last executing test programs: 3m36.963624135s ago: executing program 3 (id=817): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_int(r3, &(0x7f0000000080)=0x8, 0x12) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0xffffff6e, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x8, 0x3, 0x0, @mcast2, @private0, 0x7, 0xf860, 0x2, 0x3800}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x3, 0x0, 0xe, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x44, &(0x7f00000003c0)=""/68, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x1, r3, r3], &(0x7f0000000580)=[{0x1, 0x3, 0x3}, {0x3, 0x3, 0xe, 0x5}, {0x5, 0x4, 0x5, 0x1}, {0x1, 0x5, 0xb, 0xb}, {0x2, 0x4, 0xe, 0x2}, {0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a0000010000000000000000000000181b0000", @ANYRES32, @ANYBLOB="020001008edae7d000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000200000001869000005000000000000000300000018110000", @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000380)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe00}, 0x94) 3m35.90503866s ago: executing program 3 (id=820): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="7b5a79a77bf5016133378f1908ea79777432370f65e0771541b70ea41a82860e5dc8a2e2c43569a2ac17dc94fada90bb5b7b07b3b6927c15790494c4db1de24150578976d9871f2f8d", 0x49}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 3m35.776182744s ago: executing program 3 (id=824): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0602, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$inet(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x20004014) 3m35.642494224s ago: executing program 3 (id=826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4040001}], 0x1, 0x0) unshare(0x62040200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 3m34.499282162s ago: executing program 2 (id=836): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x800}}}]}, 0x64}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xf, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0xd8, 0x48, 0x308, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x78, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0xd8}, 0x1, 0xba01, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x800}}}]}, 0x64}}, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xf, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0xd8, 0x48, 0x308, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x78, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0xd8}, 0x1, 0xba01, 0x0, 0x20000001}, 0x0) (async) 3m34.387676811s ago: executing program 0 (id=837): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r6}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x7}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x800000fc, 0x0, 0x1, 0xffffffff}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0xfffffff8}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xfff, 0x619, 0x8}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x200d26816d81cdc4}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)='cgr/up\x00'}, 0x30) gettid() (async) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f0000000340)) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) r9 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000040)=0x9, 0x4) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 3m34.13135151s ago: executing program 4 (id=839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r1}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r2 = socket(0x15, 0x3, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) connect$pppl2tp(r2, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x4, 0x4, {0xa, 0x4e22, 0x9, @mcast2, 0xb40}}}, 0x3a) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c"], 0x38}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x44c, 0x3f3, 0x300, 0x70bd2d, 0x25dfdbff, {0x11, 0x0, 0x0, [0x9, 0xdf33, 0x9, 0x5, 0x3, 0xffff0001, 0x6, 0x9f, 0x7ff, 0xd45, 0x7, 0x3, 0xc, 0x3, 0x7, 0x5, 0x2, 0x7, 0x5, 0xfffffff7, 0x5, 0xd, 0x7, 0x80000001, 0x8, 0x9, 0x5, 0xe37, 0x9, 0x6, 0x55, 0x8, 0x3, 0x1, 0xf65, 0x5, 0x8, 0x8, 0x7, 0x8000, 0x8, 0x10001, 0xc, 0x5, 0x800, 0x7fffffff, 0x1, 0x6, 0x1488, 0xfffffff9, 0x200, 0x8000, 0x401, 0x2, 0x0, 0x4, 0x4, 0xd6, 0xb65d, 0x200, 0x4, 0x7fffffff, 0x40, 0xffffffff], [0x1, 0x3, 0x7, 0x0, 0x6, 0xfffffff8, 0x0, 0x4, 0x1ff, 0x200, 0x0, 0x3, 0x6400, 0x7f04, 0x3, 0xc0000000, 0x1, 0xffffffff, 0x4, 0x2, 0x7, 0x1000, 0x2, 0x6, 0x2, 0x4, 0xba, 0x57, 0x0, 0x101, 0x7fffffff, 0x1, 0x2, 0x2, 0x5, 0x25a, 0x4, 0x7f, 0x2, 0x7, 0x8, 0x1, 0x9, 0x8, 0x0, 0x9, 0x7, 0x80, 0x1, 0xffffffff, 0xb4e, 0x9, 0x165b, 0x2, 0x101, 0x1000, 0x3, 0x1, 0x7, 0x293a, 0x5, 0xfffff800, 0x7a9a, 0x80000001], [0xff, 0x7fffffff, 0x1, 0x6, 0x101, 0x7, 0x9, 0x3, 0x8001, 0x0, 0x9, 0x401, 0x1, 0xfffffffe, 0x9, 0x7, 0x1ff, 0x1, 0x3, 0x7ff, 0x8, 0x39, 0x7, 0x5, 0x8, 0xd, 0x5, 0x4, 0x7, 0x9, 0x9, 0xe921, 0xfffffff7, 0x493, 0x7, 0x3, 0x4, 0x6, 0x5, 0x0, 0x7e, 0x80000001, 0x1, 0x2, 0x2, 0x28, 0x4b81, 0x1, 0x2, 0x2, 0x1000000, 0x3, 0xfffffcf2, 0x200, 0xfffffffb, 0x4, 0x4, 0x2, 0x1, 0x5d6316af, 0xfffffffe, 0x0, 0x8001, 0xd], [0xedf, 0x5, 0xbf, 0x1, 0x200, 0x5, 0x10, 0x9, 0xfffffff7, 0x7, 0x6, 0x2, 0x2, 0xa4, 0x6, 0xa00000, 0x401, 0x6, 0x3, 0xc4, 0x1, 0x2, 0x3, 0x1, 0x1, 0x9, 0x3, 0x0, 0x2, 0x0, 0x60, 0x1, 0xc2, 0x8, 0x1, 0x6, 0x8, 0xf, 0x4, 0x1, 0x1, 0xffffffff, 0x9, 0xa0, 0x4, 0x800, 0xe, 0xf, 0x4, 0x16f6, 0x0, 0x100, 0x2, 0x8, 0x66, 0x200, 0x9, 0x0, 0x1, 0x0, 0x3f10, 0x2, 0x9, 0x7fff], 0x29, ['contention_begin\x00', '\x00', 'contention_begin\x00', '\x00', '\x00', '\xff\xff', '\xff\xff']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m34.130764946s ago: executing program 0 (id=840): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0x117a, &(0x7f0000002300)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000852b1262fac55aa5e000000000000000f9ffffff00fe00000001000084080000000600000001000000030000000000feffffff2d000000"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x24, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m34.124817455s ago: executing program 2 (id=841): bind$alg(0xffffffffffffffff, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) splice(r0, 0x0, r4, 0x0, 0x47, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800b677", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffffffd0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m33.958085855s ago: executing program 0 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x0, 0x1, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x5cc6df32cf91e92f, 0x80, 0x8, 0x7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@rand_addr, @dev, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x0, 0xe3, 0x3f, @private2, @empty, 0x7800, 0x20}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x18, r8, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xe, 0x8000, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x80, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xecc, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xea0, 0x2, [@TCA_FW_ACT={0xe9c, 0x4, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8b26, 0x5, 0x8, 0x5, 0x5}, 0xa1, 0x4e, [{0xc, 0x8, 0xffff, 0x3, 0x9, 0x1ff}, {0x3, 0x6, 0x8, 0x3, 0x1, 0xfffff801}, {0x2, 0xffffffff, 0x2c05, 0x2, 0x9b9, 0x2}]}, [{0x8, 0xd, 0x18, 0x0, 0x4, 0xb1}, {0xc, 0xb, 0xffff8000, 0xffffffff, 0x85ba, 0xd}, {0x4, 0x3, 0x22, 0xf803, 0x3, 0x2}, {0x8, 0xa, 0x3, 0x5, 0x1, 0x3}, {0x6, 0x2, 0x3, 0xc000, 0x0, 0x6}, {0x9d, 0xfffffff8, 0x9, 0x8, 0x8, 0x5}, {0x83e, 0xffffffc7, 0x6, 0x8, 0xa50, 0x3}, {0x10001, 0x7, 0x3, 0x9, 0x2, 0xec}, {0x8, 0x8, 0x1, 0x7d8, 0x186b, 0x6}, {0x40, 0x6, 0xe, 0x1, 0xb8, 0x3}, {0x1, 0x3, 0x7, 0x4000, 0x7, 0xc}, {0x81, 0x1, 0x1, 0x3, 0x9ba2, 0x6}, {0x8, 0x3, 0x8000, 0x75e9, 0x3634, 0x1}, {0x7, 0x6, 0xdc, 0x9, 0x7, 0xd}, {0x2, 0x6, 0x10000, 0x7, 0x5, 0x3}, {0x5c8a, 0x1, 0x7, 0x1000, 0x9, 0x80a}, {0x7, 0x4, 0xff, 0x401, 0x5, 0xff}, {0x7f, 0x7, 0x2, 0x8b08, 0x401, 0x5}, {0x7, 0xffffff81, 0x7ff, 0x7, 0x8001, 0x4}, {0x3, 0x6, 0x101, 0x1, 0x3, 0x5}, {0x1, 0xa, 0xd, 0x32a5, 0xa, 0x3}, {0x4, 0x6, 0x80000000, 0x7, 0x0, 0xfffffffd}, {0x3, 0x5, 0x40, 0x7fffffff, 0x0, 0x3}, {0x5, 0x9, 0x34, 0x0, 0x8, 0x3}, {0x4, 0x80, 0xffff, 0x7, 0x8, 0x10001}, {0x0, 0x4, 0x0, 0x4, 0x5, 0x80000001}, {0x2, 0xc280, 0x2b, 0x9991, 0x40, 0x2}, {0x4, 0x80000001, 0x6a, 0x80000000, 0x2, 0x2}, {0xff, 0x200, 0x5, 0xfff, 0x3}, {0x2, 0xfffffff8, 0xd3, 0x7, 0x8}, {0x6, 0xd10, 0x3, 0x6, 0x1, 0x3}, {0x4, 0x7, 0x5, 0x2, 0x800, 0x8}, {0x1000, 0x7, 0x1000, 0x9, 0x1000, 0x9}, {0x7, 0x8, 0x3, 0x5, 0x5, 0x9}, {0x4, 0x0, 0x5, 0x4, 0x3ff, 0x5da9}, {0x4, 0x1, 0x1, 0x0, 0x1, 0xbc6b}, {0x0, 0x4, 0x5, 0x3ff, 0xfff, 0x6}, {0x5, 0xf5, 0x1, 0x32, 0x0, 0x40}, {0x0, 0x0, 0x9, 0x308e, 0xfffffffb, 0xf}, {0x0, 0x1, 0x5, 0x401, 0x467ef518, 0x271}, {0x4a, 0x2, 0x3, 0x2, 0xff, 0x79}, {0xb7, 0xcdd7, 0xdf, 0xf, 0x24, 0x5}, {0x100, 0xa22, 0xfffffff9, 0x5, 0x8, 0x7fff}, {0x101, 0xffff, 0x80000001, 0xd, 0x4e2c9e05, 0xfffffffe}, {0x1, 0x0, 0x7f, 0xffffffff, 0x1ff, 0x7}, {0x81, 0x7fff, 0x0, 0x7, 0xc, 0x2}, {0x4, 0x5, 0x8, 0x400, 0xa, 0x4}, {0x0, 0x5, 0x3a4c080b, 0x314, 0x1, 0x4024}, {0x9, 0xb64, 0x8ec1, 0x6, 0x1, 0x8}, {0x5, 0xfffffff7, 0x3, 0x2, 0xbd8, 0x21b}, {0x213f, 0x7f, 0x3, 0x0, 0x8, 0x101}, {0x8, 0x4, 0x1ff, 0x7, 0x1, 0xfffffff7}, {0x2, 0x40, 0x6, 0x2, 0x0, 0xfffffff7}, {0xffffbb79, 0x3d78, 0x0, 0x5, 0x7f, 0xbfc1}, {0x10001, 0x1, 0xc, 0xff, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x7, 0x5, 0xa}, {0x4, 0x75d, 0x1e, 0x101, 0x2, 0x1}, {0x5dd, 0x3, 0x1, 0x10000, 0x7f, 0x9}, {0x2, 0xb, 0x7, 0x3, 0x6, 0xb}, {0x10, 0x6a, 0x9, 0x5, 0xdc9, 0x1}, {0x0, 0x80000000, 0x4, 0x9, 0x913}, {0x5, 0xc1, 0x3c, 0x7, 0x80, 0xffff}, {0x7, 0x2, 0x0, 0x1, 0x800, 0x2}, {0x4, 0xab8e8c7, 0x996, 0xba56, 0x8, 0x8001}, {0x0, 0xe, 0xfffffff8, 0x9, 0x7, 0x1}, {0x773a, 0x401, 0x1, 0x8, 0xa, 0x8}, {0x4, 0xed, 0x79, 0x9, 0xccf6, 0x8}, {0xc, 0x8001, 0x1, 0x1, 0x6, 0xffff88e6}, {0x9, 0xfbd, 0xa, 0x2, 0xe25f, 0x5}, {0x6, 0x4, 0x0, 0x9, 0x6, 0x200}, {0x1e, 0x80, 0x1a, 0x6, 0x70, 0xc0}, {0xff7, 0x4, 0x3, 0x3, 0xd, 0x7}, {0x5, 0x400, 0x8, 0x800, 0x2, 0x4}, {0x7, 0x3, 0x37, 0x14000000, 0x49, 0x101}, {0x0, 0x2, 0x5384, 0x2, 0xa, 0x3ff}, {0xbc, 0xc, 0x1, 0x1, 0x4, 0x3}, {0x8, 0x5, 0x9, 0x996, 0x80, 0x1}, {0x90a6, 0x3, 0xb, 0x2c3eb278, 0x80000000, 0x9}, {0x8, 0x5, 0x7f, 0x0, 0x101, 0x7}, {0x1, 0x1000, 0x5, 0xe8e8, 0x3, 0x4}, {0x1, 0x2, 0x9, 0x5dc4, 0x6459, 0x7fffffff}, {0x51b2, 0x3, 0x5, 0x9, 0x80000001, 0x5000}, {0x6, 0xe5, 0x4, 0x4, 0x9, 0x8}, {0xff, 0x4, 0x4, 0x8, 0x5, 0x2}, {0x4, 0x0, 0x7, 0xfffffffc, 0x5, 0x1}, {0x0, 0x401, 0x9, 0x6, 0x8000, 0x81}, {0x1, 0x7, 0x40, 0xc42, 0x9, 0x1}, {0x2, 0xffffffff, 0x10001, 0x2e800000, 0x11, 0xc}, {0x1, 0x9297, 0x500, 0xfb2, 0x8ca, 0x2}, {0x5, 0x7ff, 0x5, 0x1000, 0xfffffffe, 0x5}, {0x5, 0x7, 0x8, 0x9, 0x81, 0x9}, {0x0, 0x3ff8000, 0x401, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x8, 0x4, 0x7fffffff, 0x10000}, {0x7, 0x8, 0x8, 0x6, 0xd0, 0x9}, {0x101, 0x29, 0x1, 0x2, 0x10000000, 0x9}, {0xad21a14, 0x4, 0x1, 0x7, 0x4}, {0x3ff, 0x460f2dd5, 0xfff, 0xfffffff8, 0x1, 0x4}, {0x6, 0x5, 0x8001, 0x10000, 0xffffff12, 0x100}, {0x511, 0x3, 0x8, 0x81, 0x1, 0x9}, {0x1, 0x8, 0xffff2d80, 0x9, 0x0, 0x10}, {0xd, 0x7, 0x268, 0x6, 0x7}, {0x400000, 0x1, 0xfffff001, 0x6, 0x6, 0xfcf}, {0x4, 0x7, 0xac9, 0x4, 0x10000, 0x4}, {0x81, 0x8, 0x12fe, 0x80000000, 0x0, 0xc0}, {0x40, 0x6, 0x2, 0x9, 0x9, 0x3}, {0x4, 0x1000, 0x346b67ae, 0x1, 0x384e2d0, 0x3}, {0x401, 0x4, 0x1, 0x6c, 0x7fffffff}, {0x5, 0x3ff, 0x80, 0x2, 0x3, 0x8}, {0x6, 0x8, 0x50, 0xa6ff, 0x9, 0x3}, {0xffffffff, 0x9f, 0x3, 0x2, 0x5, 0x3}, {0x0, 0x5, 0x5, 0x6ae, 0x0, 0xb}, {0x8, 0xf, 0x1, 0x8}, {0x9, 0x1, 0x2c68, 0x95, 0xf, 0x80000001}, {0xfffffe01, 0xc5, 0xe, 0x0, 0x7}, {0x9, 0x9, 0x85, 0x2, 0x3, 0x80}, {0x4, 0x400, 0x101, 0x4, 0x0, 0x5}, {0x6, 0x5, 0x2a8, 0x1, 0x9}, {0x7ff, 0x0, 0x8, 0x2, 0x7, 0x9}, {0x80000000, 0x9, 0xfffffffe, 0x6, 0x0, 0x5}, {0x2, 0x6, 0x8, 0x101, 0x1000, 0x968b}, {0x100, 0x3ec, 0x200831b4, 0x3, 0x9, 0x55}, {0xa, 0xae15, 0x3, 0x9, 0x7, 0x200}, {0x3eb, 0x6, 0x8, 0xb3, 0x2, 0x8}, {0xe, 0x7ff, 0x8, 0x9f396c24, 0x7f, 0x9}, {0xeb3f, 0x4, 0xffffffff, 0x2, 0x8, 0x8001}, {0x11, 0x800, 0x1, 0xfffffff9, 0x0, 0x6}, {0x2, 0x5, 0x3, 0x4, 0x4, 0x8}, {0x70000000, 0x3ff, 0x4d9, 0x6cd4, 0x100, 0xffff}], [{0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x430a8a08203c1276}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0xf6258e7443b80528}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0xa44664d76b227b81, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xecc}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)=@delqdisc={0xd8, 0x25, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xc}, {0xd, 0xf}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x80000000, 0xfb44, 0x950d, 0xfffffff9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xbf, 0xfffffff7, 0x7, 0xff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x2, 0x8, 0x40, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8, 0xda, 0x1, 0x3}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffeffff}, @qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x70}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x70}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x75, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x34, r12, 0x1, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x7, 0x9, {{0x1c, 0x4, 0x1, 0x28, 0x70, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@rr={0x7, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x14}, @empty]}, @ssrr={0x89, 0x1f, 0x41, [@rand_addr=0x64010101, @multicast2, @loopback, @remote, @local, @multicast2, @local]}, @ssrr={0x89, 0x17, 0xca, [@dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote, @local, @loopback]}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xf, "961e400da3cdce16dab3b52671"}, {0x1, 0x5, "a896bf"}]}]}}}}}) r17 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=@setneightbl={0x54, 0x43, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NDTA_THRESH2={0x8, 0x3, 0x5}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0x0, 0xf, 0x8000000000000001}, @NDTPA_PROXY_QLEN={0x0, 0xe, 0x50}, @NDTPA_DELAY_PROBE_TIME={0x0, 0x7, 0x2}, @NDTPA_PROXY_DELAY={0x0, 0xd, 0x81}]}, @NDTA_NAME={0x9, 0x1, 'syz1\x00'}, @NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0x0, 0xc, 0x6}, @NDTPA_DELAY_PROBE_TIME={0x4f}]}, @NDTA_THRESH3={0x8, 0x4, 0xf8d}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x1}, @NDTA_NAME={0x0, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x2}, @NDTA_THRESH1={0x0, 0x2, 0x35c}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8855) getsockname$packet(r17, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r18, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x134, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0xd, 0x1, r2}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 3m33.90290992s ago: executing program 2 (id=844): r0 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000), 0x4) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r1, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f0000000380)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000180)=""/129, 0x81}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/65, 0x41}], 0x5, &(0x7f0000000400)=[{0xb8, 0x0, 0x0, ""/166}, {0xd8, 0x0, 0x0, ""/195}, {0x60, 0x0, 0x0, ""/75}, {0xa8, 0x0, 0x0, ""/149}, {0xd8, 0x0, 0x0, ""/199}, {0x78, 0x0, 0x0, ""/104}], 0x3e8, 0x40000001}, 0x38, 0x101) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0)={@rand_addr, 0x0}, &(0x7f0000000b00)=0x14) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x7f, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@tail_call, @call={0x85, 0x0, 0x0, 0xa3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @ldst={0x0, 0x0, 0x6, 0x9, 0x0, 0x10, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000001040)='GPL\x00', 0x3ff, 0xfb, &(0x7f0000001080)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x9, 0x6, 0x5bbf}, 0x10, 0x18ff6, 0xffffffffffffffff, 0x6, &(0x7f0000001200)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240)=[{0x3, 0x4, 0x0, 0xb}, {0x2, 0x3, 0xd, 0x4}, {0x1, 0x1, 0x7, 0xc}, {0x5, 0x5, 0xf, 0x1}, {0x2, 0x5, 0xe, 0xc}, {0x1, 0x1, 0x5, 0x6}], 0x10, 0x8}, 0x94) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0xffffffffffffffff, 0x6c}, 0xc) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0xaf6}, 0xc) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x5b9, 0x0, 0x1, 0x97, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f0000001580)='./file0\x00', 0x0, 0x18}, 0x18) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x10, 0xd, &(0x7f0000000a00)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x4, 0x1, 0xb, 0x8, 0xb, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3819e763}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000a80)='syzkaller\x00', 0xaf, 0x0, 0x0, 0x41000, 0x72c1954fe468c54d, '\x00', r5, @fallback=0x2a, r6, 0x8, &(0x7f0000000b80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x3, 0x7, 0x5}, 0x10, r9, r10, 0x5, &(0x7f0000001680)=[r11, r12, r13, r14, r15, r16, r17], &(0x7f00000016c0)=[{0x1, 0x2, 0xe, 0x6}, {0x0, 0x5, 0xa, 0x9}, {0x1, 0x1, 0x0, 0xb}, {0x1, 0x4, 0x2, 0x5}, {0x1, 0x1, 0xe, 0x5}], 0x10, 0x2}, 0x94) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) (async) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r18, &(0x7f0000001c00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f00000018c0)={0x2d4, r19, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_IE={0xf6, 0x2a, [@measure_req={0x26, 0x82, {0x1, 0xc6, 0x1, "7a5ec1d1f1df4c32f11229600e62751e1374bf12fa7c6d75c10e98e6b1be3d0cdce893fa63f1d124888e16001d880cb4b4d4d6d06731d9c48a4e076b5812d1380e1a65f00155372636a24d2917c66987b9b0225671c80461b5bfa3b9057025ba0295fe31357fa5ff52251bb4728bb19f0ae98766783aadbf1f29af2a8d7d3c"}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @mic={0x8c, 0x10, {0xc48, "3d88f25677ba", @short="bd0c036875245545"}}, @cf={0x4, 0x6, {0xa1, 0x5, 0xbdb, 0x7f}}, @cf={0x4, 0x6, {0xbb, 0x7, 0x6, 0x9}}, @chsw_timing={0x68, 0x4, {0xfff9, 0x9}}, @mic={0x8c, 0x18, {0x6ee, "41d1393e989a", @long="813d1e51a6aaf72a88e081a39fad5ed6"}}, @chsw_timing={0x68, 0x4, {0x8, 0xb7c}}, @mic={0x8c, 0x10, {0xaaa, "4687673888ee", @short="8dbe6e28ac2f8663"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x1a, 0x2a, [@mic={0x8c, 0x10, {0x82c, "a5189201110d", @short="bb0cec84bc9f4035"}}, @ibss={0x6, 0x2, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_IE={0x172, 0x2a, [@random={0xff, 0x4f, "af6f9ebf30d00902045e1f82af0f1ebc6cb62a86d7450c4f76f64f4b16ea66e8ab661fc5e177507b2fe6f3d489898da9e10b8525871476851f605f8f357e5f5999d81c0ea1ef9d801e574f62944252"}, @perr={0x84, 0xe2, {0x8, 0xe, [{{}, @device_b, 0xd30e, @void, 0x40}, {{}, @broadcast, 0xe0000000, @void, 0x2f}, {{0x0, 0x1}, @device_b, 0x401, @value, 0x10}, {{}, @device_b, 0x82a4, @void, 0x33}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x3c}, {{0x0, 0x1}, @broadcast, 0x70, @value=@broadcast, 0x22}, {{}, @device_b, 0x6, @void, 0x4}, {{}, @device_a, 0x7fffffff, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x27}, {{0x0, 0x1}, @broadcast, 0x507, @value=@broadcast, 0x20}, {{}, @device_b, 0x2, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x2f}, {{}, @device_a, 0x7, @void, 0x9}]}}, @mesh_chsw={0x76, 0x6, {0x3, 0x8, 0x1e, 0x2}}, @mic={0x8c, 0x18, {0x8df, "efd0d5c7c2f2", @long="4ce481748f99421cd7baee15e6b2bfcd"}}, @random_vendor={0xdd, 0x10, "0533f423f376149b5440310327dd3676"}, @channel_switch={0x25, 0x3, {0x1, 0x70, 0x7}}]}, @NL80211_ATTR_IE={0x4}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) (async) ioctl$FICLONE(r12, 0x40049409, r3) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002cc0)={r13, &(0x7f0000001c40)="cf0d78e04c754e08b8f1199132da242e9951a74e96d64ceb37ed5d7bc3026369df646d48bdb93376ebab5b1aae461ba886e341830aa7f8012c5a74db4ec67eab00da973c521649f63d3d0615d85b1b4bfe13b3f0731b6d51fca43e54eab9d5e600d0dc5bec4a074912fea7ab73b6f3eff3dbf4f4c99005", &(0x7f0000001cc0)=@buf="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", 0x1}, 0x20) openat$cgroup_ro(r7, &(0x7f0000002d00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) (async) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000002e00)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000002e40)=0x14) (async) r23 = getuid() sendmsg$nl_xfrm(r7, &(0x7f00000033c0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003380)={&(0x7f0000002fc0)=@polexpire={0x3c0, 0x1b, 0x800, 0x70bd26, 0x25dfdbff, {{{@in=@remote, @in6=@mcast2, 0x4e22, 0x2, 0x4e20, 0x1, 0xa, 0x0, 0xa0, 0x67, r5, r21}, {0x1, 0x80000001, 0x9, 0x7, 0x8000000000000001, 0x4, 0xffff, 0x3}, {0x80000000, 0x3, 0x9, 0x10001}, 0x80, 0x6e6bb7, 0x0, 0x0, 0x0, 0x2}, 0x6}, [@offload={0xc, 0x1c, {r22, 0x1}}, @policy={0xac, 0x7, {{@in=@local, @in=@empty, 0x4e24, 0x7, 0x4e20, 0xffff, 0x2, 0x0, 0x80, 0x62, r8, r23}, {0xb, 0x8, 0x8000000000000001, 0xffffffffffffff7f, 0x9, 0x100000001, 0x1, 0x2400}, {0xc, 0x9e3d, 0x3, 0xffffffffffffffff}, 0xb, 0x6e6bb4, 0x2, 0x1, 0x1, 0x3}}, @migrate={0x180, 0x11, [{@in=@multicast1, @in=@rand_addr=0x64010101, @in=@broadcast, @in=@multicast2, 0x2b, 0x3, 0x0, 0x3501, 0xa, 0x2}, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@broadcast, 0xff, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@local, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x1, 0x0, 0x3505, 0x2, 0x2}, {@in6=@local, @in=@loopback, @in6=@private0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x1, 0x0, 0x34ff, 0xa, 0xa}, {@in=@local, @in6=@loopback, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x1, 0x0, 0x0, 0x2, 0xa}]}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x3ff}, @extra_flags={0x8, 0x18, 0x8236}, @policy={0xac, 0x7, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e22, 0xfff5, 0x4e23, 0x590, 0xa, 0xa0, 0x20, 0xff, r5}, {0x9, 0x401, 0xfffffffffffffffc, 0x40, 0x7, 0x509, 0x5, 0x5}, {0x3, 0x9, 0x8, 0x8000000000000000}, 0xa, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4000805}, 0x840) 3m33.861275555s ago: executing program 4 (id=845): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 3m33.81728239s ago: executing program 4 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0001"], 0x28}}, 0x0) 3m33.695759455s ago: executing program 2 (id=847): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={0x0, 0x206000, 0x0, 0x3}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000e56f0a00000000000073013d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 3m33.69416045s ago: executing program 4 (id=848): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @generic={0x1, 0xd, 0x7, 0xa, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m33.647271909s ago: executing program 0 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2000, 0x1000, 0x1, 0x7}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc829}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0xffffffffffffff92, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}}, 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r1, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$xdp(0x2c, 0x3, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2000, 0x1000, 0x1, 0x7}, 0x20) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc829}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0xffffffffffffff92, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}}, 0xd4) (async) 3m33.598899165s ago: executing program 4 (id=850): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000ab800000000000000018113ce4409db8aa8714d9299ac576b9706e8d52a2256039310b9f208561306c454906e15054db1d16a3df0499a8f0039fe63006adec152273ade8e7d139f681e0ed075784f943e7f876fa434c5c3657d733ba78fe9d27f1fb0f0dbdfa64ede5551eba", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x36, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "7bbafa", 0x0, 0x3148286a35062e53, 0xfe, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m33.576726307s ago: executing program 2 (id=851): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000002c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'hsr0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000080000000000000000080000000000000000000000000000000000000000400420497b057e85f31063625000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000025bd700000000000000000000000025fb83f6605e447f5c4"], 0x34c}}, 0x44) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) 3m33.548242942s ago: executing program 3 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3m33.395607037s ago: executing program 0 (id=853): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91080000010000b7020000000000008500000084000000b700000000147c0095"], &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120812d000030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00000000000000", 0x89}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001002abd70000000000000000000a638e1af0e9a80ef2a2048f60f80478a147eccf00fb874d756a0948ae346acffe4cc9f96899870233c3c844733d3", @ANYRES32=0x0, @ANYBLOB="80210000000000001400030073797a5f74756e0000000000000000000500210004000000"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 3m33.209353384s ago: executing program 4 (id=854): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000804000300000000000900f7ff000000006357b177b5918b57f9f89b43847cd34a0cc3c130f32119744c97f33603951e99a5a0fda41128d764f52cf9bdbbf905c2c13469cd58d30012ba398e9f5f92", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) epoll_create1(0x0) (async) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) (async) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) (async) accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m32.613824001s ago: executing program 32 (id=854): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000804000300000000000900f7ff000000006357b177b5918b57f9f89b43847cd34a0cc3c130f32119744c97f33603951e99a5a0fda41128d764f52cf9bdbbf905c2c13469cd58d30012ba398e9f5f92", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) epoll_create1(0x0) (async) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) (async) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) (async) accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m32.59481276s ago: executing program 0 (id=856): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 3m32.593869107s ago: executing program 33 (id=856): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 3m32.547042854s ago: executing program 2 (id=858): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000020000000000000001000010"], 0x0, 0x46, 0x0, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0) 3m32.539015029s ago: executing program 34 (id=858): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000020000000000000001000010"], 0x0, 0x46, 0x0, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0) 3m32.530765298s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r5, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r6, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd9600000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 3m32.53027164s ago: executing program 35 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r5, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r6, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd9600000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 21.924178064s ago: executing program 8 (id=2760): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff0a000000060000000000000004000000000000000200000000000000690b00000000000000000000000000000000000000000000000000000000000009000000800000000500000000000000050000000000000005000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/256]) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080)=r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002000010029bd7000fedbdf250a00000000000001080000130001000000"], 0x24}}, 0x90) r5 = socket(0x23, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0xb00, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0x0, 0xe}}}, 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000500)=""/146, 0x92}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, 0x0, 0x0, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x2, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r11], 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) 21.634842602s ago: executing program 8 (id=2765): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a007046307777de", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket(0x9, 0x4, 0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb0100c073a20e6dca5017b8fe18000000080000000000000a0500000000000000"], &(0x7f0000001280)=""/1, 0x28, 0x1, 0x0, 0x4946, 0x10000, @value=r0}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0x20000245, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="15ae79925b0a5f94d4448ab9f7d1ce1a5b8cb91798bbb307d14aecc6097597a71696760529bd2aad90d45b7ae665b75c11fd3167f18430c4170a43c5616a011f4bd06a7e0527517cac47be2de978a49163d7a2bf693f9bbb1e144750b12bd5802446a5f62b89f459ea4893173f51", @ANYRES8=r0, @ANYBLOB="e20978fb9269453cc8991551ff7d61b24632be7e6955e287ddd3393e66251f959cada798cc2ca531c334972ccdba97476862e97a1df4380d46cc114e2416d0d95514b6303794431de3f467d1c513d48269e06b8ad28def"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210021ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, &(0x7f0000000240)="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"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 21.232409888s ago: executing program 8 (id=2771): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @default, 0x0, 0x5, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@empty, @empty, 0x0}, &(0x7f00000000c0)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@private=0xa010102, @rand_addr=0x64010102, r2}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'geneve1\x00', 0x800}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) write(r1, &(0x7f0000000200)="d575266590775b4c342bf68f4f08fdcb9af9cb3b022bab073a13d1dc3fb6c5d2cde364a3217c82", 0x27) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="ddf9c04569c8c406f2779793c0e302846ee96993c4a3d56847c4440ebbc0326965793ec72e3135ae79c15337261077fb5a82ef0ec689ec4668c1e679f5afb67a08460edb8aff66abe28c28d23ff6446b03abc1a60f3c3a01c0eed036543134a270d6b12862f5e8e2047f00177681d5b7728877053b8583a7bb4b501c8381d02eaf00e0eda072018d130f9de0888ff873ca8ad02a", 0x94}, {&(0x7f0000000300)="c4fb4e109bcc1c520b52f6db195d0b36a3e2250bd317f515a060036cdf19b0cbb410104308c282b027033f27090e532f42a44108e7988c07582989fc7f01eabda8317b8d407374a873e5d68a1fd5d6f1d7d07be32f9d8701999fe478e0d1ef3478adf239e7a7774ab6655ca63e00a8002ba09a7179e5dd083ef8848e7572fe488ffb892cae2ef33cfcad67ee4ec16155cea27e1f74f07fb5d8fb6ad84fa964aef052123de2e03e29272075f34d393d96eff4105c61d50d643396c622d1c7171c7b17888b30d52241e5dc0ea0069bebec9231631a223801d4a0871176dd93935984398204f4c060848bfc34a3", 0xec}, {&(0x7f0000000400)="b680b10699746c3158f0522af253354f73ebf95be406379d6a2944a31e9a5dd38ad0e49aeddc834d82c1d77d6a9ec6d2aca53549ecf9831db0d83e4a90e4c888d8d2e3712a5517939ae3789edde5d99ae318490ef778cef4810187a1f64713b62ae1b907f0528d5003408b10c2b1a45fd2cfa553bfaace6406a0860e9f099075d97c506df57d27ea7fbd1c4125764f1e4a1262d321b8eb0cb27d655e1505d0be3373858bd834acf98d36c7e86a19fac99c689f7ebed539c34d983d9f8c54d2a5fcfacabd3773e48e6cae07753c7713750f1c70a2a28dec40a2422c570c8c9a8b1d0f", 0xe2}, {&(0x7f0000000500)="4c14d8a7b0cf46a165a9715333577572d5e26b6b391ac6d9a40fc841", 0x1c}, {&(0x7f0000000540)="ba2a05385bde0deb426a48d7291e4198808f2322ab613660057d529bfb5677212e23fd7c086ed405492ed798d44abeb4d0420db8eff29788a5cd93aeb5b0253660627a58d42260b550cb6a4b30941e338dadd6e7c14ae3598c7e57db27f727e6ee8008c7684c8c58cb4dd9ff7a2530caa3bc6ee05b5636672920bdda02b4f5b027d69fe40466a4f3edb8ba5b2a", 0x8d}, {&(0x7f0000000600)="75b800d81183fd434a33ca7e61ee546abab944f364dc0761dd17f08e6765ee13cb4ca9556d720d51073ff0eba06de383ae5b5d3b5ced7db57f5d44061da9ed04a5dfea2e44d10badb43c1f13a0afb6e21b886bf57e9ac6bbcc7e8be21a19991f5c4a3f50d45418bd9463c6ff3ff6b276e96255974466a4f3158208bdb994e5836f9a692e607c5301387ca7dfc71d2e9df9569d", 0x93}, {&(0x7f00000006c0)="285832cc946f1612de035203453e61e57c750ce51ac32b05add9d70943e25877030d663960ed32ee33292b21c3fee4d05703753bae20cbe19bb8a7fadf2fd71474d6", 0x42}], 0x7, &(0x7f00000007c0)=[{0x108, 0x116, 0x5, "acf0aaf2292163cf5fc01da6270af1a132d3a106eff2697f38fde1a9aaf44fbc42b134d7b641922e0d5bb6e98c4b9bbb8a22da2824ceae96aafd4be389aec6f5ec7dfda8f0cd1a70216cde65589dac95f882cf03ab9ec2bb46c1a32d7cbf63dce2fb1cbf10d31d826e17e281cdca6aec61123024035b6a260282d79a07941e72e4f8dcc09d3cbf55a0a472540943cc869c3c82d78e2c6368df74704c2325a33081063048e72704b883511df75429d5dd67f28f784cf2b7fb38c0d12be6963fca819a34e5cd57b27f09c0fa5066dcecef312c1edab6566df7837b1faeba74af1b733dddb17502a2bf797bed5330591fdcf1"}, {0x1010, 0x113, 0x80000000, "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"}, {0x80, 0x10b, 0x2, "22f69aa9f37bd739a664c48218ff42f5d4ca8bdd162762f68261751e56778160e4b8e8957a88ad4228beca20010a24b5ab22ec1918549b82ec760e83bec23ca76bd101dfa886666a6fa4f8119979f05c70fdd1e34a65d9c56a4ffd81f0fcc872601a97c98e9c4360dc29f1e9e4f717"}], 0x1198}, 0x880) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000019c0)={0xfffffffc, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a00)={r6}, 0x4) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001a40)="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") splice(r7, &(0x7f0000001b40)=0x2, r7, &(0x7f0000001b80), 0x36143d9a, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001bc0)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001c00)={r5, 0x98e, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001cc0)={r8, &(0x7f0000001c40)='M', &(0x7f0000001c80)=@udp6=r1}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001d00)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001d40)=0x1c) clock_gettime(0x0, &(0x7f00000077c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000007580)=[{{&(0x7f0000001d80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/5, 0x5}, {&(0x7f0000001e40)=""/157, 0x9d}], 0x2}, 0x401}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1, &(0x7f0000002f80)=""/60, 0x3c}, 0x1}, {{&(0x7f0000002fc0)=@qipcrtr, 0x80, &(0x7f0000003040), 0x0, &(0x7f0000003080)=""/170, 0xaa}, 0xff}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003140)=""/134, 0x86}, {&(0x7f0000003200)=""/8, 0x8}, {&(0x7f0000003240)=""/100, 0x64}, {&(0x7f00000032c0)=""/227, 0xe3}, {&(0x7f00000033c0)=""/142, 0x8e}], 0x5, &(0x7f0000003500)=""/29, 0x1d}, 0x6}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003540)=""/101, 0x65}], 0x1, &(0x7f0000003600)=""/72, 0x48}, 0x100}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003680)=""/110, 0x6e}, {&(0x7f0000003700)=""/149, 0x95}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/174, 0xae}, {&(0x7f0000004880)=""/151, 0x97}, {&(0x7f0000004940)=""/38, 0x26}], 0x6, &(0x7f0000004a00)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000005a00)=@ieee802154, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005a80)=""/227, 0xe3}, {&(0x7f0000005b80)=""/129, 0x81}, {&(0x7f0000005c40)=""/125, 0x7d}, {&(0x7f0000005cc0)=""/199, 0xc7}, {&(0x7f0000005dc0)=""/83, 0x53}, {&(0x7f0000005e40)=""/56, 0x38}], 0x6, &(0x7f0000005f00)=""/73, 0x49}, 0x9a}, {{&(0x7f0000005f80)=@isdn, 0x80, &(0x7f0000006000), 0x0, &(0x7f0000006040)=""/158, 0x9e}, 0x6}, {{&(0x7f0000006100)=@vsock, 0x80, &(0x7f0000007440)=[{&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/224, 0xe0}, {&(0x7f0000007280)=""/251, 0xfb}, {&(0x7f0000007380)=""/154, 0x9a}], 0x4, &(0x7f0000007480)=""/223, 0xdf}, 0xe}], 0x9, 0x40010020, &(0x7f0000007800)={r9, r10+10000000}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000007840)={0x0, 0x0}, &(0x7f0000007880)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000078c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e21, 0x0, 0x4e23, 0x2, 0xa, 0xa0, 0x20, 0x32, 0x0, r11}, {0xfffffffffffffffc, 0x7, 0x5, 0x401, 0x6, 0x1ff, 0x6, 0x1}, {0x6, 0x8, 0x0, 0x3}, 0x1ff, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0x4d6, 0x33}, 0x2, @in=@private=0xa010101, 0x0, 0x3, 0x2, 0x6, 0x9, 0x80000001, 0x58c}}, 0xe8) ppoll(&(0x7f00000079c0)=[{r4, 0x5408}, {r5, 0x95d4}, {r3, 0x2c4}], 0x3, &(0x7f0000007a00)={0x0, 0x989680}, &(0x7f0000007a40)={[0x17]}, 0x8) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f0000007a80)=0x4bd7, 0x4) 20.284530342s ago: executing program 8 (id=2779): unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) pread64(r1, &(0x7f0000002200)=""/89, 0x59, 0x10000) 19.971227151s ago: executing program 8 (id=2786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x32c, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048884}, 0x4009801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.643879086s ago: executing program 7 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f8000400000000000000a000000010000000000080008000100000303ff", 0x24) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="70010000", @ANYRES8=r0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x40884}, 0x804) 19.594531752s ago: executing program 7 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.572898796s ago: executing program 8 (id=2793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x8002a000}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x1c}}, 0x8080) write$nci(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030203f401060101b702"], 0xb) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x24d1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x800) 19.299617064s ago: executing program 7 (id=2794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x800000001, 0x0, 0x0, 0x20}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x100}, &(0x7f0000000480)=0xbc0, &(0x7f0000000500)=0x4, 0x9, 0x0, 0xd94c, 0x80000001, 0x10, 0x7}}], 0xb0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0xa, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r8 = socket(0x10, 0x803, 0x4) bind$qrtr(r8, &(0x7f00000003c0), 0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r0, 0x0) r10 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x4, 0x0, 0xf}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) 19.296386294s ago: executing program 6 (id=2795): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1d0}, {r1}], 0x2, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0xa002a008}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="007c3f0000000000020000000000130000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19.147566919s ago: executing program 7 (id=2796): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb6}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) 18.502940937s ago: executing program 1 (id=2803): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x5, 0x7, 0x2, 0x101, 0x4, 0x0, [{0x7fffffffffffffff, 0xf, 0x3, '\x00', 0xaa54cea13e4655ca}, {0x1, 0x6, 0x10, '\x00', 0x258c}, {0xc9f83a4, 0x1, 0x37fa, '\x00', 0x80a}, {0x2, 0x7fffffffffffffff, 0x81}]}) r1 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x5144}, {r0, 0x1201}, {r1, 0xc50d}, {r0, 0x3009}, {r0, 0x4042}, {r0, 0x5190}], 0x6, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0), 0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240)='THAWED\x00', 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'caif0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x29, 0x1, 0x80, 0xe7, 0x3a, @local, @mcast2, 0x40, 0x7800, 0x4, 0xed4}}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0xc3c96cfb1969389c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0xec}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000a80)={r9, "172a1a27c6fe98bbae7378d44d54b14b"}) readv(r7, &(0x7f0000001d40)=[{&(0x7f0000001a80)=""/156, 0x9c}, {&(0x7f0000001b40)=""/149, 0x95}, {&(0x7f0000001c00)=""/4, 0x4}, {&(0x7f0000001c40)=""/209, 0xd1}], 0x4) getsockname(r1, &(0x7f0000001d80)=@can, &(0x7f0000001e00)=0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e40)='net_dev_xmit_timeout\x00', r6, 0x0, 0x4}, 0x18) tee(r10, r0, 0x6, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r11, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x24, r12, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) setsockopt$inet6_buf(r6, 0x29, 0xcd, &(0x7f0000002040)="7781ae67e4faaa6d421946bf78def5a9f54bc5bfada9be4053dc66c5871a5cf832bd7f0401efd8161caf9015595d1c456f7b1d3fcabd32732850db4efd3028faaadd3ba55f4e6c06425359c7963239791ade2e96581f458f99398599f3788495826818f7aeb39f797d817543d294671ce71084093c1d0a0446f23314692d9bb6bf6ba25d36ea79065e5465c6ef1a20327980e33b77595b595c2c5b18d64a5a9ea7ab071a3c9abf7ef81330519090fe3f8468dd3dccb8f63ba59ceacd6389b7ce8c3eafb50f55bf31d867189e7ce494d223e3b41c3b86095dab86a82c2712c05cc45e0b8936", 0xe5) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000024c0)={0x0, 0x90000000, 0x4, 0x9c9, 0x9, 0x9, 0x401, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x9, @private0, 0x3}}, 0x5, 0xffff5c5a, 0x5, 0x6, 0x3}}, &(0x7f0000002580)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000025c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002600)=0x14) sendmmsg$inet_sctp(r7, &(0x7f0000003ec0)=[{&(0x7f0000002140)=@in6={0xa, 0x4e23, 0x4, @mcast2, 0x1}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000002180)="2149d6a224dadaa60b6b308f8df2f546ffb42af2175453676941d9ff6c9432da1e2bad9d9af1b1b31a5b890eff00e8b1abef3d221db23ae8f921d885429be3d3ff6de6d26d07c306333342f916a7310848bd1f1edd4a47acfe6e41cd35e11b", 0x5f}, {&(0x7f0000002200)="321a9cf31bd59cd94dc2ef9384b6579e5a470f1038c417ab44d3e6bf3516da3c46bd78f710ceef074a0c7f9d4c10208112a9e4d0124d1464aa1a746626aa1065ddbb0e74973bb90d224c5fb894604c9931c593e76fd5994e9019ba26faf74c7f8c77c3faa7f6e83a0900b1e268e6011d74856bc2d375e5baa3ed1db39e7727ac7c1f162f64fa18bcd693595211511f50b76d85a927c5d654", 0x98}], 0x2, &(0x7f0000002300)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30, 0x24040040}, {&(0x7f0000002340)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002380)="52ad36fe699cb57ef3", 0x9}, {&(0x7f00000023c0)="4d80c161705ded4601a59d12d1c3d020c437a18e4b06463eafbdfdc44a4bb7f9185315864d837f1229ecee616df0b6f27c5f72bab00d3419ca39fff3602058917148364b84302ff9f592316bb0c38114d1cd705feb87c147d43f7dc3fadb7529a84dffcb50d7652140c4265ecce36940c6a1421d56ac408ce93f9cdd7f1d58c30556398feadb0d4d753e34703d9d9d6aa4350b861a843fc6ea47d926c8582e36f992d618606de5035a3b7a", 0xab}], 0x2, &(0x7f00000026c0)=[@init={0x18, 0x84, 0x0, {0x4, 0x5, 0xaf, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x5ea6, 0x8000, 0x7, 0x0, 0x1000, 0x7, 0xa25, r14}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x5d6, 0x0, 0xfffffeff, 0x2, 0xfffff001, 0xffffffff, 0x1, r15}}, @init={0x18, 0x84, 0x0, {0x2, 0x3ff, 0x3, 0xfffd}}, @sndrcv={0x30, 0x84, 0x1, {0xfff8, 0x8, 0x8, 0xa, 0xff, 0x1, 0x4, 0x6}}, @init={0x18, 0x84, 0x0, {0xe9a, 0xfff8, 0x7, 0x7}}], 0xf8, 0x10000040}, {&(0x7f00000027c0)=@in6={0xa, 0x4e20, 0x10000, @private0, 0x1}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002800)="c4231331cb0b7904c2179400e9", 0xd}, {&(0x7f0000002840)="c2f33dd9be4c71b6f43538a5a9ac27ea12467bf3a025bf3936e76727d9cb8f24e7b60a598b736638eb298a0d4abfe68b85a960f60736f32d0153ec3bd9", 0x3d}, {&(0x7f0000002880)="1ec7ad959d45c953ca53bed0b78d08e1b63bdc176dfb038e121a4a764b5337c6b2e33db4894179", 0x27}], 0x3, &(0x7f0000002980)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xff01, 0x4, 0x4, 0x2, 0xfffffff9, 0x2, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}], 0x98, 0x24040085}, {&(0x7f0000002a40)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002a80), 0x0, &(0x7f0000002b40)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x100, 0x820b, 0x5727, 0xffffff35, 0x7fffffff, 0x0, 0x3854}}, @init={0x18, 0x84, 0x0, {0x2, 0x2, 0x8, 0x4}}], 0x48, 0x1}, {&(0x7f0000002bc0)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000002c00)}, {&(0x7f0000002c40)="7ef7cfe1a5e477d60263d8a3334fa309d8d09fb854d34980322bbd19d2a1b942da52a1ac2fa7e638db5ca75fba780f80ea3bcdfc12f5c4257aee94bdd9f1b9fd62f4ff8895c63bd6bdc1671d57ed9b6845b5a162726ad8782afab82a81b4ff920461eabdb66e425d594b947bbc52fcb8b6a23b7da492084cdaabab35a7d6816ce155c96a0e664ac3afdfc71052ba48d0e609f727357fe2af89d18fcc6b4b7b1f173486da982849205123945f69762ba938317a9ca295232a7f984bfcfe973473304b37ef6d5778d680da8051da38b43031478508ee2cd4af89f2d490fc6a1872fb9f61b70d8a4761db4e98601c7ffa947955ea8856b972ea", 0xf8}], 0x2, 0x0, 0x0, 0x4000}, {&(0x7f0000002d80)=@in6={0xa, 0x4e23, 0x1279, @mcast2, 0x9}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000002dc0)}, {&(0x7f0000002e00)="37a5b7fcac3e95253bb5af2323b92a8eb3ade830177cb4593859be3d37f837659a67c6524d77a510def45666577f329adbbcb432642debfc822882c4bbad19b9ee6d534e533cbfeafe4bd99dbddcec387fa16da552ea893e115b228dc12d90bf8bae132d5be9561b1dbd027fe973ff4c5ee6df37d5e2d7cb9c07040de466560f2300908c8d22507ed51b2a3fe03e56fd77bb5c5fe6a924987ad9eba708bdd42a562053e1f2be78a304be0297f24ce3a4ac2c1986a6246593", 0xb8}, {&(0x7f0000002ec0)="b27fe6bfa60af9feef23959dc3c4ea171a6ea715b28f0de6bfea0efff3e21b846bb50faf95be8137e114a4936fa73b4a", 0x30}, {&(0x7f0000002f00)="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", 0xfd}, {&(0x7f0000003000)="7926c068b9685bb0472993d1bae25988fb31746b60", 0x15}, {&(0x7f0000003040)="1ce506bdf32053a53078a4a3d01b971c8d66a4c7fad90b6964136413ee6af5fd9ee464c7692fa58b3cae0eadc583d9cdf43b4a39429ecb14d4facbb91151a480d6af68449f1a096777c7e352f2060473fa0dfa9d547a618517190e14f4f2618331cc47e4a2a0be8565623bdaf2923cfb57528be4876e776b868270955ee6c6a069d94035a99070454129acb98ead01225afac6893781748fbb", 0x99}, {&(0x7f0000003100)="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", 0xfe}], 0x7, &(0x7f0000003280)=[@init={0x18, 0x84, 0x0, {0x5, 0x5, 0x4, 0x40}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x48, 0x40}, {&(0x7f0000003300)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003340)}, {&(0x7f0000003380)="6e3278afe9da8841c8c5e34398a8cfef33144ae8c1c4955dbff321ed7df5ac5fe70c3692dd4657af25", 0x29}, {&(0x7f00000033c0)="345fe7f9dffb67df1e0a661b89de009c8243acd424f752c16bfc42174d6d0aef4746ea02408d3a1652a97a407b5186c5c5a48ca3928249a34667199c1e1d2d846d913334b87ae163e9aeeb8b7096d06c3177a2569798c9378b6afa551c17157c15ce6b99a1c2fb8e37d3fc2333a5e7d978bae197471d36cbf9439e39229f055fc3589558fc9ca72c74eda20424f91ddf2903ca10f526dbda1e7ee879caa7febd5fbf6325cf977bcaf0ee6a04eee1ec6ca86dd05bf76f072d98e8834cd7dfc8f3b524f4cb4012ae10f4bb67f068138fec4294f5059dcf45a86e5651d8f4b4009f6c9011286a98df323d97dbab9cc38c6c7b191c5eaadfc548c2", 0xf9}], 0x3, &(0x7f0000003640)=[@authinfo={0x18, 0x84, 0x6, {0xc5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x20f, 0xff, 0xebf}}, @init={0x18, 0x84, 0x0, {0xfb, 0xf, 0xffff}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x7b6}}], 0xd8, 0x4000}, {&(0x7f0000003740)=@in6={0xa, 0x4e21, 0x80, @mcast2, 0x800}, 0x1c, &(0x7f00000037c0)=[{&(0x7f0000003780)}], 0x1, &(0x7f0000003900)=[@authinfo={0x18, 0x84, 0x6, {0x8d}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x8, 0x9, 0x3, 0x200}}, @sndrcv={0x30, 0x84, 0x1, {0xfff, 0x3, 0x207, 0x8, 0x8, 0x8, 0x3, 0x4}}, @init={0x18, 0x84, 0x0, {0x2e6, 0x7, 0x8, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x3, 0x3, 0x8}}], 0xe8, 0x4840}, {&(0x7f0000003a00)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000003a40)="1c96e7b36e994130d66fee699eb9190128950ace71", 0x15}, {&(0x7f0000003a80)="7e49aa1c7aef5618973b88d8a15c40c6ee122ec44773bb1e9c875d505b79cac4498759e976bdb271d15dca149abc41e4cbe1c79a3dee3da9652041397c01c78b33a3bce496f13a202deb25ce925352a0d2251e979c4c1c06ffe3eabaf7043381256cb7612e397f1b90bb895469ae14abd80cad856834ecdf1334e093bd68f05eae3fb605765122100ff63f621938dd568363aef2a223132de950c86f7498a2eb99d866bc9a5220636fcb4bcf6941074f1cfece04999a262285349a80a67622d78e1912373e0b247cc8f168caf2a22a5c05cc8bdfa896001cdd3d90ab1f", 0xdd}, {&(0x7f0000003b80)="d3b5b9b78f5b8c6126f932c9ad3400964e5da13186fd30bbdf6accb1e16776fcc3050a1f07a397954215677946b9aa78099810f84c55c7de3c05d3813c1dd0643afaa00db7167105987769db5d47aed03f7a9877ca63e1a9272009120532b832b9acf6b70768c2a207b6d8b9772b887c8d071d4d6e6cb126cdd9dd072e836ef78eaafe5762d666be83ea7fa36ce222cfb54ad47a1fb4cc26c48f9869236112ab2a05dc261e186d24408bcd4c93b1cd096cf56b90c1bb2e14c386c50ff74e7f021a18b9949120039b719f6ea4c12988", 0xcf}, {&(0x7f0000003c80)="6c4e2a02e99cdc3ae405a3e7c5383809563649285f2c30f730ddf0d389d27764b80281b804f7cc5b1e1bdecc1371785342a6eb895ad730b39f7ad1f04294e50f1dd3853db47cd7f3860cf1fd3d4d07b516e456ff00b18b883b42726689e63cf2b766a6f194fee702e7161d5b230a0366b75d3d20ea7fa06228a6b9223917444131d38c997752e7fcca422558ef32ebcaed68065c79fd3f0fd477ab46638fa1a7169470216aeb381185492fe80906c53823983dc585486155b27f636e4a5d09bc6e45cb1df50346e13ada1d", 0xcb}, {&(0x7f0000003d80)="570e344a37d2269e838ea332266446de8cf19f19145cc2d24582c5494d5b3c00ad28da0181fcdb5b00e95457624aef522738b055e0ae27037e5c5a66a9f5abad7bab2d9a87a91d7957668e4eb4b8939d44e58fbf6a35087360118aee46e13138122e6a2e54a4c914ee0bbd", 0x6b}], 0x5, &(0x7f0000003e80)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @init={0x18, 0x84, 0x0, {0x1, 0x1, 0x3, 0x3}}], 0x38, 0x20004000}], 0x9, 0x48080) 18.331625606s ago: executing program 1 (id=2805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@empty}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1}, 0xe}], 0x1, 0x2021, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00e40000631803ed2b00128009dcc06d9c9e79f7b6000100766c616e000000001c0002840600010001000000100003800c00fced00e20001688b98706f92056f3e858accbbc6b7a968a3f1ed02821228bdbff9ff0100000000000027cf0c17e26c246bca86f4965299fec89ef87702da5176e354ae41192083d10e6b767175b8a0635dcb6cb3c5", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 18.331160304s ago: executing program 6 (id=2806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0c4ab96ea54241fe317c5d6fd9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f466cca41da53a195e4f905b0a"}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x54000008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x24}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20040004) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003", @ANYRESOCT=r7], 0x140}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.330999366s ago: executing program 5 (id=2807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xc00}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xf3ff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.249360178s ago: executing program 5 (id=2808): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6b, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)="c6de1382cd45", 0x6) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/160, 0xa0}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80800) 18.233582005s ago: executing program 7 (id=2809): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x6, 0x80, 0x5, 0x10000000, 0xb, @mcast1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0xfffffffe, 0xb}}) 18.063471281s ago: executing program 5 (id=2810): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x36, 0xaf, 0xf, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x10, 0x40, 0x80, 0xfffff000}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x6, 0xd, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x86, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x1e8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)="ea0b35c07baded54bbc90abb9a053db7d05cbf88bd17f62add28cc7bf6ec661f1acd", 0x22}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000380)="50713e2a2f576236c88c3ed43c9eef424e07e7ce7b5ab1c0ca46979187a919ce71fe9f69ea2b910d42b4c7498dda54f89a17bd5c75e55f04675f74fedc0cd90bdbccddda1c9f2a5a63642a3ec7d48657cc6a20bbffbf131bfb881d342b4e9b9c12f3a13fd5cb9613fd12bb774595afddad3507f23cb584370675bb96215d5fa38777ebf0f4f0a84f41d70e322ec939c5388193f269be64af28943913fdd7735f930ab517fd5d48d432c0747d966ab70e1b5fbda1e4a12e11fd019f185b60b9ba30dfbedbfd89c7d0999b9a", 0xcb}, {&(0x7f0000000480)="952e5c5244a25a7b7a9c37f3d5ae36bea91a29551a5a4e1b823105fb", 0x1c}, {0x0}, {&(0x7f00000004c0)="302f867d2eca537b774d9e9f400c25371a26fb71c8381e90", 0x18}], 0x7, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc4}}], 0x68}, 0x4004050) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) r13 = socket(0x2b, 0x5, 0x50b) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r15, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x3, 0x7, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x7800, 0x200, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0x80, 0x100, 0x8, {{0x17, 0x4, 0x0, 0x9, 0x5c, 0x64, 0x0, 0x8, 0x14, 0x0, @broadcast, @broadcast, {[@end, @cipso={0x86, 0x2a, 0x30477307216c918c, [{0x7, 0x10, "1f6fe0ddc001b52d10f2ad1668e3"}, {0x7, 0x8, "bcf16904bcbe"}, {0x1, 0xc, "b4b481801e896b940e9d"}]}, @timestamp={0x44, 0xc, 0x74, 0x0, 0x3, [0x9, 0x308c06bd]}, @generic={0x88, 0x2}, @noop, @noop, @generic={0x88, 0xb, "b9e28cb4ccd52c8f98"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x1b0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffff66, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040094}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0) 18.054829205s ago: executing program 6 (id=2811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfffffe9e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfffffe9e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) (async) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000100)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) socket(0x2b, 0x6, 0x0) (async) r7 = socket(0x2b, 0x6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000380), &(0x7f00000000c0)=@udp=r5, 0x4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000380), &(0x7f00000000c0)=@udp=r5, 0x4}, 0x20) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x12001) sendmmsg$unix(r7, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) shutdown(r6, 0x1) socket$rds(0x15, 0x5, 0x0) unshare(0x2c020400) 18.054359619s ago: executing program 1 (id=2812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000006910650000000000950000000000000034df08c9dce501bdecfb2a7bb373de89011d290a5b7565d5e50cd3ede3fc998730bab96b9f2ef2cc5d31bed5c7b4d1b104ba843cc5c18b854313c0fe74b0a8b5251a7822773981a1db35479b20e993d5a91d1db4fe55d095baddb7dc554e"], &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe49a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@map_fd={0x18, 0x40470fe5d515ab80}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x1, &(0x7f0000000380)=""/1, 0x41100, 0x20, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000400)={0xa}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x100, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, r7, r8], 0x0, 0x10, 0x8}, 0x94) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c5}, 0x20008810) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=0x64010102, 0x6, 0x7}}) 18.051369983s ago: executing program 7 (id=2813): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00042abd7000fedbdf252500000005002a"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYBLOB="c3"], 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x20, r9, 0xc25, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x10) 17.951189885s ago: executing program 6 (id=2814): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f000078d000/0x1000)=nil, 0x1000, 0x100000c, 0x22051, r5, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000b3b20000000000000000000085000000ad00000095000000000000008c6db37b1aa758620043d8b83c3d00c274cdd2bd598a0f31cad850b2315a7747336927ca71bab9ae46a6252031fbad929a443f18b635f8ae06466153defd1bd500a39916cd54b6e882c28f3d06484a503c0c09062f231960b21596f8e782e458a844416c1e291e406016b830be0b4a1735609c6641856e288760130624ae7471dc5278a4fb5900d737ef057fe5fa6cd74dec47b450249dc529980dbca0041578c020f9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xfb5) 17.711667089s ago: executing program 5 (id=2815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000c8a2387300000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000080900020073797a30220000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) (async) unshare(0x22020400) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140003002a0009000900060084800300020002000500020080"], 0x40}}, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) 17.7070924s ago: executing program 1 (id=2816): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8724e1ea98c8c1c22eef2d69e4c945c97ae6ca83d3c7112117e256226a7dbb31af1eb627914dbfe2a95d641a9c8db3d9fdd0a377dcc86c8cdea04573949d8976b5c8b11dae72b660c4c28b0a101fb14adef8539295f6617ea456abb74bbe4c93e20598511056328fa8982b0919", 0x6d}, {&(0x7f0000000380)="f775cf8b00b542ed0955ddb7935c96d13ae711add5749aed65", 0x19}], 0x2}], 0x1, 0x20040090) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) 17.703488822s ago: executing program 5 (id=2817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@broadcast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x1, @remote, @local, {[], {0x2, 0xe22, 0x16, 0x0, @opaque="8a627a0265d6c11407df5821e085"}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x400000013) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r0, 0x1, 0x2, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xfffffffd, 0x5, 0x6, 0x212, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x1}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0xb, 0x2, 0x0, r6}, @func, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x8, 0x5, 0x8, 0x8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xec, &(0x7f0000000180)=""/236, 0x40f00, 0x1, '\x00', r7, @cgroup_sockopt=0x16, r8, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x4, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[r10, r3, r11, r12, 0x1, r13, r14], &(0x7f0000000940)=[{0x0, 0x2, 0xd, 0x2}, {0x2, 0x4, 0x4, 0x7}, {0x1, 0x3, 0xe, 0x5}], 0x10, 0x5e1f2189}, 0x94) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) close(0x3) 17.531473672s ago: executing program 1 (id=2818): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xf3ff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.443463823s ago: executing program 1 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @remote, 0xc}}, 0x0, 0x0, 0x4d, 0x0, "f92805092cb46f191c2eacf3cf0fc7c98a1da00b7b9511dec7604da3990551c397ab13099d742445e48dfb664b2b1b9cc004dace0f9ac9cef2876bf45ce3c215e442abfe6336e5761610e3f54add8e9a"}, 0xd8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/204, 0xcc}, 0x481}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000840)=""/232, 0xe8}], 0x2, &(0x7f00000009c0)=""/95, 0x5f}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xa}], 0x4, 0x42, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48) r12 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r12, 0x2}, 0x20) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) 17.443052455s ago: executing program 5 (id=2820): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="10763057", @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f0800038004000180"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf2512000000080007000900000008a14b55e7f2bbcf5600060000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000500)=0xd0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x20}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 17.038571021s ago: executing program 6 (id=2821): socket(0x10, 0x80002, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="898b968f9adae50e1196d2b3b92fa885aa5725da95", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004884) socket$netlink(0x10, 0x3, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}}, 0x0) 15.828265946s ago: executing program 6 (id=2822): unshare(0x68040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x2c, 0x6a, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.503371051s ago: executing program 36 (id=2793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x8002a000}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x1c}}, 0x8080) write$nci(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030203f401060101b702"], 0xb) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x24d1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x800) 2.996595295s ago: executing program 37 (id=2813): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00042abd7000fedbdf252500000005002a"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYBLOB="c3"], 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x20, r9, 0xc25, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x10) 2.002969168s ago: executing program 38 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @remote, 0xc}}, 0x0, 0x0, 0x4d, 0x0, "f92805092cb46f191c2eacf3cf0fc7c98a1da00b7b9511dec7604da3990551c397ab13099d742445e48dfb664b2b1b9cc004dace0f9ac9cef2876bf45ce3c215e442abfe6336e5761610e3f54add8e9a"}, 0xd8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/204, 0xcc}, 0x481}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000840)=""/232, 0xe8}], 0x2, &(0x7f00000009c0)=""/95, 0x5f}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xa}], 0x4, 0x42, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48) r12 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r12, 0x2}, 0x20) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) 1.976837024s ago: executing program 39 (id=2820): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="10763057", @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f0800038004000180"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7000ffdbdf2512000000080007000900000008a14b55e7f2bbcf5600060000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000500)=0xd0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x20}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 40 (id=2822): unshare(0x68040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x2c, 0x6a, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): : link tx timeout [ 251.500295][ T5186] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 251.509908][ T5186] Bluetooth: hci4: link tx timeout [ 251.516247][ T5186] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.732803][T11809] bridge_slave_1: left allmulticast mode [ 251.738891][T11809] bridge_slave_1: left promiscuous mode [ 251.744764][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.782168][T11809] bridge_slave_0: left allmulticast mode [ 251.791130][T11809] bridge_slave_0: left promiscuous mode [ 251.797061][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.875792][T11824] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 251.933783][T11824] netlink: 'syz.5.1574': attribute type 1 has an invalid length. [ 251.941966][T11824] netlink: 'syz.5.1574': attribute type 2 has an invalid length. [ 251.954554][T11824] lo speed is unknown, defaulting to 1000 [ 251.976996][T11824] lo speed is unknown, defaulting to 1000 [ 251.990510][T11824] lo speed is unknown, defaulting to 1000 [ 252.006534][T11826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.043444][T11830] netlink: 'syz.6.1576': attribute type 1 has an invalid length. [ 252.088817][T11830] netlink: 'syz.6.1576': attribute type 4 has an invalid length. [ 252.115537][T11772] tipc: Resetting bearer [ 252.140035][T11835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.163008][T11772] tipc: Disabling bearer [ 252.173827][T11832] batadv_slave_0: entered promiscuous mode [ 252.180124][T11837] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.206268][T11837] bond0: (slave ipvlan1): Error: Device can not be enslaved while up [ 252.228881][T11832] batadv_slave_0: left promiscuous mode [ 252.387492][T11847] openvswitch: netlink: IP tunnel dst address not specified [ 252.394847][T11824] infiniband syz0: set active [ 252.401297][ T7127] lo speed is unknown, defaulting to 1000 [ 252.410680][T11824] infiniband syz0: added lo [ 252.412903][T11844] can: request_module (can-proto-0) failed. [ 252.462496][T11824] RDS/IB: syz0: added [ 252.466789][T11824] smc: adding ib device syz0 with port count 1 [ 252.473138][T11824] smc: ib device syz0 port 1 has pnetid [ 252.480210][ T7127] lo speed is unknown, defaulting to 1000 [ 252.494435][T11824] lo speed is unknown, defaulting to 1000 [ 252.498729][T11853] syzkaller0: entered promiscuous mode [ 252.514164][T11853] syzkaller0: entered allmulticast mode [ 252.538542][T11840] ipvlan0: entered promiscuous mode [ 253.009912][T11824] lo speed is unknown, defaulting to 1000 [ 253.320564][T11890] syzkaller1: entered promiscuous mode [ 253.335591][T11890] syzkaller1: entered allmulticast mode [ 253.349422][T11893] syzkaller1: entered promiscuous mode [ 253.358813][T11893] syzkaller1: entered allmulticast mode [ 253.488121][T11896] smc: adding net device bond0 with user defined pnetid SYZ2 [ 253.501098][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.540389][T11888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.549094][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 253.557348][T11888] bond0: (slave wlan0): making interface the new active one [ 253.569238][T11888] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 253.578412][T11884] lo speed is unknown, defaulting to 1000 [ 253.602064][T11891] vlan0: entered allmulticast mode [ 253.713906][T11904] __nla_validate_parse: 9 callbacks suppressed [ 253.713927][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.741440][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.766543][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.775732][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.788849][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.798233][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.807886][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.817710][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.828947][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 253.855729][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 253.957971][T11911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.012569][T11824] lo speed is unknown, defaulting to 1000 [ 254.081342][T11919] vlan0: entered promiscuous mode [ 254.092186][T11919] bridge0: entered promiscuous mode [ 254.132759][T11916] vlan0: entered promiscuous mode [ 254.423470][T11937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.535116][T11824] lo speed is unknown, defaulting to 1000 [ 254.871627][T11956] FAULT_INJECTION: forcing a failure. [ 254.871627][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 254.909211][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.7.1611 Not tainted syzkaller #0 PREEMPT(full) [ 254.909237][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.909247][T11956] Call Trace: [ 254.909255][T11956] [ 254.909263][T11956] dump_stack_lvl+0x189/0x250 [ 254.909288][T11956] ? __pfx____ratelimit+0x10/0x10 [ 254.909306][T11956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.909326][T11956] ? __pfx__printk+0x10/0x10 [ 254.909353][T11956] ? __pfx___might_resched+0x10/0x10 [ 254.909375][T11956] should_fail_ex+0x414/0x560 [ 254.909401][T11956] should_failslab+0xa8/0x100 [ 254.909425][T11956] __kmalloc_cache_noprof+0x70/0x3d0 [ 254.909445][T11956] ? sctp_add_bind_addr+0x8c/0x370 [ 254.909472][T11956] sctp_add_bind_addr+0x8c/0x370 [ 254.909493][T11956] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 254.909515][T11956] sctp_bind_addr_dup+0x95/0x100 [ 254.909540][T11956] sctp_sock_migrate+0x357/0xfe0 [ 254.909564][T11956] ? sctp_v6_init_sock+0x31/0x70 [ 254.909583][T11956] ? sctp_v6_create_accept_sk+0x453/0x5d0 [ 254.909606][T11956] sctp_accept+0x57e/0x780 [ 254.909634][T11956] ? __pfx_sctp_accept+0x10/0x10 [ 254.909649][T11956] ? aa_sk_perm+0x81e/0x950 [ 254.909671][T11956] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.909694][T11956] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.909723][T11956] inet_accept+0xb2/0x150 [ 254.909750][T11956] do_accept+0x48c/0x680 [ 254.909773][T11956] ? __pfx_do_accept+0x10/0x10 [ 254.909813][T11956] __sys_accept4+0x11c/0x1c0 [ 254.909832][T11956] ? __pfx___sys_accept4+0x10/0x10 [ 254.909849][T11956] ? __pfx_ksys_write+0x10/0x10 [ 254.909867][T11956] ? rcu_is_watching+0x15/0xb0 [ 254.909891][T11956] __x64_sys_accept4+0x9a/0xb0 [ 254.909914][T11956] do_syscall_64+0xfa/0x3b0 [ 254.909931][T11956] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.909948][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.909964][T11956] ? clear_bhb_loop+0x60/0xb0 [ 254.909985][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.910001][T11956] RIP: 0033:0x7ff05f58ebe9 [ 254.910017][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.910031][T11956] RSP: 002b:00007ff060343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 254.910049][T11956] RAX: ffffffffffffffda RBX: 00007ff05f7c5fa0 RCX: 00007ff05f58ebe9 [ 254.910062][T11956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.910072][T11956] RBP: 00007ff060343090 R08: 0000000000000000 R09: 0000000000000000 [ 254.910082][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.910092][T11956] R13: 00007ff05f7c6038 R14: 00007ff05f7c5fa0 R15: 00007fffaf8c6648 [ 254.910121][T11956] [ 254.935036][T11824] lo speed is unknown, defaulting to 1000 [ 255.625836][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 256.857514][T12035] validate_nla: 4 callbacks suppressed [ 256.857532][T12035] netlink: 'syz.1.1635': attribute type 12 has an invalid length. [ 256.963969][T12038] tipc: Enabling of bearer rejected, failed to enable media [ 257.586646][T12054] syzkaller0: entered promiscuous mode [ 257.592174][T12054] syzkaller0: entered allmulticast mode [ 258.135082][T12075] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 258.136559][T12074] IPVS: stopping backup sync thread 12075 ... [ 258.183686][T12076] netlink: 'syz.5.1645': attribute type 13 has an invalid length. [ 258.210212][T12076] netlink: 'syz.5.1645': attribute type 17 has an invalid length. [ 258.281579][T12083] netlink: 'syz.7.1649': attribute type 21 has an invalid length. [ 258.317867][T12076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.340277][ T5868] lo speed is unknown, defaulting to 1000 [ 258.346521][T12083] netlink: 'syz.7.1649': attribute type 4 has an invalid length. [ 258.360322][T12083] netlink: 'syz.7.1649': attribute type 5 has an invalid length. [ 258.491730][T12077] lo speed is unknown, defaulting to 1000 [ 258.791156][T12090] lo speed is unknown, defaulting to 1000 [ 259.126302][T12103] lo speed is unknown, defaulting to 1000 [ 259.569201][T12092] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 259.732962][T12135] netlink: 'syz.5.1662': attribute type 3 has an invalid length. [ 259.999807][T12145] __nla_validate_parse: 58 callbacks suppressed [ 259.999827][T12145] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1665'. [ 260.106362][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 260.115530][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1666'. [ 260.392776][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1671'. [ 260.414351][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1672'. [ 260.546208][T12171] tipc: Enabled bearer , priority 0 [ 260.708295][T12188] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 260.746436][T12188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.789648][T12188] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 260.832788][T12188] vlan3: entered allmulticast mode [ 260.839110][T12188] syz_tun: entered allmulticast mode [ 260.846543][T12188] syz_tun: entered promiscuous mode [ 260.852530][T12188] syz_tun: left promiscuous mode [ 260.860016][T12188] bond2: (slave vlan3): making interface the new active one [ 260.880661][T12188] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 260.899143][T12188] syz_tun: entered promiscuous mode [ 260.905013][T12188] vlan3: entered promiscuous mode [ 260.912761][T12188] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 261.156345][ T7127] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 261.189384][T12210] netlink: 'syz.6.1679': attribute type 1 has an invalid length. [ 261.215627][ T7127] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 261.552987][T12212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.666529][ T5868] tipc: Node number set to 2960798373 [ 261.821600][T12210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.871861][T12214] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 261.895459][T12215] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 261.911331][T12201] vlan2: entered allmulticast mode [ 261.947440][T12201] syz_tun: entered allmulticast mode [ 261.979137][T12201] syz_tun: entered promiscuous mode [ 261.989063][T12201] syz_tun: left promiscuous mode [ 262.019567][T12201] bond2: (slave vlan2): making interface the new active one [ 262.045048][T12201] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 262.065517][T12201] syz_tun: entered promiscuous mode [ 262.081793][T12201] vlan2: entered promiscuous mode [ 262.093013][T12201] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 262.159258][T12222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.171314][ T3596] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 262.426955][T12238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1688'. [ 262.445256][T12242] bond_slave_1: entered promiscuous mode [ 262.450981][T12242] batadv_slave_0: entered promiscuous mode [ 262.462585][T12238] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1688'. [ 262.477861][T12238] validate_nla: 4 callbacks suppressed [ 262.477875][T12238] netlink: 'syz.1.1688': attribute type 5 has an invalid length. [ 262.499171][T12242] vlan3: entered promiscuous mode [ 262.507649][T12242] bond0: entered promiscuous mode [ 262.513990][T12238] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1688'. [ 262.579187][T12241] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.673477][T12241] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.747651][T12250] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1694'. [ 262.758218][T12250] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1694'. [ 262.769563][T12241] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.842638][T12241] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.879492][T12252] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 262.891042][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.1.1695 Not tainted syzkaller #0 PREEMPT(full) [ 262.891067][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.891078][T12252] Call Trace: [ 262.891085][T12252] [ 262.891094][T12252] dump_stack_lvl+0x189/0x250 [ 262.891125][T12252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.891147][T12252] ? __pfx__printk+0x10/0x10 [ 262.891176][T12252] ? kernfs_path_from_node+0x2f/0x290 [ 262.891195][T12252] ? kernfs_path_from_node+0x250/0x290 [ 262.891211][T12252] ? kernfs_path_from_node+0x2f/0x290 [ 262.891233][T12252] sysfs_warn_dup+0x8e/0xa0 [ 262.891251][T12252] sysfs_do_create_link_sd+0xc0/0x110 [ 262.891273][T12252] device_add_class_symlinks+0x1cf/0x240 [ 262.891296][T12252] device_add+0x475/0xb50 [ 262.891317][T12252] wiphy_register+0x1ba6/0x28d0 [ 262.891354][T12252] ? __pfx_wiphy_register+0x10/0x10 [ 262.891372][T12252] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 262.891402][T12252] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 262.891428][T12252] ieee80211_register_hw+0x3425/0x4080 [ 262.891464][T12252] ? ieee80211_register_hw+0x13f1/0x4080 [ 262.891489][T12252] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 262.891510][T12252] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.891536][T12252] ? __hrtimer_setup+0x187/0x210 [ 262.891549][T12252] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 262.891576][T12252] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 262.891621][T12252] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 262.891637][T12252] ? trace_kmalloc+0x1f/0xd0 [ 262.891654][T12252] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 262.891671][T12252] ? kstrndup+0xbf/0x160 [ 262.891700][T12252] hwsim_new_radio_nl+0xea4/0x1b10 [ 262.891722][T12252] ? __pfx___nla_validate_parse+0x10/0x10 [ 262.891755][T12252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 262.891784][T12252] ? __nla_parse+0x40/0x60 [ 262.891806][T12252] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 262.891831][T12252] genl_family_rcv_msg_doit+0x215/0x300 [ 262.891848][T12252] ? cap_capable+0xda/0x460 [ 262.891868][T12252] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 262.891896][T12252] ? bpf_lsm_capable+0x9/0x20 [ 262.891912][T12252] ? security_capable+0x7e/0x2e0 [ 262.891935][T12252] genl_rcv_msg+0x60e/0x790 [ 262.891956][T12252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.891971][T12252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 262.892000][T12252] netlink_rcv_skb+0x205/0x470 [ 262.892012][T12252] ? __lock_acquire+0xab9/0xd20 [ 262.892030][T12252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.892047][T12252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.892077][T12252] ? down_read+0x1ad/0x2e0 [ 262.892093][T12252] genl_rcv+0x28/0x40 [ 262.892107][T12252] netlink_unicast+0x82c/0x9e0 [ 262.892134][T12252] ? __pfx_netlink_unicast+0x10/0x10 [ 262.892155][T12252] ? netlink_sendmsg+0x642/0xb30 [ 262.892167][T12252] ? skb_put+0x11b/0x210 [ 262.892185][T12252] netlink_sendmsg+0x805/0xb30 [ 262.892207][T12252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.892224][T12252] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.892238][T12252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.892252][T12252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.892267][T12252] __sock_sendmsg+0x219/0x270 [ 262.892287][T12252] ____sys_sendmsg+0x505/0x830 [ 262.892307][T12252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.892330][T12252] ? import_iovec+0x74/0xa0 [ 262.892349][T12252] ___sys_sendmsg+0x21f/0x2a0 [ 262.892366][T12252] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.892413][T12252] ? __fget_files+0x2a/0x420 [ 262.892425][T12252] ? __fget_files+0x3a0/0x420 [ 262.892447][T12252] __x64_sys_sendmsg+0x19b/0x260 [ 262.892464][T12252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.892489][T12252] ? rcu_is_watching+0x15/0xb0 [ 262.892507][T12252] ? do_syscall_64+0xbe/0x3b0 [ 262.892525][T12252] do_syscall_64+0xfa/0x3b0 [ 262.892538][T12252] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.892552][T12252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.892566][T12252] ? clear_bhb_loop+0x60/0xb0 [ 262.892582][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.892595][T12252] RIP: 0033:0x7f76af38ebe9 [ 262.892608][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.892620][T12252] RSP: 002b:00007f76b018e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.892637][T12252] RAX: ffffffffffffffda RBX: 00007f76af5c5fa0 RCX: 00007f76af38ebe9 [ 262.892647][T12252] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 262.892655][T12252] RBP: 00007f76af411e19 R08: 0000000000000000 R09: 0000000000000000 [ 262.892664][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.892672][T12252] R13: 00007f76af5c6038 R14: 00007f76af5c5fa0 R15: 00007ffe92524ab8 [ 262.892703][T12252] [ 262.931293][T12259] netlink: 'syz.5.1697': attribute type 1 has an invalid length. [ 263.036427][T12262] netlink: 'syz.7.1699': attribute type 1 has an invalid length. [ 263.053760][T12264] netlink: 'syz.1.1698': attribute type 2 has an invalid length. [ 263.139213][T12259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.451518][ T3596] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 263.473134][ T3596] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 263.569662][ T1085] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.613046][ T59] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.673911][ T1085] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.735402][ T1085] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.872094][T12297] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 263.890359][T12297] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 264.092017][T12313] netlink: 'syz.8.1712': attribute type 1 has an invalid length. [ 264.316620][T12309] veth5: entered promiscuous mode [ 264.345567][ T7123] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 264.380950][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.413361][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.447803][T12317] lo speed is unknown, defaulting to 1000 [ 264.917707][T12355] netlink: 'syz.1.1725': attribute type 9 has an invalid length. [ 264.988432][T12355] pimreg: tun_chr_ioctl cmd 1074025677 [ 264.994054][T12355] pimreg: linktype set to 780 [ 265.026387][T12355] pimreg: tun_chr_ioctl cmd 35111 [ 265.440334][T12375] __nla_validate_parse: 7 callbacks suppressed [ 265.440352][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1729'. [ 265.484359][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1729'. [ 265.500225][T12380] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 265.572351][T12383] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1729'. [ 265.581639][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1729'. [ 265.704331][T12388] netlink: 'syz.6.1733': attribute type 2 has an invalid length. [ 266.359982][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1738'. [ 266.679347][T12424] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 266.769357][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1744'. [ 266.781453][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1744'. [ 266.836789][T12437] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1744'. [ 267.195812][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1751'. [ 267.341654][T12459] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 267.357663][T12459] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1753'. [ 267.439501][T12471] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 267.573283][T12477] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 267.580925][T12477] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 267.590800][T12480] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 267.700743][T12482] lo speed is unknown, defaulting to 1000 [ 267.811345][T12478] bond0: (slave bond_slave_0): Releasing backup interface [ 267.854438][T12478] bond_slave_0: left promiscuous mode [ 267.865485][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 267.914028][T12478] bond0: (slave bond_slave_1): Releasing backup interface [ 267.950185][T12478] bond_slave_1: left promiscuous mode [ 267.985095][T12478] team0: Port device team_slave_0 removed [ 268.004860][T12498] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 268.022398][T12478] team0: Port device team_slave_1 removed [ 268.032868][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.044100][T12478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.060013][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.070560][T12478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.099376][T12478] bond2: (slave wlan0): Releasing active interface [ 268.131148][T12478] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 268.170827][T12478] bond2: (slave vlan2): Releasing active interface [ 268.178345][T12478] vlan2: left promiscuous mode [ 268.191993][T12478] syz_tun: left promiscuous mode [ 268.276862][T12498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.294572][T12499] bond0: (slave wlan0): Releasing active interface [ 268.314439][T12499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.327232][T12499] bond4: (slave wlan0): making interface the new active one [ 268.338588][T12499] bond4: (slave wlan0): Enslaving as an active interface with an up link [ 268.390586][T12500] vlan0: entered allmulticast mode [ 268.472529][T12510] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 268.494288][T12510] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 268.536402][T12510] tipc: Resetting bearer [ 268.578120][T12517] IPVS: stopping backup sync thread 12424 ... [ 268.720879][T12519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.283903][T12532] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 269.325513][T12532] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 269.333316][T12532] tipc: Resetting bearer [ 269.828762][T12550] tipc: Enabling of bearer rejected, already enabled [ 269.845496][T12547] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 269.879542][T12547] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 269.904042][T12547] tipc: Resetting bearer [ 269.941390][T12547] tipc: Resetting bearer [ 270.491398][T12573] syzkaller0: entered promiscuous mode [ 270.502593][T12573] syzkaller0: entered allmulticast mode [ 270.640359][T12594] __nla_validate_parse: 14 callbacks suppressed [ 270.640377][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1790'. [ 270.810312][T12592] syzkaller0: entered promiscuous mode [ 270.818310][T12592] syzkaller0: entered allmulticast mode [ 270.833796][T12593] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 270.835662][T12604] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1795'. [ 270.841127][T12593] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 270.890609][T12605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.371285][T12628] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1799'. [ 274.451775][T12645] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 274.483107][ T3604] vlan3: left promiscuous mode [ 274.612818][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 274.846089][T12657] 0ªX¹¦À: left allmulticast mode [ 275.016788][T12657] ipvlan0: left promiscuous mode [ 275.044455][T12657] geneve2: left promiscuous mode [ 275.052060][T12657] xfrm1: left promiscuous mode [ 275.057693][T12657] xfrm1: left allmulticast mode [ 275.063237][T12657] bond0: left promiscuous mode [ 275.069996][T12657] macsec1: left promiscuous mode [ 275.076898][T12657] xfrm2: left allmulticast mode [ 275.082659][T12657] ip6tnl1: left promiscuous mode [ 275.098241][T12657] vlan2: left allmulticast mode [ 275.103301][T12657] syz_tun: left allmulticast mode [ 275.118826][T12671] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 275.127609][T12671] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 275.139196][ T7105] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.155665][ T7105] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.180216][ T7105] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.202736][ T7105] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.297196][T12679] netlink: 'syz.6.1815': attribute type 21 has an invalid length. [ 275.367108][ T3604] tipc: Subscription rejected, illegal request [ 275.394906][T12679] pim6reg: entered allmulticast mode [ 275.532401][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 275.570472][T12691] ip6erspan0: entered allmulticast mode [ 275.717052][T12697] atomic_op ffff888021ff5998 conn xmit_atomic 0000000000000000 [ 275.824468][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 275.922186][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1825'. [ 275.965025][T12709] vlan4: entered allmulticast mode [ 276.270538][T12734] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 276.295081][T12734] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 276.340948][T12740] netlink: 'syz.1.1834': attribute type 6 has an invalid length. [ 276.355132][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1832'. [ 276.366747][ T7124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.510236][T12749] netlink: 'syz.5.1837': attribute type 3 has an invalid length. [ 276.564299][T12749] lo speed is unknown, defaulting to 1000 [ 276.573760][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1839'. [ 276.590927][T12756] netlink: 'syz.8.1840': attribute type 1 has an invalid length. [ 276.636708][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 276.656040][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.734921][T12753] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1839'. [ 276.825387][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.836005][ T7124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.883094][T12756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.908855][T12763] vlan2: entered allmulticast mode [ 276.914150][T12763] syz_tun: entered allmulticast mode [ 276.922318][T12763] bond7: (slave vlan2): Opening slave failed [ 277.165595][T12782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.210558][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1844'. [ 277.563073][T12803] netlink: 'syz.5.1848': attribute type 4 has an invalid length. [ 277.617968][T12803] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1848'. [ 278.135610][ T7123] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.203928][T12824] syzkaller0: entered promiscuous mode [ 278.223847][T12824] syzkaller0: entered allmulticast mode [ 278.424033][T12839] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1857'. [ 278.758894][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1864'. [ 278.809567][T12859] netlink: 'syz.5.1864': attribute type 10 has an invalid length. [ 278.888294][T12859] team0: Port device 0! added [ 279.033498][T12864] netlink: 'syz.6.1866': attribute type 21 has an invalid length. [ 279.103265][T12872] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 279.229273][T12882] netlink: 'syz.7.1868': attribute type 10 has an invalid length. [ 280.468176][T12864] netlink: 'syz.6.1866': attribute type 4 has an invalid length. [ 280.477132][T12872] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 280.501065][T12881] vlan0: entered allmulticast mode [ 280.554692][T12882] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 280.577046][T12882] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.597635][T12885] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 280.604907][T12885] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 280.683633][T12893] ±ÿ: renamed from batadv_slave_1 [ 280.703114][T12893] vlan0: entered promiscuous mode [ 281.261873][T12923] netlink: 'syz.7.1883': attribute type 1 has an invalid length. [ 281.309256][T12923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.410086][T12929] gretap2: entered allmulticast mode [ 281.597622][T12931] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.689083][T12941] netlink: 'syz.6.1887': attribute type 10 has an invalid length. [ 281.750350][T12931] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.862580][T12931] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.021081][T12931] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.105490][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.363975][T12968] netlink: 'syz.8.1896': attribute type 1 has an invalid length. [ 282.384524][ T3604] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.438476][ T59] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.464277][T12976] netlink: 'syz.6.1901': attribute type 1 has an invalid length. [ 282.489552][ T59] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.514785][T12976] netlink: 'syz.6.1901': attribute type 1 has an invalid length. [ 282.543121][ T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.554847][T12981] __nla_validate_parse: 2 callbacks suppressed [ 282.554864][T12981] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1902'. [ 282.596120][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1902'. [ 282.621228][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1902'. [ 282.671832][T12985] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1903'. [ 282.701636][T12987] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 282.709722][T12987] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 282.849712][T12995] netlink: 'syz.7.1905': attribute type 10 has an invalid length. [ 282.929263][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 283.080224][T12984] lo speed is unknown, defaulting to 1000 [ 283.103248][T13004] ip6erspan0: entered allmulticast mode [ 283.335578][T13010] pimreg: entered allmulticast mode [ 283.362399][T13010] pimreg: left allmulticast mode [ 283.486246][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1913'. [ 283.602365][T13026] netlink: 'syz.6.1916': attribute type 2 has an invalid length. [ 284.460590][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1927'. [ 284.506771][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1927'. [ 284.817603][T13081] bond4: (slave wlan0): Releasing active interface [ 284.873319][T13081] vlan0: entered allmulticast mode [ 285.062991][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1935'. [ 285.117051][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1935'. [ 285.362485][T13102] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 285.377537][T13102] netlink: 'syz.6.1938': attribute type 3 has an invalid length. [ 285.624957][T13117] bond1: left promiscuous mode [ 285.661750][T13117] bridge1: left promiscuous mode [ 285.678474][T13117] bond1: left allmulticast mode [ 285.683901][T13117] bridge1: left allmulticast mode [ 285.693298][T13117] veth2: left allmulticast mode [ 285.714886][T13117] vti0: left promiscuous mode [ 285.734323][T13117] vti0: left allmulticast mode [ 285.753091][T13117] bond3: left promiscuous mode [ 285.758912][T13117] bridge4: left promiscuous mode [ 285.773644][T13117] bond3: left allmulticast mode [ 285.778664][T13117] bridge4: left allmulticast mode [ 286.231202][T13121] vlan3: entered allmulticast mode [ 286.236492][T13121] bridge_slave_0: entered allmulticast mode [ 286.473708][T13147] netlink: 'syz.6.1949': attribute type 5 has an invalid length. [ 286.506813][T13145] syzkaller0: entered promiscuous mode [ 286.512428][T13145] syzkaller0: entered allmulticast mode [ 286.831796][T13157] syzkaller1: entered allmulticast mode [ 286.883551][T13159] netlink: 'syz.5.1953': attribute type 1 has an invalid length. [ 286.908698][T13159] bond2: (slave wlan0): Releasing active interface [ 286.915710][T13159] bond2: (slave wlan0): the permanent HWaddr of slave - 02:00:00:00:1b:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 286.933249][T13159] vlan3: entered promiscuous mode [ 287.128421][T13166] netlink: 'syz.5.1956': attribute type 12 has an invalid length. [ 288.733180][T13172] lo speed is unknown, defaulting to 1000 [ 288.785473][T13179] __nla_validate_parse: 6 callbacks suppressed [ 288.785492][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1959'. [ 289.156783][T13192] lo speed is unknown, defaulting to 1000 [ 289.165873][T13194] netlink: 'syz.6.1965': attribute type 1 has an invalid length. [ 289.484709][T13200] lo speed is unknown, defaulting to 1000 [ 289.816179][T13220] netlink: 248 bytes leftover after parsing attributes in process `syz.7.1971'. [ 289.882037][T13221] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1971'. [ 290.204022][T13233] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1976'. [ 290.377343][T13232] lo speed is unknown, defaulting to 1000 [ 290.905405][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.205414][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 291.339875][T13262] veth1_to_bond: entered allmulticast mode [ 291.347627][T13262] bond_slave_1: entered promiscuous mode [ 291.359396][T13261] bond_slave_1: left promiscuous mode [ 291.383177][T13261] veth1_to_bond: left allmulticast mode [ 291.649570][T13264] lo speed is unknown, defaulting to 1000 [ 291.934271][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1990'. [ 292.422976][T13291] lo speed is unknown, defaulting to 1000 [ 293.157814][T13303] lo speed is unknown, defaulting to 1000 [ 293.230286][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2002'. [ 293.310474][T13322] bond0: entered promiscuous mode [ 293.338937][T13322] bond0: left promiscuous mode [ 293.490913][T13329] netlink: 'syz.5.2004': attribute type 1 has an invalid length. [ 293.554119][T13329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.609861][T13333] bond4: (slave veth9): Enslaving as an active interface with a down link [ 293.724388][T13329] macvlan2: entered promiscuous mode [ 293.748670][T13329] macvlan2: entered allmulticast mode [ 293.755265][T13329] bond4: entered promiscuous mode [ 293.761060][T13329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.768887][T13329] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.787751][T13329] bond4: left promiscuous mode [ 294.081507][T13341] tipc: Resetting bearer [ 294.251937][T13345] IPVS: stopping backup sync thread 12380 ... [ 294.631042][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 294.654970][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 294.746778][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.006772][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 295.300903][T13382] tipc: Enabled bearer , priority 0 [ 295.316457][T13383] tipc: Resetting bearer [ 295.344819][T13382] tipc: Resetting bearer [ 295.692085][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2025'. [ 295.715698][T13399] netlink: 'syz.1.2024': attribute type 3 has an invalid length. [ 295.731772][T13399] netlink: 'syz.1.2024': attribute type 1 has an invalid length. [ 295.740303][T13399] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2024'. [ 295.742434][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2025'. [ 295.823300][T13400] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 296.169514][T13429] bridge0: entered allmulticast mode [ 296.180167][T13428] lo speed is unknown, defaulting to 1000 [ 296.694447][T13433] bond1: (slave vlan2): Releasing active interface [ 297.280405][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2041'. [ 297.291374][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2042'. [ 297.303155][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2041'. [ 297.599751][T13477] dvmrp8: entered allmulticast mode [ 297.618138][T13475] dvmrp8: left allmulticast mode [ 297.760460][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2049'. [ 297.930608][T13493] netlink: 'syz.8.2053': attribute type 1 has an invalid length. [ 298.010600][T13491] lo speed is unknown, defaulting to 1000 [ 298.099689][T13508] netlink: 'syz.8.2056': attribute type 13 has an invalid length. [ 298.116752][T13508] netlink: 'syz.8.2056': attribute type 17 has an invalid length. [ 298.319043][T13508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.432789][T13508] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.450313][T13508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.594757][T13510] lo speed is unknown, defaulting to 1000 [ 298.747661][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 298.754897][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 298.782708][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.791043][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.055695][T13526] lo speed is unknown, defaulting to 1000 [ 299.134167][T13544] netlink: 'syz.5.2065': attribute type 1 has an invalid length. [ 299.317644][ T3604] vlan3: left promiscuous mode [ 299.662950][T13564] tipc: Resetting bearer [ 299.775883][T13562] lo speed is unknown, defaulting to 1000 [ 300.183787][T13572] netlink: 'syz.8.2073': attribute type 39 has an invalid length. [ 300.260846][T13574] __nla_validate_parse: 9 callbacks suppressed [ 300.260863][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2073'. [ 300.302063][T13574] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2073'. [ 300.452319][T13574] gretap1: entered promiscuous mode [ 300.472810][T13576] netlink: 'syz.5.2075': attribute type 1 has an invalid length. [ 300.539577][T13576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.749162][T13587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2078'. [ 300.827056][T13594] block nbd1: Unsupported socket: shutdown callout must be supported. [ 301.048972][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2082'. [ 301.204904][T13616] netlink: 'syz.5.2086': attribute type 10 has an invalid length. [ 301.281019][T13625] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 301.308491][T13617] ip6tnl1: left promiscuous mode [ 301.336340][T13613] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 301.343584][T13613] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 301.360824][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 301.383238][T13613] tipc: Resetting bearer [ 301.394991][T13617] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2088'. [ 301.406870][T13626] lo speed is unknown, defaulting to 1000 [ 301.531350][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2092'. [ 301.573660][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2092'. [ 301.666271][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 301.917946][T13652] netlink: 'syz.7.2095': attribute type 10 has an invalid length. [ 301.957469][T13652] team0: Port device dummy0 added [ 302.232988][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 302.255671][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 302.280866][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2100'. [ 302.608074][T13686] FAULT_INJECTION: forcing a failure. [ 302.608074][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 302.615087][T13682] tipc: Enabling of bearer rejected, failed to enable media [ 302.620840][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.1.2104 Not tainted syzkaller #0 PREEMPT(full) [ 302.620863][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.620874][T13686] Call Trace: [ 302.620881][T13686] [ 302.620888][T13686] dump_stack_lvl+0x189/0x250 [ 302.620914][T13686] ? __pfx____ratelimit+0x10/0x10 [ 302.620933][T13686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.620951][T13686] ? __pfx__printk+0x10/0x10 [ 302.620975][T13686] ? __pfx___might_resched+0x10/0x10 [ 302.620992][T13686] ? fs_reclaim_acquire+0x7d/0x100 [ 302.621019][T13686] should_fail_ex+0x414/0x560 [ 302.621046][T13686] should_failslab+0xa8/0x100 [ 302.621070][T13686] __kmalloc_noprof+0xcb/0x4f0 [ 302.621090][T13686] ? tomoyo_encode+0x28b/0x550 [ 302.621119][T13686] tomoyo_encode+0x28b/0x550 [ 302.621142][T13686] tomoyo_realpath_from_path+0x58d/0x5d0 [ 302.621160][T13686] ? tomoyo_domain+0xd9/0x130 [ 302.621184][T13686] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 302.621205][T13686] tomoyo_path_number_perm+0x1e8/0x5a0 [ 302.621230][T13686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.621269][T13686] ? __lock_acquire+0xab9/0xd20 [ 302.621313][T13686] ? __fget_files+0x2a/0x420 [ 302.621331][T13686] ? __fget_files+0x2a/0x420 [ 302.621345][T13686] ? __fget_files+0x3a0/0x420 [ 302.621359][T13686] ? __fget_files+0x2a/0x420 [ 302.621378][T13686] security_file_ioctl+0xcb/0x2d0 [ 302.621402][T13686] __se_sys_ioctl+0x47/0x170 [ 302.621425][T13686] do_syscall_64+0xfa/0x3b0 [ 302.621441][T13686] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.621457][T13686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.621474][T13686] ? clear_bhb_loop+0x60/0xb0 [ 302.621495][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.621511][T13686] RIP: 0033:0x7f76af38ebe9 [ 302.621526][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.621540][T13686] RSP: 002b:00007f76b016d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.621557][T13686] RAX: ffffffffffffffda RBX: 00007f76af5c6090 RCX: 00007f76af38ebe9 [ 302.621567][T13686] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000009 [ 302.621576][T13686] RBP: 00007f76b016d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.621586][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.621595][T13686] R13: 00007f76af5c6128 R14: 00007f76af5c6090 R15: 00007ffe92524ab8 [ 302.621623][T13686] [ 302.621643][T13686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.828596][T13693] netlink: 'syz.8.2108': attribute type 8 has an invalid length. [ 303.050418][T13699] IPVS: stopping backup sync thread 12471 ... [ 303.597053][T13726] FAULT_INJECTION: forcing a failure. [ 303.597053][T13726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.630812][T13726] CPU: 1 UID: 0 PID: 13726 Comm: syz.6.2121 Not tainted syzkaller #0 PREEMPT(full) [ 303.630839][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.630862][T13726] Call Trace: [ 303.630869][T13726] [ 303.630877][T13726] dump_stack_lvl+0x189/0x250 [ 303.630903][T13726] ? __pfx____ratelimit+0x10/0x10 [ 303.630921][T13726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.630940][T13726] ? __pfx__printk+0x10/0x10 [ 303.630962][T13726] ? __might_fault+0xb0/0x130 [ 303.630996][T13726] should_fail_ex+0x414/0x560 [ 303.631024][T13726] _copy_from_user+0x2d/0xb0 [ 303.631043][T13726] nr_rt_ioctl+0x74f/0xd50 [ 303.631075][T13726] ? kasan_quarantine_put+0xdd/0x220 [ 303.631095][T13726] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 303.631129][T13726] ? apparmor_capable+0x137/0x1b0 [ 303.631156][T13726] ? capable+0x89/0xe0 [ 303.631174][T13726] ? nr_ioctl+0x1b1/0x3b0 [ 303.631195][T13726] sock_do_ioctl+0xdc/0x300 [ 303.631219][T13726] ? __pfx_sock_do_ioctl+0x10/0x10 [ 303.631238][T13726] ? __lock_acquire+0xab9/0xd20 [ 303.631276][T13726] sock_ioctl+0x576/0x790 [ 303.631300][T13726] ? __pfx_sock_ioctl+0x10/0x10 [ 303.631321][T13726] ? __fget_files+0x2a/0x420 [ 303.631335][T13726] ? __fget_files+0x3a0/0x420 [ 303.631349][T13726] ? __fget_files+0x2a/0x420 [ 303.631368][T13726] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.631387][T13726] ? __pfx_sock_ioctl+0x10/0x10 [ 303.631408][T13726] __se_sys_ioctl+0xf9/0x170 [ 303.631429][T13726] do_syscall_64+0xfa/0x3b0 [ 303.631447][T13726] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.631464][T13726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.631480][T13726] ? clear_bhb_loop+0x60/0xb0 [ 303.631501][T13726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.631516][T13726] RIP: 0033:0x7f3d8fd8ebe9 [ 303.631532][T13726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.631546][T13726] RSP: 002b:00007f3d90c5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.631564][T13726] RAX: ffffffffffffffda RBX: 00007f3d8ffc6090 RCX: 00007f3d8fd8ebe9 [ 303.631576][T13726] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000009 [ 303.631588][T13726] RBP: 00007f3d90c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 303.631599][T13726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.631609][T13726] R13: 00007f3d8ffc6128 R14: 00007f3d8ffc6090 R15: 00007ffd5437e668 [ 303.631638][T13726] [ 304.105068][T13736] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 304.118801][T13735] IPVS: stopping backup sync thread 13736 ... [ 304.120740][T13739] sctp: [Deprecated]: syz.8.2126 (pid 13739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.120740][T13739] Use struct sctp_sack_info instead [ 304.254877][T13747] bridge0: port 1(syz_tun) entered blocking state [ 304.277526][T13747] bridge0: port 1(syz_tun) entered disabled state [ 304.440461][T13757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.643019][T13765] FAULT_INJECTION: forcing a failure. [ 304.643019][T13765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.701574][T13765] CPU: 1 UID: 0 PID: 13765 Comm: syz.6.2133 Not tainted syzkaller #0 PREEMPT(full) [ 304.701600][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.701611][T13765] Call Trace: [ 304.701618][T13765] [ 304.701625][T13765] dump_stack_lvl+0x189/0x250 [ 304.701650][T13765] ? __pfx____ratelimit+0x10/0x10 [ 304.701667][T13765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.701693][T13765] ? __pfx__printk+0x10/0x10 [ 304.701715][T13765] ? __might_fault+0xb0/0x130 [ 304.701747][T13765] should_fail_ex+0x414/0x560 [ 304.701775][T13765] _copy_to_iter+0x589/0x1790 [ 304.701808][T13765] ? __pfx__copy_to_iter+0x10/0x10 [ 304.701823][T13765] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 304.701851][T13765] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 304.701877][T13765] __skb_datagram_iter+0xf8/0x990 [ 304.701899][T13765] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 304.701928][T13765] skb_copy_datagram_iter+0xc5/0x230 [ 304.701952][T13765] netlink_recvmsg+0x2ab/0xa30 [ 304.701979][T13765] ? __pfx_netlink_recvmsg+0x10/0x10 [ 304.702002][T13765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.702019][T13765] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 304.702037][T13765] ? security_socket_recvmsg+0x7e/0x2e0 [ 304.702055][T13765] ? __pfx_netlink_recvmsg+0x10/0x10 [ 304.702072][T13765] sock_recvmsg+0x229/0x270 [ 304.702099][T13765] ____sys_recvmsg+0x1c9/0x460 [ 304.702126][T13765] ? __pfx_____sys_recvmsg+0x10/0x10 [ 304.702161][T13765] ? import_iovec+0x74/0xa0 [ 304.702182][T13765] ___sys_recvmsg+0x1b5/0x510 [ 304.702207][T13765] ? __pfx____sys_recvmsg+0x10/0x10 [ 304.702250][T13765] ? __fget_files+0x3a0/0x420 [ 304.702276][T13765] do_recvmmsg+0x307/0x770 [ 304.702304][T13765] ? __pfx_do_recvmmsg+0x10/0x10 [ 304.702336][T13765] ? _copy_from_user+0x94/0xb0 [ 304.702370][T13765] __x64_sys_recvmmsg+0x1af/0x240 [ 304.702392][T13765] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 304.702417][T13765] ? do_syscall_64+0xbe/0x3b0 [ 304.702438][T13765] do_syscall_64+0xfa/0x3b0 [ 304.702453][T13765] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.702468][T13765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.702484][T13765] ? clear_bhb_loop+0x60/0xb0 [ 304.702503][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.702519][T13765] RIP: 0033:0x7f3d8fd8ebe9 [ 304.702534][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.702548][T13765] RSP: 002b:00007f3d90c7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 304.702566][T13765] RAX: ffffffffffffffda RBX: 00007f3d8ffc5fa0 RCX: 00007f3d8fd8ebe9 [ 304.702579][T13765] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 304.702590][T13765] RBP: 00007f3d90c7b090 R08: 0000200000003700 R09: 0000000000000000 [ 304.702601][T13765] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 304.702611][T13765] R13: 00007f3d8ffc6038 R14: 00007f3d8ffc5fa0 R15: 00007ffd5437e668 [ 304.702639][T13765] [ 305.091954][T13774] FAULT_INJECTION: forcing a failure. [ 305.091954][T13774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.109590][T13773] tls_set_device_offload: netdev not found [ 305.115321][T13774] CPU: 0 UID: 0 PID: 13774 Comm: syz.6.2136 Not tainted syzkaller #0 PREEMPT(full) [ 305.115345][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.115354][T13774] Call Trace: [ 305.115361][T13774] [ 305.115368][T13774] dump_stack_lvl+0x189/0x250 [ 305.115394][T13774] ? __pfx____ratelimit+0x10/0x10 [ 305.115411][T13774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.115428][T13774] ? __pfx__printk+0x10/0x10 [ 305.115460][T13774] should_fail_ex+0x414/0x560 [ 305.115485][T13774] _copy_to_user+0x31/0xb0 [ 305.115506][T13774] simple_read_from_buffer+0xe1/0x170 [ 305.115532][T13774] proc_fail_nth_read+0x1b3/0x220 [ 305.115554][T13774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.115575][T13774] ? rw_verify_area+0x2a6/0x4d0 [ 305.115593][T13774] ? __lock_acquire+0xab9/0xd20 [ 305.115612][T13774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.115652][T13774] vfs_read+0x1fd/0xa30 [ 305.115671][T13774] ? fdget_pos+0x247/0x320 [ 305.115689][T13774] ? __pfx___mutex_lock+0x10/0x10 [ 305.115708][T13774] ? __pfx_vfs_read+0x10/0x10 [ 305.115728][T13774] ? __fget_files+0x2a/0x420 [ 305.115747][T13774] ? __fget_files+0x3a0/0x420 [ 305.115760][T13774] ? __fget_files+0x2a/0x420 [ 305.115783][T13774] ksys_read+0x145/0x250 [ 305.115801][T13774] ? __fget_files+0x3a0/0x420 [ 305.115817][T13774] ? __pfx_ksys_read+0x10/0x10 [ 305.115841][T13774] ? do_syscall_64+0xbe/0x3b0 [ 305.115862][T13774] do_syscall_64+0xfa/0x3b0 [ 305.115878][T13774] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.115899][T13774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.115915][T13774] ? clear_bhb_loop+0x60/0xb0 [ 305.115935][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.115951][T13774] RIP: 0033:0x7f3d8fd8d5fc [ 305.115966][T13774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.115979][T13774] RSP: 002b:00007f3d90c5a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.115996][T13774] RAX: ffffffffffffffda RBX: 00007f3d8ffc6090 RCX: 00007f3d8fd8d5fc [ 305.116008][T13774] RDX: 000000000000000f RSI: 00007f3d90c5a0a0 RDI: 000000000000000c [ 305.116019][T13774] RBP: 00007f3d90c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 305.116029][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.116039][T13774] R13: 00007f3d8ffc6128 R14: 00007f3d8ffc6090 R15: 00007ffd5437e668 [ 305.116067][T13774] [ 305.483381][T13784] syzkaller1: entered promiscuous mode [ 305.491418][T13784] syzkaller1: entered allmulticast mode [ 305.578804][T13790] netlink: 'syz.5.2143': attribute type 5 has an invalid length. [ 305.671560][T13794] team0: Device gtp1 is up. Set it down before adding it as a team port [ 305.703967][T13796] netlink: 'syz.8.2146': attribute type 1 has an invalid length. [ 305.745755][T13796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.767944][T13796] vlan3: entered allmulticast mode [ 305.777127][T13796] bond8: (slave vlan3): making interface the new active one [ 305.786256][T13796] bond8: (slave vlan3): Enslaving as an active interface with an up link [ 305.843642][T13801] __nla_validate_parse: 9 callbacks suppressed [ 305.843660][T13801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2147'. [ 305.929436][T13804] IPVS: Unknown mcast interface: batadv0 [ 306.040680][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2160'. [ 306.052566][T13807] IPv6: NLM_F_REPLACE set, but no existing node found! [ 306.318099][T13815] tipc: Resetting bearer [ 306.327621][T13813] lo speed is unknown, defaulting to 1000 [ 306.417465][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2154'. [ 306.428700][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2154'. [ 306.551471][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2155'. [ 306.572850][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2155'. [ 306.899849][T13839] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 306.900826][T13838] IPVS: stopping backup sync thread 13839 ... [ 307.029416][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2162'. [ 307.453370][T13860] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2166'. [ 307.505427][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2166'. [ 307.659279][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2168'. [ 307.713711][T13870] netlink: 'syz.5.2168': attribute type 15 has an invalid length. [ 308.149661][T13888] tipc: Enabling of bearer rejected, already enabled [ 308.175001][T13888] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 308.182805][T13888] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 308.207482][T13888] tipc: Resetting bearer [ 308.254008][T13888] vlan5: entered promiscuous mode [ 308.259419][T13888] bridge0: entered promiscuous mode [ 308.356197][T13901] netlink: 'syz.7.2175': attribute type 1 has an invalid length. [ 308.464427][T13901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.645118][T13901] veth7: entered promiscuous mode [ 308.659468][T13901] bond3: (slave veth7): Enslaving as an active interface with a down link [ 308.672812][T13907] erspan0: entered allmulticast mode [ 308.713983][T13907] bond3: (slave erspan0): making interface the new active one [ 308.737482][T13907] erspan0: entered promiscuous mode [ 308.745916][T13907] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 308.861238][T13915] lo speed is unknown, defaulting to 1000 [ 309.243828][T13932] bond0: option xmit_hash_policy: invalid value (8) [ 309.465388][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.624342][T13950] IPVS: Unknown mcast interface: batadv0 [ 310.419172][T13995] lo speed is unknown, defaulting to 1000 [ 310.426018][T13997] netlink: 'syz.6.2206': attribute type 21 has an invalid length. [ 310.667014][T14012] syz_tun: entered allmulticast mode [ 310.681789][T14012] dvmrp6: entered allmulticast mode [ 310.791642][T14017] tipc: Enabled bearer , priority 0 [ 310.812048][T14017] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 310.826719][T14017] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 310.834908][T14017] tipc: Resetting bearer [ 310.882900][T13989] lo speed is unknown, defaulting to 1000 [ 310.971246][T14027] tipc: Resetting bearer [ 311.019723][T14017] tipc: Resetting bearer [ 311.050095][T14031] __nla_validate_parse: 15 callbacks suppressed [ 311.050113][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2216'. [ 311.170546][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2216'. [ 311.338749][T14043] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 311.352053][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 311.366944][T14041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.480004][T14043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.571064][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2222'. [ 311.597929][T14010] syz_tun: left allmulticast mode [ 311.603092][T14010] dvmrp6: left allmulticast mode [ 311.683832][T14055] netlink: 'syz.7.2222': attribute type 2 has an invalid length. [ 311.876763][ T7123] tipc: Node number set to 611934362 [ 311.973571][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 311.977876][T14072] IPv6: addrconf: prefix option has invalid lifetime [ 312.080262][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 312.368440][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2233'. [ 312.393336][T14078] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 312.404016][T14078] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 312.702117][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2236'. [ 313.073994][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 313.093870][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 313.111373][T14109] lo speed is unknown, defaulting to 1000 [ 313.135663][T14102] netlink: 'syz.5.2241': attribute type 12 has an invalid length. [ 313.403536][T14117] bridge8: entered allmulticast mode [ 314.314953][T14141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.326917][T14141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.339298][T14141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 314.350705][T14141] bond0 (unregistering): Released all slaves [ 314.368953][T14159] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 314.377408][T14159] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 314.393090][T14164] netlink: 'syz.7.2252': attribute type 10 has an invalid length. [ 314.475916][T14164] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 314.495122][T14164] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 314.515838][T14164] tipc: Resetting bearer [ 314.586970][T14173] tipc: Enabled bearer , priority 0 [ 314.629082][T14173] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 314.652401][T14173] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 314.694767][T14173] tipc: Resetting bearer [ 314.716501][T14175] tipc: Resetting bearer [ 314.887733][T14179] tipc: Resetting bearer [ 315.122698][ T1085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.149459][ T1085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.184412][ T1085] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.206742][ T1085] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.230382][T14193] lo speed is unknown, defaulting to 1000 [ 315.586044][ T7127] tipc: Node number set to 1871421611 [ 315.689446][T14219] batadv_slave_1: entered promiscuous mode [ 316.262801][T14241] lo speed is unknown, defaulting to 1000 [ 316.345900][ T51] block nbd1: Receive control failed (result -32) [ 316.391987][T14247] __nla_validate_parse: 3 callbacks suppressed [ 316.392004][T14247] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.2273'. [ 316.420311][T14214] batadv_slave_1: left promiscuous mode [ 316.791959][T14260] netlink: 'syz.5.2275': attribute type 10 has an invalid length. [ 316.842423][T14254] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 316.849879][T14254] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 316.863101][T14254] tipc: Resetting bearer [ 316.874819][T14264] IPVS: Unknown mcast interface: batadv0 [ 317.086406][T14268] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 317.094089][T14268] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 317.102651][T14268] tipc: Resetting bearer [ 317.126467][T14273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.145494][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2282'. [ 317.191444][T14273] netlink: 'syz.6.2281': attribute type 1 has an invalid length. [ 317.262775][T14273] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2281'. [ 317.440771][T14285] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 317.459704][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 317.482947][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2288'. [ 317.498340][T14285] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 317.511464][T14291] netlink: 'syz.8.2288': attribute type 1 has an invalid length. [ 317.516538][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 317.522202][T14291] netlink: 'syz.8.2288': attribute type 1 has an invalid length. [ 317.589079][T14294] netlink: 209840 bytes leftover after parsing attributes in process `syz.6.2287'. [ 317.722057][T14305] netlink: 'syz.8.2288': attribute type 1 has an invalid length. [ 317.761027][T13974] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 317.788186][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.814480][T14291] vlan4: entered allmulticast mode [ 317.823548][T14291] veth1: entered allmulticast mode [ 317.831394][T14291] bond0: (slave vlan4): Opening slave failed [ 317.894997][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2291'. [ 317.932313][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2291'. [ 318.102861][T14318] tipc: Resetting bearer [ 318.226753][T14325] netlink: 'syz.6.2295': attribute type 1 has an invalid length. [ 318.338357][T14329] netlink: 'syz.6.2297': attribute type 1 has an invalid length. [ 318.348147][T14330] netlink: 'syz.6.2297': attribute type 1 has an invalid length. [ 318.371833][T14335] netlink: 'syz.8.2296': attribute type 1 has an invalid length. [ 318.387743][T14329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.437472][T14335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.460070][T14329] bond3: (slave erspan1): making interface the new active one [ 318.470037][T14329] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 318.568807][T14335] bond9: entered promiscuous mode [ 318.662241][T14351] !: renamed from dummy0 [ 318.694234][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'. [ 318.715919][T14351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.793206][T14351] lo speed is unknown, defaulting to 1000 [ 318.902881][T14358] syzkaller0: entered promiscuous mode [ 318.911807][T14358] syzkaller0: entered allmulticast mode [ 318.986032][T14368] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 319.083624][T14369] netlink: 'syz.7.2308': attribute type 1 has an invalid length. [ 320.921526][T14386] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 320.942768][T14386] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 320.963103][T14386] tipc: Resetting bearer [ 321.055643][ T3555] erspan0: left promiscuous mode [ 321.532592][T14416] lo speed is unknown, defaulting to 1000 [ 321.539224][T14414] __nla_validate_parse: 3 callbacks suppressed [ 321.539240][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2321'. [ 321.929487][T14424] validate_nla: 1 callbacks suppressed [ 321.929507][T14424] netlink: 'syz.8.2325': attribute type 2 has an invalid length. [ 321.985587][T14424] netlink: 1184 bytes leftover after parsing attributes in process `syz.8.2325'. [ 322.022647][T14426] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 322.103379][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2327'. [ 322.191612][T14418] netlink: 'syz.6.2322': attribute type 2 has an invalid length. [ 322.251288][T14435] netlink: 164548 bytes leftover after parsing attributes in process `syz.1.2330'. [ 322.317621][T14440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2330'. [ 322.467830][T14448] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 322.664004][T14455] lo speed is unknown, defaulting to 1000 [ 323.070017][T14456] lo speed is unknown, defaulting to 1000 [ 323.329723][T14462] lo speed is unknown, defaulting to 1000 [ 323.371318][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 323.383366][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2339'. [ 323.432768][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2339'. [ 323.441703][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2340'. [ 323.886087][T14500] bond0: (slave gretap0): Opening slave failed [ 323.930065][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'. [ 324.005579][T14503] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 325.197068][T14536] netlink: 'syz.6.2354': attribute type 10 has an invalid length. [ 325.224187][T14536] bond0: (slave wlan1): Opening slave failed [ 325.274923][T14531] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 325.305104][T14531] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 325.343338][T14541] netlink: 'syz.7.2355': attribute type 16 has an invalid length. [ 325.351776][T14531] tipc: Resetting bearer [ 325.361835][T14541] netlink: 'syz.7.2355': attribute type 17 has an invalid length. [ 325.401589][T14541] erspan0: left allmulticast mode [ 325.469498][T14541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.523038][T14549] syz_tun: entered allmulticast mode [ 325.551792][T14549] dvmrp8: entered allmulticast mode [ 325.569945][T14541] netlink: 'syz.7.2355': attribute type 2 has an invalid length. [ 325.578200][T14543] lo speed is unknown, defaulting to 1000 [ 325.631363][T14541] netlink: 'syz.7.2355': attribute type 2 has an invalid length. [ 326.335754][T14548] syz_tun: left allmulticast mode [ 326.340916][T14548] dvmrp8: left allmulticast mode [ 326.824853][T14544] lo speed is unknown, defaulting to 1000 [ 327.130536][T14597] __nla_validate_parse: 4 callbacks suppressed [ 327.130553][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2364'. [ 327.190418][T14549] lo speed is unknown, defaulting to 1000 [ 327.313334][T14603] netlink: zone id is out of range [ 327.336215][T14603] netlink: zone id is out of range [ 327.350438][T14603] netlink: zone id is out of range [ 327.373613][T14603] netlink: zone id is out of range [ 327.399708][T14603] netlink: zone id is out of range [ 327.415124][T14603] netlink: zone id is out of range [ 327.444107][T14603] netlink: zone id is out of range [ 327.475009][T14603] netlink: zone id is out of range [ 327.551443][T14597] lo speed is unknown, defaulting to 1000 [ 327.665569][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2370'. [ 327.674949][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2370'. [ 327.762625][T14616] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2371'. [ 328.954413][T14646] lo speed is unknown, defaulting to 1000 [ 329.081402][T14651] netlink: 'syz.5.2381': attribute type 1 has an invalid length. [ 329.152851][T14651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.274007][T14654] bond7: (slave ip6gretap1): making interface the new active one [ 329.299875][T14658] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2384'. [ 329.303030][T14654] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 329.479636][T14665] net_ratelimit: 13 callbacks suppressed [ 329.479655][T14665] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 329.535036][T14651] veth11: entered promiscuous mode [ 329.549852][T14651] bond7: (slave veth11): Enslaving as an active interface with a down link [ 329.573710][T14656] erspan0: entered allmulticast mode [ 329.590952][T14656] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 329.890477][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 330.212157][T14682] lo speed is unknown, defaulting to 1000 [ 330.870681][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2400'. [ 330.944796][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2400'. [ 331.092310][T14730] lo speed is unknown, defaulting to 1000 [ 331.225431][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 331.270126][T14736] bond3: (slave erspan0): Releasing active interface [ 331.393222][T14736] team0: Port device dummy0 removed [ 331.423319][T14736] bridge_slave_0: left allmulticast mode [ 331.433052][T14736] bridge_slave_0: left promiscuous mode [ 331.439053][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.456170][T14736] bridge_slave_1: left allmulticast mode [ 331.461983][T14736] bridge_slave_1: left promiscuous mode [ 331.471473][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.492915][T14736] bond0: (slave bond_slave_1): Releasing backup interface [ 331.501194][T14736] bond_slave_1: left promiscuous mode [ 331.532114][T14736] team0: Port device team_slave_0 removed [ 331.560307][T14736] team0: Port device team_slave_1 removed [ 331.579400][T14736] bond0: (slave batadv_slave_0): Releasing backup interface [ 331.587610][T14736] batadv_slave_0: left promiscuous mode [ 331.596178][T14736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.609372][T14736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.633595][T14736] bond0: (slave wlan1): Releasing backup interface [ 331.641793][T14736] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 331.666697][T14736] tipc: Resetting bearer [ 331.684671][T14736] bond3: (slave veth7): Releasing active interface [ 331.730435][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 332.091790][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2407'. [ 332.094427][T14764] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2408'. [ 332.339467][T14766] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 332.358991][T14770] netlink: 'syz.6.2411': attribute type 10 has an invalid length. [ 332.395427][T14766] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 332.403329][T14766] tipc: Resetting bearer [ 332.606224][T14782] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 332.698419][T14782] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 332.726795][T14782] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 332.754737][T14782] tipc: Resetting bearer [ 332.759357][ T5952] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 332.994010][T14794] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2417'. [ 333.128902][T14806] tipc: Resetting bearer [ 333.136623][T14807] netlink: 'syz.7.2423': attribute type 1 has an invalid length. [ 333.554684][T14830] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2429'. [ 333.610397][T14824] netlink: 'syz.1.2428': attribute type 10 has an invalid length. [ 333.690600][T14839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2433'. [ 333.777827][T14844] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig [ 333.802742][T14844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2435'. [ 333.949639][T14806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.965573][T14806] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 333.986649][T14806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.992576][T14806] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 334.071241][T14806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.079243][T14806] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 334.103024][T14869] netlink: 'syz.7.2442': attribute type 10 has an invalid length. [ 334.112067][T14806] tipc: Resetting bearer [ 334.229925][T14875] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 334.250913][T14876] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2442'. [ 334.276253][T14869] team0: Cannot enslave team device to itself [ 334.297856][T14806] tipc: Resetting bearer [ 334.341655][T14806] tipc: Resetting bearer [ 334.486877][T14888] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2446'. [ 334.541377][T14890] netlink: 'syz.5.2448': attribute type 42 has an invalid length. [ 334.642487][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 334.870167][T14908] lo speed is unknown, defaulting to 1000 [ 335.084787][T14920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.118589][T14920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.179989][T14928] tipc: Enabling of bearer rejected, already enabled [ 335.275018][T14935] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2462'. [ 335.310768][T14920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.328425][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2463'. [ 335.357910][T14920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.404617][T14909] lo speed is unknown, defaulting to 1000 [ 335.574278][T14920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.602093][T14920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.874789][T14920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.887028][T14920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.192389][ T3596] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.202582][ T3596] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.211552][ T3596] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.219892][ T3596] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.483910][T14980] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 336.492188][T14980] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 336.502635][ T3555] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.512156][ T3555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.532175][ T1148] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.555285][ T1148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.710140][T14986] netlink: 'syz.7.2483': attribute type 42 has an invalid length. [ 336.850076][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'. [ 337.008032][T14993] pim6reg99999999: entered allmulticast mode [ 337.147601][T14998] netlink: 'syz.7.2485': attribute type 10 has an invalid length. [ 337.190829][T14998] bond0: (slave wlan1): Opening slave failed [ 337.371822][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.382229][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.390802][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.397816][T14996] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 337.405485][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.409727][T14996] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 337.415310][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.430236][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.438083][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.452861][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.470071][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.478388][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.485642][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.495458][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.505822][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.515771][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.530556][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.538767][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.565308][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.573257][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.581229][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.589705][T15006] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.614607][T15005] lo speed is unknown, defaulting to 1000 [ 337.634027][T15014] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 337.696283][T15014] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 337.734545][T15019] tipc: Enabled bearer , priority 0 [ 337.742477][T15014] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 337.770213][T15019] syzkaller0: entered promiscuous mode [ 337.797529][T15021] FAULT_INJECTION: forcing a failure. [ 337.797529][T15021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.818480][T15019] syzkaller0: entered allmulticast mode [ 337.821004][T15021] CPU: 0 UID: 0 PID: 15021 Comm: syz.6.2492 Not tainted syzkaller #0 PREEMPT(full) [ 337.821025][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.821035][T15021] Call Trace: [ 337.821042][T15021] [ 337.821049][T15021] dump_stack_lvl+0x189/0x250 [ 337.821073][T15021] ? __pfx____ratelimit+0x10/0x10 [ 337.821091][T15021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.821110][T15021] ? __pfx__printk+0x10/0x10 [ 337.821131][T15021] ? __might_fault+0xb0/0x130 [ 337.821162][T15021] should_fail_ex+0x414/0x560 [ 337.821188][T15021] _copy_from_iter+0x1de/0x1790 [ 337.821212][T15021] ? rcu_is_watching+0x15/0xb0 [ 337.821230][T15021] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 337.821253][T15021] ? __pfx__copy_from_iter+0x10/0x10 [ 337.821272][T15021] ? __build_skb_around+0x257/0x3e0 [ 337.821292][T15021] ? netlink_sendmsg+0x642/0xb30 [ 337.821307][T15021] ? skb_put+0x11b/0x210 [ 337.821327][T15021] netlink_sendmsg+0x6b2/0xb30 [ 337.821352][T15021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.821371][T15021] ? __lock_acquire+0xab9/0xd20 [ 337.821391][T15021] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.821409][T15021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.821425][T15021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.821443][T15021] __sock_sendmsg+0x219/0x270 [ 337.821467][T15021] sock_write_iter+0x258/0x330 [ 337.821490][T15021] ? __pfx_sock_write_iter+0x10/0x10 [ 337.821521][T15021] ? bpf_lsm_file_permission+0x9/0x20 [ 337.821538][T15021] ? security_file_permission+0x75/0x290 [ 337.821566][T15021] vfs_write+0x5c6/0xb30 [ 337.821592][T15021] ? __pfx_sock_write_iter+0x10/0x10 [ 337.821612][T15021] ? __pfx_vfs_write+0x10/0x10 [ 337.821642][T15021] ? __fget_files+0x2a/0x420 [ 337.821665][T15021] ksys_write+0x145/0x250 [ 337.821687][T15021] ? __pfx_ksys_write+0x10/0x10 [ 337.821705][T15021] ? rcu_is_watching+0x15/0xb0 [ 337.821725][T15021] ? do_syscall_64+0xbe/0x3b0 [ 337.821746][T15021] do_syscall_64+0xfa/0x3b0 [ 337.821761][T15021] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.821785][T15021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.821801][T15021] ? clear_bhb_loop+0x60/0xb0 [ 337.821820][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.821836][T15021] RIP: 0033:0x7f3d8fd8ebe9 [ 337.821851][T15021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.821865][T15021] RSP: 002b:00007f3d90c7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.821883][T15021] RAX: ffffffffffffffda RBX: 00007f3d8ffc5fa0 RCX: 00007f3d8fd8ebe9 [ 337.821895][T15021] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 337.821905][T15021] RBP: 00007f3d90c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 337.821915][T15021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.821925][T15021] R13: 00007f3d8ffc6038 R14: 00007f3d8ffc5fa0 R15: 00007ffd5437e668 [ 337.821953][T15021] [ 337.918501][T15026] netlink: 'syz.6.2494': attribute type 42 has an invalid length. [ 338.111613][T15019] tipc: Resetting bearer [ 338.138202][T15018] netlink: 'syz.7.2491': attribute type 10 has an invalid length. [ 338.170337][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'. [ 338.183165][T15018] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 338.192157][T15018] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 338.290307][T15042] netlink: 'syz.5.2496': attribute type 4 has an invalid length. [ 338.341990][ T9] lo speed is unknown, defaulting to 1000 [ 338.348569][ T9] syz0: Port: 1 Link DOWN [ 338.360603][ T9] lo speed is unknown, defaulting to 1000 [ 338.439852][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2496'. [ 338.479811][T15013] tipc: Resetting bearer [ 338.555944][T15013] tipc: Disabling bearer [ 338.611086][T15057] netlink: 'syz.6.2501': attribute type 30 has an invalid length. [ 338.819740][T15005] chnl_net:caif_netlink_parms(): no params data found [ 338.861178][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'. [ 339.176754][T15085] netlink: 'syz.8.2506': attribute type 10 has an invalid length. [ 339.287126][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.294297][T15005] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.323937][T15005] bridge_slave_0: entered allmulticast mode [ 339.347022][T15005] bridge_slave_0: entered promiscuous mode [ 339.383556][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.425605][T15005] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.432863][T15005] bridge_slave_1: entered allmulticast mode [ 339.468359][T15005] bridge_slave_1: entered promiscuous mode [ 339.474466][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2510'. [ 339.626664][ T5186] Bluetooth: hci1: command tx timeout [ 339.662656][T15005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.691374][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2510'. [ 339.703499][T15005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.753942][T15102] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2510'. [ 339.805472][T15116] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2517'. [ 339.824796][T15116] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2517'. [ 339.879444][T15005] team0: Port device team_slave_0 added [ 339.903353][T15124] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 339.916455][T15124] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 339.930238][T15005] team0: Port device team_slave_1 added [ 339.993869][T15122] tipc: Enabling of bearer rejected, already enabled [ 340.006673][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2521'. [ 340.025553][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2521'. [ 340.235234][T15005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.242203][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.358928][T15005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.423644][T15005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.452212][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.489990][T15137] netlink: 'syz.7.2522': attribute type 10 has an invalid length. [ 340.518159][T15005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.545497][T15133] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 340.553003][T15133] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 340.572194][T15133] tipc: Resetting bearer [ 340.755996][T15005] hsr_slave_0: entered promiscuous mode [ 340.772585][T15005] hsr_slave_1: entered promiscuous mode [ 340.783117][T15148] pim6reg: left allmulticast mode [ 340.832043][T15152] pim6reg: entered allmulticast mode [ 340.951750][T15160] netlink: 'syz.5.2528': attribute type 42 has an invalid length. [ 341.170587][T15005] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.180935][T15005] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.318801][T15005] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.346973][T15005] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.473031][T15005] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.483572][T15005] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.564214][T15005] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.591396][T15005] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.693675][T15194] netlink: 'syz.8.2537': attribute type 1 has an invalid length. [ 341.705619][ T5186] Bluetooth: hci1: command tx timeout [ 341.791128][T15194] syzkaller1: entered allmulticast mode [ 341.889325][T15005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.908808][T15005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.934359][T15209] smc: net device bond0 applied user defined pnetid SYZ2 [ 341.946119][T15005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.986909][T15005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.045863][T15215] netlink: 'syz.5.2544': attribute type 42 has an invalid length. [ 342.088425][T15211] ipvlan2: entered promiscuous mode [ 342.094710][T15211] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 342.220699][T15005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.293883][T15005] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.341606][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.348785][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.374370][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.381551][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.529238][T15231] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.568628][T15235] sctp: [Deprecated]: syz.6.2549 (pid 15235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.568628][T15235] Use struct sctp_sack_info instead [ 342.614598][T15231] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.733832][T15231] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.825873][T15252] veth0: entered promiscuous mode [ 342.838959][T15231] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.892558][T15248] netlink: 'syz.8.2551': attribute type 10 has an invalid length. [ 342.921581][T15005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.989432][T15254] veth0: left promiscuous mode [ 343.060000][T15265] netlink: 'syz.6.2555': attribute type 42 has an invalid length. [ 343.080616][T15005] veth0_vlan: entered promiscuous mode [ 343.112496][T15005] veth1_vlan: entered promiscuous mode [ 343.139596][ T3596] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.267494][T13977] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.279918][T15276] netlink: 'syz.6.2559': attribute type 10 has an invalid length. [ 343.288820][T13977] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.306724][T15276] __nla_validate_parse: 14 callbacks suppressed [ 343.306742][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2559'. [ 343.339854][T13977] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.364055][T15276] team0: Port device geneve0 added [ 343.380373][T13977] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.426225][T13977] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.453776][T15005] veth0_macvtap: entered promiscuous mode [ 343.476692][T13977] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.484923][T13977] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.512966][T15005] veth1_macvtap: entered promiscuous mode [ 343.526054][T15285] tipc: Enabling of bearer rejected, already enabled [ 343.544145][T15286] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 343.553302][T15286] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 343.564422][T15286] tipc: Resetting bearer [ 343.594544][T15005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.616490][T15005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.643680][T13975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.666195][T13975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.711588][T15294] FAULT_INJECTION: forcing a failure. [ 343.711588][T15294] name failslab, interval 1, probability 0, space 0, times 0 [ 343.717201][T13975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.729087][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2565'. [ 343.744798][T15294] CPU: 1 UID: 0 PID: 15294 Comm: syz.8.2564 Not tainted syzkaller #0 PREEMPT(full) [ 343.744820][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.744829][T15294] Call Trace: [ 343.744836][T15294] [ 343.744843][T15294] dump_stack_lvl+0x189/0x250 [ 343.744868][T15294] ? __pfx____ratelimit+0x10/0x10 [ 343.744886][T15294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.744906][T15294] ? __pfx__printk+0x10/0x10 [ 343.744928][T15294] ? __lock_acquire+0xab9/0xd20 [ 343.744957][T15294] should_fail_ex+0x414/0x560 [ 343.744984][T15294] should_failslab+0xa8/0x100 [ 343.745004][T15294] kmem_cache_alloc_noprof+0x73/0x3c0 [ 343.745021][T15294] ? skb_clone+0x212/0x3a0 [ 343.745039][T15294] skb_clone+0x212/0x3a0 [ 343.745056][T15294] __netlink_deliver_tap+0x404/0x850 [ 343.745079][T15294] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.745094][T15294] netlink_deliver_tap+0x19c/0x1b0 [ 343.745107][T15294] netlink_unicast+0x7fa/0x9e0 [ 343.745131][T15294] ? __pfx_netlink_unicast+0x10/0x10 [ 343.745151][T15294] ? netlink_sendmsg+0x642/0xb30 [ 343.745162][T15294] ? skb_put+0x11b/0x210 [ 343.745177][T15294] netlink_sendmsg+0x805/0xb30 [ 343.745204][T15294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.745225][T15294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.745241][T15294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.745258][T15294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.745273][T15294] __sock_sendmsg+0x219/0x270 [ 343.745297][T15294] ____sys_sendmsg+0x505/0x830 [ 343.745321][T15294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.745349][T15294] ? import_iovec+0x74/0xa0 [ 343.745372][T15294] ___sys_sendmsg+0x21f/0x2a0 [ 343.745394][T15294] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.745451][T15294] ? __fget_files+0x2a/0x420 [ 343.745472][T15294] ? __fget_files+0x3a0/0x420 [ 343.745499][T15294] __x64_sys_sendmsg+0x19b/0x260 [ 343.745521][T15294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.745550][T15294] ? __pfx_ksys_write+0x10/0x10 [ 343.745568][T15294] ? rcu_is_watching+0x15/0xb0 [ 343.745589][T15294] ? do_syscall_64+0xbe/0x3b0 [ 343.745610][T15294] do_syscall_64+0xfa/0x3b0 [ 343.745624][T15294] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.745638][T15294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.745652][T15294] ? clear_bhb_loop+0x60/0xb0 [ 343.745669][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.745682][T15294] RIP: 0033:0x7f0873f8ebe9 [ 343.745698][T15294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.745710][T15294] RSP: 002b:00007f08721f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.745728][T15294] RAX: ffffffffffffffda RBX: 00007f08741c5fa0 RCX: 00007f0873f8ebe9 [ 343.745739][T15294] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 343.745750][T15294] RBP: 00007f08721f6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.745760][T15294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.745770][T15294] R13: 00007f08741c6038 R14: 00007f08741c5fa0 R15: 00007ffdcbf10d48 [ 343.745795][T15294] [ 343.781143][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2565'. [ 343.820701][ T5186] Bluetooth: hci1: command tx timeout [ 343.900070][T13975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.147920][T13977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.156014][T13977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.240796][T13977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.250367][T13977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.306807][T15304] smc: net device bond0 applied user defined pnetid SYZ2 [ 344.343598][T15304] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2569'. [ 344.889174][T15304] smc: removing net device bond0 with user defined pnetid SYZ2 [ 344.899956][T15304] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 344.909103][T15304] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 344.919419][T15304] bond0 (unregistering): Released all slaves [ 345.140663][T15319] netlink: 'syz.5.2573': attribute type 1 has an invalid length. [ 345.157703][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2573'. [ 345.176836][T15319] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2573'. [ 345.196653][T15319] lo speed is unknown, defaulting to 1000 [ 345.209137][T15319] lo speed is unknown, defaulting to 1000 [ 345.220753][T15319] lo speed is unknown, defaulting to 1000 [ 345.261017][T15320] tc_dump_action: action bad kind [ 345.279021][T15319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 345.305387][ C1] ip6_tnl_xmit_ctl: 38 callbacks suppressed [ 345.305404][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.400223][T15319] lo speed is unknown, defaulting to 1000 [ 345.421238][T15319] lo speed is unknown, defaulting to 1000 [ 345.433833][T15320] netlink: 'syz.5.2573': attribute type 4 has an invalid length. [ 345.451458][T15319] lo speed is unknown, defaulting to 1000 [ 345.477538][T15319] lo speed is unknown, defaulting to 1000 [ 345.512465][T15319] lo speed is unknown, defaulting to 1000 [ 345.528322][T15332] FAULT_INJECTION: forcing a failure. [ 345.528322][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 345.562357][T15332] CPU: 0 UID: 0 PID: 15332 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT(full) [ 345.562383][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.562393][T15332] Call Trace: [ 345.562400][T15332] [ 345.562409][T15332] dump_stack_lvl+0x189/0x250 [ 345.562433][T15332] ? __pfx____ratelimit+0x10/0x10 [ 345.562452][T15332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.562471][T15332] ? __pfx__printk+0x10/0x10 [ 345.562499][T15332] ? __pfx___might_resched+0x10/0x10 [ 345.562514][T15332] ? fs_reclaim_acquire+0x7d/0x100 [ 345.562543][T15332] should_fail_ex+0x414/0x560 [ 345.562570][T15332] should_failslab+0xa8/0x100 [ 345.562594][T15332] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 345.562616][T15332] ? __alloc_skb+0x112/0x2d0 [ 345.562638][T15332] __alloc_skb+0x112/0x2d0 [ 345.562660][T15332] netlink_ack+0x146/0xa50 [ 345.562679][T15332] ? rcu_is_watching+0x15/0xb0 [ 345.562697][T15332] ? trace_contention_end+0x39/0x120 [ 345.562726][T15332] netlink_rcv_skb+0x28c/0x470 [ 345.562745][T15332] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 345.562768][T15332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.562802][T15332] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.562825][T15332] xfrm_netlink_rcv+0x79/0x90 [ 345.562847][T15332] netlink_unicast+0x82c/0x9e0 [ 345.562895][T15332] ? __pfx_netlink_unicast+0x10/0x10 [ 345.562920][T15332] ? netlink_sendmsg+0x642/0xb30 [ 345.562935][T15332] ? skb_put+0x11b/0x210 [ 345.562957][T15332] netlink_sendmsg+0x805/0xb30 [ 345.562984][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.563005][T15332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 345.563024][T15332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.563047][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.563065][T15332] __sock_sendmsg+0x219/0x270 [ 345.563091][T15332] ____sys_sendmsg+0x505/0x830 [ 345.563116][T15332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.563146][T15332] ? import_iovec+0x74/0xa0 [ 345.563170][T15332] ___sys_sendmsg+0x21f/0x2a0 [ 345.563192][T15332] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.563252][T15332] ? __fget_files+0x2a/0x420 [ 345.563264][T15332] ? __fget_files+0x3a0/0x420 [ 345.563288][T15332] __x64_sys_sendmsg+0x19b/0x260 [ 345.563308][T15332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.563334][T15332] ? __pfx_ksys_write+0x10/0x10 [ 345.563352][T15332] ? rcu_is_watching+0x15/0xb0 [ 345.563377][T15332] ? do_syscall_64+0xbe/0x3b0 [ 345.563397][T15332] do_syscall_64+0xfa/0x3b0 [ 345.563412][T15332] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.563429][T15332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.563446][T15332] ? clear_bhb_loop+0x60/0xb0 [ 345.563466][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.563482][T15332] RIP: 0033:0x7f0873f8ebe9 [ 345.563497][T15332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.563511][T15332] RSP: 002b:00007f08721f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.563530][T15332] RAX: ffffffffffffffda RBX: 00007f08741c5fa0 RCX: 00007f0873f8ebe9 [ 345.563542][T15332] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 345.563553][T15332] RBP: 00007f08721f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.563564][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.563574][T15332] R13: 00007f08741c6038 R14: 00007f08741c5fa0 R15: 00007ffdcbf10d48 [ 345.563604][T15332] [ 345.570011][T15331] lo speed is unknown, defaulting to 1000 [ 345.590068][T15319] lo speed is unknown, defaulting to 1000 [ 345.910304][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2578'. [ 345.945551][ T5186] Bluetooth: hci1: command tx timeout [ 346.046193][T15331] lo speed is unknown, defaulting to 1000 [ 346.367445][T15351] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 346.398204][T15351] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.674371][T15362] tipc: Started in network mode [ 346.679381][T15362] tipc: Node identity 3223cbe0cd98, cluster identity 4711 [ 346.686836][T15362] tipc: Enabled bearer , priority 0 [ 346.694628][T15362] syzkaller0: entered promiscuous mode [ 346.709055][T15362] syzkaller0: entered allmulticast mode [ 346.746732][T15362] tipc: Resetting bearer [ 346.797800][T15362] tipc: Resetting bearer [ 346.884617][T15369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2589'. [ 346.930752][T15362] tipc: Disabling bearer [ 347.084425][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2591'. [ 347.121247][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2591'. [ 347.129948][T15375] netlink: 'syz.6.2590': attribute type 12 has an invalid length. [ 347.684773][T15404] FAULT_INJECTION: forcing a failure. [ 347.684773][T15404] name failslab, interval 1, probability 0, space 0, times 0 [ 347.702845][T15404] CPU: 1 UID: 0 PID: 15404 Comm: syz.5.2599 Not tainted syzkaller #0 PREEMPT(full) [ 347.702870][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.702881][T15404] Call Trace: [ 347.702888][T15404] [ 347.702896][T15404] dump_stack_lvl+0x189/0x250 [ 347.702922][T15404] ? __pfx____ratelimit+0x10/0x10 [ 347.702941][T15404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.702960][T15404] ? __pfx__printk+0x10/0x10 [ 347.702979][T15404] ? xfrm_netlink_rcv+0x79/0x90 [ 347.703000][T15404] ? ____sys_sendmsg+0x505/0x830 [ 347.703018][T15404] ? __x64_sys_sendmsg+0x19b/0x260 [ 347.703048][T15404] should_fail_ex+0x414/0x560 [ 347.703075][T15404] should_failslab+0xa8/0x100 [ 347.703105][T15404] kmem_cache_alloc_noprof+0x73/0x3c0 [ 347.703125][T15404] ? skb_clone+0x212/0x3a0 [ 347.703150][T15404] skb_clone+0x212/0x3a0 [ 347.703173][T15404] __netlink_deliver_tap+0x404/0x850 [ 347.703204][T15404] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.703223][T15404] netlink_deliver_tap+0x19c/0x1b0 [ 347.703242][T15404] netlink_sendskb+0x68/0x140 [ 347.703267][T15404] netlink_unicast+0x397/0x9e0 [ 347.703286][T15404] ? __asan_memcpy+0x40/0x70 [ 347.703314][T15404] ? __pfx_netlink_unicast+0x10/0x10 [ 347.703347][T15404] netlink_rcv_skb+0x28c/0x470 [ 347.703365][T15404] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 347.703388][T15404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.703420][T15404] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.703436][T15404] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.703455][T15404] xfrm_netlink_rcv+0x79/0x90 [ 347.703477][T15404] netlink_unicast+0x82c/0x9e0 [ 347.703510][T15404] ? __pfx_netlink_unicast+0x10/0x10 [ 347.703534][T15404] ? netlink_sendmsg+0x642/0xb30 [ 347.703549][T15404] ? skb_put+0x11b/0x210 [ 347.703571][T15404] netlink_sendmsg+0x805/0xb30 [ 347.703599][T15404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.703620][T15404] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.703639][T15404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.703658][T15404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.703676][T15404] __sock_sendmsg+0x219/0x270 [ 347.703703][T15404] ____sys_sendmsg+0x505/0x830 [ 347.703729][T15404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.703759][T15404] ? import_iovec+0x74/0xa0 [ 347.703783][T15404] ___sys_sendmsg+0x21f/0x2a0 [ 347.703805][T15404] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.703862][T15404] ? __fget_files+0x2a/0x420 [ 347.703877][T15404] ? __fget_files+0x3a0/0x420 [ 347.703904][T15404] __x64_sys_sendmsg+0x19b/0x260 [ 347.703925][T15404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.703955][T15404] ? __pfx_ksys_write+0x10/0x10 [ 347.703973][T15404] ? rcu_is_watching+0x15/0xb0 [ 347.703995][T15404] ? do_syscall_64+0xbe/0x3b0 [ 347.704018][T15404] do_syscall_64+0xfa/0x3b0 [ 347.704034][T15404] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.704057][T15404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.704073][T15404] ? clear_bhb_loop+0x60/0xb0 [ 347.704092][T15404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.704113][T15404] RIP: 0033:0x7f062858ebe9 [ 347.704129][T15404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.704143][T15404] RSP: 002b:00007f0629405038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.704160][T15404] RAX: ffffffffffffffda RBX: 00007f06287c5fa0 RCX: 00007f062858ebe9 [ 347.704171][T15404] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 347.704180][T15404] RBP: 00007f0629405090 R08: 0000000000000000 R09: 0000000000000000 [ 347.704189][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.704198][T15404] R13: 00007f06287c6038 R14: 00007f06287c5fa0 R15: 00007ffd737a9768 [ 347.704228][T15404] [ 348.279574][T15423] tipc: Enabling of bearer rejected, already enabled [ 348.418913][T15431] netlink: 'syz.6.2609': attribute type 10 has an invalid length. [ 348.614351][T15440] __nla_validate_parse: 2 callbacks suppressed [ 348.614371][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2612'. [ 348.747688][T15445] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 348.973169][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2616'. [ 349.016512][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2616'. [ 349.055333][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2616'. [ 349.122904][T15465] tipc: Enabled bearer , priority 0 [ 349.188730][T15472] tipc: Resetting bearer [ 349.369725][T15482] netlink: 'syz.8.2625': attribute type 10 has an invalid length. [ 349.546104][T15484] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2626'. [ 349.621318][T15486] tipc: Enabling of bearer rejected, already enabled [ 349.658722][T15486] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 349.677082][T15486] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 349.685153][T15486] tipc: Resetting bearer [ 349.912678][T15498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 349.913360][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2634'. [ 350.115896][ T9] tipc: Node number set to 1168889193 [ 350.263376][T15519] tipc: Resetting bearer [ 350.693168][T15499] delete_channel: no stack [ 350.794399][T15534] lo speed is unknown, defaulting to 1000 [ 350.825636][ T5186] Bluetooth: hci0: command tx timeout [ 350.915804][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2639'. [ 350.956517][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 351.091707][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2647'. [ 351.129526][T15548] tipc: Resetting bearer [ 351.164686][T15548] tipc: Resetting bearer [ 351.186063][T15548] tipc: Resetting bearer [ 351.289966][T15535] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2643'. [ 351.311652][T15548] tipc: Resetting bearer [ 351.371330][T15534] lo speed is unknown, defaulting to 1000 [ 351.642799][T15561] tipc: Enabling of bearer rejected, failed to enable media [ 351.923021][T15548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.951560][T15548] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 352.252701][T13975] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.284957][T13975] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.325617][ T3596] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.341903][ T3596] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.573205][T15581] syzkaller0: entered promiscuous mode [ 352.585645][T15581] syzkaller0: entered allmulticast mode [ 352.867474][T15597] netlink: 'syz.5.2661': attribute type 10 has an invalid length. [ 355.272992][T15591] __nla_validate_parse: 6 callbacks suppressed [ 355.273010][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'. [ 355.302055][T15604] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 355.311460][T15604] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 355.331686][T15608] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2663'. [ 355.366873][T15608] netem: invalid attributes len -16 [ 355.388390][T15608] netem: change failed [ 356.282494][T15664] netlink: 'syz.7.2675': attribute type 10 has an invalid length. [ 356.312804][T15664] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 356.316121][T15665] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 356.342482][T15664] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 356.360674][T15667] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2678'. [ 356.371733][T15663] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 356.379415][T15663] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 356.435450][T15667] netlink: 'syz.5.2678': attribute type 1 has an invalid length. [ 356.640092][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'. [ 356.667371][T15679] Bluetooth: MGMT ver 1.23 [ 357.039944][T15693] lo speed is unknown, defaulting to 1000 [ 357.217329][T15705] gretap1: entered promiscuous mode [ 357.378453][T15709] netlink: 'syz.1.2692': attribute type 6 has an invalid length. [ 357.689747][T15693] lo speed is unknown, defaulting to 1000 [ 357.824676][T15719] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2694'. [ 357.887517][T15726] bridge2: entered promiscuous mode [ 357.893158][T15726] bridge2: entered allmulticast mode [ 357.951535][T15721] lo speed is unknown, defaulting to 1000 [ 358.182916][T15721] lo speed is unknown, defaulting to 1000 [ 358.344398][T15733] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2698'. [ 358.568892][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2701'. [ 358.588954][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 358.618306][T15747] netlink: 'syz.7.2701': attribute type 2 has an invalid length. [ 358.666954][T15747] netlink: 'syz.7.2701': attribute type 1 has an invalid length. [ 358.692954][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2701'. [ 358.820680][T15758] netlink: 'syz.6.2703': attribute type 4 has an invalid length. [ 358.854916][T15758] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2703'. [ 358.955456][ T5952] IPVS: starting estimator thread 0... [ 359.045300][T15770] IPVS: using max 26 ests per chain, 62400 per kthread [ 359.245340][T15763] lo speed is unknown, defaulting to 1000 [ 359.491382][T15790] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 359.624366][T15796] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 359.640377][T15795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.659472][T15796] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 359.749857][T15763] lo speed is unknown, defaulting to 1000 [ 359.945122][T15812] netlink: 'syz.1.2721': attribute type 6 has an invalid length. [ 359.972605][T15812] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.267747][T15823] bond0: invalid ARP target 0.0.0.0 specified for addition [ 360.287314][T15823] bond0: option arp_ip_target: invalid value (0) [ 360.420857][T15828] syzkaller1: entered promiscuous mode [ 360.439726][T15828] syzkaller1: entered allmulticast mode [ 360.654167][T15834] __nla_validate_parse: 6 callbacks suppressed [ 360.654185][T15834] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2729'. [ 360.766659][T15836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.784521][T15836] vlan2: entered allmulticast mode [ 360.796701][T15836] syz_tun: entered allmulticast mode [ 360.818734][T15836] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 360.843550][T15844] netlink: 'syz.6.2735': attribute type 10 has an invalid length. [ 360.860155][T15844] bond0: (slave wlan1): Opening slave failed [ 360.883865][T15844] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 360.901574][T15844] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 361.065035][T15854] lo speed is unknown, defaulting to 1000 [ 361.088432][T15860] batadv0: entered promiscuous mode [ 361.093985][T15860] macsec1: entered promiscuous mode [ 361.099685][T15860] macsec1: entered allmulticast mode [ 361.104972][T15860] batadv0: entered allmulticast mode [ 361.113825][T15860] batadv0: left allmulticast mode [ 361.128121][T15860] batadv0: left promiscuous mode [ 361.625005][T15879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.642842][T15879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.668286][T15854] lo speed is unknown, defaulting to 1000 [ 361.668330][T15855] lo speed is unknown, defaulting to 1000 [ 361.838157][T15883] openvswitch: netlink: IP tunnel dst address not specified [ 361.861124][T15879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.884612][T15879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.202198][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2742'. [ 362.225172][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 362.235515][T15895] netlink: 'syz.1.2746': attribute type 21 has an invalid length. [ 362.243346][T15895] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2746'. [ 362.261683][T15879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.289547][T15879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.292832][T15897] netlink: 'syz.8.2747': attribute type 10 has an invalid length. [ 362.315488][T15895] netlink: 'syz.1.2746': attribute type 4 has an invalid length. [ 362.330168][T15895] netlink: 'syz.1.2746': attribute type 5 has an invalid length. [ 362.338064][T15895] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2746'. [ 362.349921][T15855] lo speed is unknown, defaulting to 1000 [ 362.400726][T15879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.411405][T15879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.558921][T15899] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 362.567777][T15899] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 362.578416][T15883] lo speed is unknown, defaulting to 1000 [ 362.737170][T15901] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 362.772945][T13974] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.791901][T13974] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.830207][T13974] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.845552][T13974] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.874770][T13974] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.897119][T15903] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2749'. [ 362.912992][T13974] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.922593][T13974] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.945666][T13974] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.998353][T15905] geneve2: entered promiscuous mode [ 363.017319][T15883] lo speed is unknown, defaulting to 1000 [ 363.031238][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2750'. [ 363.374920][T15919] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2753'. [ 363.404579][T15921] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 363.421412][T15921] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 363.450296][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2754'. [ 363.777551][T15932] netlink: 'syz.6.2758': attribute type 10 has an invalid length. [ 363.834448][T15932] bond0: (slave wlan1): Opening slave failed [ 363.911457][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2760'. [ 363.944871][T15936] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.968365][T15943] netlink: 'syz.8.2760': attribute type 1 has an invalid length. [ 364.280986][T15952] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 364.331329][T15954] dummy0: entered promiscuous mode [ 364.360539][T15954] macsec1: entered promiscuous mode [ 364.384345][T15954] dummy0: left promiscuous mode [ 364.422252][T15962] geneve2: entered promiscuous mode [ 364.429899][T15962] geneve2: entered allmulticast mode [ 364.594043][T15976] sctp: [Deprecated]: syz.5.2769 (pid 15976) Use of int in maxseg socket option. [ 364.594043][T15976] Use struct sctp_assoc_value instead [ 364.760211][T15985] lo speed is unknown, defaulting to 1000 [ 364.949313][T15985] lo speed is unknown, defaulting to 1000 [ 365.107165][T15999] netlink: 'syz.7.2776': attribute type 13 has an invalid length. [ 365.119880][T15999] netlink: 'syz.7.2776': attribute type 17 has an invalid length. [ 365.164795][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.182654][T15999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.844500][T16030] netlink: 'syz.7.2785': attribute type 1 has an invalid length. [ 365.913514][T16030] __nla_validate_parse: 3 callbacks suppressed [ 365.913531][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2785'. [ 366.089818][T16042] lo speed is unknown, defaulting to 1000 [ 366.119077][T16048] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 366.165812][T16048] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 366.486188][T16066] atomic_op ffff88802a2ee998 conn xmit_atomic 0000000000000000 [ 366.495900][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2794'. [ 366.507665][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2794'. [ 366.612951][T16042] lo speed is unknown, defaulting to 1000 [ 366.703479][T16073] mac80211_hwsim hwsim18 ªªªªª;: renamed from wlan0 [ 366.903440][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'. [ 366.913422][T16078] netlink: 'syz.1.2798': attribute type 66 has an invalid length. [ 367.019677][T16083] !: renamed from dummy0 (while UP) [ 367.196526][T16089] netlink: 'syz.5.2801': attribute type 2 has an invalid length. [ 367.208297][T16089] netlink: 'syz.5.2801': attribute type 2 has an invalid length. [ 367.446440][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2806'. [ 367.481120][T16104] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 367.493307][T16107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2805'. [ 367.530489][T16107] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2805'. [ 367.544343][T16104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.592558][T16111] bond4: (slave geneve4): making interface the new active one [ 367.603157][T16111] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 367.761983][T16125] netlink: 'syz.7.2813': attribute type 42 has an invalid length. [ 368.092862][T16150] pimreg: entered allmulticast mode [ 368.114778][T16150] dvmrp8: entered allmulticast mode [ 368.122885][T16149] pimreg: left allmulticast mode [ 368.128326][T16149] dvmrp8: left allmulticast mode [ 368.491908][T16166] bridge1: entered promiscuous mode [ 368.788765][T16172] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2821'. [ 369.961575][T16176] lo speed is unknown, defaulting to 1000 [ 370.016305][T16177] vlan3: entered promiscuous mode [ 370.021658][T16177] vlan3: entered allmulticast mode [ 370.037828][T16177] hsr_slave_1: entered allmulticast mode [ 370.054708][T16177] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 370.104188][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2822'. [ 370.168734][T16176] lo speed is unknown, defaulting to 1000 [ 404.190017][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 414.425710][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 518.105845][ T31] INFO: task kworker/1:9:7124 blocked for more than 143 seconds. [ 518.113632][ T31] Not tainted syzkaller #0 [ 518.118735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.127618][ T31] task:kworker/1:9 state:D stack:22328 pid:7124 tgid:7124 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 518.140002][ T31] Workqueue: events rfkill_sync_work [ 518.145368][ T31] Call Trace: [ 518.148668][ T31] [ 518.151607][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.156499][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 518.162062][ T31] ? __pfx___schedule+0x10/0x10 [ 518.171801][ T31] ? schedule+0x91/0x360 [ 518.176141][ T31] schedule+0x165/0x360 [ 518.180313][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.186108][ T31] __mutex_lock+0x7e6/0x1350 [ 518.190715][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.195546][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 518.200845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.205997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.211295][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 518.217582][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 518.223937][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 518.229733][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 518.245268][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 518.251023][ T31] rfkill_set_block+0x1d2/0x440 [ 518.292408][ T31] rfkill_sync_work+0x114/0x200 [ 518.299791][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 518.306725][ T31] process_scheduled_works+0xae1/0x17b0 [ 518.312332][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.319042][ T31] worker_thread+0x8a0/0xda0 [ 518.323670][ T31] kthread+0x70e/0x8a0 [ 518.328218][ T31] ? __pfx_worker_thread+0x10/0x10 [ 518.333341][ T31] ? __pfx_kthread+0x10/0x10 [ 518.338115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.343324][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.348566][ T31] ? __pfx_kthread+0x10/0x10 [ 518.353158][ T31] ret_from_fork+0x3f9/0x770 [ 518.357792][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.362908][ T31] ? __switch_to_asm+0x39/0x70 [ 518.367684][ T31] ? __switch_to_asm+0x33/0x70 [ 518.372435][ T31] ? __pfx_kthread+0x10/0x10 [ 518.377058][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.381836][ T31] [ 518.384852][ T31] INFO: task kworker/1:12:7127 blocked for more than 143 seconds. [ 518.392667][ T31] Not tainted syzkaller #0 [ 518.397626][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.406342][ T31] task:kworker/1:12 state:D stack:23304 pid:7127 tgid:7127 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 518.418394][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 518.425101][ T31] Call Trace: [ 518.428398][ T31] [ 518.431320][ T31] __schedule+0x1798/0x4cc0 [ 518.436210][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 518.441606][ T31] ? __pfx___schedule+0x10/0x10 [ 518.446542][ T31] ? schedule+0x91/0x360 [ 518.450777][ T31] schedule+0x165/0x360 [ 518.454918][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.460384][ T31] __mutex_lock+0x7e6/0x1350 [ 518.464962][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.469783][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 518.476063][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.481094][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 518.486831][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 518.492533][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 518.498627][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 518.504344][ T31] process_scheduled_works+0xae1/0x17b0 [ 518.509979][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.516017][ T31] worker_thread+0x8a0/0xda0 [ 518.520622][ T31] kthread+0x70e/0x8a0 [ 518.524672][ T31] ? __pfx_worker_thread+0x10/0x10 [ 518.529797][ T31] ? __pfx_kthread+0x10/0x10 [ 518.534370][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.539571][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.544749][ T31] ? __pfx_kthread+0x10/0x10 [ 518.549451][ T31] ret_from_fork+0x3f9/0x770 [ 518.554043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.559187][ T31] ? __switch_to_asm+0x39/0x70 [ 518.563954][ T31] ? __switch_to_asm+0x33/0x70 [ 518.568723][ T31] ? __pfx_kthread+0x10/0x10 [ 518.573297][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.578111][ T31] [ 518.581168][ T31] INFO: task syz.8.2793:16056 blocked for more than 143 seconds. [ 518.588931][ T31] Not tainted syzkaller #0 [ 518.593859][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.602567][ T31] task:syz.8.2793 state:D stack:25096 pid:16056 tgid:16056 ppid:9119 task_flags:0x400040 flags:0x00004004 [ 518.614500][ T31] Call Trace: [ 518.617824][ T31] [ 518.620753][ T31] __schedule+0x1798/0x4cc0 [ 518.625307][ T31] ? validate_chain+0x897/0x2140 [ 518.630245][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.635077][ T31] ? __pfx___schedule+0x10/0x10 [ 518.639940][ T31] ? schedule+0x91/0x360 [ 518.644171][ T31] schedule+0x165/0x360 [ 518.648343][ T31] schedule_timeout+0x9a/0x270 [ 518.653092][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 518.658513][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.663714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.669162][ T31] ? wait_for_completion+0x267/0x5d0 [ 518.674456][ T31] wait_for_completion+0x2bf/0x5d0 [ 518.679580][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 518.685221][ T31] ? __flush_work+0xd2/0xbc0 [ 518.689809][ T31] ? __flush_work+0xd2/0xbc0 [ 518.694379][ T31] __flush_work+0x9b9/0xbc0 [ 518.698927][ T31] ? __flush_work+0xd2/0xbc0 [ 518.703522][ T31] ? __pfx___flush_work+0x10/0x10 [ 518.708571][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 518.713863][ T31] ? __pfx___cancel_work+0x10/0x10 [ 518.718993][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 518.724643][ T31] __cancel_work_sync+0xbe/0x110 [ 518.729625][ T31] rfkill_unregister+0x92/0x220 [ 518.734493][ T31] nfc_unregister_device+0x96/0x2a0 [ 518.739705][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 518.745567][ T31] virtual_ncidev_close+0x56/0x90 [ 518.750598][ T31] __fput+0x449/0xa70 [ 518.754585][ T31] task_work_run+0x1d4/0x260 [ 518.759210][ T31] ? __pfx_task_work_run+0x10/0x10 [ 518.764336][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 518.769833][ T31] exit_to_user_mode_loop+0xec/0x110 [ 518.775112][ T31] do_syscall_64+0x2bd/0x3b0 [ 518.779717][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.784914][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.790999][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.795704][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.801605][ T31] RIP: 0033:0x7f0873f8ebe9 [ 518.806021][ T31] RSP: 002b:00007ffdcbf10ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 518.814416][ T31] RAX: 0000000000000000 RBX: 000000000005967a RCX: 00007f0873f8ebe9 [ 518.822411][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 518.830712][ T31] RBP: 00007f08741c7da0 R08: 0000000000000001 R09: 00000010cbf1119f [ 518.840317][ T31] R10: 0000001b2cf20000 R11: 0000000000000246 R12: 00007f08741c5fac [ 518.848330][ T31] R13: 00007f08741c5fa0 R14: ffffffffffffffff R15: 00007ffdcbf10fc0 [ 518.856383][ T31] [ 518.859424][ T31] INFO: task syz.7.2813:16125 blocked for more than 144 seconds. [ 518.871375][ T31] Not tainted syzkaller #0 [ 518.876359][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.885019][ T31] task:syz.7.2813 state:D stack:24744 pid:16125 tgid:16124 ppid:9112 task_flags:0x400140 flags:0x00004004 [ 518.896946][ T31] Call Trace: [ 518.900220][ T31] [ 518.903134][ T31] __schedule+0x1798/0x4cc0 [ 518.907757][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.912603][ T31] ? __pfx___schedule+0x10/0x10 [ 518.917501][ T31] ? schedule+0x91/0x360 [ 518.921747][ T31] schedule+0x165/0x360 [ 518.925931][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.931383][ T31] __mutex_lock+0x7e6/0x1350 [ 518.936005][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.940766][ T31] ? rfkill_register+0x37/0x8e0 [ 518.945702][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.950738][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 518.956159][ T31] ? device_initialize+0x24b/0x440 [ 518.961277][ T31] rfkill_register+0x37/0x8e0 [ 518.966003][ T31] nfc_register_device+0x14a/0x320 [ 518.971119][ T31] nci_register_device+0x87f/0x9d0 [ 518.976280][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 518.981913][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 518.987258][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 518.992649][ T31] virtual_ncidev_open+0x129/0x1a0 [ 518.997789][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 519.003421][ T31] misc_open+0x2bc/0x330 [ 519.007670][ T31] chrdev_open+0x4cc/0x5e0 [ 519.012071][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.017058][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 519.023390][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.028334][ T31] do_dentry_open+0x953/0x13f0 [ 519.033084][ T31] vfs_open+0x3b/0x340 [ 519.037186][ T31] ? path_openat+0x2ecd/0x3830 [ 519.041953][ T31] path_openat+0x2ee5/0x3830 [ 519.046556][ T31] ? arch_stack_walk+0xfc/0x150 [ 519.051400][ T31] ? stack_depot_save_flags+0x40/0x860 [ 519.056894][ T31] ? __pfx_path_openat+0x10/0x10 [ 519.061828][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.067919][ T31] do_filp_open+0x1fa/0x410 [ 519.072404][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.077273][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 519.082336][ T31] ? _raw_spin_unlock+0x28/0x50 [ 519.087213][ T31] ? alloc_fd+0x64c/0x6c0 [ 519.091554][ T31] do_sys_openat2+0x121/0x1c0 [ 519.096281][ T31] ? __se_sys_futex+0x36f/0x400 [ 519.101140][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.106360][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.111138][ T31] __x64_sys_openat+0x138/0x170 [ 519.116024][ T31] do_syscall_64+0xfa/0x3b0 [ 519.120525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.125767][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.131839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.136546][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.142444][ T31] RIP: 0033:0x7ff05f58ebe9 [ 519.146890][ T31] RSP: 002b:00007ff060343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.155328][ T31] RAX: ffffffffffffffda RBX: 00007ff05f7c5fa0 RCX: 00007ff05f58ebe9 [ 519.163299][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 519.171287][ T31] RBP: 00007ff05f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.179297][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.187306][ T31] R13: 00007ff05f7c6038 R14: 00007ff05f7c5fa0 R15: 00007fffaf8c6648 [ 519.195316][ T31] [ 519.198369][ T31] INFO: task syz.1.2819:16156 blocked for more than 144 seconds. [ 519.206120][ T31] Not tainted syzkaller #0 [ 519.211046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.219727][ T31] task:syz.1.2819 state:D stack:26760 pid:16156 tgid:16155 ppid:15005 task_flags:0x400040 flags:0x00004004 [ 519.231701][ T31] Call Trace: [ 519.234983][ T31] [ 519.237952][ T31] __schedule+0x1798/0x4cc0 [ 519.242565][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.247468][ T31] ? __pfx___schedule+0x10/0x10 [ 519.252327][ T31] ? schedule+0x91/0x360 [ 519.256600][ T31] schedule+0x165/0x360 [ 519.260764][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.266240][ T31] __mutex_lock+0x7e6/0x1350 [ 519.270814][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.275623][ T31] ? misc_open+0x51/0x330 [ 519.279956][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.284971][ T31] misc_open+0x51/0x330 [ 519.289261][ T31] chrdev_open+0x4cc/0x5e0 [ 519.293698][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.298700][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 519.305040][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.310011][ T31] do_dentry_open+0x953/0x13f0 [ 519.314769][ T31] vfs_open+0x3b/0x340 [ 519.318871][ T31] ? path_openat+0x2ecd/0x3830 [ 519.323637][ T31] path_openat+0x2ee5/0x3830 [ 519.328224][ T31] ? arch_stack_walk+0xfc/0x150 [ 519.333069][ T31] ? stack_depot_save_flags+0x40/0x860 [ 519.338604][ T31] ? __pfx_path_openat+0x10/0x10 [ 519.343538][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.349642][ T31] do_filp_open+0x1fa/0x410 [ 519.354144][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.359010][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 519.364028][ T31] ? _raw_spin_unlock+0x28/0x50 [ 519.368884][ T31] ? alloc_fd+0x64c/0x6c0 [ 519.373206][ T31] do_sys_openat2+0x121/0x1c0 [ 519.377921][ T31] ? __se_sys_futex+0x36f/0x400 [ 519.382773][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.388023][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.392792][ T31] __x64_sys_openat+0x138/0x170 [ 519.397677][ T31] do_syscall_64+0xfa/0x3b0 [ 519.402180][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.407389][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.413433][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.418142][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.424029][ T31] RIP: 0033:0x7f3e80b8ebe9 [ 519.428462][ T31] RSP: 002b:00007f3e8191f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.436884][ T31] RAX: ffffffffffffffda RBX: 00007f3e80dc5fa0 RCX: 00007f3e80b8ebe9 [ 519.444852][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 519.452820][ T31] RBP: 00007f3e80c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.460794][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.468769][ T31] R13: 00007f3e80dc6038 R14: 00007f3e80dc5fa0 R15: 00007ffc6c7a5108 [ 519.476782][ T31] [ 519.479808][ T31] INFO: task syz.1.2819:16160 blocked for more than 144 seconds. [ 519.487588][ T31] Not tainted syzkaller #0 [ 519.492501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.501171][ T31] task:syz.1.2819 state:D stack:28000 pid:16160 tgid:16155 ppid:15005 task_flags:0x400040 flags:0x00004004 [ 519.513146][ T31] Call Trace: [ 519.516482][ T31] [ 519.519412][ T31] __schedule+0x1798/0x4cc0 [ 519.523920][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.528775][ T31] ? __pfx___schedule+0x10/0x10 [ 519.533621][ T31] ? schedule+0x91/0x360 [ 519.537908][ T31] schedule+0x165/0x360 [ 519.542070][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.547554][ T31] __mutex_lock+0x7e6/0x1350 [ 519.552131][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.556928][ T31] ? misc_open+0x51/0x330 [ 519.561257][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.566308][ T31] misc_open+0x51/0x330 [ 519.570458][ T31] chrdev_open+0x4cc/0x5e0 [ 519.574861][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.579817][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 519.586170][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.591112][ T31] do_dentry_open+0x953/0x13f0 [ 519.595911][ T31] vfs_open+0x3b/0x340 [ 519.599977][ T31] ? path_openat+0x2ecd/0x3830 [ 519.604724][ T31] path_openat+0x2ee5/0x3830 [ 519.609328][ T31] ? arch_stack_walk+0xfc/0x150 [ 519.614173][ T31] ? stack_depot_save_flags+0x40/0x860 [ 519.619692][ T31] ? __pfx_path_openat+0x10/0x10 [ 519.624637][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.630781][ T31] do_filp_open+0x1fa/0x410 [ 519.635361][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.640217][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 519.645288][ T31] ? _raw_spin_unlock+0x28/0x50 [ 519.650143][ T31] ? alloc_fd+0x64c/0x6c0 [ 519.654473][ T31] do_sys_openat2+0x121/0x1c0 [ 519.659166][ T31] ? __se_sys_futex+0x36f/0x400 [ 519.664003][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.669210][ T31] ? __fget_files+0x2a/0x420 [ 519.673784][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 519.678994][ T31] ? __fget_files+0x2a/0x420 [ 519.683585][ T31] __x64_sys_openat+0x138/0x170 [ 519.688442][ T31] do_syscall_64+0xfa/0x3b0 [ 519.692926][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.698158][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.704221][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.709044][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.714921][ T31] RIP: 0033:0x7f3e80b8ebe9 [ 519.719346][ T31] RSP: 002b:00007f3e7edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.727768][ T31] RAX: ffffffffffffffda RBX: 00007f3e80dc6090 RCX: 00007f3e80b8ebe9 [ 519.735754][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 519.743723][ T31] RBP: 00007f3e80c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.751730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.759729][ T31] R13: 00007f3e80dc6128 R14: 00007f3e80dc6090 R15: 00007ffc6c7a5108 [ 519.767711][ T31] [ 519.770722][ T31] INFO: task syz.5.2820:16158 blocked for more than 145 seconds. [ 519.778634][ T31] Not tainted syzkaller #0 [ 519.783560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.792245][ T31] task:syz.5.2820 state:D stack:26312 pid:16158 tgid:16157 ppid:9115 task_flags:0x400140 flags:0x00004004 [ 519.804189][ T31] Call Trace: [ 519.807528][ T31] [ 519.810462][ T31] __schedule+0x1798/0x4cc0 [ 519.814966][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.819853][ T31] ? __pfx___schedule+0x10/0x10 [ 519.824701][ T31] ? schedule+0x91/0x360 [ 519.828985][ T31] schedule+0x165/0x360 [ 519.833133][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.838599][ T31] __mutex_lock+0x7e6/0x1350 [ 519.843177][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.847977][ T31] ? misc_open+0x51/0x330 [ 519.852309][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.857351][ T31] misc_open+0x51/0x330 [ 519.861492][ T31] chrdev_open+0x4cc/0x5e0 [ 519.866138][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.871088][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 519.877436][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 519.882360][ T31] do_dentry_open+0x953/0x13f0 [ 519.887173][ T31] vfs_open+0x3b/0x340 [ 519.891250][ T31] ? path_openat+0x2ecd/0x3830 [ 519.896043][ T31] path_openat+0x2ee5/0x3830 [ 519.900630][ T31] ? arch_stack_walk+0xfc/0x150 [ 519.905506][ T31] ? stack_depot_save_flags+0x40/0x860 [ 519.910975][ T31] ? __pfx_path_openat+0x10/0x10 [ 519.915923][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.922013][ T31] do_filp_open+0x1fa/0x410 [ 519.926538][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.931395][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 519.936447][ T31] ? _raw_spin_unlock+0x28/0x50 [ 519.941282][ T31] ? alloc_fd+0x64c/0x6c0 [ 519.945721][ T31] do_sys_openat2+0x121/0x1c0 [ 519.950411][ T31] ? __se_sys_futex+0x36f/0x400 [ 519.955320][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.960533][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.965337][ T31] __x64_sys_openat+0x138/0x170 [ 519.970195][ T31] do_syscall_64+0xfa/0x3b0 [ 519.974677][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.979883][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.985975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.990651][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.996565][ T31] RIP: 0033:0x7f062858ebe9 [ 520.000961][ T31] RSP: 002b:00007f0629405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.009396][ T31] RAX: ffffffffffffffda RBX: 00007f06287c5fa0 RCX: 00007f062858ebe9 [ 520.017579][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 520.025691][ T31] RBP: 00007f0628611e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.033660][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.041667][ T31] R13: 00007f06287c6038 R14: 00007f06287c5fa0 R15: 00007ffd737a9768 [ 520.049666][ T31] [ 520.052681][ T31] INFO: task syz.5.2820:16161 blocked for more than 145 seconds. [ 520.060414][ T31] Not tainted syzkaller #0 [ 520.065352][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.074019][ T31] task:syz.5.2820 state:D stack:27808 pid:16161 tgid:16157 ppid:9115 task_flags:0x400040 flags:0x00004004 [ 520.085971][ T31] Call Trace: [ 520.089252][ T31] [ 520.092183][ T31] __schedule+0x1798/0x4cc0 [ 520.096746][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.101601][ T31] ? __pfx___schedule+0x10/0x10 [ 520.106513][ T31] ? schedule+0x91/0x360 [ 520.110759][ T31] schedule+0x165/0x360 [ 520.114899][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.120355][ T31] __mutex_lock+0x7e6/0x1350 [ 520.124933][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.129706][ T31] ? misc_open+0x51/0x330 [ 520.134023][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.139063][ T31] misc_open+0x51/0x330 [ 520.143204][ T31] chrdev_open+0x4cc/0x5e0 [ 520.147636][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.152595][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 520.158940][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.163861][ T31] do_dentry_open+0x953/0x13f0 [ 520.168653][ T31] vfs_open+0x3b/0x340 [ 520.172717][ T31] ? path_openat+0x2ecd/0x3830 [ 520.177508][ T31] path_openat+0x2ee5/0x3830 [ 520.182080][ T31] ? arch_stack_walk+0xfc/0x150 [ 520.186977][ T31] ? stack_depot_save_flags+0x40/0x860 [ 520.192445][ T31] ? __pfx_path_openat+0x10/0x10 [ 520.197403][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.203465][ T31] do_filp_open+0x1fa/0x410 [ 520.208022][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.212879][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 520.217919][ T31] ? _raw_spin_unlock+0x28/0x50 [ 520.222751][ T31] ? alloc_fd+0x64c/0x6c0 [ 520.227117][ T31] do_sys_openat2+0x121/0x1c0 [ 520.231792][ T31] ? __se_sys_futex+0x36f/0x400 [ 520.236683][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.241868][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.246653][ T31] __x64_sys_openat+0x138/0x170 [ 520.251529][ T31] do_syscall_64+0xfa/0x3b0 [ 520.256044][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.261238][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.268933][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.273630][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.279585][ T31] RIP: 0033:0x7f062858ebe9 [ 520.284000][ T31] RSP: 002b:00007f06293e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.292551][ T31] RAX: ffffffffffffffda RBX: 00007f06287c6090 RCX: 00007f062858ebe9 [ 520.300552][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 520.308557][ T31] RBP: 00007f0628611e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.316547][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.324499][ T31] R13: 00007f06287c6128 R14: 00007f06287c6090 R15: 00007ffd737a9768 [ 520.332518][ T31] [ 520.335568][ T31] INFO: task syz.5.2820:16164 blocked for more than 145 seconds. [ 520.343282][ T31] Not tainted syzkaller #0 [ 520.348358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.357048][ T31] task:syz.5.2820 state:D stack:28000 pid:16164 tgid:16157 ppid:9115 task_flags:0x400040 flags:0x00004004 [ 520.368989][ T31] Call Trace: [ 520.372263][ T31] [ 520.375179][ T31] __schedule+0x1798/0x4cc0 [ 520.379725][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.384566][ T31] ? __pfx___schedule+0x10/0x10 [ 520.389502][ T31] ? schedule+0x91/0x360 [ 520.393763][ T31] schedule+0x165/0x360 [ 520.397954][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.403416][ T31] __mutex_lock+0x7e6/0x1350 [ 520.408050][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.412813][ T31] ? misc_open+0x51/0x330 [ 520.417155][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.422174][ T31] misc_open+0x51/0x330 [ 520.426371][ T31] chrdev_open+0x4cc/0x5e0 [ 520.430794][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.435735][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 520.442050][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.447022][ T31] do_dentry_open+0x953/0x13f0 [ 520.451796][ T31] vfs_open+0x3b/0x340 [ 520.455877][ T31] ? path_openat+0x2ecd/0x3830 [ 520.460629][ T31] path_openat+0x2ee5/0x3830 [ 520.465248][ T31] ? arch_stack_walk+0xfc/0x150 [ 520.470110][ T31] ? stack_depot_save_flags+0x40/0x860 [ 520.475640][ T31] ? __pfx_path_openat+0x10/0x10 [ 520.480590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.486715][ T31] do_filp_open+0x1fa/0x410 [ 520.491220][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.496116][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 520.501154][ T31] ? _raw_spin_unlock+0x28/0x50 [ 520.506229][ T31] ? alloc_fd+0x64c/0x6c0 [ 520.510575][ T31] do_sys_openat2+0x121/0x1c0 [ 520.515272][ T31] ? __se_sys_futex+0x36f/0x400 [ 520.520128][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.525357][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.530127][ T31] __x64_sys_openat+0x138/0x170 [ 520.535000][ T31] do_syscall_64+0xfa/0x3b0 [ 520.539557][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.544755][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.550831][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.555514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.561389][ T31] RIP: 0033:0x7f062858ebe9 [ 520.565833][ T31] RSP: 002b:00007f06293c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.574245][ T31] RAX: ffffffffffffffda RBX: 00007f06287c6180 RCX: 00007f062858ebe9 [ 520.582240][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 520.590302][ T31] RBP: 00007f0628611e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.598295][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.606306][ T31] R13: 00007f06287c6218 R14: 00007f06287c6180 R15: 00007ffd737a9768 [ 520.614295][ T31] [ 520.617355][ T31] INFO: task syz.6.2822:16177 blocked for more than 145 seconds. [ 520.625078][ T31] Not tainted syzkaller #0 [ 520.630037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.638717][ T31] task:syz.6.2822 state:D stack:22824 pid:16177 tgid:16175 ppid:9110 task_flags:0x400140 flags:0x00004004 [ 520.650640][ T31] Call Trace: [ 520.653925][ T31] [ 520.656908][ T31] __schedule+0x1798/0x4cc0 [ 520.661453][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.666394][ T31] ? __pfx___schedule+0x10/0x10 [ 520.671286][ T31] ? schedule+0x91/0x360 [ 520.675588][ T31] schedule+0x165/0x360 [ 520.679749][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.685216][ T31] __mutex_lock+0x7e6/0x1350 [ 520.689822][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.694566][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.699357][ T31] ? rfkill_register+0x37/0x8e0 [ 520.704193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.709223][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 520.714146][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.719369][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 520.724659][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 520.730313][ T31] rfkill_register+0x37/0x8e0 [ 520.734974][ T31] wiphy_register+0x214c/0x28d0 [ 520.739831][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 520.745009][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 520.750286][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 520.756407][ T31] ieee80211_register_hw+0x3425/0x4080 [ 520.761878][ T31] ? ieee80211_register_hw+0x13f1/0x4080 [ 520.767522][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 520.773312][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 520.779664][ T31] ? __hrtimer_setup+0x187/0x210 [ 520.784580][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 520.790429][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 520.796212][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 520.802289][ T31] ? trace_kmalloc+0x1f/0xd0 [ 520.806906][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 520.813498][ T31] ? kstrndup+0xbf/0x160 [ 520.817784][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 520.822897][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 520.828674][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.834229][ T31] ? __nla_parse+0x40/0x60 [ 520.838691][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 520.845023][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 520.850573][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.856711][ T31] ? bpf_lsm_capable+0x9/0x20 [ 520.861389][ T31] ? security_capable+0x7e/0x2e0 [ 520.866344][ T31] genl_rcv_msg+0x60e/0x790 [ 520.870834][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.875881][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.881435][ T31] netlink_rcv_skb+0x205/0x470 [ 520.886205][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.891042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.896094][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.901382][ T31] ? down_read+0x1ad/0x2e0 [ 520.906162][ T31] genl_rcv+0x28/0x40 [ 520.910147][ T31] netlink_unicast+0x82c/0x9e0 [ 520.914897][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 520.920203][ T31] ? netlink_sendmsg+0x642/0xb30 [ 520.925138][ T31] ? skb_put+0x11b/0x210 [ 520.929427][ T31] netlink_sendmsg+0x805/0xb30 [ 520.934186][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.939486][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 520.944424][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.949777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.955058][ T31] __sock_sendmsg+0x219/0x270 [ 520.959756][ T31] ____sys_sendmsg+0x505/0x830 [ 520.964507][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.969812][ T31] ? import_iovec+0x74/0xa0 [ 520.974303][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 520.978991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.984190][ T31] ? __fget_files+0x2a/0x420 [ 520.988893][ T31] ? __fget_files+0x3a0/0x420 [ 520.993578][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 520.998519][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.003963][ T31] ? rcu_is_watching+0x15/0xb0 [ 521.008741][ T31] ? do_syscall_64+0xbe/0x3b0 [ 521.013416][ T31] do_syscall_64+0xfa/0x3b0 [ 521.017929][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.023107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.029181][ T31] ? clear_bhb_loop+0x60/0xb0 [ 521.033881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.039776][ T31] RIP: 0033:0x7f3d8fd8ebe9 [ 521.044172][ T31] RSP: 002b:00007f3d90c5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.052646][ T31] RAX: ffffffffffffffda RBX: 00007f3d8ffc6090 RCX: 00007f3d8fd8ebe9 [ 521.060648][ T31] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c [ 521.068663][ T31] RBP: 00007f3d8fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 521.076799][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.084771][ T31] R13: 00007f3d8ffc6128 R14: 00007f3d8ffc6090 R15: 00007ffd5437e668 [ 521.092761][ T31] [ 521.095800][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 521.104836][ T31] [ 521.104836][ T31] Showing all locks held in the system: [ 521.112563][ T31] 1 lock held by khungtaskd/31: [ 521.117429][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 521.127337][ T31] 2 locks held by getty/5626: [ 521.131991][ T31] #0: ffff8880342d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.141747][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 521.151854][ T31] 4 locks held by kworker/1:9/7124: [ 521.157060][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 521.168052][ T31] #1: ffffc9001bef7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 521.180412][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 521.190450][ T31] #3: ffff888051c59100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 521.200118][ T31] 3 locks held by kworker/1:12/7127: [ 521.205461][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 521.216487][ T31] #1: ffffc9001c1a7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 521.230037][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 521.241383][ T31] 1 lock held by syz.8.2793/16056: [ 521.246508][ T31] #0: ffff888051c59100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 521.256317][ T31] 3 locks held by syz.7.2813/16125: [ 521.261504][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.269944][ T31] #1: ffff88807b235100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 521.279523][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 521.289576][ T31] 1 lock held by syz.1.2819/16156: [ 521.294663][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.303127][ T31] 1 lock held by syz.1.2819/16160: [ 521.308462][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.316996][ T31] 1 lock held by syz.5.2820/16158: [ 521.322100][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.330555][ T31] 1 lock held by syz.5.2820/16161: [ 521.335691][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.344157][ T31] 1 lock held by syz.5.2820/16164: [ 521.349285][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.357775][ T31] 3 locks held by syz.6.2822/16177: [ 521.362976][ T31] #0: ffffffff8f59e390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 521.371214][ T31] #1: ffffffff8f59e1a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 521.380210][ T31] #2: ffffffff8f8124e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 521.390214][ T31] 1 lock held by syz-executor/16181: [ 521.395544][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.404002][ T31] 1 lock held by syz-executor/16183: [ 521.409321][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.417762][ T31] 1 lock held by syz-executor/16186: [ 521.423023][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.431472][ T31] 1 lock held by syz-executor/16187: [ 521.436792][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.445241][ T31] 1 lock held by syz-executor/16189: [ 521.450511][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.458966][ T31] 1 lock held by syz-executor/16191: [ 521.464228][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.472678][ T31] 1 lock held by syz-executor/16193: [ 521.477990][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.486498][ T31] 1 lock held by syz-executor/16196: [ 521.491778][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.500278][ T31] 1 lock held by syz-executor/16197: [ 521.505578][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.514032][ T31] 1 lock held by syz-executor/16199: [ 521.519336][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.527783][ T31] 1 lock held by syz-executor/16201: [ 521.533042][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.541489][ T31] 1 lock held by syz-executor/16203: [ 521.546789][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.555292][ T31] 1 lock held by syz-executor/16206: [ 521.560574][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.569029][ T31] 1 lock held by syz-executor/16207: [ 521.574291][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.582748][ T31] 1 lock held by syz-executor/16209: [ 521.588066][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 521.596556][ T31] [ 521.598880][ T31] ============================================= [ 521.598880][ T31] [ 521.607311][ T31] NMI backtrace for cpu 0 [ 521.607332][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 521.607352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.607362][ T31] Call Trace: [ 521.607370][ T31] [ 521.607378][ T31] dump_stack_lvl+0x189/0x250 [ 521.607406][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.607426][ T31] ? __pfx__printk+0x10/0x10 [ 521.607459][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 521.607484][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 521.607508][ T31] ? __pfx__printk+0x10/0x10 [ 521.607534][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.607559][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 521.607581][ T31] watchdog+0xf93/0xfe0 [ 521.607605][ T31] ? watchdog+0x1de/0xfe0 [ 521.607628][ T31] kthread+0x70e/0x8a0 [ 521.607650][ T31] ? __pfx_watchdog+0x10/0x10 [ 521.607668][ T31] ? __pfx_kthread+0x10/0x10 [ 521.607687][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.607708][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.607723][ T31] ? __pfx_kthread+0x10/0x10 [ 521.607743][ T31] ret_from_fork+0x3f9/0x770 [ 521.607764][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 521.607782][ T31] ? __switch_to_asm+0x39/0x70 [ 521.607799][ T31] ? __switch_to_asm+0x33/0x70 [ 521.607816][ T31] ? __pfx_kthread+0x10/0x10 [ 521.607835][ T31] ret_from_fork_asm+0x1a/0x30 [ 521.607871][ T31] [ 521.607877][ T31] Sending NMI from CPU 0 to CPUs 1: [ 521.752357][ C1] NMI backtrace for cpu 1 [ 521.752372][ C1] CPU: 1 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 521.752389][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.752399][ C1] RIP: 0010:__lock_acquire+0xa4f/0xd20 [ 521.752422][ C1] Code: e5 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 e1 fa 0a 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 10 63 49 93 eb 40 83 3d 48 8a [ 521.752440][ C1] RSP: 0018:ffffc90000157810 EFLAGS: 00000047 [ 521.752454][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000076153240 [ 521.752464][ C1] RDX: 000000000000413d RSI: 00000000414040f8 RDI: ffff88801ce9da00 [ 521.752474][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff84d0507a [ 521.752484][ C1] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 0000000000000001 [ 521.752494][ C1] R13: ffff88801ce9e4f0 R14: ffff88801ce9e4f0 R15: 3df1592f76153240 [ 521.752506][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 521.752518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.752529][ C1] CR2: 000055b7100ddfb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 521.752543][ C1] Call Trace: [ 521.752548][ C1] [ 521.752559][ C1] ? debug_object_free+0x9a/0x340 [ 521.752578][ C1] lock_acquire+0x120/0x360 [ 521.752595][ C1] ? debug_object_free+0x9a/0x340 [ 521.752617][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 521.752636][ C1] ? debug_object_free+0x9a/0x340 [ 521.752652][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 521.752671][ C1] ? __timer_delete_sync+0x218/0x2d0 [ 521.752691][ C1] debug_object_free+0x9a/0x340 [ 521.752712][ C1] schedule_timeout+0x13b/0x270 [ 521.752729][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 521.752745][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 521.752764][ C1] ? __pfx_process_timeout+0x10/0x10 [ 521.752781][ C1] ? prepare_to_swait_event+0x341/0x380 [ 521.752800][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 521.752824][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 521.752843][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 521.752860][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 521.752881][ C1] ? finish_swait+0xcd/0x1f0 [ 521.752897][ C1] rcu_gp_kthread+0x99/0x390 [ 521.752916][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.752934][ C1] ? __kthread_parkme+0x7b/0x200 [ 521.752949][ C1] ? __kthread_parkme+0x1a1/0x200 [ 521.752966][ C1] kthread+0x70e/0x8a0 [ 521.752983][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.753001][ C1] ? __pfx_kthread+0x10/0x10 [ 521.753018][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.753036][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.753050][ C1] ? __pfx_kthread+0x10/0x10 [ 521.753066][ C1] ret_from_fork+0x3f9/0x770 [ 521.753082][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 521.753098][ C1] ? __switch_to_asm+0x39/0x70 [ 521.753115][ C1] ? __switch_to_asm+0x33/0x70 [ 521.753131][ C1] ? __pfx_kthread+0x10/0x10 [ 521.753147][ C1] ret_from_fork_asm+0x1a/0x30 [ 521.753169][ C1] [ 521.753365][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 522.056867][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 522.065965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.076090][ T31] Call Trace: [ 522.079354][ T31] [ 522.082269][ T31] dump_stack_lvl+0x99/0x250 [ 522.086850][ T31] ? __asan_memcpy+0x40/0x70 [ 522.091424][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.096607][ T31] ? __pfx__printk+0x10/0x10 [ 522.101191][ T31] vpanic+0x281/0x750 [ 522.105161][ T31] ? __pfx_vpanic+0x10/0x10 [ 522.109648][ T31] ? preempt_schedule+0xae/0xc0 [ 522.114481][ T31] ? preempt_schedule_common+0x83/0xd0 [ 522.119923][ T31] panic+0xb9/0xc0 [ 522.123629][ T31] ? __pfx_panic+0x10/0x10 [ 522.128027][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 522.133386][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 522.139527][ T31] watchdog+0xfd2/0xfe0 [ 522.143672][ T31] ? watchdog+0x1de/0xfe0 [ 522.147990][ T31] kthread+0x70e/0x8a0 [ 522.152048][ T31] ? __pfx_watchdog+0x10/0x10 [ 522.156710][ T31] ? __pfx_kthread+0x10/0x10 [ 522.161286][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.166469][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.171649][ T31] ? __pfx_kthread+0x10/0x10 [ 522.176225][ T31] ret_from_fork+0x3f9/0x770 [ 522.180803][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 522.185899][ T31] ? __switch_to_asm+0x39/0x70 [ 522.190648][ T31] ? __switch_to_asm+0x33/0x70 [ 522.195395][ T31] ? __pfx_kthread+0x10/0x10 [ 522.199973][ T31] ret_from_fork_asm+0x1a/0x30 [ 522.204731][ T31] [ 522.207982][ T31] Kernel Offset: disabled [ 522.212288][ T31] Rebooting in 86400 seconds..