.786961][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.792260][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.797212][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.801788][ T31] do_sys_openat2+0x121/0x1c0 [ 371.806579][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.811835][ T31] ? exc_page_fault+0x82/0x100 [ 371.816612][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 371.821977][ T31] __x64_sys_openat+0x138/0x170 [ 371.827025][ T31] do_syscall_64+0xfa/0xfa0 [ 371.831758][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.837079][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.843787][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.848882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.854861][ T31] RIP: 0033:0x7ff88e78f6c9 [ 371.859286][ T31] RSP: 002b:00007ff88f56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.867717][ T31] RAX: ffffffffffffffda RBX: 00007ff88e9e6090 RCX: 00007ff88e78f6c9 [ 371.875993][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 371.883987][ T31] RBP: 00007ff88e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.892024][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.900702][ T31] R13: 00007ff88e9e6128 R14: 00007ff88e9e6090 R15: 00007ffd0cecdf08 [ 371.908989][ T31] [ 371.912109][ T31] INFO: task syz.3.1096:9968 blocked for more than 144 seconds. [ 371.919959][ T31] Not tainted syzkaller #0 [ 371.925149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.934292][ T31] task:syz.3.1096 state:D stack:25736 pid:9968 tgid:9967 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 371.946344][ T31] Call Trace: [ 371.949839][ T31] [ 371.952904][ T31] __schedule+0x1798/0x4cc0 [ 371.957537][ T31] ? security_file_open+0xb1/0x270 [ 371.962906][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.967934][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.973001][ T31] ? __pfx___schedule+0x10/0x10 [ 371.978170][ T31] ? schedule+0x91/0x360 [ 371.982482][ T31] schedule+0x165/0x360 [ 371.986758][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.992407][ T31] __mutex_lock+0x7e6/0x1350 [ 371.997498][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.002785][ T31] ? misc_open+0x51/0x350 [ 372.007252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.012508][ T31] misc_open+0x51/0x350 [ 372.016714][ T31] chrdev_open+0x4cc/0x5e0 [ 372.021301][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.026555][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.033004][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.037989][ T31] do_dentry_open+0x953/0x13f0 [ 372.042818][ T31] vfs_open+0x3b/0x340 [ 372.047068][ T31] ? path_openat+0x2ecd/0x3830 [ 372.052035][ T31] path_openat+0x2ee5/0x3830 [ 372.056740][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.061884][ T31] do_filp_open+0x1fa/0x410 [ 372.066545][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.071456][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.076521][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.081751][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.086176][ T31] do_sys_openat2+0x121/0x1c0 [ 372.090892][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.096092][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.101080][ T31] __x64_sys_openat+0x138/0x170 [ 372.106110][ T31] do_syscall_64+0xfa/0xfa0 [ 372.111014][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.116683][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.123273][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.128153][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.134476][ T31] RIP: 0033:0x7f43bd98f6c9 [ 372.139001][ T31] RSP: 002b:00007f43be885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.147630][ T31] RAX: ffffffffffffffda RBX: 00007f43bdbe5fa0 RCX: 00007f43bd98f6c9 [ 372.155958][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 372.164080][ T31] RBP: 00007f43bda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.172216][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.180466][ T31] R13: 00007f43bdbe6038 R14: 00007f43bdbe5fa0 R15: 00007ffc40f08d48 [ 372.188490][ T31] [ 372.191590][ T31] INFO: task syz.0.1099:9984 blocked for more than 145 seconds. [ 372.199234][ T31] Not tainted syzkaller #0 [ 372.204207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.212952][ T31] task:syz.0.1099 state:D stack:28296 pid:9984 tgid:9983 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 372.225054][ T31] Call Trace: [ 372.228340][ T31] [ 372.231323][ T31] __schedule+0x1798/0x4cc0 [ 372.236175][ T31] ? security_file_open+0xb1/0x270 [ 372.241466][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.246674][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.251762][ T31] ? __pfx___schedule+0x10/0x10 [ 372.256710][ T31] ? schedule+0x91/0x360 [ 372.260998][ T31] schedule+0x165/0x360 [ 372.265262][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.271090][ T31] __mutex_lock+0x7e6/0x1350 [ 372.275761][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.280676][ T31] ? misc_open+0x51/0x350 [ 372.285021][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.290059][ T31] misc_open+0x51/0x350 [ 372.294533][ T31] chrdev_open+0x4cc/0x5e0 [ 372.299156][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.304571][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.310987][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.315925][ T31] do_dentry_open+0x953/0x13f0 [ 372.320824][ T31] vfs_open+0x3b/0x340 [ 372.324989][ T31] ? path_openat+0x2ecd/0x3830 [ 372.329851][ T31] path_openat+0x2ee5/0x3830 [ 372.334508][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.339549][ T31] do_filp_open+0x1fa/0x410 [ 372.344193][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.349102][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.354392][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.359285][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.363782][ T31] do_sys_openat2+0x121/0x1c0 [ 372.368488][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.373822][ T31] ? exc_page_fault+0x82/0x100 [ 372.378791][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 372.384333][ T31] __x64_sys_openat+0x138/0x170 [ 372.389267][ T31] do_syscall_64+0xfa/0xfa0 [ 372.394164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.399512][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.405708][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.410544][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.416612][ T31] RIP: 0033:0x7fe9fb78f6c9 [ 372.421397][ T31] RSP: 002b:00007fe9fc586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.429838][ T31] RAX: ffffffffffffffda RBX: 00007fe9fb9e5fa0 RCX: 00007fe9fb78f6c9 [ 372.437929][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 372.445960][ T31] RBP: 00007fe9fb811f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.454233][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.462379][ T31] R13: 00007fe9fb9e6038 R14: 00007fe9fb9e5fa0 R15: 00007ffe37600088 [ 372.470718][ T31] [ 372.473790][ T31] INFO: task syz.1.1102:10003 blocked for more than 145 seconds. [ 372.482102][ T31] Not tainted syzkaller #0 [ 372.487176][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.496556][ T31] task:syz.1.1102 state:D stack:27112 pid:10003 tgid:10002 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 372.508848][ T31] Call Trace: [ 372.512420][ T31] [ 372.515356][ T31] __schedule+0x1798/0x4cc0 [ 372.519858][ T31] ? security_file_open+0xb1/0x270 [ 372.525066][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.529936][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.535038][ T31] ? __pfx___schedule+0x10/0x10 [ 372.539899][ T31] ? schedule+0x91/0x360 [ 372.544319][ T31] schedule+0x165/0x360 [ 372.548501][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.554022][ T31] __mutex_lock+0x7e6/0x1350 [ 372.558618][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.563427][ T31] ? misc_open+0x51/0x350 [ 372.567763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.573015][ T31] misc_open+0x51/0x350 [ 372.577176][ T31] chrdev_open+0x4cc/0x5e0 [ 372.581748][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.586709][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.593220][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.598152][ T31] do_dentry_open+0x953/0x13f0 [ 372.603189][ T31] vfs_open+0x3b/0x340 [ 372.607275][ T31] ? path_openat+0x2ecd/0x3830 [ 372.612242][ T31] path_openat+0x2ee5/0x3830 [ 372.616858][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.621871][ T31] do_filp_open+0x1fa/0x410 [ 372.626472][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.631633][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.636717][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.641667][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.646033][ T31] do_sys_openat2+0x121/0x1c0 [ 372.650767][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.655970][ T31] ? exc_page_fault+0x82/0x100 [ 372.660899][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 372.666268][ T31] __x64_sys_openat+0x138/0x170 [ 372.671163][ T31] do_syscall_64+0xfa/0xfa0 [ 372.675677][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.680917][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.686977][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.691997][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.698335][ T31] RIP: 0033:0x7f2ce2f8f6c9 [ 372.702890][ T31] RSP: 002b:00007f2ce3d6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.711352][ T31] RAX: ffffffffffffffda RBX: 00007f2ce31e5fa0 RCX: 00007f2ce2f8f6c9 [ 372.719320][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 372.727469][ T31] RBP: 00007f2ce3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.735637][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.743745][ T31] R13: 00007f2ce31e6038 R14: 00007f2ce31e5fa0 R15: 00007ffdbccc1168 [ 372.752082][ T31] [ 372.755111][ T31] INFO: task syz.1.1102:10004 blocked for more than 145 seconds. [ 372.763237][ T31] Not tainted syzkaller #0 [ 372.768169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.777330][ T31] task:syz.1.1102 state:D stack:25384 pid:10004 tgid:10002 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 372.789636][ T31] Call Trace: [ 372.792970][ T31] [ 372.795916][ T31] __schedule+0x1798/0x4cc0 [ 372.800708][ T31] ? security_file_open+0xb1/0x270 [ 372.805956][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.811226][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.816083][ T31] ? __pfx___schedule+0x10/0x10 [ 372.821020][ T31] ? schedule+0x91/0x360 [ 372.825473][ T31] schedule+0x165/0x360 [ 372.829827][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.835368][ T31] __mutex_lock+0x7e6/0x1350 [ 372.839974][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.844924][ T31] ? misc_open+0x51/0x350 [ 372.849355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.854648][ T31] misc_open+0x51/0x350 [ 372.858906][ T31] chrdev_open+0x4cc/0x5e0 [ 372.863838][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.868918][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.875482][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.880594][ T31] do_dentry_open+0x953/0x13f0 [ 372.885565][ T31] vfs_open+0x3b/0x340 [ 372.889631][ T31] ? path_openat+0x2ecd/0x3830 [ 372.894473][ T31] path_openat+0x2ee5/0x3830 [ 372.899115][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.904503][ T31] do_filp_open+0x1fa/0x410 [ 372.909089][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.914131][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.919173][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.924054][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.928497][ T31] do_sys_openat2+0x121/0x1c0 [ 372.933567][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.938786][ T31] ? __fget_files+0x3a0/0x420 [ 372.943572][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 372.948819][ T31] __x64_sys_openat+0x138/0x170 [ 372.953754][ T31] do_syscall_64+0xfa/0xfa0 [ 372.958378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.963789][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.969877][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.974731][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.980656][ T31] RIP: 0033:0x7f2ce2f8f6c9 [ 372.985153][ T31] RSP: 002b:00007f2ce3d4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.993876][ T31] RAX: ffffffffffffffda RBX: 00007f2ce31e6090 RCX: 00007f2ce2f8f6c9 [ 373.001995][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 373.009987][ T31] RBP: 00007f2ce3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.018219][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.026639][ T31] R13: 00007f2ce31e6128 R14: 00007f2ce31e6090 R15: 00007ffdbccc1168 [ 373.034755][ T31] [ 373.037910][ T31] [ 373.037910][ T31] Showing all locks held in the system: [ 373.045930][ T31] 1 lock held by khungtaskd/31: [ 373.051084][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.061137][ T31] 6 locks held by kworker/u8:3/50: [ 373.066313][ T31] 2 locks held by getty/5590: [ 373.071090][ T31] #0: ffff88802f7c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.081141][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 373.091396][ T31] 4 locks held by kworker/0:9/8641: [ 373.096697][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.108043][ T31] #1: ffffc900045afba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.120841][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 373.131101][ T31] #3: ffff88805658b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 373.140845][ T31] 3 locks held by kworker/0:11/8643: [ 373.146140][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.157384][ T31] #1: ffffc9000458fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.171285][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.182834][ T31] 1 lock held by syz.4.1086/9907: [ 373.187864][ T31] #0: ffff88805658b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 373.197836][ T31] 1 lock held by syz.2.1088/9922: [ 373.202994][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.211840][ T31] 3 locks held by syz.2.1088/9929: [ 373.216980][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.225722][ T31] #1: ffff888030ee7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 373.235452][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.245943][ T31] 1 lock held by syz.3.1096/9968: [ 373.251033][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.259752][ T31] 1 lock held by syz.0.1099/9984: [ 373.265177][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.274455][ T31] 1 lock held by syz.1.1102/10003: [ 373.279609][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.288290][ T31] 1 lock held by syz.1.1102/10004: [ 373.294023][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.302798][ T31] 1 lock held by syz-executor/10009: [ 373.308075][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.316571][ T31] 1 lock held by syz-executor/10010: [ 373.321971][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.330604][ T31] 1 lock held by syz-executor/10012: [ 373.335904][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.344550][ T31] 1 lock held by syz-executor/10015: [ 373.349929][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.358508][ T31] 1 lock held by syz-executor/10016: [ 373.363952][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.372660][ T31] 1 lock held by syz-executor/10022: [ 373.377943][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.386593][ T31] 1 lock held by syz-executor/10023: [ 373.391905][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.400408][ T31] 1 lock held by syz-executor/10025: [ 373.405791][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.414298][ T31] 1 lock held by syz-executor/10027: [ 373.419680][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.430978][ T31] 1 lock held by syz-executor/10029: [ 373.436391][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.444998][ T31] 1 lock held by syz-executor/10035: [ 373.450341][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.458838][ T31] 1 lock held by syz-executor/10036: [ 373.464326][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.473688][ T31] 1 lock held by syz-executor/10038: [ 373.479087][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.487626][ T31] 1 lock held by syz-executor/10040: [ 373.493099][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.501766][ T31] 1 lock held by syz-executor/10042: [ 373.507045][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.515724][ T31] [ 373.518070][ T31] ============================================= [ 373.518070][ T31] [ 373.526742][ T31] NMI backtrace for cpu 1 [ 373.526753][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.526766][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.526773][ T31] Call Trace: [ 373.526778][ T31] [ 373.526784][ T31] dump_stack_lvl+0x189/0x250 [ 373.526804][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.526818][ T31] ? __pfx__printk+0x10/0x10 [ 373.526836][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.526851][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.526865][ T31] ? __pfx__printk+0x10/0x10 [ 373.526878][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.526897][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.526911][ T31] watchdog+0xf60/0xfa0 [ 373.526926][ T31] ? watchdog+0x1e2/0xfa0 [ 373.526940][ T31] kthread+0x711/0x8a0 [ 373.526956][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.526967][ T31] ? __pfx_kthread+0x10/0x10 [ 373.526982][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.526996][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.527009][ T31] ? __pfx_kthread+0x10/0x10 [ 373.527023][ T31] ret_from_fork+0x4bc/0x870 [ 373.527037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.527051][ T31] ? __switch_to_asm+0x39/0x70 [ 373.527061][ T31] ? __switch_to_asm+0x33/0x70 [ 373.527069][ T31] ? __pfx_kthread+0x10/0x10 [ 373.527083][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.527101][ T31] [ 373.527105][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.675737][ C0] NMI backtrace for cpu 0 [ 373.675755][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 373.675773][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.675782][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 373.675809][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 373.675822][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 373.675838][ C0] RAX: 10ab0e3a3d48b600 RBX: ffffffff81967b47 RCX: 10ab0e3a3d48b600 [ 373.675849][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 373.675859][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 373.675870][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 373.675880][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 373.675891][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 373.675903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.675914][ C0] CR2: 00007ffdd985c5e8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 373.675930][ C0] Call Trace: [ 373.675939][ C0] [ 373.675945][ C0] default_idle+0x13/0x20 [ 373.675960][ C0] default_idle_call+0x73/0xb0 [ 373.675976][ C0] do_idle+0x1e7/0x510 [ 373.675996][ C0] ? __pfx_do_idle+0x10/0x10 [ 373.676019][ C0] cpu_startup_entry+0x44/0x60 [ 373.676035][ C0] rest_init+0x2de/0x300 [ 373.676052][ C0] start_kernel+0x3ae/0x410 [ 373.676071][ C0] x86_64_start_reservations+0x24/0x30 [ 373.676091][ C0] x86_64_start_kernel+0x143/0x1c0 [ 373.676110][ C0] common_startup_64+0x13e/0x147 [ 373.676138][ C0] [ 378.864022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.870696][ T1302] ieee802154 phy1 wpan1: encryption failed: -22