last executing test programs: 19.795499219s ago: executing program 4 (id=1044): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000010c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x8, 0x8, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast, @default, @null, @default]}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) unshare(0x20000400) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x52b}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa400000070100000800200075"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00}\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000ec20000008000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) (async) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) (async) getpid() (async) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}, {0x0}], 0x2}, 0x84) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0x4) 19.708410673s ago: executing program 4 (id=1047): socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0xbe, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000030000000000000017c1009c90780100000001000000717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d40838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd388537719eecd7b1f5591c287cd8bdc5cb100705e0032bb769f2581b5b6ae81bd7be2d9257ce5076e1d1717ad"], 0x0) unshare(0x20000400) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES16], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x0) getpid() (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x114}, {0x0}], 0x2}, 0x84) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r8, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000000)={r8, 0x1, 0x7ff, 0x9}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x6}, @window={0x3, 0x1, 0x405}, @window], 0x6) 19.611734637s ago: executing program 4 (id=1049): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x2}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(0xffffffffffffffff, &(0x7f0000002480)="58432883c72df18c10d9aa59d287b6f3596b95c6222d2ce9b4c087c0cc0c9a1fc4636a38111c27c8c16ad5db1c03a1fe0a1fd6fb8c8d1e012e21a4022ebd4342129f98cac076fb2a8a9e3be062ffdb58a359bdcd2beb151caa1160aae646d6533e3307d322cf3fa2c610f168a510a24a6bce749674e644b8fab9fe009ce6febb4febf9190a9388c333500d7ff60a66b740916246861403c78851935281d6818925e1c6d44dc8763c99920b29107f0ef2ce0002078c48ea69bedafe371822ad50c3585ce0c00e2866a77eb382a4a94c8140eade00e7cce81a18b01e2824860a08682d5f098ff2025c279a91ded1c2e68d0f765dcc0feeb118f7b2c4d0ac243f214ba6102d1f7e5855d204d3f5f533b590af39177b29e264935d637660ffda56415f003705bac18326fd036ca5866b3774d53bc948ec177f94ad43fa7654e56fd5df799454c24aa5bbcbade05473b27357093cdff40a8f1df11e951fe9c1d4cbd2afcaec315a61538511429be3ac1d5c96c49dae7fc3383d5696f81865daf7cc4fed6628e40b4b9bed2a56a1058b6bfb2213749014375e577b9ec4ead515d6ffcf06ecf73490e8e54ea3c5519765aad9f6ca082198f88d63910ecaf1442789de4fec5af0e5eabcc8cdcc4a2cd6d348c53a7fc4fc84b7a57fad068114c0c2135f9e5b7b5cc693fb7ee2d4a9eeeefcd5bbe1e04d2e79b0b565669cb708fed60dbd04cc4e5970bd688080a20d70426025404797b769225215dfa01e116625e3358c670bad99250553ff83abf0a9a9cabe2f6316b039faf317717c84358f1dfddfb4d50d1133b5d1a458dc57a536675d288a3461a5ff621ac55fa9ed7127baa0893fcb9b32c0a621fb1c2ecbc9eef27077c8253e44900e5f864a0845990268ef473c21fa2ed5bf9ceb00ffc06cd435687bf5d66fc462b4722a4dc90fce58d0c3ceae0dc1ac3e518a3388e21adaa54cd4f12fa328c3ba221fa604905f046f37de3bfe1829d1db4367373029a100339754c9d4491e60f065cb2e75c387cb4bc8bdd204142679dd07173f68b3fd14010aca29cba02fbec1e3da97c3063367fc70c47d5fe1c3a6217c4226f1fff9a7e0197ee5008b04cf56e6b9a7d23f5ba14589640d76049ff3972a317a7b861fd2930bce30b6cd51e9ad81f2ee6d1733ca19cd2fd4c6979076b9c9edf5749817151361dfe46dc44b6add43a483bc508e1c75e28c9c4ad5da72d21fe1731a32aec0661ded551aef04b2adea89868e7991422aeeccc7b92725754a4bcfe2ad480cb23e88d327bb125cc377c2d71b80ae42bbe3291ad850d450041925fe17e51877ef23cc823626b74aa1a048e0a725a77739c36620a0c3de6d15f51484732b16d2fbe71c553bd2c2b6d8519f7ba58ec622ba660d8e2119c2b04645fcb1661c9f1928d1d634b9f41788b68d15656fbb0777e8ea16e1caf9d18d27f352cbbfe566cc85ff611a9e742ae9e43e1a09a5b800caeaeb07a25d34ece6f5b440a281749f89877719d12948f6c89c774ecfb02882083392561f2ece1248aeb0407d70d141c121b815a3ebb6a6e4beef697e535c10502014ea6e9de83a13a4db9aac25045f5dff5fd508cce4e18d44952534c014394315e54a527abd259d9ed8b33d8809396a3aecf5acfc2ad0d85f6f3e63415f317d9ccf3c6888fcc9239079496630f7d85379234051a40cb27a4f6634ea5dc1d2899fa9c355c202c1e90a47c243fcd5f171652c34dee8c50223fe24559b", 0x4d5) 19.549434732s ago: executing program 4 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x4d, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000048}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x80000000, 0x3, 0xfffffffd, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32=r11, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac"], 0x38}}, 0x20000080) sendto$packet(r8, &(0x7f0000000180)="892c", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0x9, 0x6, @broadcast}, 0x14) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r13, 0x6612) sendto$packet(r12, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 19.445727675s ago: executing program 4 (id=1055): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xfc, 0x3}, 0x20) 19.352910247s ago: executing program 4 (id=1056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="110014004e4c424c5f436850534f963400a98fffffffffffffffff0100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="110014004e4c424c5f434950534f763400000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) 19.15403349s ago: executing program 0 (id=1059): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x80}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9d}], 0x1, 0x170, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfbf, r5, 0x0, 0xa0028000}, 0x38) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x6e692f1e, 0x5, {{0x4a, 0x4, 0x2, 0x2, 0x128, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x7fffffff, {[@ssrr={0x89, 0x27, 0xc8, [@broadcast, @empty, @remote, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010100, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x0, 0x4, "888a"}, {0x0, 0x5, "a7d52b"}, {0x6, 0x12, "0bdd2a58951d99f59d3dddc9d99b23cd"}, {0x2, 0x5, "af8bb4"}, {0x2, 0x6, "5fe1150d"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x57, 0x0, 0x0, [0x3, 0x2, 0x8, 0x101, 0x6, 0x7, 0x400, 0xc7d0, 0xc0000, 0x1]}, @ra={0x94, 0x4, 0xb}, @rr={0x7, 0x2b, 0x2a, [@remote, @rand_addr=0x64010101, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0xbf, [@multicast2, @empty, @broadcast]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x12, "d5dddc95029cd1a28d92b8d7b24d9d96"}, {0x7, 0x7, "3275bb750a"}, {0x5, 0x11, "ed8f4d123aee0e6052710e25009184"}, {0x2, 0xe, "2fad7ff78a44d67c53c14205"}]}, @cipso={0x86, 0x15, 0x0, [{0x1, 0xf, "c036603f7aedaa8dc03947f83b"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', r9, 0x700, 0x8000, 0x4, 0xf76, {{0xe, 0x4, 0x0, 0x1c, 0x38, 0x65, 0x0, 0x4, 0x2d, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp={0x44, 0x24, 0x52, 0x0, 0x2, [0x100, 0x0, 0x6, 0x1000, 0x9, 0x4, 0x0, 0x6bb6edac]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xd7, 0x6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x7800, 0x8000, 0xfffffe00, 0x3ff}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000300", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25070000005800018014000200697036746e6c300000000000000000000800030001000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468315f746f5f627269646765001400020070696d726567000000000000000000004c00018008000300000000000800030002000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB="14000200766574683000000000000000000000001400020076657468315f766972745f7769666900"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r12}, 0x38) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 18.236135171s ago: executing program 0 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x26020480) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x6, 0x1, 0xd, 0xfffd, 0x4986}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x810) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x0, 0x5, 0x7, 0x2eb6, 0x3aa}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x6, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0xb, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff212}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01fefffffffcdbdf25026d0000040045800400018000000000000000"], 0x1c}}, 0xc000) 18.075198595s ago: executing program 0 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x21f142c4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x6, 0x7, 0xff, 0x2, 0x7e38, 0x4, 0x88000000, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x7, 0x2, 0xb, 0x64c}}, &(0x7f0000000180)=0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000ac8000000160a01040000000000000000050000010900010073797a31000000d3f2ae4d4067adc7c7000008000740000000040900020073797a310000000068000380080002400000893e0800014000000000540003801400010070696d36726567300000000000000000140001006d6163766c616e3100000000000000001400010076657468305f766972745f77696669001400010074756e6c3000000000000000000000000c00054000000000000000040900020073797a31000000000900010073797a3000000000500000000b0a0108000000000000000000000003080004400000000208000340000000e908000640ffffff000900010073797a31000000000900010073797a30000000000c000b40000000000000000a140000001100010000000000000000000300000a0000000000000000"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) unshare(0x6a040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0xbb, 0xae, &(0x7f0000000380)="1d3f155f1f1ee3e40201d1f945aff473ceff0ead80da05b273f3e9e4162b892603745c4c01566d0f802fa23a90b4861854b694bb3f50e46c4633e7a10a03526a6e719a2cb3c92bbd445d3119f98bb1cf29db7322c28c0252a5cc942eff876565b98f306899a722521c453428b9f59126f598f4443c0fa00e2e420fe2cd35a237d67016558e6ab63dcc16aa86dcdf231c134be806325f7ca4ad97a2a516e55693026ed77cc7b3a0d24ada124cecf61771062559442715b820c04301", &(0x7f0000001180)=""/174, 0x5, 0x0, 0x48, 0x65, &(0x7f0000000440)="3c443e3a54141016ba2f5c3303e937834d1a46484fb1d060185957d810f1bb1c0cdec2163ab4765e3c5faaa5abadb6b8884fa68dbcb49b2ab9e8a1f0dbab50ca8b8d094dd9627a76", &(0x7f0000000680)="f0fe92f5953dbd1f5081f031951dcbe97edb463cf2be4a2fc247abc62bd5dfcc6bee6460297047827fdfc83c86b2b3a536184dfec0b0b7cf902ed521df0cca3707e6139f21bd6ef447f9d408f551f49b424a076f83afad6ee7a116203ef35b024272547c66", 0x0, 0x0, 0x400}, 0x50) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="580000000306010100000000000000000000000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a32000000000500010007000000090002007379f77a3000000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 17.896096558s ago: executing program 1 (id=1069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0xffffffffffffffff, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2e, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x2, 0x0, 0x1}}, 0x1c}}, 0x800) 17.873380687s ago: executing program 1 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 17.838614683s ago: executing program 3 (id=1071): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1fffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300), 0x0, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r4, 0x3, 0x5}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 17.751815518s ago: executing program 1 (id=1072): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r5 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)='\'', 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x2000c0c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000c042}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r4, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 17.722525119s ago: executing program 0 (id=1073): r0 = socket$key(0xf, 0x3, 0x2) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x3079}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000000300), 0x0, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0x3, 0x5}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10, 0x101, 0xe6, 0xb, 0x5, 0x101, {r7, @in={{0x2, 0x4e24, @local}}, 0xb, 0x22, 0x9, 0x7, 0x5}}, &(0x7f0000000040)=0xb0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r8, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd28, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0) 17.595827159s ago: executing program 3 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x200, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 17.476207899s ago: executing program 3 (id=1075): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000640), &(0x7f0000000740)=0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8", 0x4d}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82", 0x4c}, {&(0x7f0000001400)="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", 0x626}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e53", 0x87}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.475061726s ago: executing program 0 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x48}}, 0x8000) r1 = socket(0x10, 0x3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x22, 0x2, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r6, 0x3cd30000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c70d16ea9fee21f1bac247fabda26b9a4f5ecb977108b86b220526d04"], 0x68) r8 = socket(0x8, 0x3, 0x0) connect$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) setsockopt$sock_int(r5, 0x1, 0x20, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_SEC_TRIM_FILE(r10, 0x4018f514, &(0x7f0000000140)={0x7, 0x4000000000000000, 0x2}) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @xdp={0x2c, 0x0, 0x0, 0x5}, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x2}) 17.463227193s ago: executing program 1 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x26020480) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x6, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x6, 0x1, 0xd, 0xfffd, 0x4986}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x810) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x0, 0x5, 0x7, 0x2eb6, 0x3aa}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x6, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0xb, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff212}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01fefffffffcdbdf25026d0000040045800400018000000000000000"], 0x1c}}, 0xc000) 17.397601896s ago: executing program 3 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000ca1344c5cc3270e600008512000002000000b7000000400000009500c200000000009500001200000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5b, &(0x7f00000000c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 17.328254107s ago: executing program 1 (id=1079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x20, r2, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 17.313571333s ago: executing program 3 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001000)=0x1) (async, rerun: 32) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xdfffffff}]}) (async) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a7aadf991fd2e9ba10000c0a9000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000f00000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001ac0)=""/4084, 0xff4, 0x2df) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 17.232343807s ago: executing program 1 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000900000008000000020ad93fd795f2ff5aff6fc061a5cd7adfeb4ce8f5df1fce81863cb75f6fdea7db0cb9c4331f119236f7174f151a3699c3b57b56df00677340d966dcb72413e7a3195a19a6fa47514a305d1384c726df1cba92dae0a2a6315ef464cc4647c592affdf855d6ab695731f88b813052ae384efc1c864feda195f057ed3d600a42b2c638625857d4"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8bd8b33f513c1c93e72fcc38bc02aeea9fa0acc5c172ca1d82e47a9b18d8871072fe25e73c2518cee5336320772c94b762df7538ce06a91f0aaf94cb07a8ab5c681e8e3ab11a81afb26be8f795156554a5cd33cd5a5c8352de9f68e1d42558efd86299c17b3b3151954e399c47a7b6854b55476e2d8f09918ce94569ad44a4dafdde2ff02cd80f8c1f68435c8f4f88109d986f78bbb90c4e73e695b7ccc73c", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x6f6) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffa, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff, 0x200000000}, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 17.132090046s ago: executing program 3 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0xfffffffffffffffd) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xa, 0x1, 0x2}, {0x4, 0x0, 0x1f28, 0x2, 0x9}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 17.127569068s ago: executing program 0 (id=1083): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="7a25f5eb89e2c31e06502cd65abe521634486347d3", 0x15}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, 0x4, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x43, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.204186317s ago: executing program 2 (id=1090): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r9}, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 16.116915396s ago: executing program 2 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="c99b57381801238c09d0ce635e8fbd301e5a47b2cd6d3eb26e4ea561f3caa73dcd2a6a370554", 0x26) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x2}, 0x10) connect$unix(r2, &(0x7f0000008700)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000dfffff070002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 15.978499739s ago: executing program 2 (id=1092): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2044194}, 0x45) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2044194}, 0x45) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast}, 0xfffffd0c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000580)="390000001300034700bb60dd330597c9d6b60000010000005600008de3cfb7d411efc42800c600000000000000000000000000000000000000beb76496752421d1b1ff7c6a3b30cf787182320193f2727d9144d69fa4cc63627580651337d2501daf78c3d80bf25b190d439f51e9209e5ed7d18ea4d026cd2d639cfc18044d3c53f50f", 0x83}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x101, 0xd66}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000200000000000010001a800c000a80050009000000000014003500776c616e31"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) (async) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000480), 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000480), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r6, @ANYBLOB="00000000000000ff0f00"/20, @ANYRESDEC, @ANYRESDEC=r8, @ANYRESOCT=r10], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r6, @ANYBLOB="00000000000000ff0f00"/20, @ANYRESDEC, @ANYRESDEC=r8, @ANYRESOCT=r10], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 15.880234477s ago: executing program 2 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x894}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7, 0xf5, &(0x7f0000000440)=""/245, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x3, 0x5, 0x2}, {0x0, 0x3, 0x1, 0x5}, {0x3, 0x5, 0xe, 0x3}, {0x3, 0x3, 0xb, 0xb}, {0x0, 0x5, 0x2, 0x2}, {0x1, 0x5, 0x1, 0xc}], 0x10, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001800dd8dfeffffff0500000002000000ff00fe020040000008000400", @ANYRES32=r8, @ANYBLOB="fb5ce9cac5e62efc74831f316e0d095f1fcae3f5daefa8e6499c929c3b4061852cae98f2374d25de5dd89bda6c8a2ed26eda803ca7878d04a4204521085b41fb5b72106fb2b7158caf6197866cc939c6ee935889de40e7f0d9e10b00"/101], 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x24, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @generic={0x18, 0x9, 0xc, 0x2, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x69, &(0x7f00000000c0)=""/105, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1ad9b, r2, 0x3, &(0x7f0000000880)=[r5, r6], &(0x7f00000008c0)=[{0x5, 0x5, 0x1, 0x2}, {0x5, 0x1, 0xc, 0x3}, {0x3, 0x1, 0x4, 0x9}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r10, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 15.832312182s ago: executing program 2 (id=1094): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7340}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x30, 0xc, "f033e3d61fe40a571aa39e6c86541735def2500bd2c0ddb37a344c2951179a975fb6af2c21849ac50aa776f7"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x26, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x1, 0x4, 0x4, 0x1, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf85c}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, @tail_call, @ldst={0x3, 0x0, 0x0, 0x1, 0x0, 0x10, 0x4}, @func, @ringbuf_query, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}]}, &(0x7f0000000300)='GPL\x00', 0x7, 0x92, &(0x7f0000000340)=""/146, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x8, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0xe8, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x7, 0x7f}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x2, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r3, r2, 0x3}, 0x20) 15.781289783s ago: executing program 2 (id=1095): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e908ff8e5f0fd56d15cbbb1500c0207bf6bca1b1568983cf304aa518804cfbe0b72ddd03fb5d165c2785c8e45086", @ANYRES16=r6, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48010}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000ffdbdf2525000000080003000a9b62a70f57125f88b92310168304be1f763d107a48057515fddb5b8d15200e0e8b2835c9287aaac3ed5465db1a40ffc718736860a45133a167ccb37d67662bb1ae557ad2facdcc915c73759d07468fd47b3c196a41beb0a30a39062d82e01a8c772a28dfdb33620e65325a9b091039b754d2ed62d5c8ac7e075eb464a881405f342544c0cb178a12855d887d65e5", @ANYRES32=r8, @ANYBLOB="0c00990008000000590000000a0034000101010101010000080035000400000008003500060000000a0034000101010101010000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x24004050) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10) close(0x3) (async) close(0x3) 3.590378303s ago: executing program 32 (id=1056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="110014004e4c424c5f436850534f963400a98fffffffffffffffff0100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="110014004e4c424c5f434950534f763400000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) 2.09088193s ago: executing program 33 (id=1083): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="7a25f5eb89e2c31e06502cd65abe521634486347d3", 0x15}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, 0x4, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x43, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.06636329s ago: executing program 34 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000900000008000000020ad93fd795f2ff5aff6fc061a5cd7adfeb4ce8f5df1fce81863cb75f6fdea7db0cb9c4331f119236f7174f151a3699c3b57b56df00677340d966dcb72413e7a3195a19a6fa47514a305d1384c726df1cba92dae0a2a6315ef464cc4647c592affdf855d6ab695731f88b813052ae384efc1c864feda195f057ed3d600a42b2c638625857d4"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8bd8b33f513c1c93e72fcc38bc02aeea9fa0acc5c172ca1d82e47a9b18d8871072fe25e73c2518cee5336320772c94b762df7538ce06a91f0aaf94cb07a8ab5c681e8e3ab11a81afb26be8f795156554a5cd33cd5a5c8352de9f68e1d42558efd86299c17b3b3151954e399c47a7b6854b55476e2d8f09918ce94569ad44a4dafdde2ff02cd80f8c1f68435c8f4f88109d986f78bbb90c4e73e695b7ccc73c", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x6f6) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffa, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff, 0x200000000}, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.025674086s ago: executing program 35 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0xfffffffffffffffd) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xa, 0x1, 0x2}, {0x4, 0x0, 0x1f28, 0x2, 0x9}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 0s ago: executing program 36 (id=1095): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e908ff8e5f0fd56d15cbbb1500c0207bf6bca1b1568983cf304aa518804cfbe0b72ddd03fb5d165c2785c8e45086", @ANYRES16=r6, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48010}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000ffdbdf2525000000080003000a9b62a70f57125f88b92310168304be1f763d107a48057515fddb5b8d15200e0e8b2835c9287aaac3ed5465db1a40ffc718736860a45133a167ccb37d67662bb1ae557ad2facdcc915c73759d07468fd47b3c196a41beb0a30a39062d82e01a8c772a28dfdb33620e65325a9b091039b754d2ed62d5c8ac7e075eb464a881405f342544c0cb178a12855d887d65e5", @ANYRES32=r8, @ANYBLOB="0c00990008000000590000000a0034000101010101010000080035000400000008003500060000000a0034000101010101010000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x24004050) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10) close(0x3) (async) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 83.311365][ T5815] cgroup: Unknown subsys name 'net' [ 83.419730][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.428382][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.988319][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.588012][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.603662][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.611615][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.611802][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.626835][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.635305][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.643493][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.650935][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.670054][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.677492][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.686446][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.693657][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.696568][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.701517][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.716214][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.716283][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.734147][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.751221][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.760087][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.774243][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.783791][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.795326][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.806024][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.820042][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.833048][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.358162][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.386979][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.428204][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.684897][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.692633][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.700398][ T5825] bridge_slave_0: entered allmulticast mode [ 88.707706][ T5825] bridge_slave_0: entered promiscuous mode [ 88.715741][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.722843][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.730173][ T5830] bridge_slave_0: entered allmulticast mode [ 88.737412][ T5830] bridge_slave_0: entered promiscuous mode [ 88.762883][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.780568][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.795879][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.803127][ T5825] bridge_slave_1: entered allmulticast mode [ 88.817293][ T5825] bridge_slave_1: entered promiscuous mode [ 88.847580][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.854714][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.865140][ T5830] bridge_slave_1: entered allmulticast mode [ 88.872945][ T5830] bridge_slave_1: entered promiscuous mode [ 88.943569][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.994671][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.033753][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.062605][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.106401][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.115689][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.122802][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.130068][ T5829] bridge_slave_0: entered allmulticast mode [ 89.137600][ T5829] bridge_slave_0: entered promiscuous mode [ 89.184298][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.191545][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.199124][ T5829] bridge_slave_1: entered allmulticast mode [ 89.206253][ T5829] bridge_slave_1: entered promiscuous mode [ 89.260526][ T5830] team0: Port device team_slave_0 added [ 89.285073][ T5825] team0: Port device team_slave_0 added [ 89.308089][ T5830] team0: Port device team_slave_1 added [ 89.317103][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.343953][ T5825] team0: Port device team_slave_1 added [ 89.352216][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.373292][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.380743][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.388285][ T5838] bridge_slave_0: entered allmulticast mode [ 89.395328][ T5838] bridge_slave_0: entered promiscuous mode [ 89.478390][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.485787][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.493116][ T5838] bridge_slave_1: entered allmulticast mode [ 89.501886][ T5838] bridge_slave_1: entered promiscuous mode [ 89.523845][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.531151][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.557492][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.571571][ T5829] team0: Port device team_slave_0 added [ 89.578785][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.586144][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.612396][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.624789][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.631896][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.657983][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.679846][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.687116][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.694275][ T5840] bridge_slave_0: entered allmulticast mode [ 89.701520][ T5840] bridge_slave_0: entered promiscuous mode [ 89.709394][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.716592][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.742547][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.764446][ T5829] team0: Port device team_slave_1 added [ 89.786106][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.793270][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.800550][ T5840] bridge_slave_1: entered allmulticast mode [ 89.807911][ T5840] bridge_slave_1: entered promiscuous mode [ 89.816615][ T5843] Bluetooth: hci0: command tx timeout [ 89.816622][ T5834] Bluetooth: hci1: command tx timeout [ 89.827694][ T5844] Bluetooth: hci3: command tx timeout [ 89.833505][ T5834] Bluetooth: hci2: command tx timeout [ 89.871771][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.896221][ T5834] Bluetooth: hci4: command tx timeout [ 89.913799][ T5825] hsr_slave_0: entered promiscuous mode [ 89.920368][ T5825] hsr_slave_1: entered promiscuous mode [ 89.927763][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.934799][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.961434][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.974925][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.018932][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.026401][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.052561][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.095933][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.123016][ T5830] hsr_slave_0: entered promiscuous mode [ 90.129725][ T5830] hsr_slave_1: entered promiscuous mode [ 90.136905][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.142713][ T5830] Cannot create hsr debugfs directory [ 90.156426][ T5838] team0: Port device team_slave_0 added [ 90.164037][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.198848][ T5838] team0: Port device team_slave_1 added [ 90.293661][ T5840] team0: Port device team_slave_0 added [ 90.332711][ T5829] hsr_slave_0: entered promiscuous mode [ 90.339437][ T5829] hsr_slave_1: entered promiscuous mode [ 90.345499][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.351323][ T5829] Cannot create hsr debugfs directory [ 90.365971][ T5840] team0: Port device team_slave_1 added [ 90.382718][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.389786][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.415996][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.428982][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.436006][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.462162][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.559726][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.566817][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.592851][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.640045][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.647139][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.673292][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.783553][ T5838] hsr_slave_0: entered promiscuous mode [ 90.790657][ T5838] hsr_slave_1: entered promiscuous mode [ 90.797187][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 90.802943][ T5838] Cannot create hsr debugfs directory [ 90.938869][ T5840] hsr_slave_0: entered promiscuous mode [ 90.945292][ T5840] hsr_slave_1: entered promiscuous mode [ 90.951861][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 90.958181][ T5840] Cannot create hsr debugfs directory [ 91.097283][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.134025][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.164013][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.174739][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.282114][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.293542][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.306996][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.319791][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.412453][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.438085][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.448671][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.459446][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.562624][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.581499][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.592626][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.604963][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.617629][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.651205][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.726455][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.733726][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.756578][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.769545][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.780383][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.793516][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.812064][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.819184][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.837073][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.872907][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.897016][ T5834] Bluetooth: hci2: command tx timeout [ 91.902457][ T5834] Bluetooth: hci3: command tx timeout [ 91.905969][ T5844] Bluetooth: hci1: command tx timeout [ 91.913594][ T5843] Bluetooth: hci0: command tx timeout [ 91.916467][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.926127][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.954671][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.961816][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.976183][ T5843] Bluetooth: hci4: command tx timeout [ 92.130725][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.157431][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.192156][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.211352][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.240103][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.247288][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.280196][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.319589][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.326817][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.357702][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.364891][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.379698][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.411089][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.418279][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.474358][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.481515][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.498170][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.523245][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.530387][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.552733][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.688322][ T5825] veth0_vlan: entered promiscuous mode [ 92.740503][ T5830] veth0_vlan: entered promiscuous mode [ 92.779203][ T5825] veth1_vlan: entered promiscuous mode [ 92.797818][ T5830] veth1_vlan: entered promiscuous mode [ 92.902138][ T5825] veth0_macvtap: entered promiscuous mode [ 92.913297][ T5830] veth0_macvtap: entered promiscuous mode [ 92.924874][ T5825] veth1_macvtap: entered promiscuous mode [ 92.941059][ T5830] veth1_macvtap: entered promiscuous mode [ 92.973783][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.016121][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.035199][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.064198][ T1110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.088423][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.118291][ T1110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154419][ T1110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189791][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203673][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.217149][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.242041][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.251602][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.284582][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.350483][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.353202][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.366850][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.398003][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.422441][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.430508][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.472616][ T5829] veth0_vlan: entered promiscuous mode [ 93.500651][ T5829] veth1_vlan: entered promiscuous mode [ 93.551110][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.565189][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.584713][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592908][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.629959][ T5840] veth0_vlan: entered promiscuous mode [ 93.664962][ T5829] veth0_macvtap: entered promiscuous mode [ 93.692147][ T5829] veth1_macvtap: entered promiscuous mode [ 93.705240][ T5840] veth1_vlan: entered promiscuous mode [ 93.731021][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.781854][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.800415][ T5840] veth0_macvtap: entered promiscuous mode [ 93.854432][ T5840] veth1_macvtap: entered promiscuous mode [ 93.902443][ T815] cfg80211: failed to load regulatory.db [ 93.911047][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.956677][ T5947] Zero length message leads to an empty skb [ 93.969659][ T3467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.982015][ T5843] Bluetooth: hci0: command tx timeout [ 93.988182][ T5844] Bluetooth: hci1: command tx timeout [ 93.993604][ T5844] Bluetooth: hci3: command tx timeout [ 94.000023][ T52] Bluetooth: hci2: command tx timeout [ 94.022703][ T3467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.048654][ T3467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.058291][ T5843] Bluetooth: hci4: command tx timeout [ 94.070361][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.092348][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 94.095322][ T201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154888][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.212728][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.261025][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270604][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.289906][ T5838] veth0_vlan: entered promiscuous mode [ 94.304181][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.316756][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.331641][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430715][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.431230][ T5838] veth1_vlan: entered promiscuous mode [ 94.470504][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.540240][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.568204][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.593516][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.633531][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.695175][ T5838] veth0_macvtap: entered promiscuous mode [ 94.722386][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.734971][ T5838] veth1_macvtap: entered promiscuous mode [ 94.748536][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.880852][ T5973] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 94.922531][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.937287][ T5977] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 95.160330][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.168502][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.260441][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 95.279392][ T5996] Bluetooth: MGMT ver 1.23 [ 95.308614][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 95.388435][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.403345][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.534871][ T5981] bridge: RTM_NEWNEIGH with invalid ether address [ 95.548936][ T6001] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.564501][ T6001] netlink: 19 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.574837][ T6001] netlink: 19 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.586610][ T6003] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17'. [ 95.609167][ T6003] netlink: 19 bytes leftover after parsing attributes in process `syz.3.17'. [ 95.625968][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.645103][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.663677][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.779849][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.798995][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.859737][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.880990][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.890968][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.993609][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047740][ T6023] netlink: 'syz.1.20': attribute type 6 has an invalid length. [ 96.055730][ T5844] Bluetooth: hci1: command tx timeout [ 96.061156][ T5844] Bluetooth: hci0: command tx timeout [ 96.062433][ T6023] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 96.070196][ T52] Bluetooth: hci3: command tx timeout [ 96.074421][ T5834] Bluetooth: hci2: command tx timeout [ 96.141197][ T5834] Bluetooth: hci4: command tx timeout [ 96.409192][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437947][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.573566][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.583682][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837482][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.889239][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.187441][ T6075] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 97.335865][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 97.854499][ T6105] warning: `syz.4.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.974190][ T6108] netlink: 'syz.4.46': attribute type 2 has an invalid length. [ 98.136369][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 98.170886][ T6115] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 98.254985][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.271233][ T6115] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.305438][ T6123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.460225][ T6132] dummy0: default FDB implementation only supports local addresses [ 98.992276][ T6165] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 99.379348][ T6173] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 99.396924][ T6184] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 99.408985][ T6173] bond1 (unregistering): Released all slaves [ 99.815698][ T6197] syzkaller0: entered promiscuous mode [ 99.822662][ T6197] syzkaller0: entered allmulticast mode [ 99.841990][ T6205] __nla_validate_parse: 20 callbacks suppressed [ 99.842015][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 99.901059][ T6205] sctp: [Deprecated]: syz.0.71 (pid 6205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.901059][ T6205] Use struct sctp_sack_info instead [ 100.079963][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 100.775815][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 100.846884][ T6244] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 100.939813][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 101.289998][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 101.300775][ T6252] macsec1: entered promiscuous mode [ 101.316969][ T6252] macsec1: entered allmulticast mode [ 101.410197][ T6260] netlink: 6 bytes leftover after parsing attributes in process `syz.2.83'. [ 101.432414][ T6260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.704047][ T6272] x_tables: duplicate underflow at hook 2 [ 102.222387][ T6294] netlink: 56 bytes leftover after parsing attributes in process `syz.4.94'. [ 102.231351][ T6294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.94'. [ 102.240243][ T6294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.94'. [ 102.505845][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 102.673749][ T6307] bond1: entered promiscuous mode [ 102.712306][ T6307] bond1: entered allmulticast mode [ 102.737195][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.921390][ T6320] ipvlan2: entered promiscuous mode [ 102.990269][ T6320] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.869599][ T6345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.059788][ T6348] openvswitch: netlink: Message has 4 unknown bytes. [ 104.181333][ T6356] veth0: entered promiscuous mode [ 104.345134][ T6365] Illegal XDP return value 1343642347 on prog (id 33) dev N/A, expect packet loss! [ 104.348566][ T6357] dvmrp1: entered allmulticast mode [ 104.368065][ T6358] dvmrp1: left allmulticast mode [ 104.396345][ T6368] ip6t_srh: unknown srh match flags 4000 [ 104.721862][ T6374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.755492][ T6374] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 104.918264][ T6385] tipc: Started in network mode [ 104.923430][ T6385] tipc: Node identity f6ade77a7b7b, cluster identity 4711 [ 104.931147][ T6385] tipc: Enabled bearer , priority 0 [ 104.951296][ T6374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.964974][ T6374] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 105.002490][ T6374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.040569][ T6374] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 105.067935][ T6385] syzkaller0: entered promiscuous mode [ 105.076970][ T6385] syzkaller0: entered allmulticast mode [ 105.088133][ T6374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.106302][ T6385] tipc: Resetting bearer [ 105.112808][ T6374] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 105.131381][ T6394] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 105.174106][ T50] tipc: Resetting bearer [ 105.608587][ T6417] team0: No ports can be present during mode change [ 105.631903][ T6415] tipc: Started in network mode [ 105.642757][ T6415] tipc: Node identity 4a2b96a46f8e, cluster identity 4711 [ 105.665404][ T6415] tipc: Enabled bearer , priority 0 [ 105.706048][ T6421] syzkaller0: entered promiscuous mode [ 105.738081][ T6421] syzkaller0: entered allmulticast mode [ 105.754732][ T6384] tipc: Resetting bearer [ 105.796877][ T6424] __nla_validate_parse: 4 callbacks suppressed [ 105.796896][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.100810][ T6384] tipc: Disabling bearer [ 107.116831][ T10] tipc: Node number set to 2379671418 [ 107.128147][ T6413] tipc: Resetting bearer [ 107.140711][ T6413] tipc: Disabling bearer [ 107.155583][ T5889] tipc: Node number set to 631608996 [ 107.289816][ T6460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.348820][ T6466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.131'. [ 107.362205][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 107.371112][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 107.380586][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 107.425384][ T201] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.454815][ T201] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.465800][ T201] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.474521][ T201] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.483967][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 107.827372][ T6487] netlink: 'syz.4.138': attribute type 62 has an invalid length. [ 107.974351][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 108.120583][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 108.562055][ T6540] netlink: 96 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.672151][ T6549] netlink: 104 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.733759][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.761720][ T6551] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 108.801659][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.812635][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.831462][ T6552] veth0: entered promiscuous mode [ 108.850285][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.384202][ T6552] veth0: left promiscuous mode [ 109.391427][ T6568] syz_tun: entered allmulticast mode [ 109.691466][ T6586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.046154][ T6604] nbd0: detected capacity change from 0 to 127 [ 110.054508][ T5843] block nbd0: Receive control failed (result -32) [ 110.588464][ T6640] netlink: 'syz.1.174': attribute type 11 has an invalid length. [ 111.556688][ T6648] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.638272][ T6657] __nla_validate_parse: 10 callbacks suppressed [ 111.638291][ T6657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.180'. [ 111.654680][ T6657] unsupported nlmsg_type 40 [ 111.672087][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.688915][ T6659] netlink: 52 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.732131][ T6661] syzkaller0: entered promiscuous mode [ 111.738857][ T6661] syzkaller0: entered allmulticast mode [ 111.755072][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 111.764304][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 111.875410][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 111.919301][ T6668] geneve2: entered promiscuous mode [ 111.924539][ T6668] geneve2: entered allmulticast mode [ 111.951988][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 112.011465][ T3467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.020811][ T3467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.030797][ T3467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.040560][ T6676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.188'. [ 112.054106][ T6676] netlink: 19 bytes leftover after parsing attributes in process `syz.1.188'. [ 112.063580][ T6676] netlink: 19 bytes leftover after parsing attributes in process `syz.1.188'. [ 112.123841][ T3467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.348474][ T6690] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 112.580015][ T6715] 0ªX¹¦À: renamed from caif0 [ 112.599401][ T6715] 0ªX¹¦À: entered allmulticast mode [ 112.604756][ T6715] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.633964][ T6715] 1ªX¹¦À: renamed from 60ªX¹¦À [ 112.642363][ T6715] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 113.043072][ T6749] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.390625][ T6765] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 113.440786][ T6769] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 113.457993][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.466331][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.510587][ T30] audit: type=1800 audit(1763208283.797:2): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="memory.events" dev="tmpfs" ino=214 res=0 errno=0 [ 113.748947][ T6784] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.308880][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f38000: rx timeout, send abort [ 114.570172][ T6820] tipc: Enabling of bearer rejected, failed to enable media [ 114.665631][ T6826] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 114.702704][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.738852][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.746080][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.753609][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.760781][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.773554][ T6826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.809605][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055b7bc00: rx timeout, send abort [ 114.818051][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f38000: abort rx timeout. Force session deactivation [ 114.906920][ T6822] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 114.968240][ T6843] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 115.035286][ T6840] ip6t_srh: unknown srh invflags 4000 [ 115.141977][ T3467] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.155690][ T3467] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.185995][ T3467] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.213634][ T3467] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.245001][ T6858] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 115.270175][ T6858] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 115.317878][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055b7bc00: abort rx timeout. Force session deactivation [ 115.535184][ T6871] bridge_slave_0: left allmulticast mode [ 115.548973][ T6871] bridge_slave_0: left promiscuous mode [ 115.554856][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.569644][ T6871] bridge_slave_1: left allmulticast mode [ 115.575414][ T6871] bridge_slave_1: left promiscuous mode [ 115.590477][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.603396][ T6871] bond0: (slave bond_slave_0): Releasing backup interface [ 115.633071][ T6871] bond0: (slave bond_slave_1): Releasing backup interface [ 115.643965][ T6877] xt_hashlimit: overflow, rate too high: 0 [ 115.647120][ T6878] netlink: 'syz.4.240': attribute type 10 has an invalid length. [ 115.676970][ T6871] team0: Port device team_slave_0 removed [ 115.692360][ T6871] team0: Port device team_slave_1 removed [ 115.701791][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.719094][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.729401][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.737232][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.746815][ T6871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.763397][ T6874] netlink: 'syz.0.241': attribute type 29 has an invalid length. [ 115.804206][ T6878] bond0: (slave wlan1): Opening slave failed [ 115.815445][ T6876] netlink: 'syz.0.241': attribute type 29 has an invalid length. [ 115.952432][ T6882] IPVS: set_ctl: invalid protocol: 41 172.20.20.35:20000 [ 116.031430][ T6869] syz.4.240 (6869) used greatest stack depth: 17832 bytes left [ 116.241778][ T6905] netlink: 'syz.0.246': attribute type 21 has an invalid length. [ 116.300559][ T6905] netlink: 'syz.0.246': attribute type 5 has an invalid length. [ 116.338192][ T6905] netlink: 'syz.0.246': attribute type 6 has an invalid length. [ 116.394204][ T6908] syzkaller1: entered promiscuous mode [ 116.399924][ T6908] syzkaller1: entered allmulticast mode [ 116.754626][ T6930] IPVS: set_ctl: invalid protocol: 68 172.20.20.187:20000 [ 116.802468][ T6933] xt_l2tp: v2 sid > 0xffff: 262147 [ 116.851755][ T6935] __nla_validate_parse: 176 callbacks suppressed [ 116.851772][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 117.023229][ T6940] tipc: Started in network mode [ 117.029983][ T6940] tipc: Node identity 8a28bf3fb153, cluster identity 4711 [ 117.046034][ T6940] tipc: Enabled bearer , priority 0 [ 117.254282][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 117.267062][ T6951] syzkaller1: entered promiscuous mode [ 117.272754][ T6951] syzkaller1: entered allmulticast mode [ 117.276024][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 117.285451][ T6953] netlink: 64 bytes leftover after parsing attributes in process `syz.3.256'. [ 117.321642][ T6951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.256'. [ 117.383970][ T6939] tipc: Disabling bearer [ 117.493755][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 117.560460][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 117.601836][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.770590][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 118.129064][ T6988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'. [ 118.142420][ T6988] netlink: 7 bytes leftover after parsing attributes in process `syz.2.264'. [ 118.176302][ T6988] netlink: zone id is out of range [ 118.189571][ T6988] netlink: zone id is out of range [ 118.606504][ T7008] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 118.750381][ T7008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.826809][ T7010] syzkaller0: entered promiscuous mode [ 118.832323][ T7010] syzkaller0: entered allmulticast mode [ 119.044974][ T7014] pim6reg1: entered promiscuous mode [ 119.050840][ T7014] pim6reg1: entered allmulticast mode [ 119.157039][ T7013] delete_channel: no stack [ 119.204988][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.279909][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.294735][ T43] IPVS: starting estimator thread 0... [ 119.318923][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.343295][ T7024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.349257][ T7034] Bluetooth: MGMT ver 1.23 [ 119.366987][ T7024] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.418891][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.427302][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.435368][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.445344][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.452713][ T7033] IPVS: using max 31 ests per chain, 74400 per kthread [ 119.463584][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.472418][ T7024] wg1 speed is unknown, defaulting to 1000 [ 119.573878][ T7040] wg1 speed is unknown, defaulting to 1000 [ 120.278326][ T7057] Bluetooth: MGMT ver 1.23 [ 120.350319][ T7060] netlink: 'syz.4.283': attribute type 2 has an invalid length. [ 120.467305][ T7067] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 120.474823][ T7067] syzkaller1: Refused to change device type [ 120.608722][ T7074] tipc: Trying to set illegal importance in message [ 120.792008][ T7089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.893659][ T7093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.269908][ T7112] wg1 speed is unknown, defaulting to 1000 [ 121.475876][ T7122] wg1 speed is unknown, defaulting to 1000 [ 121.962702][ T7145] __nla_validate_parse: 16 callbacks suppressed [ 121.962719][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 122.464452][ T7143] wg1 speed is unknown, defaulting to 1000 [ 122.565402][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 122.574702][ T7161] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 122.629144][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'. [ 122.661380][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'. [ 122.675872][ T7161] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 122.907091][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 122.971342][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'. [ 123.238864][ T7176] wg1 speed is unknown, defaulting to 1000 [ 123.278019][ T7187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.288249][ T7187] netlink: 19 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.298282][ T7187] netlink: 19 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.489080][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 123.533277][ T7194] netlink: zone id is out of range [ 123.548759][ T7194] netlink: zone id is out of range [ 123.570325][ T7194] netlink: get zone limit has 8 unknown bytes [ 123.706856][ T7209] batadv_slave_1: entered promiscuous mode [ 123.811337][ T7209] batadv_slave_1: left promiscuous mode [ 123.857279][ T7217] batadv_slave_1: entered promiscuous mode [ 123.936633][ T7221] veth0: entered promiscuous mode [ 123.950819][ T7216] batadv_slave_1: left promiscuous mode [ 123.990726][ T7221] veth0: left promiscuous mode [ 124.154732][ T7237] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 124.236145][ T7237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.294174][ T7231] wg1 speed is unknown, defaulting to 1000 [ 124.325253][ T7242] tipc: Started in network mode [ 124.337702][ T7242] tipc: Node identity 4, cluster identity 4711 [ 124.358025][ T7242] tipc: Node number set to 4 [ 124.391685][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.424537][ T7237] bond1: (slave batadv1): making interface the new active one [ 124.443710][ T7237] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 124.493898][ T7240] wg1 speed is unknown, defaulting to 1000 [ 124.970728][ T7269] tipc: Enabled bearer , priority 0 [ 124.978367][ T7269] syzkaller0: entered promiscuous mode [ 124.983853][ T7269] syzkaller0: entered allmulticast mode [ 125.013944][ T7269] tipc: Resetting bearer [ 125.117631][ T7273] netlink: 'syz.3.340': attribute type 3 has an invalid length. [ 125.388842][ T7268] tipc: Resetting bearer [ 125.405413][ T7268] tipc: Disabling bearer [ 125.464206][ T7297] syz.3.344 (7297) used obsolete PPPIOCDETACH ioctl [ 125.621299][ T7307] netlink: 'syz.0.348': attribute type 13 has an invalid length. [ 125.630289][ T7307] netlink: 'syz.0.348': attribute type 17 has an invalid length. [ 125.806346][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.818831][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.834730][ T7307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.973304][ T7312] wg1 speed is unknown, defaulting to 1000 [ 126.855058][ T7347] tipc: Enabled bearer , priority 0 [ 126.877811][ T7347] syzkaller0: entered promiscuous mode [ 126.904152][ T7347] syzkaller0: entered allmulticast mode [ 126.942748][ T7348] bridge0: entered promiscuous mode [ 126.955829][ T7348] macsec1: entered promiscuous mode [ 126.970614][ T7348] bridge0: port 3(macsec1) entered blocking state [ 126.993737][ T7348] bridge0: port 3(macsec1) entered disabled state [ 127.004207][ T7348] macsec1: entered allmulticast mode [ 127.033346][ T7348] bridge0: entered allmulticast mode [ 127.064912][ T7348] macsec1: left allmulticast mode [ 127.083882][ T7348] bridge0: left allmulticast mode [ 127.099177][ T7348] bridge0: left promiscuous mode [ 127.147268][ T7360] __nla_validate_parse: 48 callbacks suppressed [ 127.147289][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 127.185402][ T7357] tipc: Resetting bearer [ 127.247565][ T7361] netlink: 'syz.1.359': attribute type 11 has an invalid length. [ 127.256380][ T7361] netlink: 'syz.1.359': attribute type 11 has an invalid length. [ 127.264117][ T7361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.359'. [ 127.303202][ T7345] tipc: Resetting bearer [ 127.332115][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 127.417533][ T7345] tipc: Disabling bearer [ 127.526198][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.586099][ T7359] wg1 speed is unknown, defaulting to 1000 [ 127.926534][ T7391] openvswitch: netlink: IP tunnel dst address not specified [ 127.943551][ T7393] netlink: 68 bytes leftover after parsing attributes in process `syz.4.373'. [ 128.109121][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'. [ 128.125303][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.375'. [ 128.166863][ T7410] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 128.213156][ T7415] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 128.301143][ T7423] netlink: 'syz.3.380': attribute type 39 has an invalid length. [ 128.453447][ T7415] bond2: entered promiscuous mode [ 128.464916][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.478403][ T7417] netlink: 120 bytes leftover after parsing attributes in process `syz.4.375'. [ 128.493644][ T7417] netlink: 120 bytes leftover after parsing attributes in process `syz.4.375'. [ 128.515763][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 128.597529][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.623452][ T7420] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 128.630019][ T7444] sctp: [Deprecated]: syz.4.385 (pid 7444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.630019][ T7444] Use struct sctp_sack_info instead [ 128.650297][ T7420] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 128.652059][ T7444] sctp: [Deprecated]: syz.4.385 (pid 7444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.652059][ T7444] Use struct sctp_sack_info instead [ 128.663448][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 128.699108][ T7420] bond2: (slave wireguard0): making interface the new active one [ 128.709607][ T7420] wireguard0: entered promiscuous mode [ 128.719423][ T7420] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 128.972283][ T7453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.116660][ T7467] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.135151][ T7472] tipc: Enabling of bearer rejected, failed to enable media [ 129.279293][ T7474] nbd1: detected capacity change from 0 to 127 [ 129.474433][ T5843] block nbd1: Receive control failed (result -32) [ 129.826551][ T7514] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.972311][ T7523] wg1 speed is unknown, defaulting to 1000 [ 129.979230][ T7502] syzkaller1: entered promiscuous mode [ 129.990531][ T7502] syzkaller1: entered allmulticast mode [ 130.023633][ T7527] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 130.052483][ T7521] wg1 speed is unknown, defaulting to 1000 [ 130.124986][ T7529] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 130.357948][ T7533] 8021q: VLANs not supported on caif0 [ 130.640517][ T7559] netlink: 'syz.2.412': attribute type 83 has an invalid length. [ 130.774407][ T7567] syz_tun: entered promiscuous mode [ 130.806759][ T7567] syz_tun: left promiscuous mode [ 130.913966][ T7566] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 130.953405][ T7569] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 131.590819][ T7590] wg1 speed is unknown, defaulting to 1000 [ 131.666703][ T43] IPVS: starting estimator thread 0... [ 131.709707][ T7601] netlink: 'syz.3.425': attribute type 13 has an invalid length. [ 131.765746][ T7599] IPVS: using max 32 ests per chain, 76800 per kthread [ 131.974079][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.982472][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.178527][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.212619][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.638411][ T7593] wg1 speed is unknown, defaulting to 1000 [ 132.746645][ T5871] wg1 speed is unknown, defaulting to 1000 [ 132.750832][ T177] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.753137][ T5871] syz0: Port: 1 Link DOWN [ 132.771690][ T177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.813495][ T177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.827412][ T177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.871385][ T7638] syzkaller1: entered promiscuous mode [ 132.880657][ T7638] syzkaller1: entered allmulticast mode [ 132.907162][ T7641] __nla_validate_parse: 21 callbacks suppressed [ 132.907179][ T7641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.431'. [ 132.923934][ T7641] netlink: 19 bytes leftover after parsing attributes in process `syz.0.431'. [ 132.951328][ T7641] netlink: 19 bytes leftover after parsing attributes in process `syz.0.431'. [ 132.960602][ T7643] vlan0: entered promiscuous mode [ 133.173215][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 133.404813][ T7659] netlink: 244 bytes leftover after parsing attributes in process `syz.1.437'. [ 133.441851][ T7664] syz_tun: entered allmulticast mode [ 133.454100][ T7659] netlink: 'syz.1.437': attribute type 23 has an invalid length. [ 133.479590][ T7664] pimreg: entered allmulticast mode [ 133.513746][ T7663] syz_tun: left allmulticast mode [ 133.621532][ T7686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.444'. [ 133.641200][ T7686] netlink: 19 bytes leftover after parsing attributes in process `syz.2.444'. [ 133.675372][ T7686] netlink: 19 bytes leftover after parsing attributes in process `syz.2.444'. [ 133.748964][ T7691] 8021q: VLANs not supported on ip6gre0 [ 133.757702][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 134.205783][ T7706] tipc: Enabled bearer , priority 0 [ 134.662289][ T7706] tipc: Disabling bearer [ 134.750519][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.452'. [ 134.861198][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.867998][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.890727][ T7731] x_tables: duplicate underflow at hook 1 [ 134.938613][ T7730] bridge_slave_1: left allmulticast mode [ 134.953010][ T7730] bridge_slave_1: left promiscuous mode [ 134.990064][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.006764][ T7730] bridge_slave_0: left allmulticast mode [ 135.022590][ T7730] bridge_slave_0: left promiscuous mode [ 135.028668][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.169326][ T7735] delete_channel: no stack [ 135.175303][ T7731] wg1 speed is unknown, defaulting to 1000 [ 135.184048][ T7742] bridge: RTM_NEWNEIGH with invalid ether address [ 135.615299][ T7760] netlink: 'syz.2.464': attribute type 28 has an invalid length. [ 135.960376][ T7796] netlink: 'syz.3.472': attribute type 3 has an invalid length. [ 136.604137][ T7815] wg1 speed is unknown, defaulting to 1000 [ 136.940466][ T7832] netlink: 'syz.3.480': attribute type 21 has an invalid length. [ 137.153752][ T7843] IPVS: rr: FWM 3 0x00000003 - no destination available [ 137.173157][ T7619] IPVS: starting estimator thread 0... [ 137.215056][ T7841] wg1 speed is unknown, defaulting to 1000 [ 137.266259][ T7845] IPVS: using max 30 ests per chain, 72000 per kthread [ 137.610678][ T7856] syzkaller1: entered promiscuous mode [ 137.616444][ T7856] syzkaller1: entered allmulticast mode [ 137.932632][ T7881] __nla_validate_parse: 15 callbacks suppressed [ 137.932650][ T7881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.491'. [ 137.984434][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 137.997156][ T7875] netlink: 'syz.4.491': attribute type 3 has an invalid length. [ 138.026613][ T7880] bond0: entered promiscuous mode [ 138.033846][ T7880] bond_slave_0: entered promiscuous mode [ 138.042701][ T7880] bond_slave_1: entered promiscuous mode [ 138.051675][ T7880] bridge0: entered promiscuous mode [ 138.060166][ T7880] batadv0: entered promiscuous mode [ 138.073562][ T7880] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 138.086205][ T7880] bond0: left promiscuous mode [ 138.091086][ T7880] bond_slave_0: left promiscuous mode [ 138.107937][ T7880] bond_slave_1: left promiscuous mode [ 138.120483][ T7880] bridge0: left promiscuous mode [ 138.127912][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 138.143758][ T7880] batadv0: left promiscuous mode [ 138.163687][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 138.199304][ T7890] netlink: 56 bytes leftover after parsing attributes in process `syz.4.496'. [ 138.200269][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 138.216877][ T7890] netlink: 19 bytes leftover after parsing attributes in process `syz.4.496'. [ 138.227438][ T7890] netlink: 19 bytes leftover after parsing attributes in process `syz.4.496'. [ 138.323345][ T7889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.677534][ T7907] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 138.765117][ T7910] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 138.802988][ T7910] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 138.831829][ T7910] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 138.874715][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 138.968830][ T7925] wg1 speed is unknown, defaulting to 1000 [ 139.021496][ T7936] erspan0: entered promiscuous mode [ 139.027451][ T7936] erspan0: entered allmulticast mode [ 139.115153][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 140.243345][ T7977] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 140.261067][ T7978] bond4: entered promiscuous mode [ 140.283884][ T7978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.468536][ T7996] netlink: 'syz.1.522': attribute type 12 has an invalid length. [ 140.709848][ T8007] netlink: 'syz.4.525': attribute type 2 has an invalid length. [ 140.748262][ T8007] wg1 speed is unknown, defaulting to 1000 [ 140.823702][ T8008] wg1 speed is unknown, defaulting to 1000 [ 140.864818][ T8012] tipc: New replicast peer: 0.0.0.0 [ 140.884382][ T8012] tipc: Enabled bearer , priority 10 [ 141.039475][ T8022] tipc: New replicast peer: 172.30.1.1 [ 141.264389][ T8034] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 141.270243][ T8031] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 141.485374][ T8044] wg1 speed is unknown, defaulting to 1000 [ 141.594818][ T8045] wg1 speed is unknown, defaulting to 1000 [ 142.693795][ T8124] ±ÿ: renamed from team_slave_1 (while UP) [ 142.821712][ T8118] wg1 speed is unknown, defaulting to 1000 [ 142.871188][ T8127] wg1 speed is unknown, defaulting to 1000 [ 143.095897][ T8147] netlink: 'syz.2.561': attribute type 83 has an invalid length. [ 143.135047][ T8149] __nla_validate_parse: 26 callbacks suppressed [ 143.135064][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 143.158143][ T8150] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 143.527947][ T8136] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 143.545424][ T8136] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 143.611061][ T8149] hsr_slave_0: left promiscuous mode [ 143.625595][ T8149] hsr_slave_1: left promiscuous mode [ 143.668993][ T1110] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.685660][ T1110] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.705046][ T1110] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.724449][ T1110] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.756453][ T1110] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.766232][ T1110] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.830316][ T1110] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.846524][ T1110] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.900133][ T8162] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.565'. [ 143.920581][ T8161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.565'. [ 143.931500][ T8161] netlink: 19 bytes leftover after parsing attributes in process `syz.3.565'. [ 143.943389][ T8161] netlink: 19 bytes leftover after parsing attributes in process `syz.3.565'. [ 144.031581][ T8172] tipc: New replicast peer: 0.0.0.0 [ 144.042186][ T8172] tipc: Enabled bearer , priority 10 [ 144.050731][ T8173] tipc: Enabling of bearer rejected, already enabled [ 144.071042][ T8172] tipc: New replicast peer: 172.30.1.3 [ 144.088866][ T8172] sctp: [Deprecated]: syz.2.569 (pid 8172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.088866][ T8172] Use struct sctp_sack_info instead [ 144.423084][ T8204] netlink: 56 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.443323][ T8204] netlink: 19 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.510059][ T8204] netlink: 19 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.559467][ T8204] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.734196][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 144.771838][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.801178][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.008561][ T8226] openvswitch: netlink: IP tunnel dst address not specified [ 145.598437][ T8255] bridge3: entered promiscuous mode [ 147.044513][ T8329] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 147.100666][ T8331] tipc: Enabled bearer , priority 0 [ 147.108445][ T8331] syzkaller0: entered promiscuous mode [ 147.114089][ T8331] syzkaller0: entered allmulticast mode [ 147.168545][ T8331] tipc: Resetting bearer [ 147.184120][ T8330] tipc: Resetting bearer [ 147.236539][ T8330] tipc: Disabling bearer [ 147.614462][ T8361] bond0: (slave team0): Releasing backup interface [ 147.632818][ T8361] bridge_slave_0: left allmulticast mode [ 147.649531][ T8361] bridge_slave_0: left promiscuous mode [ 147.668153][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.705914][ T8361] bridge_slave_1: left allmulticast mode [ 147.723031][ T8361] bridge_slave_1: left promiscuous mode [ 147.748404][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.784670][ T8361] bond0: (slave bond_slave_0): Releasing backup interface [ 147.809523][ T8361] bond0: (slave bond_slave_1): Releasing backup interface [ 147.841290][ T8361] team0: Port device team_slave_0 removed [ 147.852419][ T8361] team0: Port device team_slave_1 removed [ 147.860571][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.869896][ T8361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.878537][ T8361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.959374][ T8391] nbd: must specify at least one socket [ 147.965189][ T8390] nbd: must specify at least one socket [ 148.161422][ T8395] __nla_validate_parse: 13 callbacks suppressed [ 148.161439][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 148.202886][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 148.318807][ T8401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.348261][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 148.357384][ T8415] syzkaller0: entered promiscuous mode [ 148.357405][ T8415] syzkaller0: entered allmulticast mode [ 148.373761][ T8415] tipc: Started in network mode [ 148.380465][ T8415] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 148.391422][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 148.393045][ T8415] tipc: Enabling of bearer rejected, failed to enable media [ 148.419142][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 148.428759][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 148.468919][ T8401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.517504][ T8419] sit0: entered promiscuous mode [ 148.522830][ T8419] netlink: 1 bytes leftover after parsing attributes in process `syz.4.639'. [ 148.569940][ T8401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.705384][ T8401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.818347][ T8437] trusted_key: syz.4.645 sent an empty control message without MSG_MORE. [ 148.853958][ T8446] netlink: 140 bytes leftover after parsing attributes in process `syz.3.647'. [ 148.888278][ T8437] syz.4.645: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.906498][ T8437] CPU: 0 UID: 0 PID: 8437 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) [ 148.906526][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.906546][ T8437] Call Trace: [ 148.906561][ T8437] [ 148.906578][ T8437] dump_stack_lvl+0x189/0x250 [ 148.906634][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.906667][ T8437] ? __pfx__printk+0x10/0x10 [ 148.906691][ T8437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.906746][ T8437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.906777][ T8437] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 148.906809][ T8437] warn_alloc+0x214/0x310 [ 148.906842][ T8437] ? stack_depot_save_flags+0x40/0x860 [ 148.906879][ T8437] ? __pfx_warn_alloc+0x10/0x10 [ 148.906913][ T8437] ? kasan_save_track+0x3e/0x80 [ 148.906942][ T8437] ? __kasan_kmalloc+0x93/0xb0 [ 148.906961][ T8437] ? xsk_setsockopt+0x4dc/0x8d0 [ 148.906990][ T8437] ? do_sock_setsockopt+0x17c/0x1b0 [ 148.907012][ T8437] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 148.907033][ T8437] ? do_syscall_64+0xfa/0xfa0 [ 148.907052][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.907085][ T8437] __vmalloc_node_range_noprof+0x125/0x12d0 [ 148.907160][ T8437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.907195][ T8437] ? __kasan_kmalloc+0x93/0xb0 [ 148.907221][ T8437] vmalloc_user_noprof+0xad/0xf0 [ 148.907251][ T8437] ? xskq_create+0xbf/0x170 [ 148.907285][ T8437] xskq_create+0xbf/0x170 [ 148.907320][ T8437] xsk_init_queue+0xb0/0x110 [ 148.907354][ T8437] xsk_setsockopt+0x4dc/0x8d0 [ 148.907386][ T8437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.907419][ T8437] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.907452][ T8437] ? aa_sock_opt_perm+0xff/0x1b0 [ 148.907487][ T8437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.907507][ T8437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.907538][ T8437] do_sock_setsockopt+0x17c/0x1b0 [ 148.907566][ T8437] __x64_sys_setsockopt+0x13f/0x1b0 [ 148.907596][ T8437] do_syscall_64+0xfa/0xfa0 [ 148.907627][ T8437] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.907649][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.907676][ T8437] ? clear_bhb_loop+0x60/0xb0 [ 148.907701][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.907722][ T8437] RIP: 0033:0x7fa95d98f6c9 [ 148.907750][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.907772][ T8437] RSP: 002b:00007fa95e7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.907798][ T8437] RAX: ffffffffffffffda RBX: 00007fa95dbe5fa0 RCX: 00007fa95d98f6c9 [ 148.907813][ T8437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 148.907825][ T8437] RBP: 00007fa95da11f91 R08: 0000000000000004 R09: 0000000000000000 [ 148.907837][ T8437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.907850][ T8437] R13: 00007fa95dbe6038 R14: 00007fa95dbe5fa0 R15: 00007ffc968b94e8 [ 148.907897][ T8437] [ 148.907916][ T8437] Mem-Info: [ 148.942244][ T8448] geneve3: entered promiscuous mode [ 148.966329][ T8437] active_anon:3946 inactive_anon:0 isolated_anon:0 [ 148.966329][ T8437] active_file:3075 inactive_file:39899 isolated_file:0 [ 148.966329][ T8437] unevictable:768 dirty:286 writeback:0 [ 148.966329][ T8437] slab_reclaimable:11512 slab_unreclaimable:139134 [ 148.966329][ T8437] mapped:29045 shmem:1357 pagetables:996 [ 148.966329][ T8437] sec_pagetables:0 bounce:0 [ 148.966329][ T8437] kernel_misc_reclaimable:0 [ 148.966329][ T8437] free:1280429 free_pcp:23614 free_cma:0 [ 149.155067][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 149.163409][ T8437] Node 0 active_anon:15784kB inactive_anon:0kB active_file:12300kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116180kB dirty:1144kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12280kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.270034][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 149.293092][ T8437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.332189][ T8437] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.362423][ T8437] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 149.368275][ T8437] Node 0 DMA32 free:1214980kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16184kB inactive_anon:0kB active_file:12300kB inactive_file:159392kB unevictable:1536kB writepending:1144kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:73472kB local_pcp:45636kB free_cma:0kB [ 149.402304][ T8437] lowmem_reserve[]: 0 0 0 0 0 [ 149.407397][ T8437] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.437310][ T8437] lowmem_reserve[]: 0 0 0 0 0 [ 149.442092][ T8437] Node 1 Normal free:3890112kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20896kB local_pcp:13376kB free_cma:0kB [ 149.474657][ T8437] lowmem_reserve[]: 0 0 0 0 0 [ 149.479462][ T8437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.492364][ T8437] Node 0 DMA32: 83*4kB (UM) 1167*8kB (UME) 543*16kB (UM) 371*32kB (UME) 229*64kB (UM) 177*128kB (UME) 132*256kB (UM) 43*512kB (UME) 28*1024kB (UME) 7*2048kB (UM) 256*4096kB (M) = 1214932kB [ 149.511521][ T8437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.523412][ T8437] Node 1 Normal: 234*4kB (UE) 65*8kB (UME) 47*16kB (UME) 99*32kB (UME) 35*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890112kB [ 149.542438][ T1110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.549402][ T8437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.567478][ T8437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.579963][ T8437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.589726][ T8437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.594429][ T1110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.600585][ T8437] 44328 total pagecache pages [ 149.645608][ T8437] 0 pages in swap cache [ 149.652198][ T8437] Free swap = 124996kB [ 149.685665][ T8437] Total swap = 124996kB [ 149.689856][ T8437] 2097051 pages RAM [ 149.693668][ T8437] 0 pages HighMem/MovableOnly [ 149.698585][ T8437] 424132 pages reserved [ 149.702752][ T8437] 0 pages cma reserved [ 149.764661][ T1110] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.773361][ T1110] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.888288][ T30] audit: type=1800 audit(1763208320.177:3): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.654" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=679 res=0 errno=0 [ 150.112122][ T8487] wg1 speed is unknown, defaulting to 1000 [ 150.488710][ T8504] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 151.009941][ T8520] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20129 [ 151.242408][ T8528] ÿÿÿÿÿÿ: renamed from dummy0 [ 151.284691][ T8516] wg1 speed is unknown, defaulting to 1000 [ 151.855804][ T8545] pimreg: entered allmulticast mode [ 151.911794][ T8546] pimreg: left allmulticast mode [ 151.947933][ T8554] wg1 speed is unknown, defaulting to 1000 [ 152.082877][ T8562] team0: Port device bridge0 added [ 152.200160][ T8567] IPVS: ip_vs_edit_dest(): server weight less than zero [ 152.788155][ T8590] tipc: Enabling of bearer rejected, failed to enable media [ 152.809166][ T8592] tipc: Enabled bearer , priority 0 [ 152.816939][ T8592] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 152.824598][ T8592] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 152.845992][ T8594] hsr_slave_0: left promiscuous mode [ 152.853748][ T8594] hsr_slave_1: left promiscuous mode [ 152.895251][ T8597] bridge_slave_0: entered allmulticast mode [ 152.903803][ T8592] tipc: Resetting bearer [ 153.252497][ T8629] __nla_validate_parse: 14 callbacks suppressed [ 153.252516][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.278405][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.699'. [ 153.303070][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.321363][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.331376][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.342335][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.426255][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 153.470022][ T8639] team1: entered promiscuous mode [ 153.478193][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 153.489668][ T8639] team1: entered allmulticast mode [ 153.495237][ T8639] 8021q: adding VLAN 0 to HW filter on device team1 [ 153.503599][ T8633] wg1 speed is unknown, defaulting to 1000 [ 153.673269][ T8652] tipc: Enabling of bearer rejected, failed to enable media [ 153.700608][ T8654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.715914][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 153.731896][ T8654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.869958][ T8663] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 153.883837][ T8665] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 154.030625][ T8676] wg1 speed is unknown, defaulting to 1000 [ 154.124949][ T8687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.716'. [ 154.455257][ T8707] tipc: Enabling of bearer rejected, failed to enable media [ 154.589112][ T8717] wg1 speed is unknown, defaulting to 1000 [ 154.658996][ T8725] tipc: Enabled bearer , priority 0 [ 154.702446][ T8722] wg1 speed is unknown, defaulting to 1000 [ 154.711379][ T8725] tipc: Disabling bearer [ 155.218347][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 155.455235][ T8769] wg1 speed is unknown, defaulting to 1000 [ 155.853581][ T8799] tipc: Enabling of bearer rejected, failed to enable media [ 156.005976][ T8801] wg1 speed is unknown, defaulting to 1000 [ 156.468743][ T8833] wg1 speed is unknown, defaulting to 1000 [ 156.495824][ T8838] sctp: [Deprecated]: syz.4.755 (pid 8838) Use of int in max_burst socket option deprecated. [ 156.495824][ T8838] Use struct sctp_assoc_value instead [ 156.725737][ T8848] tipc: Enabling of bearer rejected, failed to enable media [ 156.805082][ T8862] xt_ecn: cannot match TCP bits for non-tcp packets [ 157.173769][ T8884] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.259644][ T8888] wg1 speed is unknown, defaulting to 1000 [ 157.278313][ T8887] wg1 speed is unknown, defaulting to 1000 [ 157.845328][ T8909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.863412][ T8913] tipc: Enabling of bearer rejected, failed to enable media [ 158.091539][ T8932] Bluetooth: MGMT ver 1.23 [ 158.333253][ T8950] __nla_validate_parse: 22 callbacks suppressed [ 158.333271][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 158.411599][ T8955] xt_l2tp: v2 tid > 0xffff: 37482740 [ 158.422511][ T8955] xt_l2tp: v2 tid > 0xffff: 37482740 [ 158.669255][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.791'. [ 158.791237][ T9004] netlink: 108 bytes leftover after parsing attributes in process `syz.0.790'. [ 158.883199][ T9014] pim6reg1: entered promiscuous mode [ 158.888930][ T9014] pim6reg1: entered allmulticast mode [ 158.949093][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 158.980986][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 159.038118][ T9020] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 159.693384][ T9064] Cannot find del_set index 4 as target [ 159.707066][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.808'. [ 160.084894][ T9087] netlink: 'syz.3.813': attribute type 3 has an invalid length. [ 160.096399][ T9087] netlink: 'syz.3.813': attribute type 3 has an invalid length. [ 160.312741][ T9094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.366329][ T9094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.406437][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 160.521599][ T9094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.533017][ T9118] netlink: 80 bytes leftover after parsing attributes in process `syz.3.822'. [ 160.547016][ T9094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.677283][ T9094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.691896][ T9094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.785863][ T9094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.806116][ T9094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.910843][ T9000] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.919939][ T9000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.955780][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 160.983520][ T9000] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.004493][ T9000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.049370][ T9000] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.069848][ T9000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.119416][ T9000] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.128949][ T9000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.224546][ T9133] xt_TCPMSS: Only works on TCP SYN packets [ 161.265003][ T9153] wg1 speed is unknown, defaulting to 1000 [ 161.296651][ T9161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.834'. [ 161.448020][ T9164] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 161.457636][ T9164] bridge2: entered allmulticast mode [ 162.250345][ T9217] syzkaller0: entered promiscuous mode [ 162.266534][ T9217] syzkaller0: entered allmulticast mode [ 162.364857][ T9228] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 162.504660][ T9234] netlink: 'syz.3.857': attribute type 7 has an invalid length. [ 162.512612][ T9234] netlink: 'syz.3.857': attribute type 8 has an invalid length. [ 162.532924][ T9234] ip6gretap0: entered promiscuous mode [ 162.541370][ T9234] syz_tun: entered promiscuous mode [ 162.548638][ T9234] ip6gretap0: left promiscuous mode [ 162.554823][ T9234] syz_tun: left promiscuous mode [ 162.583903][ T9232] wg1 speed is unknown, defaulting to 1000 [ 163.167649][ T9271] syzkaller0: tun_net_xmit 76 [ 163.172699][ T9271] tipc: Enabled bearer , priority 0 [ 163.183843][ T9271] tipc: Resetting bearer [ 163.190182][ T9271] syzkaller0: tun_net_xmit 76 [ 163.314018][ T9269] tipc: Resetting bearer [ 163.631375][ T9302] __nla_validate_parse: 9 callbacks suppressed [ 163.631392][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 164.489031][ T9269] tipc: Disabling bearer [ 164.552675][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.875'. [ 164.568080][ T9306] bond1 (unregistering): Released all slaves [ 164.664590][ T9314] netlink: 56 bytes leftover after parsing attributes in process `syz.4.877'. [ 164.673820][ T9314] netlink: 19 bytes leftover after parsing attributes in process `syz.4.877'. [ 164.698686][ T9314] netlink: 19 bytes leftover after parsing attributes in process `syz.4.877'. [ 164.816176][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.879'. [ 164.849184][ T9323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.879'. [ 165.026671][ T9340] netlink: 260 bytes leftover after parsing attributes in process `syz.3.887'. [ 165.039615][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 165.162283][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 165.196703][ T9346] macvtap1: entered promiscuous mode [ 165.202057][ T9346] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 166.010692][ T9372] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 166.170497][ T9372] batadv_slave_0: entered promiscuous mode [ 166.229153][ T9381] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20000 [ 166.405048][ T9395] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 174.716465][ T9444] __nla_validate_parse: 9 callbacks suppressed [ 174.716485][ T9444] netlink: 128 bytes leftover after parsing attributes in process `syz.1.910'. [ 174.757543][ T9444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 174.823134][ T9436] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 174.843034][ T9452] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 174.865795][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 174.916599][ T9451] netlink: 280 bytes leftover after parsing attributes in process `syz.4.914'. [ 174.934461][ T9452] veth1_vlan: entered allmulticast mode [ 174.940924][ T9452] veth1_vlan: left promiscuous mode [ 174.950928][ T9452] team0: Device veth1_vlan failed to register rx_handler [ 175.133814][ T9463] netlink: 56 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.183758][ T9463] netlink: 19 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.214411][ T9463] netlink: 19 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.255258][ T9457] Cannot find add_set index 2 as target [ 175.567406][ T9467] wg1 speed is unknown, defaulting to 1000 [ 175.901959][ T9493] netlink: 'syz.4.927': attribute type 21 has an invalid length. [ 175.935606][ T9493] netlink: 128 bytes leftover after parsing attributes in process `syz.4.927'. [ 175.948052][ T9493] netlink: 'syz.4.927': attribute type 4 has an invalid length. [ 176.005586][ T9493] netlink: 3 bytes leftover after parsing attributes in process `syz.4.927'. [ 176.221533][ T9501] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.930'. [ 176.589638][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.932'. [ 176.616282][ T9512] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 176.719896][ T9514] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.746768][ T9514] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 176.780960][ T9512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.856039][ T9512] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 176.896998][ T9512] macvlan4: entered promiscuous mode [ 176.902336][ T9512] macvlan4: entered allmulticast mode [ 176.908868][ T9512] bond2: entered promiscuous mode [ 176.914587][ T9512] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 176.936829][ T9512] bond2: left promiscuous mode [ 177.102123][ T9524] netlink: 'syz.0.936': attribute type 12 has an invalid length. [ 177.558841][ T9545] vlan3: entered promiscuous mode [ 177.564245][ T9545] macvtap0: entered promiscuous mode [ 177.719650][ T9552] block nbd1: NBD_DISCONNECT [ 177.724461][ T9552] block nbd1: Send disconnect failed -32 [ 177.733073][ T9552] block nbd1: shutting down sockets [ 178.013743][ T9568] netlink: 'syz.2.950': attribute type 13 has an invalid length. [ 178.018392][ T9566] nicvf0: entered promiscuous mode [ 178.029644][ T9000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 178.435256][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.442737][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.534413][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.552157][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.704360][ T9000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 178.713397][ T9000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 178.735716][ T9000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 178.754888][ T9000] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.775508][ T9000] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.808978][ T3467] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.818637][ T3467] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.827644][ T3467] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.854221][ T3467] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.878774][ T3467] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.892130][ T3467] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.251695][ T9611] wg1 speed is unknown, defaulting to 1000 [ 179.483841][ T9617] wg1 speed is unknown, defaulting to 1000 [ 179.512669][ T9635] tun0: tun_chr_ioctl cmd 2148045848 [ 179.779901][ T9648] netlink: 'syz.3.967': attribute type 4 has an invalid length. [ 179.873216][ T9645] netlink: 'syz.3.967': attribute type 39 has an invalid length. [ 179.915747][ T9651] __nla_validate_parse: 7 callbacks suppressed [ 179.915758][ T9651] netlink: 27 bytes leftover after parsing attributes in process `syz.1.970'. [ 180.020210][ T9654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.094501][ T9654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.141756][ T9654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.205026][ T9654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.226254][ T9660] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 180.261099][ T9660] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.272841][ T9660] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 180.319537][ T9662] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 180.338873][ T9660] gretap1: entered promiscuous mode [ 180.344212][ T9660] gretap1: entered allmulticast mode [ 180.352930][ T9660] bond3: (slave gretap1): making interface the new active one [ 180.361278][ T9660] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 180.372459][ T9660] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 180.609578][ T9672] bond1 (unregistering): Released all slaves [ 180.912537][ T8998] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.947971][ T8999] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.982840][ T8999] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.009555][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 181.040360][ T9692] netlink: 'syz.3.978': attribute type 5 has an invalid length. [ 181.052407][ T9000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.054272][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 181.100108][ T9692] geneve2: entered promiscuous mode [ 181.105353][ T9692] geneve2: entered allmulticast mode [ 181.114050][ T9691] wg1 speed is unknown, defaulting to 1000 [ 181.120134][ T9000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 181.140462][ T9000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 181.175309][ T9000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 181.185780][ T9000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 181.223741][ T9700] syzkaller1: entered promiscuous mode [ 181.230866][ T9700] syzkaller1: entered allmulticast mode [ 181.316416][ T9695] wg1 speed is unknown, defaulting to 1000 [ 181.770133][ T9719] netlink: 'syz.2.990': attribute type 13 has an invalid length. [ 181.795619][ T9719] netlink: 'syz.2.990': attribute type 17 has an invalid length. [ 181.825419][ T9719] erspan0: left promiscuous mode [ 181.831299][ T9719] erspan0: left allmulticast mode [ 181.864235][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.874281][ T9719] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.892087][ T9719] 1ªX¹¦À: left allmulticast mode [ 181.902036][ T9719] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.108005][ T9730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.994'. [ 182.126349][ T9730] netlink: 19 bytes leftover after parsing attributes in process `syz.2.994'. [ 182.153550][ T9730] netlink: 19 bytes leftover after parsing attributes in process `syz.2.994'. [ 182.403416][ T9737] veth1_to_bond: entered allmulticast mode [ 182.456782][ T9739] netlink: 'syz.2.997': attribute type 21 has an invalid length. [ 182.475257][ T9739] netlink: 128 bytes leftover after parsing attributes in process `syz.2.997'. [ 182.496049][ T9739] netlink: 'syz.2.997': attribute type 5 has an invalid length. [ 182.516096][ T9739] netlink: 'syz.2.997': attribute type 6 has an invalid length. [ 182.530099][ T9739] netlink: 3 bytes leftover after parsing attributes in process `syz.2.997'. [ 182.890512][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 182.892603][ T9777] netlink: 'syz.2.1010': attribute type 4 has an invalid length. [ 182.901211][ T9774] netlink: 'syz.3.1009': attribute type 2 has an invalid length. [ 182.908806][ T9777] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1010'. [ 182.974261][ T9774] wg1 speed is unknown, defaulting to 1000 [ 182.993177][ T9777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.283235][ T9743] veth1_to_bond: left allmulticast mode [ 183.449265][ T9807] bond3: Removing last arp target with arp_interval on [ 184.012448][ T9850] vlan0: entered promiscuous mode [ 184.132549][ T9856] netlink: zone id is out of range [ 184.138161][ T9856] netlink: zone id is out of range [ 184.416783][ T9877] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 184.856062][ T9915] wg1 speed is unknown, defaulting to 1000 [ 184.960795][ T9925] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 186.299090][ T9963] __nla_validate_parse: 7 callbacks suppressed [ 186.299110][ T9963] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1067'. [ 186.359614][ T9963] wg1 speed is unknown, defaulting to 1000 [ 186.396038][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 186.461299][ T9976] lo: MTU too low for tipc bearer [ 186.470261][ T9976] tipc: Enabling of bearer rejected, failed to enable media [ 186.548525][ T9976] vlan3: entered promiscuous mode [ 186.553756][ T9976] syz_tun: entered promiscuous mode [ 186.658581][ T9978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.746423][ T9984] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1075'. [ 186.755944][ T9984] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1075'. [ 186.771602][ T9984] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1075'. [ 186.785321][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1076'. [ 186.924834][ T9986] wg1 speed is unknown, defaulting to 1000 [ 187.197951][T10014] validate_nla: 1 callbacks suppressed [ 187.198051][T10014] netlink: 'syz.2.1084': attribute type 12 has an invalid length. [ 187.216027][T10014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'. [ 187.249986][T10014] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 187.269795][T10014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.431302][T10026] x_tables: ip_tables: osf match: only valid for protocol 6 [ 187.443267][T10026] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1086'. [ 187.458735][T10026] netlink: 'syz.2.1086': attribute type 12 has an invalid length. [ 187.530575][T10026] wg1 speed is unknown, defaulting to 1000 [ 187.843585][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1088'. [ 187.853988][T10037] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1088'. [ 188.006762][T10043] lo speed is unknown, defaulting to 1000 [ 188.012698][T10043] lo speed is unknown, defaulting to 1000 [ 188.020341][T10043] lo speed is unknown, defaulting to 1000 [ 188.034237][T10043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.056304][T10043] lo speed is unknown, defaulting to 1000 [ 188.063670][T10043] lo speed is unknown, defaulting to 1000 [ 188.076199][T10043] lo speed is unknown, defaulting to 1000 [ 188.083572][T10043] lo speed is unknown, defaulting to 1000 [ 188.091108][T10043] lo speed is unknown, defaulting to 1000 [ 188.190017][T10051] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 188.277182][ T7627] lo speed is unknown, defaulting to 1000 [ 188.283059][ T7627] syz1: Port: 1 Link DOWN [ 188.419917][T10062] @ÿ: renamed from veth0_vlan [ 188.428612][T10062] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 188.514617][T10064] wg1 speed is unknown, defaulting to 1000 [ 188.521493][T10064] lo speed is unknown, defaulting to 1000 [ 196.299572][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.306114][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.738997][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.745527][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.178941][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.185383][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.785930][ T31] INFO: task kworker/0:7:7618 blocked for more than 143 seconds. [ 328.793777][ T31] Not tainted syzkaller #0 [ 328.798785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.807526][ T31] task:kworker/0:7 state:D stack:24216 pid:7618 tgid:7618 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 328.819792][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 328.826548][ T31] Call Trace: [ 328.829820][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.832742][ T31] __schedule+0x1798/0x4cc0 [ 328.837484][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.842903][ T31] ? __pfx___schedule+0x10/0x10 [ 328.847885][ T31] ? schedule+0x91/0x360 [ 328.852177][ T31] schedule+0x165/0x360 [ 328.856556][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.862046][ T31] __mutex_lock+0x7e6/0x1350 [ 328.876016][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.880816][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 328.894745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.901086][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.925675][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.931428][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 328.942962][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.948889][ T31] process_scheduled_works+0xae1/0x17b0 [ 328.954477][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.960851][ T31] worker_thread+0x8a0/0xda0 [ 328.965528][ T31] kthread+0x711/0x8a0 [ 328.969617][ T31] ? __pfx_worker_thread+0x10/0x10 [ 328.974728][ T31] ? __pfx_kthread+0x10/0x10 [ 328.979347][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.984564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.990034][ T31] ? __pfx_kthread+0x10/0x10 [ 328.994631][ T31] ret_from_fork+0x4bc/0x870 [ 328.999282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.004414][ T31] ? __switch_to_asm+0x39/0x70 [ 329.009245][ T31] ? __switch_to_asm+0x33/0x70 [ 329.014020][ T31] ? __pfx_kthread+0x10/0x10 [ 329.018974][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.023751][ T31] [ 329.026868][ T31] INFO: task kworker/0:11:7622 blocked for more than 143 seconds. [ 329.034679][ T31] Not tainted syzkaller #0 [ 329.040477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.049504][ T31] task:kworker/0:11 state:D stack:25896 pid:7622 tgid:7622 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 329.061573][ T31] Workqueue: events rfkill_sync_work [ 329.066954][ T31] Call Trace: [ 329.070246][ T31] [ 329.073169][ T31] __schedule+0x1798/0x4cc0 [ 329.078055][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.083455][ T31] ? __pfx___schedule+0x10/0x10 [ 329.088365][ T31] ? schedule+0x91/0x360 [ 329.092624][ T31] schedule+0x165/0x360 [ 329.096980][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.102473][ T31] __mutex_lock+0x7e6/0x1350 [ 329.107387][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.112164][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 329.117512][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.122566][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.127821][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 329.133763][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.140379][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 329.146161][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 329.151285][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 329.157060][ T31] rfkill_set_block+0x1d2/0x440 [ 329.161935][ T31] rfkill_sync_work+0x114/0x200 [ 329.167127][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 329.172874][ T31] process_scheduled_works+0xae1/0x17b0 [ 329.178488][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.184489][ T31] worker_thread+0x8a0/0xda0 [ 329.189130][ T31] kthread+0x711/0x8a0 [ 329.193217][ T31] ? __pfx_worker_thread+0x10/0x10 [ 329.198676][ T31] ? __pfx_kthread+0x10/0x10 [ 329.203282][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.208523][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.213733][ T31] ? __pfx_kthread+0x10/0x10 [ 329.218358][ T31] ret_from_fork+0x4bc/0x870 [ 329.222968][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.228383][ T31] ? __switch_to_asm+0x39/0x70 [ 329.233145][ T31] ? __switch_to_asm+0x33/0x70 [ 329.237974][ T31] ? __pfx_kthread+0x10/0x10 [ 329.242601][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.247450][ T31] [ 329.250533][ T31] INFO: task syz.4.1056:9925 blocked for more than 143 seconds. [ 329.259741][ T31] Not tainted syzkaller #0 [ 329.264709][ T31] Blocked by coredump. [ 329.269320][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.278058][ T31] task:syz.4.1056 state:D stack:25248 pid:9925 tgid:9921 ppid:5838 task_flags:0x40054c flags:0x00080001 [ 329.290288][ T31] Call Trace: [ 329.293580][ T31] [ 329.296557][ T31] __schedule+0x1798/0x4cc0 [ 329.301105][ T31] ? validate_chain+0x897/0x2140 [ 329.306089][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.310947][ T31] ? __pfx___schedule+0x10/0x10 [ 329.316069][ T31] ? schedule+0x91/0x360 [ 329.320324][ T31] schedule+0x165/0x360 [ 329.324482][ T31] schedule_timeout+0x9a/0x270 [ 329.329304][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 329.334705][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.339978][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.345180][ T31] ? wait_for_completion+0x267/0x5d0 [ 329.350731][ T31] wait_for_completion+0x2bf/0x5d0 [ 329.355908][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 329.361562][ T31] ? __flush_work+0xd2/0xbc0 [ 329.366201][ T31] ? __flush_work+0xd2/0xbc0 [ 329.370830][ T31] __flush_work+0x9b9/0xbc0 [ 329.375335][ T31] ? __flush_work+0xd2/0xbc0 [ 329.380227][ T31] ? __pfx___flush_work+0x10/0x10 [ 329.385269][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 329.390622][ T31] ? __pfx___cancel_work+0x10/0x10 [ 329.395852][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 329.401485][ T31] __cancel_work_sync+0xbe/0x110 [ 329.406694][ T31] rfkill_unregister+0x92/0x220 [ 329.411565][ T31] nfc_unregister_device+0x96/0x2a0 [ 329.416978][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.422727][ T31] virtual_ncidev_close+0x56/0x90 [ 329.427790][ T31] __fput+0x44c/0xa70 [ 329.431803][ T31] task_work_run+0x1d4/0x260 [ 329.436671][ T31] ? __pfx_task_work_run+0x10/0x10 [ 329.441818][ T31] do_exit+0x6b5/0x2300 [ 329.446040][ T31] ? do_raw_spin_lock+0x121/0x290 [ 329.451082][ T31] ? __pfx_do_exit+0x10/0x10 [ 329.455727][ T31] do_group_exit+0x21c/0x2d0 [ 329.460339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.465805][ T31] get_signal+0x1285/0x1340 [ 329.470339][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 329.475929][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 329.482102][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.487407][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 329.492893][ T31] exit_to_user_mode_loop+0x72/0x130 [ 329.498476][ T31] do_syscall_64+0x2bd/0xfa0 [ 329.503067][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.508291][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.514372][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.519093][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.524994][ T31] RIP: 0033:0x7fa95d98f6c9 [ 329.529666][ T31] RSP: 002b:00007fa95e765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.538120][ T31] RAX: fffffffffffffff4 RBX: 00007fa95dbe6180 RCX: 00007fa95d98f6c9 [ 329.546115][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 329.554078][ T31] RBP: 00007fa95da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 329.562315][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.570373][ T31] R13: 00007fa95dbe6218 R14: 00007fa95dbe6180 R15: 00007ffc968b94e8 [ 329.578460][ T31] [ 329.581527][ T31] [ 329.581527][ T31] Showing all locks held in the system: [ 329.592644][ T31] 1 lock held by ksoftirqd/1/23: [ 329.598131][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 329.608232][ T31] 1 lock held by khungtaskd/31: [ 329.613097][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 329.623315][ T31] 2 locks held by getty/5589: [ 329.628071][ T31] #0: ffff88814dfad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 329.637884][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 329.648314][ T31] 1 lock held by syz-executor/5838: [ 329.653507][ T31] #0: ffffffff8f5aca68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 329.663686][ T31] 3 locks held by kworker/0:7/7618: [ 329.668915][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 329.680137][ T31] #1: ffffc90003d1fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 329.693666][ T31] #2: ffffffff8f5aca68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 329.705057][ T31] 4 locks held by kworker/0:11/7622: [ 329.710610][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 329.721671][ T31] #1: ffffc90003c7fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 329.734091][ T31] #2: ffffffff8f5aca68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 329.744476][ T31] #3: ffff888055bc2100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 329.754212][ T31] 1 lock held by syz.4.1056/9925: [ 329.759274][ T31] #0: ffff888055bc2100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 329.769237][ T31] 1 lock held by syz.1.1081/10024: [ 329.774331][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.782810][ T31] 3 locks held by syz.0.1083/10005: [ 329.788061][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.796777][ T31] #1: ffff8880272e7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 329.806428][ T31] #2: ffffffff8f5aca68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 329.816558][ T31] 1 lock held by syz.3.1082/10009: [ 329.822131][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.830927][ T31] 2 locks held by syz.2.1095/10064: [ 329.836189][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.844389][ T31] #1: ffffffff8f331ec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 329.853419][ T31] 3 locks held by syz.2.1095/10065: [ 329.858910][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.867138][ T31] #1: ffffffff8f331ec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 329.876214][ T31] #2: ffffffff8f5aca68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 329.886411][ T31] 1 lock held by syz-executor/10071: [ 329.891691][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.900215][ T31] 1 lock held by syz-executor/10075: [ 329.905574][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.914039][ T31] 1 lock held by syz-executor/10076: [ 329.919592][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.928128][ T31] 1 lock held by syz-executor/10077: [ 329.933413][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.941890][ T31] 1 lock held by syz-executor/10079: [ 329.947412][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.955893][ T31] 1 lock held by syz-executor/10081: [ 329.961174][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.969682][ T31] 1 lock held by syz-executor/10084: [ 329.974974][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.983817][ T31] 1 lock held by syz-executor/10085: [ 329.989126][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 329.997647][ T31] 1 lock held by syz-executor/10087: [ 330.002946][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.011707][ T31] 1 lock held by syz-executor/10089: [ 330.017037][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.025632][ T31] 1 lock held by syz-executor/10091: [ 330.030917][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.039652][ T31] 1 lock held by syz-executor/10094: [ 330.044945][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.053453][ T31] 1 lock held by syz-executor/10095: [ 330.058854][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.067661][ T31] 1 lock held by syz-executor/10097: [ 330.072982][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.081447][ T31] 1 lock held by syz-executor/10099: [ 330.086765][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 330.095252][ T31] [ 330.098093][ T31] ============================================= [ 330.098093][ T31] [ 330.106614][ T31] NMI backtrace for cpu 1 [ 330.106629][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 330.106644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.106652][ T31] Call Trace: [ 330.106658][ T31] [ 330.106665][ T31] dump_stack_lvl+0x189/0x250 [ 330.106691][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.106711][ T31] ? __pfx__printk+0x10/0x10 [ 330.106734][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 330.106758][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 330.106778][ T31] ? __pfx__printk+0x10/0x10 [ 330.106795][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 330.106830][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 330.106855][ T31] watchdog+0xf60/0xfa0 [ 330.106877][ T31] ? watchdog+0x1e2/0xfa0 [ 330.106898][ T31] kthread+0x711/0x8a0 [ 330.106924][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.106940][ T31] ? __pfx_kthread+0x10/0x10 [ 330.106964][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.106989][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.107003][ T31] ? __pfx_kthread+0x10/0x10 [ 330.107026][ T31] ret_from_fork+0x4bc/0x870 [ 330.107046][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.107069][ T31] ? __switch_to_asm+0x39/0x70 [ 330.107082][ T31] ? __switch_to_asm+0x33/0x70 [ 330.107094][ T31] ? __pfx_kthread+0x10/0x10 [ 330.107117][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.107145][ T31] [ 330.107154][ T31] Sending NMI from CPU 1 to CPUs 0: [ 330.252825][ C0] NMI backtrace for cpu 0 [ 330.252844][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 330.252860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.252869][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 330.252889][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 20 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 330.252901][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 330.252915][ C0] RAX: 411411cd9259d400 RBX: ffffffff81967b47 RCX: 411411cd9259d400 [ 330.252930][ C0] RDX: 0000000000000001 RSI: ffffffff8d7102db RDI: ffffffff8bbf0760 [ 330.252943][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 330.252953][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cfd70 [ 330.252963][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 330.252973][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 330.252984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.252994][ C0] CR2: 000056107b048000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 330.253006][ C0] Call Trace: [ 330.253012][ C0] [ 330.253018][ C0] default_idle+0x13/0x20 [ 330.253034][ C0] default_idle_call+0x73/0xb0 [ 330.253051][ C0] do_idle+0x1e7/0x510 [ 330.253071][ C0] ? __pfx_do_idle+0x10/0x10 [ 330.253093][ C0] cpu_startup_entry+0x44/0x60 [ 330.253109][ C0] rest_init+0x2de/0x300 [ 330.253128][ C0] start_kernel+0x3ae/0x410 [ 330.253154][ C0] x86_64_start_reservations+0x24/0x30 [ 330.253170][ C0] x86_64_start_kernel+0x143/0x1c0 [ 330.253185][ C0] common_startup_64+0x13e/0x147 [ 330.253214][ C0]