last executing test programs: 31.988139638s ago: executing program 4 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x10000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) close(0x3) 31.362164525s ago: executing program 1 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x74, 0x30, 0x1, 0x4, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 31.280684535s ago: executing program 4 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="66e7cf623219d069d3e84395d52f80098e3b02ebb2c906980b55f2002014638e757f45cb9706d2179b96950988ca2843642ba0f56285742f8a81fc4f0854ff639d107608b43f7c1c2bc69fc91599d7bcca32031039c2f3c8ee0670e17f48a33c74046b5f8137bac08ae374aaaef26d67a92c79e179ff8b7d7d57fcd5aa2ae726b3d5997316637e27bf4c5d06d2b2669cc1ef7a1c3d5dfc63670b40dafa47093d872ae7afcd487dd4a6fc908e1bcb92fbaf0a935edebcc741bd9047648ba93beba52f", @ANYRESDEC=r0, @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}]}, &(0x7f0000000180)=0x10) shutdown(r9, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000000c0)={0xf2, 0xe826, 0x2, 0x8, 0x5}, 0x14) getsockopt$bt_hci(r9, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x6b, 0x2a, 0x129, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x1, 0xd}, {0xc}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x4000010, 0xffffffffffffffff, 0x82ca2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) unshare(0x6020400) 30.928153186s ago: executing program 1 (id=1033): socket$inet6(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000004, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 30.61351391s ago: executing program 1 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) unshare(0x2c020400) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r7, 0x107, 0x17, 0x0, 0x0) listen(r6, 0x0) r8 = epoll_create(0x6) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r6, 0x8}, {r6, 0x40}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000280)={0x10000014}) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c60026", @ANYRES32=r2, @ANYRES32=0x0], 0x50) 28.724839956s ago: executing program 4 (id=1044): socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r9 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f1d2605f1cb542560000000000000000000000000000008e530c4cec91e79a7cc897a964f8b7458d5c28921790c9aa7e642261c808b9fc9d15e2429a8a39"], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18e8a3f2e6be9f719f0000011819000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8ff10010000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r7, 0x1) 28.612406158s ago: executing program 1 (id=1046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000100001f6244d4204000000000000000000000000c2025bc55121f35ad87db80a0f44cd0b454057631252827608c3a716bbe4ce80a674a13a38759d41d2ae830de5a92389dd6be03c9130f81d66e521328bdbf9e1", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8009000700fc010000000000000000000000000000140003007369743000"/56], 0x50}}, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) unshare(0x62040400) unshare(0x4e040400) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000240)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async) connect$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x402, 0x2, 0x10, {0x2, 0x4e1f, @private=0xa010100}}, 0x24) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) recvfrom(r5, &(0x7f0000000140)=""/53, 0x35, 0x4100, 0x0, 0x0) 28.451157433s ago: executing program 1 (id=1049): r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000540)=""/217, &(0x7f0000000180)=0xd9) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/mnt\x00') r4 = socket(0x1e, 0x4, 0x3) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) 27.847799843s ago: executing program 4 (id=1055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pK \x00'}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000001c9, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000100)="aebbed316683", &(0x7f0000000140)=""/185}, 0x20) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0004000900000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 27.734787788s ago: executing program 4 (id=1056): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r2, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000001500), 0x8, 0x68, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="ff03000000ffaaaaaaaaaa3c88a81e0081004a008864d40454"], 0x0) unshare(0x20000400) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x400000, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 27.519770138s ago: executing program 4 (id=1058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) close(0x3) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 27.513604714s ago: executing program 1 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a42}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000041}, 0x20029004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x50}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000480)=""/253, 0xfd}], 0x5, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x8}}}, 0x84) r17 = openat$cgroup_ro(r15, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r15, 0x4008941a, &(0x7f0000000880)) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r10, 0x9652, '\x00', 0x0, r9, 0x0, 0x0, 0x4}, 0x50) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4000, r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x0, 0x8, 0x10000, 0x1ff, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0x1c, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0xf, [{@empty, 0x34}]}]}}}}}) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r3, 0x20, &(0x7f0000000f40)={&(0x7f0000000d40)=""/220, 0xdc, 0x0, &(0x7f0000000e40)=""/237, 0xed}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r17, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x8, 0x33, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc84, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x0, 0x1, 0x0, r19}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x2, &(0x7f0000000bc0)=""/2, 0x41000, 0x14, '\x00', r20, @fallback=0x22, r21, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r22, 0xffffffffffffffff, 0x0, &(0x7f0000001080)=[r10, r13, r14, r4, r7, r16, r8, r23, r5], 0x0, 0x10, 0xb}, 0x94) r24 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r24, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x2, 0xb, 0x7, 0x96d081cbdcc02b49, 0x13, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x3c, 0xc0, 0x0, @in6={0xa, 0x4e24, 0x4, @empty, 0x3}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x100, @remote, 0x1000}, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf9, 0x2, 0x87, 0x4, 0x40000001}]}, 0x98}}, 0x45) r25 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r26 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r25, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x6c, r26, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc881}, 0x45) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000001480)={0x3, &(0x7f0000001440)=[{0x6, 0x8, 0x9, 0x7}, {0x8, 0x9, 0x20, 0xff}, {0x2, 0x20, 0x4, 0x9}]}, 0x10) r27 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r16) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r27, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000020}, 0x8800) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000001680)=0x4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)) recvmsg(r8, &(0x7f00000019c0)={&(0x7f0000001700)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/51, 0x33}, {&(0x7f00000017c0)=""/35, 0x23}, {&(0x7f0000001800)=""/116, 0x74}, {&(0x7f0000001880)=""/65, 0x41}], 0x4, &(0x7f0000001940)=""/112, 0x70}, 0x40000000) sendmsg$NL80211_CMD_SET_PMKSA(r12, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x8c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="bb59c0633ced97180a598b8ae4b79ecf0f974ae68781be0cb745a1d1d417"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x13, 0x34, @random="b4c9043d81d6c4d4d654662e6594a5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd3a4ca9e013aa466aaad409dc2c299a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7ff}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20040880) 21.392050226s ago: executing program 2 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) r6 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pwritev(r3, 0x0, 0x0, 0x8001, 0x80) 21.385923421s ago: executing program 2 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5000000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="7b150096598f6491dbf1e0f3618db8000000000014000300767863616e31000000000000000000001c001a801800028014000180080017000200000008002000070000004d6e2061ab3cbfb0678224a6b07aff331237b971da83e99ca8ef43a20a0522e64a4b8f8f2ada8afdab770da439a21700218fe0c0baee693e20036ed99a54040bcbf690313e19ac2f874207be87305444a3a3b0a174223237c84a6bd4d5983c1b920bfdf986df"], 0x50}}, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x5, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x6, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x1, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x5, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x4003, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x2, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4003, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x101, 0x7fff, 0x3, 0x1, 0x10, 0x0, 0x9, 0x3, 0x4, 0x401, 0x40, 0xfffff5f4, 0xeb8, 0x4e2, 0x64, 0xd, 0x8000, 0x0, 0x9, 0x6, 0xef, 0x3, 0x6, 0x76c, 0x1, 0x2, 0x792, 0x7, 0x9, 0x9, 0x9, 0x80, 0x9, 0x667, 0x24b, 0x9, 0x7, 0x8, 0x4, 0xffffffff, 0x389, 0x1, 0x40, 0x4, 0x88, 0x6, 0x5, 0x9, 0x3, 0x0, 0x3, 0xffff5c4d, 0xffffffff, 0x3, 0x7, 0x9, 0x200, 0x37, 0x4, 0x6, 0x8, 0x6, 0x2, 0x5, 0x2, 0xfffffffc, 0x6, 0x5, 0x7ff, 0x80000001, 0x5, 0x1ff, 0x9d, 0x6, 0x2, 0x219, 0x0, 0x8000, 0xd, 0x7, 0x5, 0xfffffff8, 0x5, 0x2, 0x7ff3, 0x8, 0x80000000, 0x2, 0x951e, 0x70000, 0x6, 0xfffffffd, 0xff, 0x1, 0xfffffffc, 0x7023, 0xe766, 0x6, 0x9, 0xc, 0x1e1, 0x5, 0x8, 0x6, 0x1, 0xfffff384, 0xd4fc, 0x4, 0x2, 0x8, 0x43, 0x9, 0xf3, 0xdff7, 0x1, 0x5, 0x3, 0x7f, 0xffffffff, 0xe3, 0x6, 0x10, 0x5, 0x1, 0x1ff, 0x1ff, 0x9986, 0x7f, 0xee9, 0x5, 0xb1, 0x2, 0x5, 0x1, 0x1, 0x7, 0x0, 0x4, 0x1, 0x1f74, 0xb, 0x7, 0x8, 0x97, 0x1, 0x1, 0x3, 0x4, 0x2, 0x5, 0xeb2, 0x401, 0xe, 0x4, 0x101, 0x5, 0x401, 0x2, 0x95d4, 0x80000000, 0x2, 0x6f7ae209, 0x2, 0x4, 0xfe, 0x1, 0x9, 0x81, 0x2, 0x800, 0x6, 0x80000000, 0x7, 0x9, 0x0, 0x6, 0x6, 0xfffffffb, 0x0, 0x101, 0x1ff, 0x1, 0x9, 0xb981, 0x1, 0x1, 0xff, 0x10001, 0x3, 0x6, 0x7f, 0x8, 0x9, 0x656d, 0x9, 0x9, 0xd6bf, 0x4, 0x0, 0x1, 0xb, 0x8, 0xc2, 0x7, 0x1000, 0x8, 0x2, 0x10001, 0x6, 0x25, 0x4, 0xb, 0x3, 0x4, 0x37, 0x51ae290b, 0x200, 0x8913, 0x2, 0x7f, 0xec10, 0x6, 0xe, 0x7ff, 0x800, 0x1, 0x4, 0x3, 0x3, 0x5, 0x4, 0x2, 0xbb, 0x9, 0x7, 0x80000001, 0x3ff, 0xfff, 0x101, 0x8, 0x5, 0x9, 0x4, 0x1, 0x2, 0x7ff, 0x9, 0x8000, 0x1, 0x4, 0x6, 0x7, 0x8, 0x10001, 0x2, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="edcae143e9429d193b7f8484cf35949706f7cb2fb6db093e1de24cf2df8d20de48d5e677b41652893db2c569e64b77e7a3d1338164a130f3598c51976cc5f032ce219be3c33528424cf4ff004ccf9077be1931e9af7fd1c5592af40748d6aa902dc6b3714cc2a23cbf92e54e93b89bc9804caaa485c8270e25da800231eb1738a1f3bba763f20fedaf58f0f510045274dd0b6302e971eadd7f256e44f6c5b1d63d99bb774c7366", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044085}, 0x2000c891) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0xb) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x81, &(0x7f00000001c0)={0x11, 0x88a8, r10, 0x1, 0xd8, 0x6, @remote}, 0x14) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) sendto$inet6(r12, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYRESDEC=0x0, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000000008cdaf26a000a0000009500000000000000", @ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES32=r14, @ANYRES16=r14], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.268293852s ago: executing program 2 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000a0000000010"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(r1, &(0x7f0000000ac0)=[{&(0x7f0000000880)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="1b5635d1ba23722f60f47743cd14d3a10fecdabd7a065d6d70fb97bbb5f40521492901c9fbea26c64008db9c1651bb285158ac290d7bbb59501ce1d9756369beb7cf9f8b64cd58b20a4ff3eadaa5642fee96e029d54b5421ae5574fade9e3c92ab03d0ea6154daa6dde1fdc1a3340d1ce03279d036567d0bdf68370a84d969128cf351d664e712d156c12022afdf1640655a36fc94", 0x95}, {&(0x7f0000001f40)="82bc17d8132e6a6f2ac65d8abffb6996c11d5f17948b7b56f1eb722fcf7324b80ebb7641aad04a18ca6c936ac42be2ea00208878477c6d64634b6d590ec6435bdf067e1a5002e119144aaf30c2ee1d66549065f984e46bb07a129721119880b8c30977f941cebeda19b51983e7e9d5d6a8c52275c54bd1b454bc297d285097acabdfa00e265f6015b6b4a490789c1327b49d78a6ec49baf1b8bbef253c2ad6c6e638422739d84d4404425457125d214e94dc9ba2d5f26d95627000a38ab56981feab1f79533a494f690298e6f490ade1528db77afc442bb9721e588db19ff608152270f0d2048c1b5c97e44d92e5a6ffdd7ef17d1d8add5537b3c455e519280a3bbd385c34a3bf97201cc899b3216a7c0d8b27f285d97fc2b9aef97c4755657648eed840c2f64f3a87d13fc31f61c2e03a468a824bd75f9c3582ab2d27cddd54d780ec40770a9dadf941aa7d8b922123f2798442ce14130beac8315f2a6785e132ca694aa99d6c8d24a5a741c0984d9cb8d9afc72f3ff97025cb0acb5892c68f34b98e98154cbf299b99719d91fe2a01b1171c20d1b14fe59424752d96dc21d6e3c8dc1dfb94da227a5a2fb43bd467a31be959e5a9b12abb43e09025b1eb25d708e39fc76c148889ec9741bac6fce4c97676efed8e27db593c44bf13ed52fe1edcea496c6e026675e273e85377d7653711f0bf87428e2ddd7309c0f2c84d3ef71bbf5867e087489524d63e29233ecb32592ea7120298d3ad2d00459ee4074319d281850591c16c2bc589995ad121fb425845af7c74cf122f6d01a275199d6da14971500f5cb5e9ec90875810143a9e3415f8a39c208e4b0307303d3e56e576a3e00a52977039833ed24853f05a94fe46fe91e1fed624f35d7996d477b5e4505c572e1b59977a57c4dcb835cff63b7cc7afbc31d51483b1227409f27f63d55a0a0830316c23b2ca63304355371cb443756648c2610267445435127b414cbc8d2bac92e39ab4678b44705d64770f87c2cd9c2a5965123ec9dc4516146a0a5ea890a81685164cef3d910de0d438b00179b2bb559035b628f31e30d299247e4e9d4c6f5418f9608fd33120c760d34fea9cd3d4b6612d5a4e1daa052579c8de8cbfcade78a8fb4c4ce83cafc6e73a2e91e895a68afc824abd7bde491d174af9c82a1165c936828000ea6fc7524f355ac09d4a1f3aee6e993a0a209f54dc3e2a3c44daf14d55d740df256b20d0caf060c062832f07fcd771f0fb3deccbc59a45c00a4634d7d1a3f4265e7b2fb859f4d977c48aa2e2b16630f6168d4688e65c9cd48f54479cfda9e0b230ab631f877e1184f84d848c72ff8037beb52c61a27f9fa2957540cf936cfe6ef469f9dc543cd99a5945055c5912d9aed7b10f7b28bc0ad516f7872ac36eb2d2676576b6b3a66935605aa7c53656c79bd5d1b5830e6b15d1d75d7b98738cca904b6e796086d5f9e6f1b935c839c1aa8a4b1611b0ec11bf75c2a4b7747ece42e2d80a4247df40c5c3563641cd65372227a524816fd9d48c2cafc57feff66a84b0325d5132718e225fff3b0224507911aede5e788844188399b7b80977a2cff5e2d02ff7dd7e007cf66f9d0898605770148d536c666eaff8a3d93505b40d8e99dd1bc1c7862596bb4102628ce45446730756cc7dd22d739146180dfbf2f10e1c1ae3a6149f99fa963b08a54dea391d372bb637dba15ddd638728d857d624e338047591fd7f51fd139de8940721ce6a90f1cc6e00ce54092029f6b17420b5f18c3172b469444a1ff7879dc5b3b800d8f163f4dc6f6935177bc340688ad831590892ff05150abb2b1f58473da63ef975f30ee48081f5a1d39186119e4c1963ee2936cfbb747528fb9881435fce10d9910c0bbf1d2057b2ea9e6e53ff4cc6e3b22660b9b30555a889d606df6b1a1025ad9377cf632fea57efddbfab6f8f1a1db108e4dffe26d95b94021f6d8b6f6ba5fc1e138cd65470a65c8d3cc14d15b093aca359503d1953a09c41e0397fbf0137584b14bc65dfded01f5fe653682cc367d5475e761d1ecc0788332e913848ea618b49273a82fbf0ddc337da15f9f3a2c27afd5d96d607a692bd9ec60b58e054ae95d43441625cc31a97bd1ee41d6cd9c5c291ef6dfc2659c22d80e4b498932587e6e8a3beb93c4fa1e6f387dbe462b062e08b220e58fbf6e7479b7410c4f4fdd7b290c7482b66b78a5acdb5ce870d3aaaf7e4e878de5dd5317a6debcc16faa52b3d9c01e7de379c3233d1af78ca89927f8c63737135d4d4fd1b20ffc8fbc4831cab4efb326e3614c0bd5bad645a038e9cef3edfe648c3b6bf50d5ce79e138c9dcc83b54fbf1af13eb1b0ac5c324ffee3ae7def61dcf1e34b16c20e372021a7be7b6d3497dd1acf2282dc9f1a6b86fb66cbb087d720d98506df27e5e21558d7d3c788325bcefa563e48b22eae79ab0eaba566e1a57316079f159baa6781e9153f9338e8ab0033c75558a6177fb100dede24873f0f508e88259d6d9c0817001c11f39c9e7bbeace54cd547399f2b08b8534a300cb49d258d64a3722fb2c29cf9bce9a0b4159eafa59d34bcfc44d679b19e110b6065845abb8b49ef8b649d6a9dba53ae9b05678acb1df51a4649c4036b097b76e0eb5512381bc2aba6f752c838a6a71ef5850e09e0aeb79de606753d3f6dd253d4d004779f13fdf16a2eb0b99fc0390fe2360673d658a51d7e76dc5fa9bb705ff0b106f66d70f849d4d249234d97f47f39d143e26d01e50da74e2bec9fd2d0e168cfc8327557cfe34a85cc1c994640033d8e0a2f8ef3f4ab229ceb16faa2e455c6324e3c901f8e7aa8f76570655e6d869fbf0aba207d67e957bf48ece25ff9d8cdfc7c956dd12966b9af7bb1244452e5c2f56d4e7b9a1b8bc2c28ad33689666974005dab6d6dc008304d13a9bec117dcb3b4d45c33699821237f520cb9215cbf7a21760908c177111da1c2dbb49aeb544f869b508c55072bcdcd3b6af6f9e362a56ad7dd26ede603659fd2f65be977f5a2cc8f2a0c468afb19653d7dde56bf593feb04bd7855187eeee255c51aba86eec857967fe034c0d94e52af94543f4e7787601bd3d6ee0f83ca3fd686b25d85307e7e9470c990be1331517ae24b366e3bb65d3e91224ec3e4fa36fa742e5a87b0948fb3397e713d7ac98025f4f6583a2df1920a459b73f15192b0b067a4c736a995754d3f6b41c02ac6eb37646413cc5cf87ca0fdf5373f761077e0e09b6dcd3e60ab174bc7f0adb87115367717fff4eaccf3dee2454ab1f17dd81b52a6fe01a8c542fab3e9a62feeb6b9f822555437f97226cadbfb48f54298a558773c5c5a355a8a554d6e61778e90deb2a1b9e9122a639005137629b29323d4dd577cfa8671de5407cd19fc352f9280a89b59961974aa4ff20c8ebfb8aabdebf2373ab7f7736ece9aaa4aad1204c3b56c07532bb5e7445cb2420b3a244c3debbd3d5ea7edd98cfeead6f1cbf845cd9e3341902dd4762bc380cc8c8c3c550a8429a388f24563b0b4571f3fe9dca9fb6f6439d1f0be6c90a907525d6c7297a97a39b5c52f581c53f815d09e30916fc86f105a232527375a9c7bbab0538b94fd000e850c5893062e4c5f0e0fea34d6b44c6470c37c5f360e38dd8ca387e3e84e3d21cfbd57f32268c7235dd649f5e49e58ff16058b53d7db037f8ac36810d8d62c2a6d70c2ead7a88ce0fb5953225cf1d1824ac736351821d72fc31e97c8213e1c9fe6e60ccee52fc0ee80ad81b57555aeb803e0d363fa722c0f753ada04656cb63a576c6172cd397eac256626d0ec2a0fe8ab58877761a4e4d7937bb1ce3fb6969120a24e80056ddfad4e970255e2197946a427320a834454cc01c4e7df5de590949f2b08137732aafd9d03178755ba4801f7fa484b854eb571df745868cb9c41348ee468df86c42728e7872e45c0ea491e9df503a6ef8c7fdbecce9db46b9faef5c2b7b86595a5ef0d454b6e66ccf667e259cb6a8459536cdd814cc3cf2f0dbec082db5b2ce3c5b1724bfdd102bd7864322827f785f4c4731cbed1c7ab88a54ec093dd4c34e95d1842dadc9392d7b41d909e714d1fe344597ae62288c942c4e2c22db8946495b33922e7c3cc5049466483a7d6daf78be8fea333db6f83335d71015f01f28c293d7cdfe91b5ab8cb1f64d89fbb945ae4e3f45a977e6b696981828714f7a2ccd1fbfa324604f3406f1e69384b09c478f3a572f3137849a579c6e6d0c39ebdb3e8e75c11d5fe0a0771ee8e3bee25448cbdc724b77c4ccbb24531ac7f3cbfe1bbba43d96fbc8c965d3c71085897baaa4013d386692411bb7a83ac97866d35d2ed33de6746ddb8b6e381f9c2f085f08c2e815926bb99d187b37151201b7b4c10de350dba8c1d6b297dca9e71e8a28389b7bd9ccd03cfb87068ac37a229f7577013d9ecda53baff633763f7b5a8e3b8f4738f85c8c2f33e68388fe7b2a29ce714434e2f93578ac0576f8d9f3953859a07ca62de90c5c67fa7b49e767824410fca0d60530c5c798dc154219c4c9706ea65ca573cbd07a3513c239ee749c25952a67c0371d4ffa3eaa0b86b3b13dd5e4b3ccafea91bcd50ddcd247e7bae501e47c8a998b48403a0a52dcf0b287efab196f2a83604e6c14cb0026f742828e5984fa811b63c635a2da31da7ec551a57d7c4275350af1b7ceb7e4ac603c30228fad63aafbdf370c4f036779d83fcf34bbd9f406631989a791bb58814d9228e521b9e0403513c56b3cea158dd7db9531805c387961cfa7f89f065d3e51a0bd2f0cd0b53008be4b5a49aedfe3152f546402f0b0e5f9049c8c71248a3cec702ed8850ac2e8a197e931e1e51a5253ef7ca0c6e077b6da6ab0d24a44e9f866d3c5fcc2ed0c6fb802440dcb39782652d02b8905c3885bec1d36fbb2e412949f9605ce064432f5f276f7f97e446e413d7bc77d843967289b06cfcbb123cb3f38d4e0d3185e2bfd28e37cc03811d3e066ad30f4626f94f54829757c7df1038611c7c29de0ca4132be5b2e4dfeca778cd8ed900b8a12caa9cf5ba96fac8890c87296edc3f5f8a81095f5ad16171decea9d47cfb4d22bf4f3e4530e6944d49dbe1547acdb6ea6b53295d8dba707715ccfa03675e6c87602ac1ca85f3c3008a63ae0f1a389fd7f78f31e9f66a3c0686c3006612546aab674b76e4024de9c6466871edfa8ba38601f8323df790a67fd93c25b89a037378dccaafe3403a3cef961516865f1345487ed5b07b51272a8fddcc5a24ef15024fb89884884d38108524003e9cdf3cbff7cc4c6fabac271aaa81788d41af1940a968c6aed4e03262c64c7f73fb9a5f14cf57e9b0b953b4777b799c4182b69182db9dad12a11efd928338c1cc8ce3074055f0f6afa78ee3d145906459fd590330c8727e7a5892ba882128cb07a4d8ab6a0b47a8be0edaaa4ae5694177c24d3c2a8a8c458fa27b18223f4f033d2572dd1994fb58e7e2d93497397b08d719d3758f5ddd13893e445f0720798541222c4ce6bc3f71d10e3dd011761e324ff3297200540f5aefe0f57355ba515cd6c3783b5f40e617097a54d74e104de3ec7ed1463942c66829cad860bc5c07fe154846fc1f117ce01bec3a03f8de486382dfd9771908d014f2bafadb278063b2d655f7efe20d92c914694df1c30e73656323d31f5bcaf62bdcb9746339635e504f902f2769ecc7f2d02d780e40c47b71be7bc5a6bd2c3ac5806bc67868c60b00097de282c06392892d36f1ebb12a059deecf35835378dbbfc873174a02127eea5dca5a397783e7c195d9d82aaecf053ca2b42cb0ff0", 0x1000}, {&(0x7f0000000980)="91b0b85cc77a96cceb5cf8ec20d3a5ed3b77e8ea94f6", 0x16}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000008400230007000000ffffffff000000002000000000000000840000000800000000000000000000000000ffffac14141b180000000000000084000000000000000e000200f700e205180000000000000084000000060000000700000000000000"], 0x68}], 0x1, 0x42000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="58eced8e46dc3f0ab98607000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f000000fa00)=0x9) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000840)) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) bind$qrtr(r6, &(0x7f0000000580)={0x2a, 0x3, 0xfffffffe}, 0xc) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x15, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000009e0800d9000000000500000018110000883bac9b64c2b7fe3e84d890e2cf5ebdaea1a5a80b8ad1d58f656b2f3fa236aab73806fe71f5755621e179d99f75759e837fc746ab68f386c8ad1812dee05e546ed14e3b2979a7f2ec887904403d9003df1876ca72a23e4a3f76f3f752059f2140ea7790c38978d4ccf247c1d2a68aeeafb472118e1627cc0a4bfca663caf1efc30fb97aeca55c01bb577e1b8cb4301effffff7f0000000063dbcac8dc41b95e8a5150b0315cf9a3d1893d8ee9ace468b540e9", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000000893060004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x2a, &(0x7f0000000200)=""/42, 0x41000, 0x6d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x1, 0xc, 0x36b4782}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x1, 0x1, 0xe, 0x8}, {0x3, 0x40000003, 0xc, 0xa}, {0x1, 0x5, 0x7, 0x5}], 0x10, 0x40}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000540)=r7, 0x4) 20.394105191s ago: executing program 2 (id=1097): write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x1d}}}], 0x18}}], 0x1, 0x4000084) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 19.556020243s ago: executing program 3 (id=1100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="c53246ba7bad0bfc44be64df7ee2f62ab87e1ec1e3d57f77502d9f8592a12169e639e9a8a4d1ba8c3bf478536a61567938e0d9478cb969481d0d95b3a505fb6bc88e8b98f98f0e035921993e89d93a80a055cd355dde2e5c6a12c7131c9644533eaf30818d31", 0x66}], 0x1}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a5c000000060a0b040000000000000000"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x0) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) unshare(0x2c020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, r7, 0xcdfbbdff48631df7}, 0x38) r8 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r8, 0x618f, 0x0) 19.421525001s ago: executing program 2 (id=1103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000050043bc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x6e, &(0x7f0000001240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd600000000038310020010000000000000000000000000001030000000000000000000000000000010101907802000000656f21ef37ba2bffff010000000000000000000000000001200100000000000061df00000000000097c7e71a450b13fc"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}}, 0x20040810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x76c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x400, 0xde, &(0x7f0000000580)=""/222, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0xe, 0x9}, 0x10, 0x24ae1, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[r0, r1, r1, r1, r1, r1, r0], &(0x7f0000000680)=[{0x5, 0x3, 0xb, 0x8613188e50677cb1}, {0x1, 0x2, 0x2, 0xa}, {0x2, 0x2, 0xe, 0x1}], 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705006e080000004608f0ff76000000bf980000000000005608000000000000850000000700"/64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.291012367s ago: executing program 2 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a45020000deff002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r14], 0x44}}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0xc, 0xc, 0x2, [@fwd={0x8}]}}, 0x0, 0x26}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 18.760573245s ago: executing program 3 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @initdev}, &(0x7f0000000200)=0xc) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0x200, 0x9, 0x408, r2, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x8a76}, 0x50) (async) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r7, &(0x7f0000001000), 0x0}, 0x20) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, 0x0, 0x0) 18.620947352s ago: executing program 3 (id=1107): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000082c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="55ed28bd7000fcdbdf251a00000008000300", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) 18.349611346s ago: executing program 3 (id=1108): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80a3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xf4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb900000}, @IPSET_ATTR_IFACE={0x14, 0x17, 'gretap0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_BYTES={0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xf4}}, 0x40018) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) 18.223465089s ago: executing program 3 (id=1110): socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) (async) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_mmu_set_p4d\x00', r2, 0x0, 0x5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004816}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) close(r3) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000006c0)={0x9, 0x9, 0x5, 0xce}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000006c0)={0x9, 0x9, 0x5, 0xce}, 0x8) socketpair(0x23, 0x4, 0x5, &(0x7f0000000380)) (async) socketpair(0x23, 0x4, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r7, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x80) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) (async) getsockopt$MRT(r8, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) 17.955553253s ago: executing program 3 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a9ec0bb2455c550625b0575cd12a8aff0dc435dd5230a79890242add4fa0f1167ad8967b6fc9063b9f9979be47c8952c48a0dbd16515933ca3fd018a307c5a233dbbe974cfd47ccafb87a7a2934c128873ea0eac16262c0599becedf775e0398ca3167d812b0b49ad1dc6d684f61e2255efed115767f937ae9a78ea24be9f133bd4a2ed039134af7e2a95fd955d4c75df3697e"}], 0x4a) 16.348635521s ago: executing program 0 (id=1125): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000308010300000000000000000000000005000300060000001400048004000540"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000002900)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x1}, 0x1}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0x0, 0x0, 0x2000000}}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r9, 0x1000) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x31}], 0x1}, 0x5}], 0x1, 0x40000000, 0x0) (async, rerun: 64) recvmmsg(r9, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000300)=""/43, 0x2b}], 0x3}, 0x1}], 0x1, 0x11040, &(0x7f00000006c0)={0x77359400}) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0) 16.344755216s ago: executing program 0 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff0204a4ffb5ffffffffffffffff2e2be82db1af00000000", 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0xffff}, {0xb, 0x9}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048020}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 15.439014298s ago: executing program 0 (id=1127): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000f58f71183b00000000007e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r0 = socket(0x9, 0x6, 0x6) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x10) 15.364442297s ago: executing program 0 (id=1128): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) setsockopt(r3, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000580)=0x6) (async) write(r6, &(0x7f00000005c0)="0a00dc99ea47", 0x6) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffe0, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x7, 0x7, 0xf1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1, 0x0}, &(0x7f0000000240)=0xc) (async) r12 = socket(0x10, 0x3, 0x9) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008000000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b703000000000000005509010000000000950000000000000009610800000100fcffffff186900000d0000000000000070f13173c51adc51f629d072f734a601000000181100009beb00b9f7a8ce17c29d36b621def96a2ed2748158276748d198f570d828aa69b47ee4b73e01e7c1c2dee2457f7cb2b2c3361c78e1a9706f66f9959cc5dbb8461378086f3112f951d79ce679cd635b365c7612a66400ce21881e40d47d4fd663e49c742541805b6bd7c1487c9e0d472f9557f49b9014b1b7393090ccfc4b56da407ec8095bb18669819ec464efbe660cfd6af16376c9891ae6ceed2b8737d85d19f6e873c6371837ca5383c799ef29651ed5d8b0f99e0f883c53fff3bf1ee37350100000000000e649d2b19d09aca039605c6b9f7207323249623c14ebceab934de83a5a91d50bb9a25c6fa65a15009af7bb6b06dd4d259f1f372a40d7a52bc01e6c90c65e405789c720517a0127e01319ad29a6b6ca2ac8d26d08cba642d02508746a98068de66bb09a5cafe68b2954b718c47b6a945793184db03b62851f0a68081f134d40b6a3a9a72427065ff3173e9c70452247902c81fd481eb5b5d4ce24af217cf686c9969b982d5edda27721350582cfa7d1f5e855a57f1dcade321e3bed26c6c13bc63095135853c38443e28b21eecc14ece329fb882ebf1eb52f51bc3b1a0de7cb9e0bbdfd5a9634c44211646aa3f8b4ab4e48e93b042881aa077c88e1f26ed33ae5558f0b4c36e7cc14723bb2a3749e55e02e8e96a21118bda435891ca0db5c2a9f988308d1eef925dd103dda0aa268d113072385a892918eea507bb75bbb02d6eb3ea8a458e18ed2fa930990eb6a17a8fc9e8de5495ac2d013421d3d1ad7185c6531238cd6b1fa82772a0dafc092922c318d4a3a2ca9a6915793", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x6, 0xb9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x6}, 0x94) 15.35991639s ago: executing program 0 (id=1129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010001", 0x7) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x7d, 0x1, 0xc, 0x3, 0x0, 0x81}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 15.334043421s ago: executing program 0 (id=1130): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0x0, 0xfff1}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 12.020038394s ago: executing program 32 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a42}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000041}, 0x20029004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x50}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000480)=""/253, 0xfd}], 0x5, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x8}}}, 0x84) r17 = openat$cgroup_ro(r15, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r15, 0x4008941a, &(0x7f0000000880)) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r10, 0x9652, '\x00', 0x0, r9, 0x0, 0x0, 0x4}, 0x50) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4000, r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x0, 0x8, 0x10000, 0x1ff, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0x1c, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0xf, [{@empty, 0x34}]}]}}}}}) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r3, 0x20, &(0x7f0000000f40)={&(0x7f0000000d40)=""/220, 0xdc, 0x0, &(0x7f0000000e40)=""/237, 0xed}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r17, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x8, 0x33, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc84, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x0, 0x1, 0x0, r19}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x5, 0x2, &(0x7f0000000bc0)=""/2, 0x41000, 0x14, '\x00', r20, @fallback=0x22, r21, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r22, 0xffffffffffffffff, 0x0, &(0x7f0000001080)=[r10, r13, r14, r4, r7, r16, r8, r23, r5], 0x0, 0x10, 0xb}, 0x94) r24 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r24, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x2, 0xb, 0x7, 0x96d081cbdcc02b49, 0x13, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x3c, 0xc0, 0x0, @in6={0xa, 0x4e24, 0x4, @empty, 0x3}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x100, @remote, 0x1000}, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf9, 0x2, 0x87, 0x4, 0x40000001}]}, 0x98}}, 0x45) r25 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r26 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r25, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x6c, r26, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc881}, 0x45) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000001480)={0x3, &(0x7f0000001440)=[{0x6, 0x8, 0x9, 0x7}, {0x8, 0x9, 0x20, 0xff}, {0x2, 0x20, 0x4, 0x9}]}, 0x10) r27 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r16) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r27, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000020}, 0x8800) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000001680)=0x4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)) recvmsg(r8, &(0x7f00000019c0)={&(0x7f0000001700)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/51, 0x33}, {&(0x7f00000017c0)=""/35, 0x23}, {&(0x7f0000001800)=""/116, 0x74}, {&(0x7f0000001880)=""/65, 0x41}], 0x4, &(0x7f0000001940)=""/112, 0x70}, 0x40000000) sendmsg$NL80211_CMD_SET_PMKSA(r12, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x8c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="bb59c0633ced97180a598b8ae4b79ecf0f974ae68781be0cb745a1d1d417"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x13, 0x34, @random="b4c9043d81d6c4d4d654662e6594a5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd3a4ca9e013aa466aaad409dc2c299a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7ff}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20040880) 11.988007063s ago: executing program 33 (id=1058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) close(0x3) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 3.505593866s ago: executing program 34 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a45020000deff002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r14], 0x44}}, 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0xc, 0xc, 0x2, [@fwd={0x8}]}}, 0x0, 0x26}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 2.486469487s ago: executing program 35 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a9ec0bb2455c550625b0575cd12a8aff0dc435dd5230a79890242add4fa0f1167ad8967b6fc9063b9f9979be47c8952c48a0dbd16515933ca3fd018a307c5a233dbbe974cfd47ccafb87a7a2934c128873ea0eac16262c0599becedf775e0398ca3167d812b0b49ad1dc6d684f61e2255efed115767f937ae9a78ea24be9f133bd4a2ed039134af7e2a95fd955d4c75df3697e"}], 0x4a) 0s ago: executing program 36 (id=1130): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0x0, 0xfff1}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 83.068076][ T5813] cgroup: Unknown subsys name 'net' [ 83.217874][ T5813] cgroup: Unknown subsys name 'cpuset' [ 83.226891][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.964527][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.709158][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.717214][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.725033][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.735442][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.743471][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.751780][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.753101][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.759056][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.780624][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.788405][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.788905][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.803488][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.813931][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.821921][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.830021][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.831779][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.839316][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.845463][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.860088][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.860184][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.867627][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.881853][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.887840][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.890373][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.905940][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.678869][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.800098][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.871125][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.882137][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.932084][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.023214][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.030542][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.038527][ T5828] bridge_slave_0: entered allmulticast mode [ 89.046351][ T5828] bridge_slave_0: entered promiscuous mode [ 89.108843][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.116169][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.123297][ T5828] bridge_slave_1: entered allmulticast mode [ 89.131198][ T5828] bridge_slave_1: entered promiscuous mode [ 89.285263][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.292476][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.300832][ T5826] bridge_slave_0: entered allmulticast mode [ 89.308415][ T5826] bridge_slave_0: entered promiscuous mode [ 89.324926][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.346550][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.353707][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.360989][ T5829] bridge_slave_0: entered allmulticast mode [ 89.368505][ T5829] bridge_slave_0: entered promiscuous mode [ 89.376163][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.383362][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.390808][ T5826] bridge_slave_1: entered allmulticast mode [ 89.398132][ T5826] bridge_slave_1: entered promiscuous mode [ 89.420462][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.430111][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.437509][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.444877][ T5831] bridge_slave_0: entered allmulticast mode [ 89.452008][ T5831] bridge_slave_0: entered promiscuous mode [ 89.461164][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.468593][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.475950][ T5829] bridge_slave_1: entered allmulticast mode [ 89.483065][ T5829] bridge_slave_1: entered promiscuous mode [ 89.541362][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.548668][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.556183][ T5831] bridge_slave_1: entered allmulticast mode [ 89.563361][ T5831] bridge_slave_1: entered promiscuous mode [ 89.605115][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.612356][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.620188][ T5825] bridge_slave_0: entered allmulticast mode [ 89.627616][ T5825] bridge_slave_0: entered promiscuous mode [ 89.651417][ T5828] team0: Port device team_slave_0 added [ 89.673294][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.686379][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.696845][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.704497][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.711936][ T5825] bridge_slave_1: entered allmulticast mode [ 89.719665][ T5825] bridge_slave_1: entered promiscuous mode [ 89.729694][ T5828] team0: Port device team_slave_1 added [ 89.753176][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.765213][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.777887][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.829852][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.879990][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.887490][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.913538][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.935313][ T5147] Bluetooth: hci3: command tx timeout [ 89.941394][ T5832] Bluetooth: hci1: command tx timeout [ 89.987211][ T5826] team0: Port device team_slave_0 added [ 89.995522][ T5829] team0: Port device team_slave_0 added [ 90.005023][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.014805][ T5832] Bluetooth: hci4: command tx timeout [ 90.019089][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.020543][ T5832] Bluetooth: hci2: command tx timeout [ 90.031290][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.035954][ T5147] Bluetooth: hci0: command tx timeout [ 90.043227][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.074691][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.088137][ T5831] team0: Port device team_slave_0 added [ 90.103776][ T5826] team0: Port device team_slave_1 added [ 90.112125][ T5829] team0: Port device team_slave_1 added [ 90.148315][ T5825] team0: Port device team_slave_0 added [ 90.157383][ T5831] team0: Port device team_slave_1 added [ 90.199986][ T5825] team0: Port device team_slave_1 added [ 90.285679][ T5828] hsr_slave_0: entered promiscuous mode [ 90.292114][ T5828] hsr_slave_1: entered promiscuous mode [ 90.299882][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.307074][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.333550][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.345700][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.352679][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.379529][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.403895][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.411461][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.437876][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.451178][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.458266][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.484917][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.496883][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.503822][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.530141][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.541913][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.549115][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.575291][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.587190][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.594207][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.620450][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.633045][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.640113][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.666698][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.761240][ T5825] hsr_slave_0: entered promiscuous mode [ 90.767798][ T5825] hsr_slave_1: entered promiscuous mode [ 90.774461][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.780305][ T5825] Cannot create hsr debugfs directory [ 90.867099][ T5831] hsr_slave_0: entered promiscuous mode [ 90.873638][ T5831] hsr_slave_1: entered promiscuous mode [ 90.880071][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.886031][ T5831] Cannot create hsr debugfs directory [ 90.956635][ T5826] hsr_slave_0: entered promiscuous mode [ 90.963117][ T5826] hsr_slave_1: entered promiscuous mode [ 90.969551][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.975375][ T5826] Cannot create hsr debugfs directory [ 90.994933][ T5829] hsr_slave_0: entered promiscuous mode [ 91.001266][ T5829] hsr_slave_1: entered promiscuous mode [ 91.008673][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.015319][ T5829] Cannot create hsr debugfs directory [ 91.576876][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.591753][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.602414][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.622518][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.686221][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.716577][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.730456][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.746225][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.848272][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.860248][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.872225][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.883253][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.998657][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.016128][ T5147] Bluetooth: hci3: command tx timeout [ 92.024647][ T5832] Bluetooth: hci1: command tx timeout [ 92.026312][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.036371][ T981] cfg80211: failed to load regulatory.db [ 92.063924][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.086039][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.094557][ T5832] Bluetooth: hci2: command tx timeout [ 92.094582][ T52] Bluetooth: hci0: command tx timeout [ 92.105957][ T5147] Bluetooth: hci4: command tx timeout [ 92.122703][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.188503][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.201111][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.217698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.224999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.238715][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.250730][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.262538][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.298855][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.306204][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.319412][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.376124][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.417543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.424711][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.471063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.478280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.497314][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.532739][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.606328][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.690396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.697695][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.749054][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.756295][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.814905][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.867695][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.920542][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.965496][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.972705][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.993372][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.016691][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.051100][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.058406][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.069467][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.076671][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.092989][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.110073][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.117435][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.281205][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.358277][ T5828] veth0_vlan: entered promiscuous mode [ 93.442850][ T5828] veth1_vlan: entered promiscuous mode [ 93.632293][ T5828] veth0_macvtap: entered promiscuous mode [ 93.672250][ T5828] veth1_macvtap: entered promiscuous mode [ 93.700196][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.797633][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.832255][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.866553][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877811][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903026][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.912573][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.955472][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.013663][ T5831] veth0_vlan: entered promiscuous mode [ 94.029207][ T5825] veth0_vlan: entered promiscuous mode [ 94.059653][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.079963][ T5831] veth1_vlan: entered promiscuous mode [ 94.100847][ T5147] Bluetooth: hci3: command tx timeout [ 94.104634][ T52] Bluetooth: hci1: command tx timeout [ 94.118241][ T5825] veth1_vlan: entered promiscuous mode [ 94.161308][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.175102][ T52] Bluetooth: hci2: command tx timeout [ 94.175968][ T5147] Bluetooth: hci4: command tx timeout [ 94.180555][ T52] Bluetooth: hci0: command tx timeout [ 94.199721][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.249859][ T5829] veth0_vlan: entered promiscuous mode [ 94.279426][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.285171][ T5826] veth0_vlan: entered promiscuous mode [ 94.296078][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.303593][ T5825] veth0_macvtap: entered promiscuous mode [ 94.328443][ T5825] veth1_macvtap: entered promiscuous mode [ 94.368066][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.377927][ T5831] veth0_macvtap: entered promiscuous mode [ 94.388459][ T5826] veth1_vlan: entered promiscuous mode [ 94.393235][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.416550][ T5829] veth1_vlan: entered promiscuous mode [ 94.438777][ T5831] veth1_macvtap: entered promiscuous mode [ 94.456341][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.518167][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541534][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.561518][ T5826] veth0_macvtap: entered promiscuous mode [ 94.574834][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.588024][ T5826] veth1_macvtap: entered promiscuous mode [ 94.608326][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.625388][ T1038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.637034][ T1038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.706630][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.721839][ T5950] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 94.747692][ T1109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.760300][ T5829] veth0_macvtap: entered promiscuous mode [ 94.780045][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.788666][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800400][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809926][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846775][ T5829] veth1_macvtap: entered promiscuous mode [ 94.862833][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.875853][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.939784][ T3471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967359][ T3471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.978066][ T3471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.002657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.017880][ T3471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.032880][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.083834][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.143543][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.202967][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.232554][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.256400][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268158][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.323801][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399434][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.439127][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.463913][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.638743][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.652773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.776660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.803501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.815561][ T5956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.850032][ T5956] macvlan0: entered promiscuous mode [ 95.891365][ T5956] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 95.900487][ T5956] netlink: 'syz.0.6': attribute type 2 has an invalid length. [ 95.908523][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.972083][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.000500][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.059253][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.071068][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.172936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.174133][ T52] Bluetooth: hci1: command tx timeout [ 96.184761][ T5147] Bluetooth: hci3: command tx timeout [ 96.216192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.255968][ T5147] Bluetooth: hci0: command tx timeout [ 96.258035][ T52] Bluetooth: hci4: command tx timeout [ 96.261519][ T5832] Bluetooth: hci2: command tx timeout [ 96.840743][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 96.907558][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.187150][ T5985] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11'. [ 97.241146][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 97.540800][ T5947] IPVS: starting estimator thread 0... [ 97.644312][ T5998] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.657351][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 97.816513][ T5997] tipc: Started in network mode [ 97.821548][ T5997] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.875791][ T5997] tipc: Enabled bearer , priority 10 [ 98.522125][ T6018] Bluetooth: MGMT ver 1.23 [ 99.010986][ T5833] tipc: Node number set to 2886997162 [ 99.420467][ T6039] tipc: Can't bind to reserved service type 0 [ 99.436623][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 99.585343][ T6046] Zero length message leads to an empty skb [ 99.924496][ T6036] delete_channel: no stack [ 100.058950][ T6055] Cannot find set identified by id 65534 to match [ 100.303901][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.539713][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.570330][ T6063] netlink: 35 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.612253][ T6063] netlink: 'syz.3.26': attribute type 6 has an invalid length. [ 100.653533][ T6063] netlink: 'syz.3.26': attribute type 5 has an invalid length. [ 100.682490][ T6063] netlink: 35 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.720700][ T6078] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 100.898101][ T6081] netlink: 'syz.2.30': attribute type 83 has an invalid length. [ 100.914560][ T6063] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 101.312895][ T6089] Illegal XDP return value 6089 on prog (id 20) dev syz_tun, expect packet loss! [ 129.091225][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 129.101668][ T6163] syzkaller1: entered promiscuous mode [ 129.114783][ T6163] syzkaller1: entered allmulticast mode [ 129.305286][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 129.317560][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 129.504242][ T6178] tipc: Started in network mode [ 129.509308][ T6178] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 129.524944][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 129.537108][ T6169] delete_channel: no stack [ 129.792003][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 129.832035][ T6200] bond1: option broadcast_neighbor: invalid value (5) [ 129.878111][ T6200] bond1 (unregistering): Released all slaves [ 130.227228][ T6216] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 130.268521][ T6216] bond0: (slave wlan1): Opening slave failed [ 130.301407][ T6218] tipc: Enabling of bearer rejected, failed to enable media [ 130.374637][ T6215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.417316][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 130.469199][ T6236] netlink: 'syz.4.47': attribute type 40 has an invalid length. [ 130.487896][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 131.251888][ T6261] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 131.487461][ T6269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'. [ 131.526449][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 132.161430][ T6286] Cannot find set identified by id 1 to match [ 132.408984][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.417273][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.425317][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.433290][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.441309][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.449302][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.457443][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.465575][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.473821][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.482121][ T6294] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.987683][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994340][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.978979][ T6317] tipc: Started in network mode [ 133.983915][ T6317] tipc: Node identity 8657c76de7da, cluster identity 4711 [ 134.002362][ T6317] tipc: Enabled bearer , priority 0 [ 134.093311][ T6324] syzkaller0: entered promiscuous mode [ 134.117081][ T6324] syzkaller0: entered allmulticast mode [ 134.333509][ T6324] tipc: Resetting bearer [ 134.374676][ T6324] tipc: Disabling bearer [ 134.769357][ T938] IPVS: starting estimator thread 0... [ 134.878952][ T6370] IPVS: using max 31 ests per chain, 74400 per kthread [ 135.184395][ T6382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'. [ 135.207875][ T6382] Bluetooth: MGMT ver 1.23 [ 135.356702][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 135.371335][ T6392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.85'. [ 135.528591][ T6397] netlink: 'syz.0.88': attribute type 5 has an invalid length. [ 135.530410][ T6398] netlink: 'syz.0.88': attribute type 5 has an invalid length. [ 135.549666][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 135.560044][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 135.994679][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 136.066369][ T6414] netlink: 92 bytes leftover after parsing attributes in process `syz.2.92'. [ 136.081855][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 136.094547][ T6423] 8021q: VLANs not supported on vxcan0 [ 136.779241][ T6440] policy can only be matched on NF_INET_PRE_ROUTING [ 136.779264][ T6440] unable to load match [ 136.933586][ T6450] netlink: 1 bytes leftover after parsing attributes in process `syz.1.103'. [ 136.966398][ T6452] syzkaller0: entered promiscuous mode [ 136.982258][ T6452] syzkaller0: entered allmulticast mode [ 137.010630][ T6451] tipc: Enabled bearer , priority 0 [ 137.099728][ T6451] tipc: Resetting bearer [ 137.127797][ T6451] tipc: Disabling bearer [ 137.139102][ T6458] warning: `syz.1.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.153001][ T6456] tipc: Enabled bearer , priority 0 [ 137.171491][ T6456] syzkaller0: entered promiscuous mode [ 137.201881][ T6456] syzkaller0: entered allmulticast mode [ 137.263162][ T6456] tipc: Resetting bearer [ 137.279770][ T6455] tipc: Resetting bearer [ 137.293600][ T6455] tipc: Disabling bearer [ 137.328717][ T6461] bridge_slave_0: left allmulticast mode [ 137.376763][ T6461] bridge_slave_0: left promiscuous mode [ 137.382894][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.452600][ T6461] bridge_slave_1: left allmulticast mode [ 137.458921][ T6461] bridge_slave_1: left promiscuous mode [ 137.470117][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.504542][ T6469] netlink: 'syz.2.107': attribute type 10 has an invalid length. [ 137.537367][ T6461] bond0: (slave bond_slave_0): Releasing backup interface [ 137.588632][ T6461] bond0: (slave bond_slave_1): Releasing backup interface [ 137.646294][ T6461] team0: Port device team_slave_0 removed [ 137.671576][ T6461] team0: Port device team_slave_1 removed [ 137.679279][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.690344][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.700603][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.710343][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.722406][ T6461] net_ratelimit: 44 callbacks suppressed [ 137.722425][ T6461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.768671][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.777508][ T6469] bond0: (slave wlan1): Opening slave failed [ 137.942422][ T6472] syz.2.107 (6472) used greatest stack depth: 17832 bytes left [ 138.336694][ T6496] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 138.484381][ T6496] bond1: entered promiscuous mode [ 138.489785][ T6496] bond1: entered allmulticast mode [ 138.703500][ T6505] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.742169][ T6505] openvswitch: netlink: Message has 20 unknown bytes. [ 138.772377][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 138.792597][ T6509] netlink: 'syz.2.121': attribute type 2 has an invalid length. [ 139.008040][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.679053][ T6548] syzkaller1: entered promiscuous mode [ 139.690710][ T6548] syzkaller1: entered allmulticast mode [ 141.093282][ T6606] netlink: 'syz.3.143': attribute type 2 has an invalid length. [ 141.404342][ T6622] tipc: Started in network mode [ 141.409480][ T6622] tipc: Node identity 56957d70aa87, cluster identity 4711 [ 141.437723][ T6622] tipc: Enabled bearer , priority 0 [ 141.490517][ T6623] netlink: 'syz.1.146': attribute type 25 has an invalid length. [ 141.536620][ T6623] netlink: 'syz.1.146': attribute type 7 has an invalid length. [ 141.581849][ T6623] __nla_validate_parse: 4 callbacks suppressed [ 141.581870][ T6623] netlink: 164 bytes leftover after parsing attributes in process `syz.1.146'. [ 141.727367][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.796009][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'. [ 142.021761][ T6651] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 142.062371][ T6650] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 142.141941][ T6651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.202784][ T6610] tipc: Disabling bearer [ 142.493292][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 142.965357][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.167'. [ 143.295177][ T6705] tipc: Enabled bearer , priority 0 [ 143.305969][ T6705] syzkaller0: entered promiscuous mode [ 143.311936][ T6705] syzkaller0: entered allmulticast mode [ 143.348704][ T6705] tipc: Resetting bearer [ 143.372586][ T6703] tipc: Resetting bearer [ 143.419731][ T6703] tipc: Disabling bearer [ 143.779680][ T6727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'. [ 143.861478][ T6727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 143.879393][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 144.142915][ T6750] syzkaller1: entered promiscuous mode [ 144.159360][ T6750] syzkaller1: entered allmulticast mode [ 144.202888][ T6750] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 144.416189][ T6760] syzkaller1: entered promiscuous mode [ 144.449310][ T6760] syzkaller1: entered allmulticast mode [ 144.745466][ T6772] : renamed from veth0_to_bond (while UP) [ 144.785894][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 144.813449][ T6779] bridge: RTM_NEWNEIGH with invalid ether address [ 144.830198][ T6782] pim6reg: entered allmulticast mode [ 145.018208][ T6782] pim6reg: left allmulticast mode [ 145.127482][ T6786] bond2: entered promiscuous mode [ 145.673242][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 145.831423][ T6828] netlink: 'syz.2.207': attribute type 13 has an invalid length. [ 145.840335][ T6828] netlink: 'syz.2.207': attribute type 17 has an invalid length. [ 145.919277][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.933439][ T6828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.950927][ T6820] netlink: 432 bytes leftover after parsing attributes in process `syz.0.204'. [ 145.988110][ T6832] sctp: [Deprecated]: syz.1.209 (pid 6832) Use of int in max_burst socket option deprecated. [ 145.988110][ T6832] Use struct sctp_assoc_value instead [ 146.809348][ T6862] bond0: entered promiscuous mode [ 146.819384][ T6862] batadv0: entered promiscuous mode [ 146.841688][ T6862] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 146.864862][ T6862] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.893371][ T6862] bond0: left promiscuous mode [ 146.923466][ T6862] batadv0: left promiscuous mode [ 146.984878][ T6863] __nla_validate_parse: 3 callbacks suppressed [ 146.984899][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.327717][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805818a000: rx timeout, send abort [ 147.369940][ T6876] netlink: 5 bytes leftover after parsing attributes in process `syz.2.221'. [ 147.396094][ T6876] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 147.527904][ T6888] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 147.539897][ T6888] netlink: 248 bytes leftover after parsing attributes in process `syz.2.221'. [ 147.730844][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 147.749881][ T6886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 147.814935][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 147.825544][ T6891] : renamed from veth0_to_bond (while UP) [ 147.831440][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c7400: rx timeout, send abort [ 147.839815][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805818a000: abort rx timeout. Force session deactivation [ 148.151126][ T6896] netlink: 104 bytes leftover after parsing attributes in process `syz.4.225'. [ 148.331522][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c7400: abort rx timeout. Force session deactivation [ 148.349818][ T6904] netlink: 'syz.0.228': attribute type 2 has an invalid length. [ 148.933423][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 149.320695][ T6932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.233'. [ 149.344758][ T6931] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 150.614542][ T6931] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 150.618221][ T6950] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 150.727654][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 150.882194][ T6959] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 150.890657][ T6959] syzkaller1: linktype set to 823 [ 151.084249][ T30] audit: type=1804 audit(1762443120.662:2): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.247" name="/newroot/46/cgroup.controllers" dev="tmpfs" ino=254 res=1 errno=0 [ 151.162272][ T30] audit: type=1800 audit(1762443120.672:3): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="cgroup.controllers" dev="tmpfs" ino=254 res=0 errno=0 [ 151.535608][ T5836] IPVS: starting estimator thread 0... [ 151.626179][ T7000] IPVS: using max 29 ests per chain, 69600 per kthread [ 151.630401][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.887345][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.902764][ T7005] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 151.965830][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.028535][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.048804][ T7019] __nla_validate_parse: 2 callbacks suppressed [ 152.048823][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 152.097023][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 152.183296][ T7024] netlink: 'syz.1.258': attribute type 2 has an invalid length. [ 152.194781][ T7027] netlink: 7906 bytes leftover after parsing attributes in process `syz.4.259'. [ 152.242526][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 152.276295][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.258'. [ 152.281145][ T7024] : entered promiscuous mode [ 152.491619][ T7032] bond3: entered allmulticast mode [ 152.498676][ T7032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.601947][ T7047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.263'. [ 152.607616][ T7043] bridge1: entered allmulticast mode [ 152.662495][ T7043] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 153.145456][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 153.250617][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 153.355786][ T7075] ip6t_REJECT: ECHOREPLY is not supported [ 153.518332][ T7084] tipc: Enabling of bearer rejected, failed to enable media [ 153.538797][ T7077] tipc: Started in network mode [ 153.543820][ T7077] tipc: Node identity b27d895c7713, cluster identity 4711 [ 153.606419][ T7085] netlink: 'syz.0.274': attribute type 8 has an invalid length. [ 153.606503][ T7077] tipc: Enabled bearer , priority 0 [ 153.681140][ T7086] syzkaller0: entered promiscuous mode [ 153.686862][ T7086] syzkaller0: entered allmulticast mode [ 154.004916][ T7086] tipc: Resetting bearer [ 154.436859][ T7076] tipc: Resetting bearer [ 154.467322][ T7076] tipc: Disabling bearer [ 154.500068][ T7130] netlink: 'syz.0.283': attribute type 11 has an invalid length. [ 155.011127][ T7158] netlink: 3 bytes leftover after parsing attributes in process `syz.3.293'. [ 155.050902][ T7158] 0ªX¹¦À: renamed from caif0 [ 155.084878][ T7158] 0ªX¹¦À: entered allmulticast mode [ 155.090133][ T7158] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 155.178736][ T7164] veth0: entered promiscuous mode [ 155.197575][ T7164] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 155.202254][ T7168] netlink: set zone limit has 8 unknown bytes [ 155.555990][ T7177] netlink: 277 bytes leftover after parsing attributes in process `syz.3.298'. [ 155.567148][ T7177] netlink: 'syz.3.298': attribute type 3 has an invalid length. [ 155.806052][ T7186] netlink: 'syz.3.301': attribute type 4 has an invalid length. [ 155.879488][ T7190] openvswitch: netlink: Duplicate or invalid key (type 0). [ 155.887650][ T7190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.089422][ T7197] tipc: Enabled bearer , priority 0 [ 156.101596][ T7197] syzkaller0: entered promiscuous mode [ 156.107514][ T7197] syzkaller0: entered allmulticast mode [ 156.138197][ T7197] tipc: Resetting bearer [ 156.147462][ T7196] tipc: Resetting bearer [ 156.178794][ T7196] tipc: Disabling bearer [ 156.273716][ T7208] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 156.310940][ T7211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.801050][ T7226] batadv1: entered promiscuous mode [ 156.808252][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.150913][ T7243] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 157.282350][ T7251] vlan2: entered allmulticast mode [ 157.311246][ T7251] macvtap0: entered allmulticast mode [ 157.364612][ T7251] veth0_macvtap: entered allmulticast mode [ 157.484704][ T7254] macsec1: entered promiscuous mode [ 157.499901][ T7254] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 157.518920][ T7254] macsec1: entered allmulticast mode [ 157.550932][ T7254] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 157.622240][ T7256] netlink: 'syz.3.322': attribute type 3 has an invalid length. [ 157.714387][ T7264] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 157.753052][ T7264] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 157.768487][ T7264] __nla_validate_parse: 7 callbacks suppressed [ 157.768507][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 157.784602][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 157.798026][ T7264] netlink: 'syz.1.324': attribute type 6 has an invalid length. [ 157.806433][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 157.815556][ T7264] netlink: 'syz.1.324': attribute type 6 has an invalid length. [ 158.002536][ T7274] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 158.076795][ T7285] lo speed is unknown, defaulting to 1000 [ 158.093562][ T7285] lo speed is unknown, defaulting to 1000 [ 158.103523][ T7285] lo speed is unknown, defaulting to 1000 [ 158.145965][ T7285] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.202845][ T7285] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.321455][ T7285] lo speed is unknown, defaulting to 1000 [ 158.357683][ T7285] lo speed is unknown, defaulting to 1000 [ 158.385032][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 158.416058][ T7285] lo speed is unknown, defaulting to 1000 [ 158.432095][ T7285] lo speed is unknown, defaulting to 1000 [ 158.469028][ T7285] lo speed is unknown, defaulting to 1000 [ 158.609196][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.338'. [ 158.817136][ T7314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.341'. [ 159.039529][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 159.071112][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 159.104987][ T7322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.343'. [ 159.138999][ T7322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.343'. [ 159.164745][ T7326] Bluetooth: MGMT ver 1.23 [ 159.259964][ T7334] : renamed from bridge_slave_0 (while UP) [ 159.279627][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.312890][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.442972][ T7346] x_tables: duplicate underflow at hook 2 [ 159.508590][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.531207][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.706362][ T7359] dvmrp8: entered allmulticast mode [ 159.874592][ T7359] lo speed is unknown, defaulting to 1000 [ 159.945321][ T7362] macvlan2: entered promiscuous mode [ 160.136174][ T7370] netlink: 'syz.3.356': attribute type 13 has an invalid length. [ 160.317026][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.324976][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.462579][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.479844][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.807493][ T7375] tipc: Enabled bearer , priority 0 [ 161.214436][ T5147] Bluetooth: hci0: command tx timeout [ 161.884496][ T7377] syzkaller0: entered promiscuous mode [ 161.889998][ T7377] syzkaller0: entered allmulticast mode [ 161.906620][ T7380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.923677][ T7358] dvmrp8: left allmulticast mode [ 161.930368][ T5836] tipc: Node number set to 3312355676 [ 164.253625][ T7391] tipc: Resetting bearer [ 164.260470][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.269835][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.316245][ T7427] __nla_validate_parse: 8 callbacks suppressed [ 164.316266][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 164.340385][ T7419] pim6reg1: entered promiscuous mode [ 164.356844][ T7419] pim6reg1: entered allmulticast mode [ 164.363852][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.389922][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.537818][ T7391] tipc: Resetting bearer [ 164.559622][ T7391] tipc: Disabling bearer [ 164.597289][ T7442] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 164.640674][ T7443] lo speed is unknown, defaulting to 1000 [ 164.696230][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.026755][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 165.048255][ T7459] netlink: 'syz.3.374': attribute type 21 has an invalid length. [ 165.124980][ T7471] veth5: entered promiscuous mode [ 165.130764][ T7459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.374'. [ 165.662322][ T7492] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 165.695264][ T7492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.382'. [ 165.830236][ T7502] netlink: 'syz.4.386': attribute type 13 has an invalid length. [ 165.843805][ T7502] netlink: 'syz.4.386': attribute type 17 has an invalid length. [ 165.936587][ T7502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.792312][ T7540] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 166.800881][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 166.812715][ T7543] netlink: 216 bytes leftover after parsing attributes in process `syz.3.393'. [ 166.816548][ T7540] netlink: 80 bytes leftover after parsing attributes in process `syz.2.396'. [ 166.834380][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 166.852138][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 166.934923][ T7542] nbd0: detected capacity change from 0 to 127 [ 167.581365][ T5147] block nbd0: Receive control failed (result -32) [ 168.119742][ T7540] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 168.264344][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 168.327990][ T7560] IPv6: sit1: Disabled Multicast RS [ 168.433095][ T7569] netlink: 'syz.3.402': attribute type 17 has an invalid length. [ 168.480427][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.490889][ T7569] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.552710][ T7569] 0ªX¹¦À: left allmulticast mode [ 168.588671][ T7569] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.905999][ T7569] lo speed is unknown, defaulting to 1000 [ 169.046380][ T7592] netlink: 'syz.0.407': attribute type 2 has an invalid length. [ 169.212190][ T7598] tipc: Cannot configure node identity twice [ 169.483359][ T7609] __nla_validate_parse: 10 callbacks suppressed [ 169.483380][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 169.634533][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.752025][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.309106][ T7615] lo speed is unknown, defaulting to 1000 [ 171.596186][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.430'. [ 171.710569][ T7676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.922639][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 172.111777][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'. [ 172.243465][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 172.275499][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 172.362421][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 172.450449][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 172.564442][ T7123] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 172.682842][ T7728] netlink: 'syz.1.439': attribute type 74 has an invalid length. [ 172.749863][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 172.792076][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 172.990557][ T7737] xt_TCPMSS: Only works on TCP SYN packets [ 173.965662][ T7776] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 174.245322][ T7776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.468362][ T7776] bond1: (slave wlan0): Opening slave failed [ 174.527210][ T7787] syzkaller1: entered promiscuous mode [ 174.532740][ T7787] syzkaller1: entered allmulticast mode [ 174.639548][ T30] audit: type=1800 audit(1762443144.232:4): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.451" name="memory.events" dev="tmpfs" ino=493 res=0 errno=0 [ 174.964974][ T7802] __nla_validate_parse: 2 callbacks suppressed [ 174.964995][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 175.152015][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 175.181439][ T7810] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 175.210546][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 175.435207][ T7820] sctp: [Deprecated]: syz.3.460 (pid 7820) Use of int in max_burst socket option deprecated. [ 175.435207][ T7820] Use struct sctp_assoc_value instead [ 175.560622][ T7824] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 175.607763][ T7824] netlink: 'syz.1.462': attribute type 17 has an invalid length. [ 175.800150][ T7824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.871452][ T7831] syzkaller1: entered promiscuous mode [ 175.877590][ T7831] syzkaller1: entered allmulticast mode [ 175.970868][ T7838] bridge: RTM_NEWNEIGH with invalid ether address [ 176.042456][ T7839] lo speed is unknown, defaulting to 1000 [ 176.197417][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.469'. [ 176.246228][ T7849] openvswitch: netlink: Flow key attr not present in new flow. [ 176.358270][ T7854] syzkaller0: entered promiscuous mode [ 176.388018][ T7854] syzkaller0: entered allmulticast mode [ 176.506861][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 176.517970][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'. [ 176.527201][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 176.536664][ T7864] netlink: 2 bytes leftover after parsing attributes in process `syz.0.473'. [ 176.547781][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'. [ 176.559226][ T7831] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 176.840024][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 176.856972][ T7879] bond0: entered promiscuous mode [ 176.862155][ T7879] bond_slave_0: entered promiscuous mode [ 176.878404][ T7879] bond_slave_1: entered promiscuous mode [ 176.898377][ T7879] vlan2: entered promiscuous mode [ 176.914924][ T7879] bond0: left promiscuous mode [ 176.931994][ T7879] bond_slave_0: left promiscuous mode [ 176.952212][ T7879] bond_slave_1: left promiscuous mode [ 176.969776][ T7879] vlan2: left promiscuous mode [ 177.050827][ T7879] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.115039][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.121999][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.128926][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.135831][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.142693][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.149664][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.156678][ T7881] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.308340][ T7899] syzkaller0: entered promiscuous mode [ 177.326221][ T7899] syzkaller0: entered allmulticast mode [ 179.240240][ T7948] netlink: 'syz.3.492': attribute type 4 has an invalid length. [ 179.428814][ T7961] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.938340][ T7983] lo speed is unknown, defaulting to 1000 [ 180.271793][ T8002] netlink: 'syz.4.501': attribute type 2 has an invalid length. [ 180.292762][ T8002] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 180.461645][ T8006] __nla_validate_parse: 9 callbacks suppressed [ 180.461665][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 180.809569][ T8016] lo speed is unknown, defaulting to 1000 [ 181.131655][ T30] audit: type=1800 audit(1762443150.702:5): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.157295][ T30] audit: type=1800 audit(1762443150.722:6): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.181585][ T30] audit: type=1800 audit(1762443150.722:7): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.206094][ T30] audit: type=1800 audit(1762443150.722:8): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.222673][ T8022] lo speed is unknown, defaulting to 1000 [ 181.247479][ T30] audit: type=1800 audit(1762443150.722:9): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.279987][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.514'. [ 181.305651][ T30] audit: type=1800 audit(1762443150.722:10): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.328720][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.514'. [ 181.377132][ T30] audit: type=1800 audit(1762443150.722:11): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.398553][ T30] audit: type=1800 audit(1762443150.722:12): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.419989][ T30] audit: type=1800 audit(1762443150.722:13): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.445903][ T30] audit: type=1800 audit(1762443150.722:14): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 181.509049][ T8042] lo speed is unknown, defaulting to 1000 [ 181.722149][ T8051] tipc: Enabled bearer , priority 0 [ 181.756291][ T8051] syzkaller0: entered promiscuous mode [ 181.776209][ T8051] syzkaller0: entered allmulticast mode [ 181.900349][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 182.026832][ T8063] tipc: Resetting bearer [ 182.099118][ T8050] tipc: Resetting bearer [ 182.169478][ T8050] tipc: Disabling bearer [ 182.245819][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 182.438688][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 182.524090][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 182.557030][ T8085] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 183.026032][ T8119] x_tables: duplicate underflow at hook 1 [ 183.153592][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 183.492958][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 183.512369][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 183.522669][ T8130] lo speed is unknown, defaulting to 1000 [ 183.607189][ T3471] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.617676][ T3471] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.642844][ T3471] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.662085][ T3471] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.231600][ T8157] netlink: 'syz.1.543': attribute type 32 has an invalid length. [ 184.264351][ T8159] netlink: 'syz.1.543': attribute type 32 has an invalid length. [ 184.285446][ T8158] syzkaller0: entered promiscuous mode [ 184.300445][ T8158] syzkaller0: entered allmulticast mode [ 184.423339][ T8163] net_ratelimit: 1402 callbacks suppressed [ 184.423371][ T8163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.615834][ T8172] veth0: entered promiscuous mode [ 184.718080][ T8172] veth0 (unregistering): left promiscuous mode [ 184.810579][ T8181] bond0: Unable to set up delay as MII monitoring is disabled [ 184.899127][ T8173] lo speed is unknown, defaulting to 1000 [ 185.004780][ T8189] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 185.361077][ T8202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.436591][ T8208] team0: Mode changed to "activebackup" [ 185.611398][ T8227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 185.694865][ T8231] macvtap0: refused to change device tx_queue_len [ 185.829285][ T8243] __nla_validate_parse: 11 callbacks suppressed [ 185.829320][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 186.326611][ T8262] lo speed is unknown, defaulting to 1000 [ 186.331999][ T8266] pim6reg1: entered promiscuous mode [ 186.341312][ T8266] pim6reg1: entered allmulticast mode [ 186.389472][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 186.421144][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.573'. [ 186.502198][ T8268] lo speed is unknown, defaulting to 1000 [ 186.722721][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 186.793684][ T8276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.833897][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 186.861589][ T8279] ip6gretap0: entered promiscuous mode [ 186.867901][ T8279] macsec1: entered promiscuous mode [ 186.887817][ T8279] ip6gretap0: left promiscuous mode [ 186.983369][ T8295] netlink: 'syz.2.573': attribute type 6 has an invalid length. [ 187.053379][ T8276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.322126][ T8276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.383043][ T8301] team0: No ports can be present during mode change [ 187.452549][ T8286] lo speed is unknown, defaulting to 1000 [ 187.504903][ T8276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.569869][ T8299] lo speed is unknown, defaulting to 1000 [ 187.773037][ T1038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.840636][ T1157] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.897918][ T8297] lo speed is unknown, defaulting to 1000 [ 187.898082][ T1038] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.967137][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.992822][ T8314] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003 [ 188.204660][ T8325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.583'. [ 188.215006][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 188.269972][ T8327] netlink: 84 bytes leftover after parsing attributes in process `syz.0.584'. [ 188.300964][ T8320] syzkaller0: entered promiscuous mode [ 188.315764][ T8320] syzkaller0: entered allmulticast mode [ 188.490664][ T8327] lo speed is unknown, defaulting to 1000 [ 188.536031][ T8320] tap0: tun_chr_ioctl cmd 2148553947 [ 188.916158][ T8339] netlink: 'syz.1.587': attribute type 8 has an invalid length. [ 189.224094][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 189.231357][ T8343] syzkaller0: entered promiscuous mode [ 189.242231][ T8343] syzkaller0: entered allmulticast mode [ 189.527399][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 189.737390][ T8362] netlink: 'syz.0.595': attribute type 3 has an invalid length. [ 189.780901][ T8364] syzkaller1: entered promiscuous mode [ 189.790824][ T8364] syzkaller1: entered allmulticast mode [ 189.976990][ T5833] lo speed is unknown, defaulting to 1000 [ 190.334493][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 190.366476][ T8381] netlink: 'syz.4.601': attribute type 12 has an invalid length. [ 190.391526][ T8387] batadv1: entered promiscuous mode [ 190.448860][ T8389] syzkaller0: entered promiscuous mode [ 190.459153][ T8389] syzkaller0: entered allmulticast mode [ 190.688174][ T8396] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 190.731796][ T8396] bridge_slave_0: left allmulticast mode [ 190.758245][ T8396] bridge_slave_0: left promiscuous mode [ 190.775053][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.866753][ T8396] bridge_slave_1: left allmulticast mode [ 190.873680][ T8396] bridge_slave_1: left promiscuous mode [ 190.892191][ T8401] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 190.900701][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.926824][ T8396] bond0: (slave bond_slave_0): Releasing backup interface [ 190.957109][ T8396] bond0: (slave bond_slave_1): Releasing backup interface [ 191.027683][ T8396] team0: Port device team_slave_0 removed [ 191.059222][ T8404] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 191.060767][ T8396] team0: Port device team_slave_1 removed [ 191.093202][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.101583][ T8396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.120916][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.128684][ T8396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.139749][ T8396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.178780][ T8401] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 191.224971][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.234880][ T8401] bond0: (slave wlan1): Opening slave failed [ 191.267294][ T8402] __nla_validate_parse: 2 callbacks suppressed [ 191.267316][ T8402] netlink: 6 bytes leftover after parsing attributes in process `syz.3.605'. [ 191.286787][ T8402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.315287][ T8392] lo speed is unknown, defaulting to 1000 [ 191.441720][ T8421] atomic_op ffff888029790998 conn xmit_atomic 0000000000000000 [ 191.536632][ T5897] IPVS: starting estimator thread 0... [ 191.634469][ T8425] IPVS: using max 24 ests per chain, 57600 per kthread [ 191.918282][ T8435] tipc: Enabled bearer , priority 0 [ 191.937565][ T8435] syzkaller0: entered promiscuous mode [ 191.945759][ T8435] syzkaller0: entered allmulticast mode [ 192.046781][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 192.058399][ T8435] tipc: Resetting bearer [ 192.099650][ T8431] tipc: Resetting bearer [ 192.187660][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 192.201695][ T8431] tipc: Disabling bearer [ 192.267209][ T8448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.293264][ T8452] bond2: (slave batadv2): Opening slave failed [ 192.373038][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 192.467147][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 192.552463][ T8462] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.622'. [ 192.569978][ T8463] x_tables: duplicate underflow at hook 1 [ 192.578772][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 192.578792][ T30] audit: type=1800 audit(1762443162.162:70): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.621" name="memory.events" dev="tmpfs" ino=661 res=0 errno=0 [ 192.662122][ T8448] No such timeout policy "syz1" [ 192.689848][ T8448] netlink: 428 bytes leftover after parsing attributes in process `syz.1.619'. [ 192.701932][ T8462] veth1_macvtap: left promiscuous mode [ 192.768343][ T8448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.619'. [ 193.200956][ T8495] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 193.211550][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 193.666513][ T8517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.121035][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.645'. [ 194.418145][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426539][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538757][ T8557] bond5: option arp_validate: invalid value (18446744073491447809) [ 194.550295][ T8557] bond5 (unregistering): Released all slaves [ 194.553711][ T8565] netlink: 'syz.2.650': attribute type 13 has an invalid length. [ 194.734833][ T8565] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 194.742306][ T8565] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 194.991962][ T8575] netlink: 'syz.3.654': attribute type 2 has an invalid length. [ 195.161939][ T8582] tipc: Enabled bearer , priority 0 [ 195.169830][ T8582] syzkaller0: entered promiscuous mode [ 195.177100][ T8582] syzkaller0: entered allmulticast mode [ 195.194523][ T8580] tipc: Resetting bearer [ 195.230526][ T8580] tipc: Disabling bearer [ 196.136212][ T8610] tipc: Enabled bearer , priority 0 [ 196.157200][ T8610] syzkaller0: entered promiscuous mode [ 196.185753][ T8610] syzkaller0: entered allmulticast mode [ 196.227419][ T8610] tipc: Resetting bearer [ 196.236952][ T8609] tipc: Resetting bearer [ 196.251975][ T8609] tipc: Disabling bearer [ 196.870203][ T8631] lo speed is unknown, defaulting to 1000 [ 197.209522][ T8643] __nla_validate_parse: 8 callbacks suppressed [ 197.209544][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'. [ 197.375263][ T8629] infiniband syz0: set active [ 197.380175][ T8629] infiniband syz0: added bond_slave_0 [ 197.430513][ T8629] RDS/IB: syz0: added [ 197.435654][ T8629] smc: adding ib device syz0 with port count 1 [ 197.442332][ T8629] smc: ib device syz0 port 1 has no pnetid [ 197.464556][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 197.609145][ T8650] lo speed is unknown, defaulting to 1000 [ 198.607569][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 198.858878][ T8667] batadv_slave_1: entered promiscuous mode [ 198.916798][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 199.090028][ T8665] batadv_slave_1: left promiscuous mode [ 200.606763][ T8678] vxlan0: entered promiscuous mode [ 200.611943][ T8678] vxlan0: entered allmulticast mode [ 200.619893][ T3471] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.655719][ T3471] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.679962][ T3471] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.695308][ T3471] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.787727][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 200.927560][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 200.956137][ T8695] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 201.092656][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 201.844553][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.694'. [ 201.986088][ T8735] lo speed is unknown, defaulting to 1000 [ 201.992864][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 202.119666][ T8744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.699'. [ 202.165201][ T8747] lo speed is unknown, defaulting to 1000 [ 202.291843][ T8755] __nla_validate_parse: 1 callbacks suppressed [ 202.291865][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'. [ 202.794736][ T8776] netlink: 'syz.3.709': attribute type 21 has an invalid length. [ 203.185642][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 203.282001][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 203.308738][ T8788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.576415][ T8794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.604674][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.612617][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.631712][ T8798] bridge0: entered allmulticast mode [ 203.772184][ T8809] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 203.792935][ T8809] netlink: 232 bytes leftover after parsing attributes in process `syz.4.716'. [ 203.979034][ T8813] lo: entered promiscuous mode [ 203.996706][ T8813] tunl0: entered promiscuous mode [ 204.002654][ T8813] gre0: entered promiscuous mode [ 204.022970][ T8813] gretap0: entered promiscuous mode [ 204.060741][ T8813] erspan0: entered promiscuous mode [ 204.091192][ T8813] ip_vti0: entered promiscuous mode [ 204.105958][ T8813] ip6_vti0: entered promiscuous mode [ 204.138942][ T8813] sit0: entered promiscuous mode [ 204.147168][ T8813] ip6tnl0: entered promiscuous mode [ 204.153899][ T8813] ip6gre0: entered promiscuous mode [ 204.194774][ T8813] syz_tun: entered promiscuous mode [ 204.211768][ T8813] ip6gretap0: entered promiscuous mode [ 204.231128][ T8813] bridge0: entered promiscuous mode [ 204.256282][ T8813] vcan0: entered promiscuous mode [ 204.278230][ T8813] bond0: entered promiscuous mode [ 204.289296][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.299227][ T8813] team0: entered promiscuous mode [ 204.312475][ T8813] dummy0: entered promiscuous mode [ 204.321235][ T8813] nlmon0: entered promiscuous mode [ 204.332737][ T8813] caif0: entered promiscuous mode [ 204.338184][ T8813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.383028][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 204.672926][ T8846] lo speed is unknown, defaulting to 1000 [ 204.703277][ T8847] lo speed is unknown, defaulting to 1000 [ 204.762367][ T8848] netlink: 5 bytes leftover after parsing attributes in process `syz.4.729'. [ 205.251710][ T8839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.264157][ T8839] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 205.309436][ T8839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.326635][ T8839] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 205.404191][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 205.430934][ T8839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.460895][ T8839] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 205.635732][ T8839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.654395][ T8839] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 205.675146][ T8839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.684220][ T8839] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 205.804668][ T8863] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 205.905058][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 205.957349][ T8865] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 205.980597][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.356481][ T8885] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 206.775806][ T8899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.742'. [ 206.818569][ T8907] vlan3: entered allmulticast mode [ 206.832158][ T8907] dummy0: entered allmulticast mode [ 206.893799][ T8905] lo speed is unknown, defaulting to 1000 [ 206.935852][ T8903] lo speed is unknown, defaulting to 1000 [ 207.209944][ T8924] netlink: 'syz.2.747': attribute type 32 has an invalid length. [ 207.242969][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 207.285992][ T8909] netlink: 'syz.4.745': attribute type 17 has an invalid length. [ 207.296280][ T8909] lo: left promiscuous mode [ 207.308301][ T8909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.064526][ T8949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.753'. [ 208.084370][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 208.503795][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.790716][ T8971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.765'. [ 208.815977][ T8973] xt_bpf: check failed: parse error [ 208.865884][ T8973] syzkaller0: entered promiscuous mode [ 208.871407][ T8973] syzkaller0: entered allmulticast mode [ 209.105676][ T8984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.116993][ T8984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.161309][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 209.170509][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 209.230956][ T8984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.244621][ T8984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.325151][ T8993] bond1 (unregistering): Released all slaves [ 209.428226][ T8984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.445511][ T8984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.541155][ T8984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.554772][ T8984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.583496][ T8997] Unsupported ieee802154 address type: 0 [ 209.795175][ T7123] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.820732][ T7123] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.881394][ T9007] lo speed is unknown, defaulting to 1000 [ 209.961415][ T7123] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.977787][ T7123] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.062289][ T3471] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.072042][ T3471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.147797][ T3471] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.148602][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 210.170827][ T3471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.211020][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 210.241626][ T9024] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 210.651487][ T9035] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 210.662853][ T9016] lo speed is unknown, defaulting to 1000 [ 210.721915][ T9016] lo speed is unknown, defaulting to 1000 [ 210.743036][ T9016] lo speed is unknown, defaulting to 1000 [ 211.451739][ T9016] infiniband syz2: set down [ 211.457081][ T5836] lo speed is unknown, defaulting to 1000 [ 211.474694][ T9016] infiniband syz2: added lo [ 211.480492][ T9016] syz2: rxe_create_cq: returned err = -12 [ 211.485256][ T9052] x_tables: duplicate underflow at hook 3 [ 211.496440][ T9016] infiniband syz2: Couldn't create ib_mad CQ [ 211.502683][ T9016] infiniband syz2: Couldn't open port 1 [ 211.549555][ T9016] RDS/IB: syz2: added [ 211.556033][ T9016] smc: adding ib device syz2 with port count 1 [ 211.562249][ T9016] smc: ib device syz2 port 1 has no pnetid [ 211.578991][ T9054] x_tables: duplicate underflow at hook 4 [ 211.592379][ T5836] lo speed is unknown, defaulting to 1000 [ 211.597417][ T9056] pim6reg1: entered promiscuous mode [ 211.608360][ T9056] pim6reg1: entered allmulticast mode [ 211.618021][ T9016] lo speed is unknown, defaulting to 1000 [ 211.686367][ T9057] lo speed is unknown, defaulting to 1000 [ 212.250459][ T9016] lo speed is unknown, defaulting to 1000 [ 212.273051][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 212.282661][ T9084] netlink: 'syz.2.798': attribute type 5 has an invalid length. [ 212.294544][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.798'. [ 212.597082][ T9057] lo speed is unknown, defaulting to 1000 [ 212.863575][ T9016] lo speed is unknown, defaulting to 1000 [ 212.973705][ T9095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 213.332012][ T9016] lo speed is unknown, defaulting to 1000 [ 213.468465][ T9104] netlink: 92 bytes leftover after parsing attributes in process `syz.0.803'. [ 213.474831][ T9103] netlink: 'syz.3.804': attribute type 10 has an invalid length. [ 213.486149][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.804'. [ 213.505237][ T9103] team0: Port device geneve0 added [ 213.521382][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.544804][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.570886][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.603053][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.836723][ T9016] lo speed is unknown, defaulting to 1000 [ 213.967702][ T9116] netlink: 'syz.2.808': attribute type 13 has an invalid length. [ 213.979245][ T9116] netlink: 'syz.2.808': attribute type 17 has an invalid length. [ 214.113186][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.137124][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.169513][ T9116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.296557][ T9016] lo speed is unknown, defaulting to 1000 [ 214.682828][ T9128] batadv_slave_0: entered promiscuous mode [ 214.690738][ T9126] batadv_slave_0: left promiscuous mode [ 214.913456][ T9104] lo speed is unknown, defaulting to 1000 [ 215.035795][ T9139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.812'. [ 215.566743][ T9157] x_tables: duplicate underflow at hook 1 [ 215.589100][ T9154] netlink: 64 bytes leftover after parsing attributes in process `syz.3.816'. [ 215.678560][ T9152] bond2: invalid ARP target 0.0.0.0 specified for addition [ 215.686205][ T9152] bond2: option arp_ip_target: invalid value (0) [ 215.704238][ T9152] bond2 (unregistering): Released all slaves [ 216.279659][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'. [ 216.333759][ T9174] syzkaller0: entered promiscuous mode [ 216.351414][ T9174] syzkaller0: entered allmulticast mode [ 216.923355][ T9201] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 216.925466][ T9197] lo speed is unknown, defaulting to 1000 [ 216.945155][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 217.068393][ T9201] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.107827][ T9201] bond0: (slave team0): Enslaving as an active interface with an up link [ 217.281294][ T9216] netlink: 596 bytes leftover after parsing attributes in process `syz.3.827'. [ 217.423590][ T9197] lo speed is unknown, defaulting to 1000 [ 217.711818][ T9229] netlink: 'syz.0.833': attribute type 12 has an invalid length. [ 217.770593][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 217.790560][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 217.835712][ T9239] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 217.887266][ T9240] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 218.023277][ T9233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.118590][ T9244] netlink: 'syz.4.836': attribute type 39 has an invalid length. [ 218.126745][ T9243] netlink: 'syz.4.836': attribute type 39 has an invalid length. [ 218.434227][ T9259] netlink: 'syz.3.840': attribute type 10 has an invalid length. [ 218.485065][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.840'. [ 218.505350][ T9259] batadv0: entered promiscuous mode [ 218.521981][ T9259] batadv0: entered allmulticast mode [ 218.533120][ T9259] bridge0: port 3(batadv0) entered blocking state [ 218.547340][ T9259] bridge0: port 3(batadv0) entered disabled state [ 218.829182][ T9270] syzkaller0: entered promiscuous mode [ 218.835168][ T9270] syzkaller0: entered allmulticast mode [ 218.936171][ T1038] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 218.946382][ T1038] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 219.418002][ T9281] geneve2: entered promiscuous mode [ 219.440145][ T7123] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.459978][ T7123] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.616002][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 220.990143][ T7123] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.998761][ T7123] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.014190][ T9294] bridge_slave_1: left allmulticast mode [ 221.024268][ T9294] bridge_slave_1: left promiscuous mode [ 221.030135][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.077126][ T9294] bridge_slave_0: left allmulticast mode [ 221.082830][ T9294] bridge_slave_0: left promiscuous mode [ 221.103068][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.432671][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 221.513287][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 221.535643][ T9330] IPVS: Unknown mcast interface: veth0_to_bond [ 221.567133][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.658900][ T9342] tipc: Enabled bearer , priority 0 [ 221.666918][ T9342] syzkaller0: entered promiscuous mode [ 221.672621][ T9342] syzkaller0: entered allmulticast mode [ 221.715084][ T9342] tipc: Resetting bearer [ 221.728598][ T9340] tipc: Resetting bearer [ 221.743658][ T9340] tipc: Disabling bearer [ 221.857375][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.863'. [ 222.207426][ T9373] lo speed is unknown, defaulting to 1000 [ 222.215807][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 222.266337][ T9374] lo speed is unknown, defaulting to 1000 [ 222.495209][ T9383] netlink: 56 bytes leftover after parsing attributes in process `syz.3.873'. [ 222.536205][ T9383] netlink: 'syz.3.873': attribute type 21 has an invalid length. [ 222.547307][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 222.566202][ T9383] netlink: 'syz.3.873': attribute type 21 has an invalid length. [ 222.588661][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 222.642655][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 222.828981][ T9373] lo speed is unknown, defaulting to 1000 [ 223.270985][ T9421] tap0: tun_chr_ioctl cmd 1074025677 [ 223.287044][ T9421] tap0: linktype set to 0 [ 223.441363][ T9431] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 223.905185][ T9374] lo speed is unknown, defaulting to 1000 [ 224.173332][ T9456] lo speed is unknown, defaulting to 1000 [ 224.470488][ T9466] bond1: option miimon: invalid value (18446744073709551607) [ 224.490314][ T9466] bond1: option miimon: allowed values 0 - 2147483647 [ 224.575730][ T9466] bond1 (unregistering): Released all slaves [ 224.853422][ T9456] lo speed is unknown, defaulting to 1000 [ 225.085221][ T9481] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 225.093218][ T9481] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 225.102785][ T9481] netlink: 'syz.2.905': attribute type 7 has an invalid length. [ 225.113254][ T9481] netlink: 'syz.2.905': attribute type 8 has an invalid length. [ 225.121607][ T9481] __nla_validate_parse: 2 callbacks suppressed [ 225.121628][ T9481] netlink: 184 bytes leftover after parsing attributes in process `syz.2.905'. [ 225.148373][ T9481] NCSI netlink: No device for ifindex 131092 [ 225.162487][ T9483] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 225.217584][ T9481] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 225.311855][ T9474] lo speed is unknown, defaulting to 1000 [ 225.346474][ T9484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.690737][ T9491] netlink: 96 bytes leftover after parsing attributes in process `syz.2.906'. [ 225.987364][ T9474] lo speed is unknown, defaulting to 1000 [ 226.261982][ T9497] netlink: 'syz.1.908': attribute type 11 has an invalid length. [ 226.274034][ T9497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.908'. [ 227.274985][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 227.301590][ T9511] batadv0: entered promiscuous mode [ 227.313042][ T9511] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.336392][ T9511] batadv0: left promiscuous mode [ 228.069577][ T9527] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 228.183065][ T9527] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 228.446400][ T9542] IPVS: length: 161 != 8 [ 228.622952][ T9521] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 228.646095][ T9548] tipc: Enabled bearer , priority 0 [ 228.850233][ T9548] syzkaller0: entered promiscuous mode [ 228.865525][ T9548] syzkaller0: entered allmulticast mode [ 228.882639][ T9548] tipc: Resetting bearer [ 228.904450][ T9545] tipc: Resetting bearer [ 229.754147][ T5833] tipc: Node number set to 1636681581 [ 230.345694][ T9545] tipc: Disabling bearer [ 230.375893][ T9567] syz_tun: entered allmulticast mode [ 230.574756][ T5897] IPVS: starting estimator thread 0... [ 230.658346][ T9585] delete_channel: no stack [ 230.694409][ T9589] IPVS: using max 22 ests per chain, 52800 per kthread [ 230.711693][ T9583] lo speed is unknown, defaulting to 1000 [ 230.813165][ T9570] syz_tun: left allmulticast mode [ 230.874100][ T9592] lo speed is unknown, defaulting to 1000 [ 230.931621][ T9597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.935'. [ 230.994795][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 231.130952][ T9583] lo speed is unknown, defaulting to 1000 [ 231.565425][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 231.687820][ T9607] macvtap1: entered allmulticast mode [ 231.694175][ T9607] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 231.704871][ T9607] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 231.740005][ T9592] lo speed is unknown, defaulting to 1000 [ 231.800952][ T9622] syz.2.946: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.821533][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.2.946 Not tainted syzkaller #0 PREEMPT(full) [ 231.821562][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.821573][ T9622] Call Trace: [ 231.821581][ T9622] [ 231.821589][ T9622] dump_stack_lvl+0x189/0x250 [ 231.821627][ T9622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.821654][ T9622] ? __pfx__printk+0x10/0x10 [ 231.821674][ T9622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 231.821701][ T9622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 231.821740][ T9622] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 231.821769][ T9622] warn_alloc+0x214/0x310 [ 231.821805][ T9622] ? __pfx_warn_alloc+0x10/0x10 [ 231.821846][ T9622] ? __get_vm_area_node+0x28f/0x300 [ 231.821874][ T9622] ? xskq_create+0xbf/0x170 [ 231.821904][ T9622] __vmalloc_node_range_noprof+0x690/0x12d0 [ 231.821965][ T9622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.821992][ T9622] ? __kasan_kmalloc+0x93/0xb0 [ 231.822028][ T9622] vmalloc_user_noprof+0xad/0xf0 [ 231.822055][ T9622] ? xskq_create+0xbf/0x170 [ 231.822081][ T9622] xskq_create+0xbf/0x170 [ 231.822109][ T9622] xsk_init_queue+0xb0/0x110 [ 231.822137][ T9622] xsk_setsockopt+0x57b/0x8d0 [ 231.822162][ T9622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.822189][ T9622] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.822219][ T9622] ? aa_sock_opt_perm+0xff/0x1b0 [ 231.822251][ T9622] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 231.822270][ T9622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.822293][ T9622] do_sock_setsockopt+0x17c/0x1b0 [ 231.822319][ T9622] __x64_sys_setsockopt+0x13f/0x1b0 [ 231.822346][ T9622] do_syscall_64+0xfa/0xfa0 [ 231.822372][ T9622] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.822398][ T9622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.822417][ T9622] ? clear_bhb_loop+0x60/0xb0 [ 231.822441][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.822460][ T9622] RIP: 0033:0x7f1fb618f6c9 [ 231.822480][ T9622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.822496][ T9622] RSP: 002b:00007f1fb70c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.822519][ T9622] RAX: ffffffffffffffda RBX: 00007f1fb63e6090 RCX: 00007f1fb618f6c9 [ 231.822533][ T9622] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 231.822544][ T9622] RBP: 00007f1fb6211f91 R08: 0000000000000004 R09: 0000000000000000 [ 231.822556][ T9622] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 231.822568][ T9622] R13: 00007f1fb63e6128 R14: 00007f1fb63e6090 R15: 00007ffc91d64a08 [ 231.822604][ T9622] [ 231.822612][ T9622] Mem-Info: [ 232.101787][ T9622] active_anon:4717 inactive_anon:0 isolated_anon:0 [ 232.101787][ T9622] active_file:3141 inactive_file:39936 isolated_file:0 [ 232.101787][ T9622] unevictable:768 dirty:172 writeback:0 [ 232.101787][ T9622] slab_reclaimable:11761 slab_unreclaimable:163443 [ 232.101787][ T9622] mapped:30322 shmem:1357 pagetables:1102 [ 232.101787][ T9622] sec_pagetables:0 bounce:0 [ 232.101787][ T9622] kernel_misc_reclaimable:0 [ 232.101787][ T9622] free:1259906 free_pcp:19422 free_cma:0 [ 232.162195][ T9622] Node 0 active_anon:18768kB inactive_anon:0kB active_file:12564kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121288kB dirty:688kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12092kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.200894][ T9622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.231408][ T9622] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.268603][ T9622] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 232.275022][ T9622] Node 0 DMA32 free:1127520kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18768kB inactive_anon:0kB active_file:12564kB inactive_file:159544kB unevictable:1536kB writepending:688kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:61824kB local_pcp:39620kB free_cma:0kB [ 232.341567][ T9622] lowmem_reserve[]: 0 0 0 0 0 [ 232.353049][ T9622] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.422440][ T9622] lowmem_reserve[]: 0 0 0 0 0 [ 232.429931][ T9622] Node 1 Normal free:3897584kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15492kB local_pcp:10336kB free_cma:0kB [ 232.495679][ T9622] lowmem_reserve[]: 0 0 0 0 0 [ 232.511757][ T9622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 232.525049][ T9622] Node 0 DMA32: 1807*4kB (M) 58*8kB (UM) 24*16kB (UME) 255*32kB (UME) 97*64kB (UME) 96*128kB (UME) 33*256kB (UME) 26*512kB (UME) 20*1024kB (UM) 12*2048kB (UM) 251*4096kB (U) = 1129644kB [ 232.547228][ T9622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.567481][ T9622] Node 1 Normal: 206*4kB (UE) 31*8kB (UME) 44*16kB (UME) 90*32kB (UME) 35*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (UM) = 3897584kB [ 232.607572][ T9622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.631934][ T9622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.645403][ T9622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.674256][ T9622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.683696][ T9622] 44430 total pagecache pages [ 232.715111][ T9622] 0 pages in swap cache [ 232.719503][ T9622] Free swap = 124996kB [ 232.723821][ T9622] Total swap = 124996kB [ 232.728849][ T9622] 2097051 pages RAM [ 232.732775][ T9622] 0 pages HighMem/MovableOnly [ 232.740740][ T9622] 424119 pages reserved [ 232.745251][ T9622] 0 pages cma reserved [ 232.963184][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 233.585071][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 233.603140][ T9669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.961'. [ 233.656546][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 233.843866][ T9679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.997740][ T9689] netlink: 80 bytes leftover after parsing attributes in process `syz.0.966'. [ 234.190227][ T9692] lo speed is unknown, defaulting to 1000 [ 234.446047][ T9709] tipc: Enabled bearer , priority 0 [ 234.549109][ T9692] lo speed is unknown, defaulting to 1000 [ 234.562870][ T9709] tipc: Disabling bearer [ 234.686411][ T9712] lo speed is unknown, defaulting to 1000 [ 235.045521][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 235.128660][ T9726] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 235.387528][ T9724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.425603][ T9734] openvswitch: netlink: Missing key (keys=40, expected=100) [ 235.823685][ T9712] lo speed is unknown, defaulting to 1000 [ 235.857008][ T9753] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 236.246687][ T9753] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.258678][ T9753] bond0: (slave team0): Enslaving as an active interface with an up link [ 236.364081][ T9748] lo speed is unknown, defaulting to 1000 [ 236.424157][ T9749] lo speed is unknown, defaulting to 1000 [ 236.467981][ T9752] lo speed is unknown, defaulting to 1000 [ 237.155309][ T9748] lo speed is unknown, defaulting to 1000 [ 237.396679][ T9778] lo speed is unknown, defaulting to 1000 [ 237.463000][ T9782] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 238.333648][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'. [ 238.603176][ T9752] lo speed is unknown, defaulting to 1000 [ 238.611868][ T9788] lo speed is unknown, defaulting to 1000 [ 239.190460][ T9749] lo speed is unknown, defaulting to 1000 [ 239.423246][ T9816] netlink: 148 bytes leftover after parsing attributes in process `syz.0.997'. [ 239.700010][ T9778] lo speed is unknown, defaulting to 1000 [ 239.709020][ T9818] lo speed is unknown, defaulting to 1000 [ 240.548487][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 240.628612][ T9788] lo speed is unknown, defaulting to 1000 [ 240.966236][ T9851] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 241.051612][ T9853] bond5: entered promiscuous mode [ 241.095447][ T9853] bond5: entered allmulticast mode [ 241.101086][ T9853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.106562][ T9855] FAULT_INJECTION: forcing a failure. [ 241.106562][ T9855] name failslab, interval 1, probability 0, space 0, times 0 [ 241.121356][ T9855] CPU: 1 UID: 0 PID: 9855 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) [ 241.121382][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.121393][ T9855] Call Trace: [ 241.121402][ T9855] [ 241.121410][ T9855] dump_stack_lvl+0x189/0x250 [ 241.121442][ T9855] ? __pfx____ratelimit+0x10/0x10 [ 241.121468][ T9855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.121495][ T9855] ? __pfx__printk+0x10/0x10 [ 241.121512][ T9855] ? netlink_sendmsg+0x805/0xb30 [ 241.121533][ T9855] ? __x64_sys_sendmsg+0x19b/0x260 [ 241.121552][ T9855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.121581][ T9855] should_fail_ex+0x414/0x560 [ 241.121616][ T9855] should_failslab+0xa8/0x100 [ 241.121639][ T9855] kmem_cache_alloc_noprof+0x74/0x6e0 [ 241.121665][ T9855] ? skb_clone+0x212/0x3a0 [ 241.121694][ T9855] skb_clone+0x212/0x3a0 [ 241.121720][ T9855] __netlink_deliver_tap+0x404/0x850 [ 241.121754][ T9855] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.121776][ T9855] netlink_deliver_tap+0x19c/0x1b0 [ 241.121806][ T9855] netlink_sendskb+0x68/0x140 [ 241.121838][ T9855] netlink_unicast+0x397/0x9e0 [ 241.121863][ T9855] ? __asan_memcpy+0x40/0x70 [ 241.121899][ T9855] ? __pfx_netlink_unicast+0x10/0x10 [ 241.121939][ T9855] netlink_rcv_skb+0x28c/0x470 [ 241.121960][ T9855] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.121992][ T9855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.122026][ T9855] ? bpf_lsm_capable+0x9/0x20 [ 241.122049][ T9855] ? security_capable+0x7e/0x2e0 [ 241.122085][ T9855] nfnetlink_rcv+0x282/0x2590 [ 241.122114][ T9855] ? __dev_queue_xmit+0x284/0x3740 [ 241.122138][ T9855] ? __dev_queue_xmit+0x1bfb/0x3740 [ 241.122180][ T9855] ? __dev_queue_xmit+0x284/0x3740 [ 241.122216][ T9855] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 241.122265][ T9855] ? ref_tracker_free+0x63a/0x7d0 [ 241.122285][ T9855] ? __asan_memcpy+0x40/0x70 [ 241.122309][ T9855] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.122325][ T9855] ? __skb_clone+0x63/0x7a0 [ 241.122352][ T9855] ? __skb_clone+0x483/0x7a0 [ 241.122382][ T9855] ? skb_clone+0x246/0x3a0 [ 241.122408][ T9855] ? __netlink_deliver_tap+0x807/0x850 [ 241.122426][ T9855] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.122454][ T9855] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.122483][ T9855] netlink_unicast+0x82f/0x9e0 [ 241.122521][ T9855] ? __pfx_netlink_unicast+0x10/0x10 [ 241.122551][ T9855] ? netlink_sendmsg+0x642/0xb30 [ 241.122568][ T9855] ? skb_put+0x11b/0x210 [ 241.122592][ T9855] netlink_sendmsg+0x805/0xb30 [ 241.122624][ T9855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.122648][ T9855] ? aa_sock_msg_perm+0xf1/0x1d0 [ 241.122679][ T9855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.122698][ T9855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.122719][ T9855] __sock_sendmsg+0x21c/0x270 [ 241.122749][ T9855] ____sys_sendmsg+0x505/0x830 [ 241.122778][ T9855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.122819][ T9855] ? import_iovec+0x74/0xa0 [ 241.122849][ T9855] ___sys_sendmsg+0x21f/0x2a0 [ 241.122873][ T9855] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.122941][ T9855] ? __fget_files+0x2a/0x420 [ 241.122959][ T9855] ? __fget_files+0x3a0/0x420 [ 241.122991][ T9855] __x64_sys_sendmsg+0x19b/0x260 [ 241.123016][ T9855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.123050][ T9855] ? __pfx_ksys_write+0x10/0x10 [ 241.123082][ T9855] ? do_syscall_64+0xbe/0xfa0 [ 241.123113][ T9855] do_syscall_64+0xfa/0xfa0 [ 241.123137][ T9855] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.123163][ T9855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.123182][ T9855] ? clear_bhb_loop+0x60/0xb0 [ 241.123206][ T9855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.123224][ T9855] RIP: 0033:0x7f412298f6c9 [ 241.123242][ T9855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.123258][ T9855] RSP: 002b:00007f4123913038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.123280][ T9855] RAX: ffffffffffffffda RBX: 00007f4122be5fa0 RCX: 00007f412298f6c9 [ 241.123295][ T9855] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 241.123307][ T9855] RBP: 00007f4123913090 R08: 0000000000000000 R09: 0000000000000000 [ 241.123318][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.123329][ T9855] R13: 00007f4122be6038 R14: 00007f4122be5fa0 R15: 00007ffd84ac6388 [ 241.123365][ T9855] [ 241.833621][ T9863] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1007'. [ 241.844417][ T9851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.861873][ T9851] bond6: entered promiscuous mode [ 241.867654][ T9851] bond6: entered allmulticast mode [ 241.873908][ T9851] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 241.991825][ T9863] vlan3: entered promiscuous mode [ 242.009243][ T9863] bond0: entered promiscuous mode [ 242.021851][ T9863] bond_slave_0: entered promiscuous mode [ 242.066876][ T9863] bond_slave_1: entered promiscuous mode [ 242.089006][ T9863] team0: entered promiscuous mode [ 242.095657][ T9863] team_slave_0: entered promiscuous mode [ 242.115601][ T9863] team_slave_1: entered promiscuous mode [ 242.126671][ T9818] lo speed is unknown, defaulting to 1000 [ 242.259746][ T9877] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 242.305292][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 242.367064][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 242.601223][ T9882] lo speed is unknown, defaulting to 1000 [ 243.216575][ T9882] lo speed is unknown, defaulting to 1000 [ 243.539150][ T9888] siw: device registration error -23 [ 244.169895][ T9900] IPv6: Can't replace route, no match found [ 244.680301][ T9910] Bluetooth: MGMT ver 1.23 [ 245.841317][ T9937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1026'. [ 246.365921][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 246.477504][ T9947] syzkaller0: entered promiscuous mode [ 246.488445][ T9947] syzkaller0: entered allmulticast mode [ 246.529696][ T9946] netlink: 'syz.0.1028': attribute type 2 has an invalid length. [ 246.569459][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 246.719040][ T9963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1034'. [ 246.785198][ T9963] ip6t_rpfilter: unknown options [ 246.861813][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1036'. [ 246.882380][ T9968] ip6gre1: entered promiscuous mode [ 247.123196][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 247.225498][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 248.946856][ T9998] lo speed is unknown, defaulting to 1000 [ 249.009603][T10006] netlink: 'syz.2.1045': attribute type 12 has an invalid length. [ 249.045040][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1046'. [ 249.448045][T10029] netlink: 'syz.2.1052': attribute type 6 has an invalid length. [ 249.455467][ T9998] lo speed is unknown, defaulting to 1000 [ 249.858712][T10044] x_tables: duplicate underflow at hook 1 [ 250.560746][T10074] lo speed is unknown, defaulting to 1000 [ 250.628109][T10077] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 250.726581][T10077] lo speed is unknown, defaulting to 1000 [ 251.124881][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 251.135050][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 251.175624][T10090] bond1: option primary_reselect: invalid value (255) [ 251.193457][T10090] bond1 (unregistering): Released all slaves [ 251.225933][T10074] lo speed is unknown, defaulting to 1000 [ 251.653461][T10077] lo speed is unknown, defaulting to 1000 [ 253.484664][T10104] syz.0.1068 (10104) used obsolete PPPIOCDETACH ioctl [ 253.522674][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 253.551135][T10103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.642725][T10103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.964872][T10106] : left allmulticast mode [ 253.969807][T10106] : left promiscuous mode [ 253.987577][T10106] bridge0: port 1(30) entered disabled state [ 254.019219][T10106] bridge_slave_1: left allmulticast mode [ 254.028636][T10106] bridge_slave_1: left promiscuous mode [ 254.035664][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.076033][T10106] bond0: (slave bond_slave_0): Releasing backup interface [ 254.123235][T10106] bond0: (slave bond_slave_1): Releasing backup interface [ 254.153530][T10106] team0: Port device team_slave_0 removed [ 254.176585][T10106] team0: Port device team_slave_1 removed [ 254.184924][T10106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.192525][T10106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.201306][T10106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.220391][ T938] syz0: Port: 1 Link DOWN [ 254.230800][T10108] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1069'. [ 254.300215][T10111] tipc: Enabled bearer , priority 0 [ 254.318338][T10110] tipc: Disabling bearer [ 254.461542][T10113] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 254.470238][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1071'. [ 254.502030][T10113] .`: renamed from bond0 (while UP) [ 254.799828][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 255.041668][T10147] lo speed is unknown, defaulting to 1000 [ 255.237291][T10152] netlink: 'syz.2.1081': attribute type 12 has an invalid length. [ 255.264979][T10152] netlink: 'syz.2.1081': attribute type 4 has an invalid length. [ 255.386835][T10147] lo speed is unknown, defaulting to 1000 [ 255.648684][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 255.862277][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.009823][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1084'. [ 256.059118][T10165] syzkaller0: entered promiscuous mode [ 256.064990][T10165] syzkaller0: entered allmulticast mode [ 256.285792][T10171] netlink: 'syz.0.1086': attribute type 29 has an invalid length. [ 256.362526][T10174] netlink: 'syz.0.1086': attribute type 11 has an invalid length. [ 256.370794][T10174] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1086'. [ 256.564619][T10178] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 256.579327][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.587797][T10178] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.660618][T10181] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 256.671812][T10178] raw_sendmsg: syz.3.1089 forgot to set AF_INET. Fix it! [ 257.283892][T10206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.071759][T10222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1101'. [ 258.141719][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 258.212736][T10221] lo speed is unknown, defaulting to 1000 [ 258.435369][T10236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.447159][T10236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.481938][T10221] lo speed is unknown, defaulting to 1000 [ 258.555747][T10236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.566559][T10236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.669601][T10236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.680984][T10236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.755827][T10236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.766547][T10236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.940149][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.949501][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.019076][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.028254][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.066697][T10252] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1107'. [ 259.090507][ T1038] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.107051][ T1038] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.154727][ T1038] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.190269][ T1038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.329475][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'. [ 259.355296][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 259.389559][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 259.406004][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 259.415983][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 259.484134][T10259] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 259.798107][T10283] tipc: Enabling of bearer rejected, failed to enable media [ 259.799975][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 260.043262][T10288] xt_TCPMSS: Only works on TCP SYN packets [ 260.922113][T10296] netlink: 'syz.0.1119': attribute type 33 has an invalid length. [ 261.213313][T10311] netlink: 'syz.0.1125': attribute type 5 has an invalid length. [ 410.734211][ T31] INFO: task syz-executor:5825 blocked for more than 143 seconds. [ 410.742286][ T31] Not tainted syzkaller #0 [ 410.747472][ T31] Blocked by coredump. [ 410.752092][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.761487][ T31] task:syz-executor state:D stack:21672 pid:5825 tgid:5825 ppid:1 task_flags:0x40054c flags:0x00080003 [ 410.773591][ T31] Call Trace: [ 410.776926][ T31] [ 410.779863][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.784614][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.789732][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.795237][ T31] ? __pfx___schedule+0x10/0x10 [ 410.800615][ T31] ? schedule+0x91/0x360 [ 410.805112][ T31] schedule+0x165/0x360 [ 410.809575][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.833978][ T31] __mutex_lock+0x7e6/0x1350 [ 410.838919][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.843845][ T31] ? rfkill_unregister+0xc8/0x220 [ 410.868850][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.877180][ T31] ? __pfx_device_del+0x10/0x10 [ 410.882185][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 410.887635][ T31] rfkill_unregister+0xc8/0x220 [ 410.892548][ T31] hci_unregister_dev+0x374/0x510 [ 410.897733][ T31] vhci_release+0x152/0x1a0 [ 410.902384][ T31] ? __pfx_vhci_release+0x10/0x10 [ 410.908038][ T31] __fput+0x44c/0xa70 [ 410.912217][ T31] task_work_run+0x1d4/0x260 [ 410.917140][ T31] ? __pfx_task_work_run+0x10/0x10 [ 410.922349][ T31] ? do_exit+0x6b0/0x2300 [ 410.926860][ T31] ? kmem_cache_free+0x19b/0x690 [ 410.931923][ T31] do_exit+0x6b5/0x2300 [ 410.936430][ T31] ? do_raw_spin_lock+0x121/0x290 [ 410.941594][ T31] ? __pfx_do_exit+0x10/0x10 [ 410.946451][ T31] do_group_exit+0x21c/0x2d0 [ 410.951104][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.956478][ T31] get_signal+0x1285/0x1340 [ 410.961192][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 410.967190][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 410.972649][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.979249][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 410.984983][ T31] exit_to_user_mode_loop+0x72/0x130 [ 410.990416][ T31] do_syscall_64+0x2bd/0xfa0 [ 410.995533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.000773][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.006943][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.011631][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.017637][ T31] RIP: 0033:0x7f671b785817 [ 411.022051][ T31] RSP: 002b:00007ffc740e9c50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 411.030746][ T31] RAX: fffffffffffffe00 RBX: 0000000000000295 RCX: 00007f671b785817 [ 411.039369][ T31] RDX: 0000000040000000 RSI: 00007ffc740e9cbc RDI: 00000000ffffffff [ 411.047425][ T31] RBP: 00007ffc740e9cbc R08: 0000000000000000 R09: 0000000000000000 [ 411.055995][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000bf [ 411.064085][ T31] R13: 00005555817c5590 R14: 000000000003d160 R15: 00007ffc740e9d10 [ 411.072194][ T31] [ 411.075403][ T31] INFO: task kworker/1:5:5927 blocked for more than 143 seconds. [ 411.083342][ T31] Not tainted syzkaller #0 [ 411.088701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.097446][ T31] task:kworker/1:5 state:D stack:23592 pid:5927 tgid:5927 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 411.109566][ T31] Workqueue: events rfkill_sync_work [ 411.115219][ T31] Call Trace: [ 411.118593][ T31] [ 411.121554][ T31] __schedule+0x1798/0x4cc0 [ 411.126113][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.131703][ T31] ? __pfx___schedule+0x10/0x10 [ 411.136679][ T31] ? schedule+0x91/0x360 [ 411.141170][ T31] schedule+0x165/0x360 [ 411.145514][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.151098][ T31] __mutex_lock+0x7e6/0x1350 [ 411.155827][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.161142][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 411.166456][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.171489][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.176873][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 411.182857][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.189384][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 411.195323][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 411.200608][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 411.206959][ T31] rfkill_set_block+0x1d2/0x440 [ 411.211831][ T31] rfkill_sync_work+0x114/0x200 [ 411.216832][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.222746][ T31] process_scheduled_works+0xae1/0x17b0 [ 411.228737][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.234993][ T31] worker_thread+0x8a0/0xda0 [ 411.239682][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.246065][ T31] ? __kthread_parkme+0x7b/0x200 [ 411.251179][ T31] kthread+0x711/0x8a0 [ 411.255373][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.260485][ T31] ? __pfx_kthread+0x10/0x10 [ 411.265265][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.270465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.276050][ T31] ? __pfx_kthread+0x10/0x10 [ 411.280675][ T31] ret_from_fork+0x4bc/0x870 [ 411.285412][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.290702][ T31] ? __switch_to_asm+0x39/0x70 [ 411.295887][ T31] ? __switch_to_asm+0x33/0x70 [ 411.300653][ T31] ? __pfx_kthread+0x10/0x10 [ 411.305547][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.310998][ T31] [ 411.314224][ T31] INFO: task kworker/1:6:5928 blocked for more than 143 seconds. [ 411.322043][ T31] Not tainted syzkaller #0 [ 411.327372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.336339][ T31] task:kworker/1:6 state:D stack:23176 pid:5928 tgid:5928 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 411.348788][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 411.355880][ T31] Call Trace: [ 411.359201][ T31] [ 411.362178][ T31] __schedule+0x1798/0x4cc0 [ 411.366867][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.372340][ T31] ? __pfx___schedule+0x10/0x10 [ 411.377680][ T31] ? schedule+0x91/0x360 [ 411.381979][ T31] schedule+0x165/0x360 [ 411.386384][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.392081][ T31] __mutex_lock+0x7e6/0x1350 [ 411.396808][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.401580][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 411.407969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.413040][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.419142][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.425007][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 411.431145][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.437333][ T31] process_scheduled_works+0xae1/0x17b0 [ 411.443181][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.449445][ T31] worker_thread+0x8a0/0xda0 [ 411.454473][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.460990][ T31] ? __kthread_parkme+0x7b/0x200 [ 411.466094][ T31] kthread+0x711/0x8a0 [ 411.470167][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.475520][ T31] ? __pfx_kthread+0x10/0x10 [ 411.480155][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.485425][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.490738][ T31] ? __pfx_kthread+0x10/0x10 [ 411.495516][ T31] ret_from_fork+0x4bc/0x870 [ 411.500153][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.505468][ T31] ? __switch_to_asm+0x39/0x70 [ 411.510323][ T31] ? __switch_to_asm+0x33/0x70 [ 411.515110][ T31] ? __pfx_kthread+0x10/0x10 [ 411.519798][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.524682][ T31] [ 411.527726][ T31] INFO: task syz.1.1059:10055 blocked for more than 144 seconds. [ 411.538217][ T31] Not tainted syzkaller #0 [ 411.543276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.552090][ T31] task:syz.1.1059 state:D stack:24648 pid:10055 tgid:10055 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 411.564614][ T31] Call Trace: [ 411.567919][ T31] [ 411.570859][ T31] __schedule+0x1798/0x4cc0 [ 411.575537][ T31] ? validate_chain+0x897/0x2140 [ 411.580573][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.585455][ T31] ? __pfx___schedule+0x10/0x10 [ 411.590344][ T31] ? schedule+0x91/0x360 [ 411.594763][ T31] schedule+0x165/0x360 [ 411.598929][ T31] schedule_timeout+0x9a/0x270 [ 411.603690][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 411.609162][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.614711][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.620025][ T31] ? wait_for_completion+0x267/0x5d0 [ 411.625605][ T31] wait_for_completion+0x2bf/0x5d0 [ 411.630839][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 411.636559][ T31] ? __flush_work+0xd2/0xbc0 [ 411.641311][ T31] ? __flush_work+0xd2/0xbc0 [ 411.646106][ T31] __flush_work+0x9b9/0xbc0 [ 411.650669][ T31] ? __flush_work+0xd2/0xbc0 [ 411.655550][ T31] ? __pfx___flush_work+0x10/0x10 [ 411.660597][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 411.665949][ T31] ? __pfx___cancel_work+0x10/0x10 [ 411.671250][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 411.677169][ T31] __cancel_work_sync+0xbe/0x110 [ 411.682219][ T31] rfkill_unregister+0x92/0x220 [ 411.687525][ T31] nfc_unregister_device+0x96/0x2a0 [ 411.692845][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 411.698865][ T31] virtual_ncidev_close+0x56/0x90 [ 411.704087][ T31] __fput+0x44c/0xa70 [ 411.708149][ T31] task_work_run+0x1d4/0x260 [ 411.712838][ T31] ? __pfx_task_work_run+0x10/0x10 [ 411.718242][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 411.723707][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 411.729048][ T31] do_syscall_64+0x2bd/0xfa0 [ 411.733822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.739242][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.745778][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.750656][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.756628][ T31] RIP: 0033:0x7f412298f6c9 [ 411.761074][ T31] RSP: 002b:00007ffd84ac64e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 411.769574][ T31] RAX: 0000000000000000 RBX: 00007f4122be7da0 RCX: 00007f412298f6c9 [ 411.777764][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 411.785874][ T31] RBP: 00007f4122be7da0 R08: 0000000000000238 R09: 0000001e84ac67df [ 411.793849][ T31] R10: 00000000003ffba4 R11: 0000000000000246 R12: 000000000003d43b [ 411.802067][ T31] R13: 00007f4122be6090 R14: ffffffffffffffff R15: 00007ffd84ac6600 [ 411.810326][ T31] [ 411.813424][ T31] INFO: task syz.4.1058:10066 blocked for more than 144 seconds. [ 411.821486][ T31] Not tainted syzkaller #0 [ 411.826516][ T31] Blocked by coredump. [ 411.831225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.840117][ T31] task:syz.4.1058 state:D stack:26696 pid:10066 tgid:10056 ppid:5825 task_flags:0x40044c flags:0x00080001 [ 411.852174][ T31] Call Trace: [ 411.855494][ T31] [ 411.858432][ T31] __schedule+0x1798/0x4cc0 [ 411.863096][ T31] ? stack_trace_save+0x9c/0xe0 [ 411.868397][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.873417][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.878543][ T31] ? __pfx___schedule+0x10/0x10 [ 411.883425][ T31] ? schedule+0x91/0x360 [ 411.887712][ T31] schedule+0x165/0x360 [ 411.891880][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.897531][ T31] __mutex_lock+0x7e6/0x1350 [ 411.902134][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.907002][ T31] ? rfkill_fop_release+0x4b/0x220 [ 411.912137][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.917207][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 411.922760][ T31] rfkill_fop_release+0x4b/0x220 [ 411.927976][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 411.933649][ T31] __fput+0x44c/0xa70 [ 411.937700][ T31] task_work_run+0x1d4/0x260 [ 411.942415][ T31] ? __pfx_task_work_run+0x10/0x10 [ 411.947703][ T31] do_exit+0x6b5/0x2300 [ 411.951908][ T31] ? do_raw_spin_lock+0x121/0x290 [ 411.957399][ T31] ? __pfx_do_exit+0x10/0x10 [ 411.962203][ T31] ? __fsnotify_parent+0x242/0x540 [ 411.967432][ T31] do_group_exit+0x21c/0x2d0 [ 411.972057][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.977701][ T31] get_signal+0x1285/0x1340 [ 411.982344][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 411.988352][ T31] ? __fget_files+0x2a/0x420 [ 411.993146][ T31] ? __fget_files+0x3a0/0x420 [ 411.998070][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.004462][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 412.010067][ T31] exit_to_user_mode_loop+0x72/0x130 [ 412.015898][ T31] do_syscall_64+0x2bd/0xfa0 [ 412.020552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.025843][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.032033][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.036947][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.042931][ T31] RIP: 0033:0x7f671b78f6c9 [ 412.047644][ T31] RSP: 002b:00007f671c6b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.056264][ T31] RAX: 0000000000000008 RBX: 00007f671b9e6180 RCX: 00007f671b78f6c9 [ 412.064372][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 412.072562][ T31] RBP: 00007f671b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.080839][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.088877][ T31] R13: 00007f671b9e6218 R14: 00007f671b9e6180 R15: 00007ffc740e98f8 [ 412.096996][ T31] [ 412.100224][ T31] INFO: task syz.2.1105:10237 blocked for more than 144 seconds. [ 412.108421][ T31] Not tainted syzkaller #0 [ 412.113455][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.122500][ T31] task:syz.2.1105 state:D stack:25160 pid:10237 tgid:10233 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 412.134849][ T31] Call Trace: [ 412.138171][ T31] [ 412.141177][ T31] __schedule+0x1798/0x4cc0 [ 412.145886][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.150892][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.155835][ T31] ? __pfx___schedule+0x10/0x10 [ 412.160952][ T31] ? schedule+0x91/0x360 [ 412.165435][ T31] schedule+0x165/0x360 [ 412.169747][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.175380][ T31] __mutex_lock+0x7e6/0x1350 [ 412.179992][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.184815][ T31] ? rfkill_register+0x37/0x8e0 [ 412.190161][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.195673][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 412.201092][ T31] ? device_initialize+0x24b/0x440 [ 412.206362][ T31] rfkill_register+0x37/0x8e0 [ 412.211184][ T31] nfc_register_device+0x14a/0x320 [ 412.216359][ T31] nci_register_device+0x87f/0x9d0 [ 412.221480][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 412.227351][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 412.232767][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 412.238235][ T31] virtual_ncidev_open+0x129/0x1a0 [ 412.243395][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 412.249196][ T31] misc_open+0x2d5/0x350 [ 412.253551][ T31] chrdev_open+0x4cc/0x5e0 [ 412.258250][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.263289][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 412.269708][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.274707][ T31] do_dentry_open+0x953/0x13f0 [ 412.279528][ T31] vfs_open+0x3b/0x340 [ 412.283620][ T31] ? path_openat+0x2ecd/0x3830 [ 412.288780][ T31] path_openat+0x2ee5/0x3830 [ 412.293419][ T31] ? __pfx_path_openat+0x10/0x10 [ 412.298503][ T31] do_filp_open+0x1fa/0x410 [ 412.303161][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.308202][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 412.313536][ T31] ? _raw_spin_unlock+0x28/0x50 [ 412.318660][ T31] ? alloc_fd+0x64c/0x6c0 [ 412.323101][ T31] do_sys_openat2+0x121/0x1c0 [ 412.327830][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.333171][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.338069][ T31] __x64_sys_openat+0x138/0x170 [ 412.342952][ T31] do_syscall_64+0xfa/0xfa0 [ 412.347642][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.352933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.359030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.363707][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.369631][ T31] RIP: 0033:0x7f1fb618f6c9 [ 412.374315][ T31] RSP: 002b:00007f1fb70c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.382827][ T31] RAX: ffffffffffffffda RBX: 00007f1fb63e6090 RCX: 00007f1fb618f6c9 [ 412.391232][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 412.399369][ T31] RBP: 00007f1fb6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.407620][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.415783][ T31] R13: 00007f1fb63e6128 R14: 00007f1fb63e6090 R15: 00007ffc91d64a08 [ 412.424244][ T31] [ 412.427346][ T31] INFO: task syz.3.1114:10275 blocked for more than 145 seconds. [ 412.435291][ T31] Not tainted syzkaller #0 [ 412.440241][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.448975][ T31] task:syz.3.1114 state:D stack:27776 pid:10275 tgid:10273 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 412.461024][ T31] Call Trace: [ 412.464692][ T31] [ 412.467690][ T31] __schedule+0x1798/0x4cc0 [ 412.472585][ T31] ? security_file_open+0xb1/0x270 [ 412.477861][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.482819][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.487980][ T31] ? __pfx___schedule+0x10/0x10 [ 412.492846][ T31] ? schedule+0x91/0x360 [ 412.497301][ T31] schedule+0x165/0x360 [ 412.501730][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.507287][ T31] __mutex_lock+0x7e6/0x1350 [ 412.511892][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.516803][ T31] ? misc_open+0x51/0x350 [ 412.521142][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.526375][ T31] misc_open+0x51/0x350 [ 412.530535][ T31] chrdev_open+0x4cc/0x5e0 [ 412.534974][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.539928][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 412.546863][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.551831][ T31] do_dentry_open+0x953/0x13f0 [ 412.556801][ T31] vfs_open+0x3b/0x340 [ 412.560959][ T31] ? path_openat+0x2ecd/0x3830 [ 412.565789][ T31] path_openat+0x2ee5/0x3830 [ 412.570690][ T31] ? __pfx_path_openat+0x10/0x10 [ 412.575742][ T31] do_filp_open+0x1fa/0x410 [ 412.580352][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.585377][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 412.590420][ T31] ? _raw_spin_unlock+0x28/0x50 [ 412.595403][ T31] ? alloc_fd+0x64c/0x6c0 [ 412.599775][ T31] do_sys_openat2+0x121/0x1c0 [ 412.604619][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.609824][ T31] ? exc_page_fault+0x82/0x100 [ 412.614786][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 412.620075][ T31] __x64_sys_openat+0x138/0x170 [ 412.624982][ T31] do_syscall_64+0xfa/0xfa0 [ 412.629581][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.634848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.641151][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.646140][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.652037][ T31] RIP: 0033:0x7f5a6658f6c9 [ 412.656655][ T31] RSP: 002b:00007f5a674ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.665152][ T31] RAX: ffffffffffffffda RBX: 00007f5a667e5fa0 RCX: 00007f5a6658f6c9 [ 412.673167][ T31] RDX: 00000000001c1341 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 412.681369][ T31] RBP: 00007f5a66611f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.689528][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.697862][ T31] R13: 00007f5a667e6038 R14: 00007f5a667e5fa0 R15: 00007ffcc285df78 [ 412.706210][ T31] [ 412.709346][ T31] INFO: task syz.3.1114:10281 blocked for more than 145 seconds. [ 412.717376][ T31] Not tainted syzkaller #0 [ 412.722312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.731114][ T31] task:syz.3.1114 state:D stack:27776 pid:10281 tgid:10273 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 412.743398][ T31] Call Trace: [ 412.746886][ T31] [ 412.750002][ T31] __schedule+0x1798/0x4cc0 [ 412.754532][ T31] ? security_file_open+0xb1/0x270 [ 412.759648][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.764762][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.769616][ T31] ? __pfx___schedule+0x10/0x10 [ 412.774521][ T31] ? schedule+0x91/0x360 [ 412.778788][ T31] schedule+0x165/0x360 [ 412.783181][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.788762][ T31] __mutex_lock+0x7e6/0x1350 [ 412.793455][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.798441][ T31] ? misc_open+0x51/0x350 [ 412.802790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.808123][ T31] misc_open+0x51/0x350 [ 412.812283][ T31] chrdev_open+0x4cc/0x5e0 [ 412.816769][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.821721][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 412.828420][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 412.833469][ T31] do_dentry_open+0x953/0x13f0 [ 412.838466][ T31] vfs_open+0x3b/0x340 [ 412.842537][ T31] ? path_openat+0x2ecd/0x3830 [ 412.847345][ T31] path_openat+0x2ee5/0x3830 [ 412.851971][ T31] ? __pfx_path_openat+0x10/0x10 [ 412.857112][ T31] do_filp_open+0x1fa/0x410 [ 412.861618][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.866500][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 412.871650][ T31] ? _raw_spin_unlock+0x28/0x50 [ 412.876613][ T31] ? alloc_fd+0x64c/0x6c0 [ 412.881259][ T31] do_sys_openat2+0x121/0x1c0 [ 412.886343][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.891927][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.896724][ T31] __x64_sys_openat+0x138/0x170 [ 412.901580][ T31] do_syscall_64+0xfa/0xfa0 [ 412.906137][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.911341][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.917690][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.922381][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.928303][ T31] RIP: 0033:0x7f5a6658f6c9 [ 412.932717][ T31] RSP: 002b:00007f5a674de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.941255][ T31] RAX: ffffffffffffffda RBX: 00007f5a667e6090 RCX: 00007f5a6658f6c9 [ 412.949465][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 412.957479][ T31] RBP: 00007f5a66611f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.965485][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.973542][ T31] R13: 00007f5a667e6128 R14: 00007f5a667e6090 R15: 00007ffcc285df78 [ 412.981790][ T31] [ 412.984890][ T31] INFO: task syz.0.1130:10331 blocked for more than 145 seconds. [ 412.992735][ T31] Not tainted syzkaller #0 [ 412.997727][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.006573][ T31] task:syz.0.1130 state:D stack:28296 pid:10331 tgid:10329 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 413.018612][ T31] Call Trace: [ 413.021935][ T31] [ 413.024893][ T31] __schedule+0x1798/0x4cc0 [ 413.029584][ T31] ? security_file_open+0xb1/0x270 [ 413.034882][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.039931][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.044850][ T31] ? __pfx___schedule+0x10/0x10 [ 413.049818][ T31] ? schedule+0x91/0x360 [ 413.054119][ T31] schedule+0x165/0x360 [ 413.058397][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.064216][ T31] __mutex_lock+0x7e6/0x1350 [ 413.068914][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.073788][ T31] ? misc_open+0x51/0x350 [ 413.078172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.083308][ T31] misc_open+0x51/0x350 [ 413.087499][ T31] chrdev_open+0x4cc/0x5e0 [ 413.092006][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 413.097118][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 413.103455][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 413.108450][ T31] do_dentry_open+0x953/0x13f0 [ 413.113297][ T31] vfs_open+0x3b/0x340 [ 413.117410][ T31] ? path_openat+0x2ecd/0x3830 [ 413.122198][ T31] path_openat+0x2ee5/0x3830 [ 413.126988][ T31] ? __pfx_path_openat+0x10/0x10 [ 413.131940][ T31] do_filp_open+0x1fa/0x410 [ 413.136490][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.141441][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 413.146666][ T31] ? _raw_spin_unlock+0x28/0x50 [ 413.151546][ T31] ? alloc_fd+0x64c/0x6c0 [ 413.156079][ T31] do_sys_openat2+0x121/0x1c0 [ 413.160773][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.166096][ T31] ? exc_page_fault+0x82/0x100 [ 413.170875][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 413.176314][ T31] __x64_sys_openat+0x138/0x170 [ 413.181172][ T31] do_syscall_64+0xfa/0xfa0 [ 413.186037][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.191329][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.197552][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.202336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.208375][ T31] RIP: 0033:0x7fe25bb8f6c9 [ 413.212892][ T31] RSP: 002b:00007fe25ca5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.221758][ T31] RAX: ffffffffffffffda RBX: 00007fe25bde6090 RCX: 00007fe25bb8f6c9 [ 413.229778][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 413.237972][ T31] RBP: 00007fe25bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.246569][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.254747][ T31] R13: 00007fe25bde6128 R14: 00007fe25bde6090 R15: 00007ffede1d1ef8 [ 413.262819][ T31] [ 413.265888][ T31] INFO: task syz-executor:10337 blocked for more than 145 seconds. [ 413.274238][ T31] Not tainted syzkaller #0 [ 413.279217][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.287985][ T31] task:syz-executor state:D stack:28008 pid:10337 tgid:10337 ppid:1 task_flags:0x400040 flags:0x00080000 [ 413.300372][ T31] Call Trace: [ 413.303822][ T31] [ 413.307218][ T31] __schedule+0x1798/0x4cc0 [ 413.311894][ T31] ? security_file_open+0xb1/0x270 [ 413.317099][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.322047][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.326930][ T31] ? __pfx___schedule+0x10/0x10 [ 413.331970][ T31] ? schedule+0x91/0x360 [ 413.336493][ T31] schedule+0x165/0x360 [ 413.340746][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.346280][ T31] __mutex_lock+0x7e6/0x1350 [ 413.350903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.355704][ T31] ? misc_open+0x51/0x350 [ 413.360041][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.365364][ T31] misc_open+0x51/0x350 [ 413.369784][ T31] chrdev_open+0x4cc/0x5e0 [ 413.374263][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 413.379226][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 413.385619][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 413.390668][ T31] do_dentry_open+0x953/0x13f0 [ 413.395659][ T31] vfs_open+0x3b/0x340 [ 413.399848][ T31] ? path_openat+0x2ecd/0x3830 [ 413.404675][ T31] path_openat+0x2ee5/0x3830 [ 413.409391][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 413.414984][ T31] ? count_memcg_event_mm+0x21/0x260 [ 413.420369][ T31] ? __pfx_path_openat+0x10/0x10 [ 413.425737][ T31] ? __pfx___up_read+0x10/0x10 [ 413.430619][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 413.435973][ T31] do_filp_open+0x1fa/0x410 [ 413.440489][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.445513][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 413.450584][ T31] ? _raw_spin_unlock+0x28/0x50 [ 413.455966][ T31] ? alloc_fd+0x64c/0x6c0 [ 413.460364][ T31] do_sys_openat2+0x121/0x1c0 [ 413.465176][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.470379][ T31] ? fd_install+0x97/0x540 [ 413.474911][ T31] ? fd_install+0x30d/0x540 [ 413.479425][ T31] __x64_sys_openat+0x138/0x170 [ 413.484467][ T31] do_syscall_64+0xfa/0xfa0 [ 413.489009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.494433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.500677][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.505388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.511281][ T31] RIP: 0033:0x7fbc2cd8de91 [ 413.515879][ T31] RSP: 002b:00007ffd04c25270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 413.524409][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbc2cd8de91 [ 413.532381][ T31] RDX: 0000000000000002 RSI: 00007fbc2ce129b7 RDI: 00000000ffffff9c [ 413.540459][ T31] RBP: 00007fbc2ce129b7 R08: 0000000000000000 R09: 00007fbc2db1d6c0 [ 413.548784][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 413.557167][ T31] R13: 0000000000000003 R14: 00007ffd04c25648 R15: 0000000000000000 [ 413.565590][ T31] [ 413.568647][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 413.578049][ T31] [ 413.578049][ T31] Showing all locks held in the system: [ 413.585953][ T31] 1 lock held by khungtaskd/31: [ 413.590890][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 413.600774][ T31] 2 locks held by kworker/u8:2/36: [ 413.606080][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 413.618262][ T31] #1: ffffc90000ac7ba0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 413.631482][ T31] 2 locks held by getty/5581: [ 413.636683][ T31] #0: ffff8880335950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 413.646573][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 413.656798][ T31] 1 lock held by syz-executor/5825: [ 413.661999][ T31] #0: ffffffff8f5aa9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 413.672464][ T31] 4 locks held by kworker/1:5/5927: [ 413.677733][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 413.689019][ T31] #1: ffffc9000ace7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 413.702077][ T31] #2: ffffffff8f5aa9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 413.712368][ T31] #3: ffff8880207ef100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 413.722326][ T31] 3 locks held by kworker/1:6/5928: [ 413.727690][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 413.738885][ T31] #1: ffffc9000ad07ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 413.752489][ T31] #2: ffffffff8f5aa9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 413.764166][ T31] 1 lock held by syz.1.1059/10055: [ 413.769337][ T31] #0: ffff8880207ef100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 413.779322][ T31] 1 lock held by syz.4.1058/10066: [ 413.784811][ T31] #0: ffffffff8f5aa9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 413.795259][ T31] 3 locks held by syz.2.1105/10237: [ 413.800540][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.809096][ T31] #1: ffff8880788b6100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 413.818944][ T31] #2: ffffffff8f5aa9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 413.829207][ T31] 1 lock held by syz.3.1114/10275: [ 413.834462][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.843098][ T31] 1 lock held by syz.3.1114/10281: [ 413.848537][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.857451][ T31] 1 lock held by syz.0.1130/10331: [ 413.862560][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.871141][ T31] 1 lock held by syz-executor/10337: [ 413.876551][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.885628][ T31] 1 lock held by syz-executor/10338: [ 413.890905][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.899381][ T31] 1 lock held by syz-executor/10340: [ 413.904685][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.913133][ T31] 1 lock held by syz-executor/10342: [ 413.918586][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.927066][ T31] 1 lock held by syz-executor/10344: [ 413.932432][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.940968][ T31] 1 lock held by syz-executor/10351: [ 413.946649][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.955445][ T31] 1 lock held by syz-executor/10352: [ 413.960835][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.969627][ T31] 1 lock held by syz-executor/10354: [ 413.975258][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.983708][ T31] 1 lock held by syz-executor/10356: [ 413.989030][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 413.997512][ T31] 1 lock held by syz-executor/10358: [ 414.002968][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.011792][ T31] 1 lock held by syz-executor/10365: [ 414.017223][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.025800][ T31] 1 lock held by syz-executor/10366: [ 414.031262][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.039920][ T31] 1 lock held by syz-executor/10368: [ 414.045495][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.054053][ T31] 1 lock held by syz-executor/10370: [ 414.059327][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.068348][ T31] 1 lock held by syz-executor/10372: [ 414.074158][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 414.082864][ T31] [ 414.085350][ T31] ============================================= [ 414.085350][ T31] [ 414.093780][ T31] NMI backtrace for cpu 1 [ 414.093793][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.093807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.093814][ T31] Call Trace: [ 414.093820][ T31] [ 414.093826][ T31] dump_stack_lvl+0x189/0x250 [ 414.093848][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.093875][ T31] ? __pfx__printk+0x10/0x10 [ 414.093907][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 414.093933][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 414.093958][ T31] ? __pfx__printk+0x10/0x10 [ 414.093982][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.094003][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.094018][ T31] watchdog+0xf60/0xfa0 [ 414.094033][ T31] ? watchdog+0x1e2/0xfa0 [ 414.094048][ T31] kthread+0x711/0x8a0 [ 414.094066][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.094077][ T31] ? __pfx_kthread+0x10/0x10 [ 414.094094][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.094108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.094130][ T31] ? __pfx_kthread+0x10/0x10 [ 414.094147][ T31] ret_from_fork+0x4bc/0x870 [ 414.094161][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.094177][ T31] ? __switch_to_asm+0x39/0x70 [ 414.094186][ T31] ? __switch_to_asm+0x33/0x70 [ 414.094195][ T31] ? __pfx_kthread+0x10/0x10 [ 414.094211][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.094230][ T31] [ 414.236632][ T31] Sending NMI from CPU 1 to CPUs 0: [ 414.241983][ C0] NMI backtrace for cpu 0 [ 414.241998][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 414.242016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.242025][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 414.242049][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 e1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 414.242063][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 414.242079][ C0] RAX: 3a0a978986497200 RBX: ffffffff81967be7 RCX: 3a0a978986497200 [ 414.242091][ C0] RDX: 0000000000000001 RSI: ffffffff8d70da6d RDI: ffffffff8bbf05e0 [ 414.242103][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 414.242115][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd770 [ 414.242126][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 414.242136][ C0] FS: 0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000 [ 414.242149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.242159][ C0] CR2: 000055648f68c000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 414.242177][ C0] Call Trace: [ 414.242183][ C0] [ 414.242189][ C0] default_idle+0x13/0x20 [ 414.242204][ C0] default_idle_call+0x73/0xb0 [ 414.242220][ C0] do_idle+0x1e7/0x510 [ 414.242240][ C0] ? __pfx_do_idle+0x10/0x10 [ 414.242262][ C0] cpu_startup_entry+0x44/0x60 [ 414.242278][ C0] rest_init+0x2de/0x300 [ 414.242294][ C0] start_kernel+0x3ae/0x410 [ 414.242319][ C0] x86_64_start_reservations+0x24/0x30 [ 414.242368][ C0] x86_64_start_kernel+0x143/0x1c0 [ 414.242384][ C0] common_startup_64+0x13e/0x147 [ 414.242412][ C0]