last executing test programs: 21.405202025s ago: executing program 2 (id=1501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @alu={0x7, 0x0, 0x2, 0xa, 0x2, 0x0, 0xfffffffffffffff0}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 21.217762488s ago: executing program 2 (id=1505): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x17) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES32=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x40810) 20.856506001s ago: executing program 4 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000040)="9f0910", 0x3) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000240)) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 20.725111185s ago: executing program 2 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, 0x0, 0x21, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x802}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="010028bd7000fddbdf252000000008000300", @ANYRES8=r5, @ANYRES8=0x0], 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000801200000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010000140081"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@newlinkprop={0x30, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, 0x20008, 0x500}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, 'rE'}]}, 0x30}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="461100000003000005f1000000000000950000000000fff4"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 20.364851005s ago: executing program 2 (id=1517): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 20.10520901s ago: executing program 2 (id=1519): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={r0, 0x80000000, 0x5000000}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000900)=0x2000) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r7, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000940)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000800)={0x4, 0x4, 0x14, 0x8, 0x0, 0x4a63, 0x4, 0x7, 0x0}, &(0x7f0000000840)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r11, @ANYBLOB="22baa300030003050000007e41fe5ac2fd341ad1e59a45e05dee9fd3040002000500fcff0100f2ff"], 0x1a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="cb838c9957fc067a292fd56829528916d76356f692666f95469b48f68f1b0b83bf076b3e536eaf2821ceb32faa1b80578f5ebfb55b35a7d5eecf9f9c37c9b69881", @ANYRES16=r7, @ANYBLOB="040027bd7000fcdbdf250b000000060028000000000005002d000100000008000300", @ANYRES32=r12, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=r6, @ANYRES16=r6], 0x58}, 0x1, 0x0, 0x0, 0x40008015}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000087080000000000007b8af8ff00100000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f0000000240)="01e369cf2b0c971e34816d41a92f99cfbdbd2e38e407e3a23763a2bb1b17234c78daa36001f884732c85aadb28a6db8f071879ea3be9fcb0768d28fd10722e2b3cfb6880540d29d581c5a9f637bbe55ab66cb85eae9d003595488813156e84724abd5c97f23a6b6b83c43489eae532a37d235e555233bee245726873de38448a09f0e2cdad854373ad2e28ad528aaa8992c3d8e27f120212be8ea4f4978a69bac2c716a950b0badeff4f73c95e57f8763bed4f2dcb1191e84f999ff14a4430dd205e331e649f1724054ac04fe4e79e2abc82ea2d51a705f1f0dc0c07a9af3198b66aedc8e384ad69f5eb8812d5b895f4b8709864ded0", &(0x7f0000000080)=""/24, &(0x7f0000000340)="4e2e4f0aa08e42727fbec3083465bb2a83726ebdc198feebf90b980f4d751a5ec3ff478dc54bdd966600fae90302cd87b4b35e47f03c9b3a9c424c75eee35d27c9d5fa051fc7497287d3c9677cd3225ebfa51255d7ed2adb01cd2544e13841aac4c432041feeb73edb98b33cf1114a24240cfdb1cff4eca6ec0456758008f9579551b02b4cc62235cddd36c9696a6fad85073684f97b464f217838c50b09df78e157b93874337d5f0486e271f90cfd228767e6ec5295c28a2e931e68074fdbda579f82a7f6a322858287ab9cf4d112f0b7007c39cb614ecbb6d24bb0601efab3b4a74b10010e0c6acd", &(0x7f0000000440)="cfbb7c061bc696a4bd613276f2f4cacb52c4cee1af6b7e582329781c730daa733605c08fb58db3c61ebcc87ff5b73f3369b63fad511763be916da9c5c0b8229c3f9ebcaa5ef3e64f2728a952ac921372772118a530a389eff62fe9c565fd82dbfa22a7a3233721951b8b0d040a9e7e3c108ad117e0069b143940bd56e899eb5ac54e79ebda5e93f0c14d279c45bf3beb9f94cc653b4758758c7354ed9f707883fb2ae322fe71e0b744c5b05d1fc98dac569267801fb433737f61fb9b5c4b4dba8bb5001733c6b270a52d912cfd05bc77ba822013900bda31a9ae2db4", 0x2, r2}, 0x38) 19.707077788s ago: executing program 4 (id=1520): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 19.517339186s ago: executing program 4 (id=1522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bdc5199cf19716fdcced4d9adb7b423643f83fdce763245bfe358ee62712802225bc9d93d16711a5293d19fd5070fe76f0320caf57fdf1b0c8b7018146b9bbcd", 0xcc}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000af8febdc4b2aea94a0b51b770ced001000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) 19.429180488s ago: executing program 4 (id=1523): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) 19.311466168s ago: executing program 4 (id=1524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 19.192713342s ago: executing program 4 (id=1526): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091109200000000009500000000000000ffff7004921526e1caaddd637c44f0dfd44d38f924b580a64ba5d4305439345470f8bbd61e48f31ad02dae29c4449497c38fb5c41bd1c3ed4b648770fafcec506cfe44e5f80095bace9ec92c2525f026d7b713a3edc74ee1c97ea2418a463cbc6ea7846cbecbdb7be1941b0c8b0e96"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@ifindex, 0x37, 0x0, 0x2, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000001400)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="210000000420000000000000", @ANYRES32=r8, @ANYBLOB="f308284d12378df52919213677bc34f2d16a2dccbb277c15331b47a70c08d2e758fa91be999e56ec0fd427e98e137b23b756491c196f7d188e31f63a059ef63055707782ae71b70dfa", @ANYRES64=r6], 0x20) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048810}, 0x4) (async) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="71050528024bc854705c01ec710604034ecb8d"], 0x13) 19.108871251s ago: executing program 2 (id=1528): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) close(r1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {0x6, 0x7}, {0x2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0xde}}, @TCA_CHAIN={0x8, 0xb, 0x267}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, 0x0}}], 0x1, 0x4000090) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x10, @short}, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 18.056845236s ago: executing program 1 (id=1544): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, 0x0, &(0x7f0000003c00)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0x10, 0x616, 0xb1, {{0x2d, 0x4, 0x2, 0x5, 0xb4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xba, 0x3, 0x2, [{@private=0xa010102}, {@remote, 0x8}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x69}, {@empty, 0x1da}, {@multicast1, 0x4}, {@multicast1, 0x10001}]}, @generic={0x0, 0x7, "d17f3794e4"}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0xc, [0xf, 0x8, 0x2, 0x5, 0x1000, 0x4, 0x9, 0x7]}, @timestamp_addr={0x44, 0xc, 0x33, 0x1, 0x9, [{@private=0xa010100, 0x6}]}, @lsrr={0x83, 0x13, 0xa4, [@loopback, @private=0xa010100, @loopback, @local]}, @noop, @rr={0x7, 0x17, 0x75, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote]}]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0x73, 0x8, 0x7fff, 0x3e, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x40, 0x9, 0xffffff58}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c0000000206010400000000000000000000000014000780080011400000000005001500030000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000008000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r12}, 0x10) 17.701364708s ago: executing program 1 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 17.571851996s ago: executing program 1 (id=1552): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r2, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) close(0x3) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x10, 0x6071, 0x0, 0xe7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0xe, @multicast1}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x400040, 0x7fffffff}, @mss={0x2, 0x4, 0x7ff}, @sack={0x5, 0xe, [0x40, 0x8, 0x5]}]}}}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) listen(r2, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) (async) close(0x3) (async) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x10, 0x6071, 0x0, 0xe7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0xe, @multicast1}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x400040, 0x7fffffff}, @mss={0x2, 0x4, 0x7ff}, @sack={0x5, 0xe, [0x40, 0x8, 0x5]}]}}}}}}}, 0x0) (async) 17.473253179s ago: executing program 1 (id=1553): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffff50, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) unshare(0x22020600) unshare(0x2040800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001100"/28], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001100"/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000010000000600000000000000", @ANYRES32, @ANYBLOB="00000035dc3dba0000000000000000000000000079a914f78e6c5f6264c494a614b6d22f5fb515df12a283fcc4160548876d9719e14b193927400b6b75a27defe6bf7aace12a3f03d6e47d7b4e47149fdb23e6f0ab20e351810e82ed6570448c5ce92673a9984940e9e3487b248dff0dcaf836beaa3a9d7c99628f9031a4a4ab9bf9bf104e3b0d4cbcea2670f4e6a22fc7b6ead4a32b722d1e81e82951f28f91dc45be007c505507d551e266100ea5741faa42854a969511bea865ca02987eaf34cd99ee419f817c381084088b6c5fdbce2b1bfb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r5}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r7, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) (async) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r7, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f00000001c0)={0x1, 0x3ff}) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) openat$cgroup_procs(r8, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(r8, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) 17.396970685s ago: executing program 1 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1e, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 17.216409009s ago: executing program 1 (id=1558): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000140)="d7e83b949f3d30465f1e3ae2dd8c3d290600000028ac31b99fd8a2ea31f06c214029c7d59ef4320b7d1919efe1a4ddaa8357e790cfa9477397d9aeef5d5de651fcf35addc43ddc35db612b04a1a4b204025dbabda5ececc302c6689929b18cdacd582bf0c61523478be0e09fa09a8cf3a0122c79db764728ed9295f917668e1582d084a514fa4d3a889e8651161b187eb783e93322690c66583c6c44e3f9466c34236c145412509f", 0xa8, 0x8000, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @mcast1, 0x1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000140)="d7e83b949f3d30465f1e3ae2dd8c3d290600000028ac31b99fd8a2ea31f06c214029c7d59ef4320b7d1919efe1a4ddaa8357e790cfa9477397d9aeef5d5de651fcf35addc43ddc35db612b04a1a4b204025dbabda5ececc302c6689929b18cdacd582bf0c61523478be0e09fa09a8cf3a0122c79db764728ed9295f917668e1582d084a514fa4d3a889e8651161b187eb783e93322690c66583c6c44e3f9466c34236c145412509f", 0xa8, 0x8000, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @mcast1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) shutdown(r0, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0xc, "ce2781a9dfe9bc8597d9"}]}}}}}}}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f0000000000)="35fef83f5155f4220dc9554a1001b3c8b56cf2254271710458558f873cfb7b409ea12b3ec526eb69e49725f22d3b468b24d5e24eb7cef4de2f2096c7b6ebb8eaab040b81e8796d75a6f16cbd0cf048f357900bff7f415cb6765078473f27f4968afccc455aaaca5ff433137be95047dc8a574b2b374df6d6d87c53ce00ae21b7c3a7c4799f0b0cc8cfba6104b836ecef12984f28ae00c8717ab8b81312e7eef135c9c228", 0xa4, 0x24004050, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 17.147669258s ago: executing program 3 (id=1559): socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r6 = socket(0x14, 0x2, 0x4) bind$alg(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="4f0948a5bbd2222cca77dc389713ab733081919d674d28998c76036e4077f249d1a03284dc02a8363da1d15ecc295afbc074a29b4f8d2312166ef9d49760db8fd774619dbefb566b7acfabe256852a64e691f416f88b79f4843013417c5ad215d2ed301dc4d476ad48311f9bfaa4596ba2e4aeed1f5b9a6975ec5b1b5c5a688c77c6", @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="e23f008010001f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e0003000000080007007f00000108000a00", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) 16.629555094s ago: executing program 3 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008b0"], 0x178}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x3, 0xffe, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xadc1219ea02c3d00}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async, rerun: 64) r12 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELSET={0x1f0, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x1c0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a9}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf775}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e95}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x955}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4461}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x48f50}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d69db22}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x99}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0x29c}}, 0x0) 16.608464001s ago: executing program 3 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) socketpair(0x2b, 0xa, 0x9a25, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000640)="e39468c5e2f9bd9581ba2e2bf70dc405b543ba9a2ea5e9f1ea0f2e26c91b89b7b5b1c740c761cb89098970471d4baefb16800f29aed979bc67716d27fb2b283d2dc266c559780f24eca2b30adbfcc5e05241c6caf2994c2f4c75fb1780bf065312ae385dbd25095d3ab58b05d534928ca0fbb9af8088134d22b8d84bb9b0e8d392254b54c381b54e3ef2f261f905d92329543fba977342e526ff9289d8c28fe248253fac28abf573d1a03cdf058aecdba847f20a30e7afac3569a4446be144fd7d0b82ded480f5973fd4fc9acb21086173995bd051260e0b92c86e7a2cd2c8a545ed488dbe06c56bf20728160fe390ff96322889fc10153bfa92c11909b7d3bd0507aecc3d98ac6a4191c5deadd493160e921c3d5ff131c2c1b188bc8522a61d899e92c953e37259f4672adb4dc94db279b08715e36f2b7a21ddb6e22d8e7d4615d59323703dcab81069d61c4ad081eefde1b055c386ce9756b73637dda717c97e6afad5cd84e2ed5a29b85b25eaf104b833f1c02faf6b93e340961aedf7cc0e20d5b6883b5d396698ac5b21632971d52311e92a0ef4040340b2546da3e73bd4bd3a23b7c09f68c63632ef7ef478f87b824104ee26860297add6754ba8a01a0c12bef8293d3d53057025804581b0dbd9492a77e5c467eb5f0c891af84299318c8e96959c47bfee27e751e191046387bd22c7901adef425ad24438a6af61b170374", 0x201}], 0x1}}], 0x1, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x340}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="1400020000000000000000000000ffff0000000008000800830700"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) 16.435338468s ago: executing program 3 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$tipc(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r6], 0x1c}}, 0x24044080) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16=r7, @ANYRES32=r3, @ANYRESHEX, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24041894}, 0x48000) 16.181977355s ago: executing program 3 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x40d, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) pipe(&(0x7f0000000600)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000080)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r8, 0x0, 0x3ff}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x6}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x4c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x9}, {0xfff3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9bc}]}, 0x4c}}, 0x0) 16.101501673s ago: executing program 0 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x6}, 0x4}) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400f4001000010000000000000000000000000a14000000000a010300000000000000000100000020000000050a01020000000000000000010020000900010073797a3100000000140000001100010000000000000000000000000a"], 0x5c}}, 0x800) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10) 16.007836103s ago: executing program 0 (id=1570): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000280), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) setsockopt(r10, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x10}}, {0x4}}]}]}, 0x64}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0xffffffffffffffde) 15.924084963s ago: executing program 0 (id=1571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000002c0)=""/64, 0x40}], 0x5}, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44880}, 0x2404c014) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r9, 0xd58}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r9, 0xfffff847, 0x30}, 0xc) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffc3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x610be3f1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 15.824969305s ago: executing program 0 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@arp={0x806, @generic={0x108, 0x8864, 0x6, 0x0, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@raw=[@generic={0x8, 0x6, 0x7, 0x79a2, 0xb}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000080)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x9, 0x7f, 0x800}, 0x10, 0x135a1, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x3, 0x1, 0x8, 0x9}, {0x5, 0x2, 0x3}, {0x1, 0x7, 0xd, 0xb}, {0x4, 0x5, 0x1}, {0x4, 0x4, 0xb, 0x3}], 0x10, 0x2613}, 0x94) 15.737484678s ago: executing program 0 (id=1573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) r2 = socket$inet(0x2, 0x3, 0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1}, 0x14) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) 15.735967681s ago: executing program 0 (id=1574): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xffffffffffffffc0, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1002}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004040}, 0x40049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$tipc(0x1e, 0x0, 0x0) getsockname(r5, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80) socket$kcm(0x10, 0x2, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) (async) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xffffffffffffffc0, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1002}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004040}, 0x40049) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$tipc(0x1e, 0x0, 0x0) (async) getsockname(r5, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80) (async) 15.294309657s ago: executing program 3 (id=1575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000600)=""/190, &(0x7f0000000540)=0xbe) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080)) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x3f9, 0x10, 0x70bd27, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) (async, rerun: 64) recvmmsg(r8, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) (rerun: 64) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@bridge_setlink={0xc4, 0x13, 0x1, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x860}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4ece}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nicvf0\x00'}, @IFLA_PORT_SELF={0x6c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x1f, 0x2, 'lb_tx_hash_to_port_mapping\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "87da710eec7f5ff1da89409f4b418a3b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0a1e460fca48c450d0b7f39b0dc99802"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b6b44e8a74fa868b337bff7394935d25"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1feb9}]}, 0xc4}}, 0x0) (async, rerun: 64) write(r0, &(0x7f00000000c0)="053b0a466772d443406f9f43bbe7fda706", 0x11) (rerun: 64) 3.257937115s ago: executing program 32 (id=1528): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) close(r1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {0x6, 0x7}, {0x2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0xde}}, @TCA_CHAIN={0x8, 0xb, 0x267}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, 0x0}}], 0x1, 0x4000090) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x10, @short}, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.227206082s ago: executing program 33 (id=1526): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091109200000000009500000000000000ffff7004921526e1caaddd637c44f0dfd44d38f924b580a64ba5d4305439345470f8bbd61e48f31ad02dae29c4449497c38fb5c41bd1c3ed4b648770fafcec506cfe44e5f80095bace9ec92c2525f026d7b713a3edc74ee1c97ea2418a463cbc6ea7846cbecbdb7be1941b0c8b0e96"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@ifindex, 0x37, 0x0, 0x2, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000001400)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="210000000420000000000000", @ANYRES32=r8, @ANYBLOB="f308284d12378df52919213677bc34f2d16a2dccbb277c15331b47a70c08d2e758fa91be999e56ec0fd427e98e137b23b756491c196f7d188e31f63a059ef63055707782ae71b70dfa", @ANYRES64=r6], 0x20) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048810}, 0x4) (async) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="71050528024bc854705c01ec710604034ecb8d"], 0x13) 2.055078033s ago: executing program 34 (id=1558): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000140)="d7e83b949f3d30465f1e3ae2dd8c3d290600000028ac31b99fd8a2ea31f06c214029c7d59ef4320b7d1919efe1a4ddaa8357e790cfa9477397d9aeef5d5de651fcf35addc43ddc35db612b04a1a4b204025dbabda5ececc302c6689929b18cdacd582bf0c61523478be0e09fa09a8cf3a0122c79db764728ed9295f917668e1582d084a514fa4d3a889e8651161b187eb783e93322690c66583c6c44e3f9466c34236c145412509f", 0xa8, 0x8000, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @mcast1, 0x1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000140)="d7e83b949f3d30465f1e3ae2dd8c3d290600000028ac31b99fd8a2ea31f06c214029c7d59ef4320b7d1919efe1a4ddaa8357e790cfa9477397d9aeef5d5de651fcf35addc43ddc35db612b04a1a4b204025dbabda5ececc302c6689929b18cdacd582bf0c61523478be0e09fa09a8cf3a0122c79db764728ed9295f917668e1582d084a514fa4d3a889e8651161b187eb783e93322690c66583c6c44e3f9466c34236c145412509f", 0xa8, 0x8000, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @mcast1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acb19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba411351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378dd9a63f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7cb47887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4aa933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) shutdown(r0, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0xc, "ce2781a9dfe9bc8597d9"}]}}}}}}}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f0000000000)="35fef83f5155f4220dc9554a1001b3c8b56cf2254271710458558f873cfb7b409ea12b3ec526eb69e49725f22d3b468b24d5e24eb7cef4de2f2096c7b6ebb8eaab040b81e8796d75a6f16cbd0cf048f357900bff7f415cb6765078473f27f4968afccc455aaaca5ff433137be95047dc8a574b2b374df6d6d87c53ce00ae21b7c3a7c4799f0b0cc8cfba6104b836ecef12984f28ae00c8717ab8b81312e7eef135c9c228", 0xa4, 0x24004050, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 31.444159ms ago: executing program 35 (id=1574): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xffffffffffffffc0, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1002}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004040}, 0x40049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$tipc(0x1e, 0x0, 0x0) getsockname(r5, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80) socket$kcm(0x10, 0x2, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) (async) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xffffffffffffffc0, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1002}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004040}, 0x40049) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$tipc(0x1e, 0x0, 0x0) (async) getsockname(r5, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80) (async) 0s ago: executing program 36 (id=1575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000600)=""/190, &(0x7f0000000540)=0xbe) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080)) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) (async) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x3f9, 0x10, 0x70bd27, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) (async, rerun: 64) recvmmsg(r8, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) (rerun: 64) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@bridge_setlink={0xc4, 0x13, 0x1, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x860}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4ece}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nicvf0\x00'}, @IFLA_PORT_SELF={0x6c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x1f, 0x2, 'lb_tx_hash_to_port_mapping\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "87da710eec7f5ff1da89409f4b418a3b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0a1e460fca48c450d0b7f39b0dc99802"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b6b44e8a74fa868b337bff7394935d25"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1feb9}]}, 0xc4}}, 0x0) (async, rerun: 64) write(r0, &(0x7f00000000c0)="053b0a466772d443406f9f43bbe7fda706", 0x11) (rerun: 64) kernel console output (not intermixed with test programs): cted cc 0x1003 length: 249 > 9 [ 92.360747][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.368840][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.376350][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.402304][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.412277][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.431932][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.440122][ T5189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.465106][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.479992][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.487510][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.488948][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.502811][ T5189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.503658][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.517679][ T5189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.519384][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.527897][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.532682][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.617321][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.625812][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.634418][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.643165][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.650943][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.191723][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 93.321592][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 93.397139][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 93.483525][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 93.616504][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.624139][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.633060][ T5873] bridge_slave_0: entered allmulticast mode [ 93.640439][ T5873] bridge_slave_0: entered promiscuous mode [ 93.649593][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.656812][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.664143][ T5873] bridge_slave_1: entered allmulticast mode [ 93.671796][ T5873] bridge_slave_1: entered promiscuous mode [ 93.698997][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 93.827296][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.834965][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.842274][ T5878] bridge_slave_0: entered allmulticast mode [ 93.849685][ T5878] bridge_slave_0: entered promiscuous mode [ 93.873787][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.928520][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.935868][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.944018][ T5878] bridge_slave_1: entered allmulticast mode [ 93.951267][ T5878] bridge_slave_1: entered promiscuous mode [ 93.974856][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.014582][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.022268][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.029493][ T5880] bridge_slave_0: entered allmulticast mode [ 94.037014][ T5880] bridge_slave_0: entered promiscuous mode [ 94.072056][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.079266][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.089804][ T5869] bridge_slave_0: entered allmulticast mode [ 94.097404][ T5869] bridge_slave_0: entered promiscuous mode [ 94.107189][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.114475][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.121960][ T5869] bridge_slave_1: entered allmulticast mode [ 94.129197][ T5869] bridge_slave_1: entered promiscuous mode [ 94.149369][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.157031][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.164327][ T5880] bridge_slave_1: entered allmulticast mode [ 94.171736][ T5880] bridge_slave_1: entered promiscuous mode [ 94.239588][ T5873] team0: Port device team_slave_0 added [ 94.262936][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.270107][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.277714][ T5887] bridge_slave_0: entered allmulticast mode [ 94.285444][ T5887] bridge_slave_0: entered promiscuous mode [ 94.296900][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.309049][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.320883][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.332163][ T5873] team0: Port device team_slave_1 added [ 94.340415][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.365973][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.376461][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.383822][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.391201][ T5887] bridge_slave_1: entered allmulticast mode [ 94.399144][ T5887] bridge_slave_1: entered promiscuous mode [ 94.464243][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.489095][ T5878] team0: Port device team_slave_0 added [ 94.502610][ T5877] Bluetooth: hci1: command tx timeout [ 94.522026][ T5869] team0: Port device team_slave_0 added [ 94.570266][ T5878] team0: Port device team_slave_1 added [ 94.578174][ T5869] team0: Port device team_slave_1 added [ 94.582301][ T5877] Bluetooth: hci0: command tx timeout [ 94.588634][ T5876] Bluetooth: hci3: command tx timeout [ 94.589695][ T51] Bluetooth: hci2: command tx timeout [ 94.612959][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.619937][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.646390][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.675384][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.688695][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.725718][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.732986][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.759398][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.770268][ T5877] Bluetooth: hci4: command tx timeout [ 94.786283][ T5880] team0: Port device team_slave_0 added [ 94.795318][ T5880] team0: Port device team_slave_1 added [ 94.827486][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.835157][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.861568][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.876178][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.883571][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.909590][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.966359][ T5887] team0: Port device team_slave_0 added [ 94.973163][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.980150][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.006604][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.054193][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.061233][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.087332][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.102013][ T5887] team0: Port device team_slave_1 added [ 95.108566][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.116392][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.142975][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.169293][ T5873] hsr_slave_0: entered promiscuous mode [ 95.176004][ T5873] hsr_slave_1: entered promiscuous mode [ 95.186994][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.194054][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.220399][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.271172][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.278309][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.305118][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.353097][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.360328][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.386563][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.446853][ T5869] hsr_slave_0: entered promiscuous mode [ 95.453523][ T5869] hsr_slave_1: entered promiscuous mode [ 95.459779][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 95.466226][ T5869] Cannot create hsr debugfs directory [ 95.516759][ T5878] hsr_slave_0: entered promiscuous mode [ 95.523308][ T5878] hsr_slave_1: entered promiscuous mode [ 95.529691][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 95.536497][ T5878] Cannot create hsr debugfs directory [ 95.587583][ T5880] hsr_slave_0: entered promiscuous mode [ 95.594197][ T5880] hsr_slave_1: entered promiscuous mode [ 95.600317][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 95.606474][ T5880] Cannot create hsr debugfs directory [ 95.821208][ T5887] hsr_slave_0: entered promiscuous mode [ 95.827876][ T5887] hsr_slave_1: entered promiscuous mode [ 95.836354][ T5887] debugfs: 'hsr0' already exists in 'hsr' [ 95.842286][ T5887] Cannot create hsr debugfs directory [ 96.268129][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.303638][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.314812][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.346310][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.416490][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.428566][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.442454][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.457312][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.573016][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.582497][ T5877] Bluetooth: hci1: command tx timeout [ 96.587575][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.600878][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.631429][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.662323][ T5877] Bluetooth: hci0: command tx timeout [ 96.667879][ T5877] Bluetooth: hci3: command tx timeout [ 96.674320][ T51] Bluetooth: hci2: command tx timeout [ 96.739777][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.754197][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.770150][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.805792][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.821885][ T5877] Bluetooth: hci4: command tx timeout [ 96.878992][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.890773][ T5887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.902665][ T5887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.928756][ T5887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.939666][ T5887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.983371][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.013012][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.046352][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.053810][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.070131][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.090192][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.097379][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.149928][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.157273][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.194720][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.201942][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.229650][ T10] cfg80211: failed to load regulatory.db [ 97.364141][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.455686][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.489291][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.510343][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.517728][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.576458][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.583798][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.635560][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.709405][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.746879][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.754217][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.796133][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.803470][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.847084][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.864422][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.871732][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.910450][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.917655][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.944439][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.011217][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.265882][ T5873] veth0_vlan: entered promiscuous mode [ 98.330112][ T5873] veth1_vlan: entered promiscuous mode [ 98.374431][ T5869] veth0_vlan: entered promiscuous mode [ 98.447570][ T5869] veth1_vlan: entered promiscuous mode [ 98.506695][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.561990][ T5873] veth0_macvtap: entered promiscuous mode [ 98.584182][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.627593][ T5873] veth1_macvtap: entered promiscuous mode [ 98.665534][ T5877] Bluetooth: hci1: command tx timeout [ 98.678870][ T5869] veth0_macvtap: entered promiscuous mode [ 98.691247][ T5869] veth1_macvtap: entered promiscuous mode [ 98.742194][ T5877] Bluetooth: hci3: command tx timeout [ 98.742210][ T51] Bluetooth: hci2: command tx timeout [ 98.742246][ T51] Bluetooth: hci0: command tx timeout [ 98.762553][ T5878] veth0_vlan: entered promiscuous mode [ 98.780102][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.794285][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.819177][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.838996][ T5878] veth1_vlan: entered promiscuous mode [ 98.870081][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.898522][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.906180][ T51] Bluetooth: hci4: command tx timeout [ 98.979167][ T5880] veth0_vlan: entered promiscuous mode [ 99.001278][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.027637][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.038814][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.056322][ T5878] veth0_macvtap: entered promiscuous mode [ 99.081128][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.096047][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.110621][ T5878] veth1_macvtap: entered promiscuous mode [ 99.141305][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.167706][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.178319][ T1100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.200548][ T5880] veth1_vlan: entered promiscuous mode [ 99.243021][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.314987][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.355102][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.366064][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.375131][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.396569][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.422672][ T5887] veth0_vlan: entered promiscuous mode [ 99.438435][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.447366][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.465974][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.475609][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.491175][ T5880] veth0_macvtap: entered promiscuous mode [ 99.500947][ T5887] veth1_vlan: entered promiscuous mode [ 99.523975][ T5880] veth1_macvtap: entered promiscuous mode [ 99.613685][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.625195][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.633469][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.636322][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.649340][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.701341][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.723594][ T3007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786904][ T5887] veth0_macvtap: entered promiscuous mode [ 99.793871][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.816309][ T3007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.826296][ T3007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.847751][ T5887] veth1_macvtap: entered promiscuous mode [ 99.870685][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.881989][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.889955][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.996501][ T5987] syz.2.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.024985][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 100.025013][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.025033][ T5987] Call Trace: [ 100.025042][ T5987] [ 100.025051][ T5987] dump_stack_lvl+0x189/0x250 [ 100.025085][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.025107][ T5987] ? __pfx__printk+0x10/0x10 [ 100.025131][ T5987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.025156][ T5987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.025181][ T5987] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 100.025207][ T5987] warn_alloc+0x214/0x310 [ 100.025240][ T5987] ? stack_depot_save_flags+0x41b/0x860 [ 100.025284][ T5987] ? __pfx_warn_alloc+0x10/0x10 [ 100.025316][ T5987] ? kasan_save_track+0x4f/0x80 [ 100.025340][ T5987] ? xskq_create+0x56/0x170 [ 100.025356][ T5987] ? xsk_init_queue+0xb0/0x110 [ 100.025371][ T5987] ? xsk_setsockopt+0x4dc/0x8d0 [ 100.025397][ T5987] ? do_sock_setsockopt+0x17c/0x1b0 [ 100.025418][ T5987] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 100.025439][ T5987] ? do_syscall_64+0xfa/0x3b0 [ 100.025459][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.025485][ T5987] __vmalloc_node_range_noprof+0x125/0x12f0 [ 100.025544][ T5987] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.025582][ T5987] ? __kasan_kmalloc+0x93/0xb0 [ 100.025613][ T5987] vmalloc_user_noprof+0xad/0xf0 [ 100.025643][ T5987] ? xskq_create+0xbf/0x170 [ 100.025664][ T5987] xskq_create+0xbf/0x170 [ 100.025687][ T5987] xsk_init_queue+0xb0/0x110 [ 100.025710][ T5987] xsk_setsockopt+0x4dc/0x8d0 [ 100.025744][ T5987] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.025773][ T5987] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.025809][ T5987] ? aa_sock_opt_perm+0xff/0x1b0 [ 100.025834][ T5987] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 100.025856][ T5987] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.025889][ T5987] do_sock_setsockopt+0x17c/0x1b0 [ 100.025919][ T5987] __x64_sys_setsockopt+0x13f/0x1b0 [ 100.025974][ T5987] do_syscall_64+0xfa/0x3b0 [ 100.025996][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.026017][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.026037][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 100.026062][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.026082][ T5987] RIP: 0033:0x7f7015d8ec29 [ 100.026110][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.026126][ T5987] RSP: 002b:00007f7016bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.026148][ T5987] RAX: ffffffffffffffda RBX: 00007f7015fd5fa0 RCX: 00007f7015d8ec29 [ 100.026163][ T5987] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 100.026175][ T5987] RBP: 00007f7015e11e41 R08: 0000000000000004 R09: 0000000000000000 [ 100.026187][ T5987] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.026200][ T5987] R13: 00007f7015fd6038 R14: 00007f7015fd5fa0 R15: 00007ffe09bf0488 [ 100.026233][ T5987] [ 100.030159][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.035047][ T5987] Mem-Info: [ 100.147808][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 100.224517][ T5987] active_anon:5579 inactive_anon:0 isolated_anon:0 [ 100.224517][ T5987] active_file:1284 inactive_file:39855 isolated_file:0 [ 100.224517][ T5987] unevictable:768 dirty:1419 writeback:0 [ 100.224517][ T5987] slab_reclaimable:10259 slab_unreclaimable:92728 [ 100.224517][ T5987] mapped:28951 shmem:1356 pagetables:957 [ 100.224517][ T5987] sec_pagetables:0 bounce:0 [ 100.224517][ T5987] kernel_misc_reclaimable:0 [ 100.224517][ T5987] free:1335278 free_pcp:21354 free_cma:0 [ 100.306071][ T5993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'. [ 100.313393][ T5987] Node 0 active_anon:22316kB inactive_anon:0kB active_file:5136kB inactive_file:159220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119904kB dirty:5660kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11740kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.445054][ T5987] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.483913][ T5995] Zero length message leads to an empty skb [ 100.484158][ T5987] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.523135][ T5987] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 100.529066][ T5987] Node 0 DMA32 free:1440628kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22268kB inactive_anon:0kB active_file:5136kB inactive_file:157644kB unevictable:1536kB writepending:5656kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:63584kB local_pcp:4396kB free_cma:0kB [ 100.565178][ T5987] lowmem_reserve[]: 0 0 1 1 1 [ 100.569976][ T5987] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 100.600434][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 100.605555][ T5987] Node 1 Normal free:3884024kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21460kB local_pcp:13376kB free_cma:0kB [ 100.612942][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.648971][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 100.657672][ T5987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.668986][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.681379][ T5987] Node 0 DMA32: 3*4kB (ME) 3*8kB (ME) 5*16kB (ME) 3*32kB (UM) 3*64kB (ME) 2*128kB (M) 4*256kB (UM) 3*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 349*4096kB (M) = 1439892kB [ 100.684171][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.706586][ T5987] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 100.725803][ T5987] Node 1 Normal: 138*4kB (UE) 46*8kB (UME) 38*16kB (UME) 50*32kB (UME) 19*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3884024kB [ 100.744918][ T5987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.753950][ T5876] Bluetooth: hci1: command tx timeout [ 100.760193][ T5987] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.773841][ T5986] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 100.785052][ T5987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.796371][ T5987] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.807994][ T5987] 42491 total pagecache pages [ 100.818104][ T5987] 0 pages in swap cache [ 100.818404][ T3007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.822854][ T5876] Bluetooth: hci3: command tx timeout [ 100.822903][ T5876] Bluetooth: hci2: command tx timeout [ 100.822938][ T5876] Bluetooth: hci0: command tx timeout [ 100.849936][ T3007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.862218][ T5987] Free swap = 124996kB [ 100.870824][ T5987] Total swap = 124996kB [ 100.875558][ T5987] 2097051 pages RAM [ 100.879398][ T5987] 0 pages HighMem/MovableOnly [ 100.884269][ T5987] 425672 pages reserved [ 100.888452][ T5987] 0 pages cma reserved [ 100.890972][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.901015][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.913220][ T3007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.924413][ T3007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.981696][ T5877] Bluetooth: hci4: command tx timeout [ 101.132578][ T6000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6'. [ 101.232775][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.247930][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.279655][ T6000] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 101.308716][ T6000] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6'. [ 101.317929][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.335419][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.357711][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.371628][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 101.596476][ T6008] syzkaller0: entered promiscuous mode [ 101.603769][ T6008] syzkaller0: entered allmulticast mode [ 101.610105][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.640520][ T6013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9'. [ 101.673103][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.737276][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.802978][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 102.841437][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 103.063811][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 103.388778][ T6048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 103.403624][ T6048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 103.489318][ T6051] tipc: Started in network mode [ 103.505343][ T6051] tipc: Node identity 16d57c1db0ae, cluster identity 4711 [ 103.528823][ T6051] tipc: Enabled bearer , priority 0 [ 103.541288][ T6050] syzkaller0: entered promiscuous mode [ 103.554596][ T6050] syzkaller0: entered allmulticast mode [ 103.600774][ T6050] tipc: Resetting bearer [ 103.645737][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.658626][ T6047] tipc: Resetting bearer [ 103.676507][ T6047] tipc: Disabling bearer [ 103.696209][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.729754][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.751688][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.159774][ T6079] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 104.904743][ T6110] sctp: [Deprecated]: syz.1.40 (pid 6110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.904743][ T6110] Use struct sctp_sack_info instead [ 104.960511][ T6115] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.047096][ T6111] syzkaller0: entered allmulticast mode [ 105.185826][ T6118] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.295749][ T6126] __nla_validate_parse: 9 callbacks suppressed [ 105.295767][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 105.356197][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 105.410702][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 105.535533][ T6143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.629336][ T6145] netlink: 'syz.1.51': attribute type 23 has an invalid length. [ 105.677598][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.52'. [ 106.068700][ T6165] netlink: 156 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.110975][ T6166] netlink: 9 bytes leftover after parsing attributes in process `syz.4.55'. [ 106.259149][ T6166] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20001 [ 106.286316][ T6175] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.59'. [ 106.664463][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 106.714576][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 106.933744][ T5956] IPVS: starting estimator thread 0... [ 107.027357][ T6219] Illegal XDP return value 3897820032 on prog (id 47) dev syz_tun, expect packet loss! [ 107.043126][ T6213] IPVS: using max 24 ests per chain, 57600 per kthread [ 107.197926][ T37] tipc: Subscription rejected, illegal request [ 107.200929][ T6227] netlink: 'syz.2.72': attribute type 126 has an invalid length. [ 107.415658][ T6243] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.76'. [ 107.677265][ T6255] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 108.143438][ T6272] netlink: 'syz.1.87': attribute type 30 has an invalid length. [ 108.267072][ T6286] netlink: 'syz.0.88': attribute type 33 has an invalid length. [ 108.330282][ T6276] syzkaller1: entered promiscuous mode [ 108.337722][ T6276] syzkaller1: entered allmulticast mode [ 108.982101][ T6316] tipc: Started in network mode [ 108.987052][ T6316] tipc: Node identity 02a615651815, cluster identity 4711 [ 109.011072][ T6316] tipc: Enabled bearer , priority 0 [ 109.069361][ T6315] netlink: 'syz.1.97': attribute type 29 has an invalid length. [ 109.107953][ T6322] netlink: 'syz.1.97': attribute type 29 has an invalid length. [ 109.155459][ T6306] syzkaller0: entered promiscuous mode [ 109.181945][ T6306] syzkaller0: entered allmulticast mode [ 109.239634][ T6334] tipc: Resetting bearer [ 109.270665][ T6333] tipc: Started in network mode [ 109.277642][ T6333] tipc: Node identity 7f000001, cluster identity 4711 [ 109.289645][ T6333] tipc: Enabled bearer , priority 10 [ 109.298649][ T6305] tipc: Resetting bearer [ 109.332939][ T6305] tipc: Disabling bearer [ 109.353548][ T6333] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 109.358787][ T6340] syz.3.104 uses obsolete (PF_INET,SOCK_PACKET) [ 109.368405][ T6333] tipc: Enabled bearer , priority 10 [ 109.375125][ T6336] netlink: 'syz.1.103': attribute type 7 has an invalid length. [ 110.384856][ T6392] __nla_validate_parse: 45 callbacks suppressed [ 110.384877][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 110.404557][ T5928] tipc: Node number set to 2130706433 [ 110.570182][ T6407] sctp: [Deprecated]: syz.2.120 (pid 6407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.570182][ T6407] Use struct sctp_sack_info instead [ 111.265544][ T6441] Bluetooth: MGMT ver 1.23 [ 111.360458][ T6432] IPVS: persistence engine module ip_vs_pe_À not found [ 111.505982][ T6457] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 112.466977][ T6499] netlink: 88 bytes leftover after parsing attributes in process `syz.4.137'. [ 112.665897][ T6513] netlink: 'syz.1.139': attribute type 2 has an invalid length. [ 112.705479][ T6513] netlink: 'syz.1.139': attribute type 6 has an invalid length. [ 113.895681][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 113.944120][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 114.381198][ T6561] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 114.474981][ T6565] netlink: 168 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.526322][ T6561] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 114.568086][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 114.803210][ T6564] veth3: entered promiscuous mode [ 114.869066][ T6564] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 114.918242][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.950305][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.080385][ T6583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.102697][ T1330] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.143583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.318586][ T6593] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.160'. [ 115.759348][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 115.773151][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 116.264653][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.303558][ T6641] netlink: 'syz.4.173': attribute type 5 has an invalid length. [ 116.327217][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.327970][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.390446][ T6646] netlink: 'syz.4.173': attribute type 5 has an invalid length. [ 116.435224][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.479664][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 116.526889][ T6641] geneve2: entered promiscuous mode [ 116.552004][ T6641] geneve2: entered allmulticast mode [ 116.592774][ T3007] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 116.602108][ T3007] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 116.620885][ T3007] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 116.654879][ T3007] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 117.268279][ T6683] bond1: entered promiscuous mode [ 117.310526][ T6683] bond1: entered allmulticast mode [ 117.369714][ T6683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.630545][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 117.660765][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 117.746317][ T5534] veth0_vlan: left promiscuous mode [ 117.786368][ T6717] netlink: 256 bytes leftover after parsing attributes in process `syz.3.187'. [ 117.846639][ T5534] veth0_vlan: entered promiscuous mode [ 117.904227][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 117.962559][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 117.986320][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 117.999658][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.010878][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.044030][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.059279][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.077856][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.087920][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.096451][ T6718] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 118.879040][ T6768] dvmrp0: entered allmulticast mode [ 119.268136][ T6781] nbd0: detected capacity change from 0 to 4096 [ 119.303900][ T51] block nbd0: Receive control failed (result -32) [ 119.334937][ T5920] block nbd0: Dead connection, failed to find a fallback [ 119.347127][ T5920] block nbd0: shutting down sockets [ 119.360139][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.385319][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.436289][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.504761][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.531909][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.541028][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.580369][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.642817][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.650806][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.686253][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.705025][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.714475][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.723882][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.733770][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.743002][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.752126][ T6802] policy can only be matched on NF_INET_PRE_ROUTING [ 119.752142][ T6802] unable to load match [ 119.764747][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.772981][ T5920] ldm_validate_partition_table(): Disk read failed. [ 119.780113][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.790312][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.798622][ T5920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.810473][ T5920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.820767][ T5920] Dev nbd0: unable to read RDB block 0 [ 119.827583][ T5920] nbd0: unable to read partition table [ 119.839180][ T5920] ldm_validate_partition_table(): Disk read failed. [ 119.877492][ T5920] Dev nbd0: unable to read RDB block 0 [ 119.900828][ T5920] nbd0: unable to read partition table [ 121.502425][ T6877] __nla_validate_parse: 4 callbacks suppressed [ 121.502447][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 121.564127][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 121.611087][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 121.632214][ T6884] bond0: entered promiscuous mode [ 121.637787][ T6884] bond_slave_0: entered promiscuous mode [ 121.656012][ T6884] bond_slave_1: entered promiscuous mode [ 121.703492][ T6884] bond0: left promiscuous mode [ 121.715045][ T6884] bond_slave_0: left promiscuous mode [ 121.739670][ T6884] bond_slave_1: left promiscuous mode [ 121.766651][ T6887] netlink: 128 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.820285][ T6892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.835863][ T6887] netlink: 3 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.887637][ T6892] netlink: 3 bytes leftover after parsing attributes in process `syz.1.237'. [ 121.927260][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 121.937176][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 122.015125][ T3522] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.025905][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 122.044242][ T3522] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.060771][ T3522] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.103083][ T3522] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.350098][ T6914] syzkaller0: entered promiscuous mode [ 122.383873][ T6914] syzkaller0: entered allmulticast mode [ 123.030320][ T5928] IPVS: starting estimator thread 0... [ 123.151677][ T6947] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.325727][ T7001] validate_nla: 54 callbacks suppressed [ 124.325748][ T7001] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 124.519903][ T7004] netlink: 'syz.4.269': attribute type 5 has an invalid length. [ 124.588362][ T7012] syz.0.271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.648739][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(full) [ 124.648768][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.648781][ T7012] Call Trace: [ 124.648789][ T7012] [ 124.648798][ T7012] dump_stack_lvl+0x189/0x250 [ 124.648841][ T7012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.648867][ T7012] ? __pfx__printk+0x10/0x10 [ 124.648895][ T7012] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.648920][ T7012] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.648947][ T7012] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 124.648974][ T7012] warn_alloc+0x214/0x310 [ 124.649007][ T7012] ? stack_depot_save_flags+0x40/0x860 [ 124.649048][ T7012] ? __pfx_warn_alloc+0x10/0x10 [ 124.649082][ T7012] ? kasan_save_track+0x4f/0x80 [ 124.649108][ T7012] ? xskq_create+0x56/0x170 [ 124.649126][ T7012] ? xsk_init_queue+0xb0/0x110 [ 124.649142][ T7012] ? xsk_setsockopt+0x4dc/0x8d0 [ 124.649169][ T7012] ? do_sock_setsockopt+0x17c/0x1b0 [ 124.649191][ T7012] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 124.649213][ T7012] ? do_syscall_64+0xfa/0x3b0 [ 124.649234][ T7012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.649264][ T7012] __vmalloc_node_range_noprof+0x125/0x12f0 [ 124.649329][ T7012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.649367][ T7012] ? __kasan_kmalloc+0x93/0xb0 [ 124.649399][ T7012] vmalloc_user_noprof+0xad/0xf0 [ 124.649429][ T7012] ? xskq_create+0xbf/0x170 [ 124.649450][ T7012] xskq_create+0xbf/0x170 [ 124.649480][ T7012] xsk_init_queue+0xb0/0x110 [ 124.649502][ T7012] xsk_setsockopt+0x4dc/0x8d0 [ 124.649536][ T7012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.649570][ T7012] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.649606][ T7012] ? aa_sock_opt_perm+0xff/0x1b0 [ 124.649630][ T7012] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.649652][ T7012] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.649685][ T7012] do_sock_setsockopt+0x17c/0x1b0 [ 124.649714][ T7012] __x64_sys_setsockopt+0x13f/0x1b0 [ 124.649745][ T7012] do_syscall_64+0xfa/0x3b0 [ 124.649766][ T7012] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.649787][ T7012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.649807][ T7012] ? clear_bhb_loop+0x60/0xb0 [ 124.649832][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.649851][ T7012] RIP: 0033:0x7f441c18ec29 [ 124.649877][ T7012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.649894][ T7012] RSP: 002b:00007f441a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.649915][ T7012] RAX: ffffffffffffffda RBX: 00007f441c3d5fa0 RCX: 00007f441c18ec29 [ 124.649930][ T7012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 124.649941][ T7012] RBP: 00007f441c211e41 R08: 0000000000000004 R09: 0000000000000000 [ 124.649953][ T7012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.649966][ T7012] R13: 00007f441c3d6038 R14: 00007f441c3d5fa0 R15: 00007ffd121c10e8 [ 124.649999][ T7012] [ 124.961658][ T7012] Mem-Info: [ 124.964841][ T7012] active_anon:6006 inactive_anon:0 isolated_anon:0 [ 124.964841][ T7012] active_file:2436 inactive_file:39867 isolated_file:0 [ 124.964841][ T7012] unevictable:768 dirty:105 writeback:0 [ 124.964841][ T7012] slab_reclaimable:10757 slab_unreclaimable:97297 [ 124.964841][ T7012] mapped:29043 shmem:1362 pagetables:1156 [ 124.964841][ T7012] sec_pagetables:0 bounce:0 [ 124.964841][ T7012] kernel_misc_reclaimable:0 [ 124.964841][ T7012] free:1334563 free_pcp:14452 free_cma:0 [ 125.158689][ T7012] Node 0 active_anon:23972kB inactive_anon:0kB active_file:9744kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116132kB dirty:52kB writeback:160kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.194859][ T7012] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.225216][ T7012] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.259221][ T7012] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 125.265166][ T7012] Node 0 DMA32 free:1438512kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23924kB inactive_anon:0kB active_file:9744kB inactive_file:157700kB unevictable:1536kB writepending:112kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:37156kB local_pcp:16476kB free_cma:0kB [ 125.311656][ T7012] lowmem_reserve[]: 0 0 1 1 1 [ 125.316471][ T7012] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 125.386608][ T7012] lowmem_reserve[]: 0 0 0 0 0 [ 125.391425][ T7012] Node 1 Normal free:3884832kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20768kB local_pcp:13120kB free_cma:0kB [ 125.542447][ T7012] lowmem_reserve[]: 0 0 0 0 0 [ 125.547274][ T7012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.587144][ T7012] Node 0 DMA32: 314*4kB (UME) 51*8kB (UME) 141*16kB (UME) 116*32kB (UM) 47*64kB (UM) 20*128kB (UME) 8*256kB (M) 5*512kB (UM) 5*1024kB (ME) 7*2048kB (UM) 342*4096kB (M) = 1438096kB [ 125.606833][ T7012] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 125.609818][ T7027] bond2: entered promiscuous mode [ 125.624035][ T7012] Node 1 Normal: 196*4kB (UE) 46*8kB (UME) 38*16kB (UME) 56*32kB (UME) 23*64kB (UME) 5*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3884832kB [ 125.664136][ T7027] bond2: entered allmulticast mode [ 125.669502][ T7012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.700461][ T7027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.709913][ T7012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.720401][ T7012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.731445][ T7012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.732548][ T7032] gre0: entered promiscuous mode [ 125.743191][ T7012] 43663 total pagecache pages [ 125.821602][ T7012] 0 pages in swap cache [ 125.851593][ T7012] Free swap = 124996kB [ 125.855825][ T7012] Total swap = 124996kB [ 125.901682][ T7012] 2097051 pages RAM [ 125.905575][ T7012] 0 pages HighMem/MovableOnly [ 125.934872][ T7012] 425672 pages reserved [ 125.939180][ T7012] 0 pages cma reserved [ 126.418232][ T7072] 8021q: VLANs not supported on lo [ 126.434982][ T7073] tipc: Enabled bearer , priority 0 [ 126.520100][ T7076] syzkaller0: entered promiscuous mode [ 126.562732][ T7076] syzkaller0: entered allmulticast mode [ 126.669362][ T7075] __nla_validate_parse: 17 callbacks suppressed [ 126.669386][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 126.727554][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.292'. [ 126.782499][ T7073] tipc: Resetting bearer [ 126.805459][ T7073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.814005][ T7073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.828636][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 126.837968][ T7073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.846154][ T7073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.933066][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 126.942781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.942985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.943007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.003494][ T7071] tipc: Resetting bearer [ 127.050801][ T7071] tipc: Disabling bearer [ 127.658682][ T7138] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 127.679887][ T7136] netlink: 'syz.0.303': attribute type 11 has an invalid length. [ 127.696298][ T7136] netlink: 224 bytes leftover after parsing attributes in process `syz.0.303'. [ 127.719072][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 127.805685][ T7149] netlink: 'syz.0.307': attribute type 11 has an invalid length. [ 127.818037][ T7149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.831221][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.886293][ T7141] bond1: (slave geneve2): making interface the new active one [ 127.886890][ T7151] netlink: 150460 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.919438][ T7141] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.025799][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.213201][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 128.256482][ T7164] tipc: Enabled bearer , priority 0 [ 128.323655][ T7167] netlink: 56 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.399633][ T7164] syzkaller0: entered promiscuous mode [ 128.441904][ T7164] syzkaller0: entered allmulticast mode [ 128.450870][ T7164] tipc: Resetting bearer [ 128.485548][ T7163] tipc: Resetting bearer [ 128.570665][ T7176] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 128.819313][ T7186] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 129.100213][ T7198] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 129.343171][ T10] tipc: Node number set to 447944037 [ 129.895137][ T7199] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 130.219518][ T7163] tipc: Disabling bearer [ 130.230826][ T7186] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 130.285967][ T7190] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 130.375690][ T7198] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 130.399607][ T7196] team0: No ports can be present during mode change [ 131.020331][ T7237] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 131.060019][ T7237] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 131.115303][ T7237] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 131.173769][ T7237] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 131.193369][ T7237] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 131.224608][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 131.237007][ T7237] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 132.532752][ T7278] team0: Device wireguard0 is of different type [ 132.691095][ T7288] blkio.reset_stats is deprecated [ 133.227381][ T7314] trusted_key: syz.1.354 sent an empty control message without MSG_MORE. [ 133.247690][ T7318] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 133.269469][ T7318] __nla_validate_parse: 9 callbacks suppressed [ 133.269488][ T7318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.353'. [ 133.513727][ T7333] Bluetooth: MGMT ver 1.23 [ 133.697882][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 133.714410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 134.279090][ T7369] netlink: 576 bytes leftover after parsing attributes in process `syz.2.369'. [ 134.678066][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 134.881828][ T7399] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 134.889844][ T7399] netlink: 17 bytes leftover after parsing attributes in process `syz.1.378'. [ 135.092576][ T7398] vlan2: entered promiscuous mode [ 135.108003][ T7398] bridge0: entered promiscuous mode [ 135.589722][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 135.804759][ T7440] tipc: Enabling of bearer rejected, failed to enable media [ 136.013651][ T7455] netlink: 'syz.0.394': attribute type 2 has an invalid length. [ 136.142594][ T7460] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 137.236257][ T7498] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 137.244230][ T7498] netlink: 224 bytes leftover after parsing attributes in process `syz.3.406'. [ 137.477187][ T7510] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 137.743650][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 137.768776][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 137.789631][ T7510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.844175][ T7513] bond2: (slave gretap1): making interface the new active one [ 137.869870][ T7513] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.897323][ T7522] lo speed is unknown, defaulting to 1000 [ 137.953301][ T7522] lo speed is unknown, defaulting to 1000 [ 138.005539][ T7522] lo speed is unknown, defaulting to 1000 [ 138.032256][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 138.188147][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.195311][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.830883][ T7522] infiniband syz0: set active [ 138.837848][ T7522] infiniband syz0: added lo [ 138.846802][ T7522] syz0: rxe_create_cq: returned err = -12 [ 138.857810][ T7522] infiniband syz0: Couldn't create ib_mad CQ [ 138.864597][ T7522] infiniband syz0: Couldn't open port 1 [ 138.915121][ T7568] __nla_validate_parse: 1 callbacks suppressed [ 138.915143][ T7568] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.422'. [ 138.929220][ T7522] RDS/IB: syz0: added [ 138.950947][ T7568] netlink: zone id is out of range [ 138.957996][ T10] lo speed is unknown, defaulting to 1000 [ 138.958539][ T7522] smc: adding ib device syz0 with port count 1 [ 138.976407][ T7568] netlink: zone id is out of range [ 138.978519][ T7522] smc: ib device syz0 port 1 has pnetid [ 138.989600][ T7568] netlink: zone id is out of range [ 138.994628][ T5948] lo speed is unknown, defaulting to 1000 [ 139.000411][ T7568] netlink: zone id is out of range [ 139.016780][ T7568] netlink: zone id is out of range [ 139.028127][ T7568] netlink: zone id is out of range [ 139.048164][ T7522] lo speed is unknown, defaulting to 1000 [ 139.071092][ T7568] netlink: zone id is out of range [ 139.077592][ T7568] netlink: zone id is out of range [ 139.092109][ T7568] netlink: zone id is out of range [ 139.098265][ T7568] netlink: zone id is out of range [ 139.127323][ T7572] netlink: 148 bytes leftover after parsing attributes in process `syz.3.425'. [ 139.176177][ T7572] netlink: 148 bytes leftover after parsing attributes in process `syz.3.425'. [ 139.227956][ T7578] sctp: [Deprecated]: syz.2.424 (pid 7578) Use of int in max_burst socket option. [ 139.227956][ T7578] Use struct sctp_assoc_value instead [ 139.432912][ T7585] tipc: Enabled bearer , priority 0 [ 139.492067][ T7583] syzkaller0: entered promiscuous mode [ 139.533909][ T7583] syzkaller0: entered allmulticast mode [ 139.612161][ T7586] tipc: Resetting bearer [ 139.668145][ T7581] tipc: Resetting bearer [ 139.787797][ T7581] tipc: Disabling bearer [ 139.971707][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 140.099033][ T7612] netlink: 104 bytes leftover after parsing attributes in process `syz.0.432'. [ 140.204304][ T7522] lo speed is unknown, defaulting to 1000 [ 140.295356][ T7616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.434'. [ 140.439924][ T7624] Unsupported ieee802154 address type: 0 [ 140.449859][ T7624] Unsupported ieee802154 address type: 0 [ 140.456388][ T7624] Unsupported ieee802154 address type: 0 [ 140.462498][ T7624] Unsupported ieee802154 address type: 0 [ 140.468282][ T7624] Unsupported ieee802154 address type: 0 [ 140.649051][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 140.853812][ T7636] macvlan0: entered promiscuous mode [ 140.859285][ T7636] macvlan0: entered allmulticast mode [ 140.869788][ T7636] bond3: entered promiscuous mode [ 140.877387][ T7636] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 140.894370][ T7636] bond3: left promiscuous mode [ 140.945754][ T7522] lo speed is unknown, defaulting to 1000 [ 141.007142][ T7648] IPv6: Can't replace route, no match found [ 141.188836][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 141.456473][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 141.470720][ T7663] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 141.547395][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 141.570763][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 141.595214][ T1100] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 141.634738][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 141.694096][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 141.898392][ T7522] lo speed is unknown, defaulting to 1000 [ 142.222831][ T7690] block nbd2: shutting down sockets [ 142.243160][ T51] block nbd1: Receive control failed (result -32) [ 142.527254][ T7708] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 142.738164][ T7522] lo speed is unknown, defaulting to 1000 [ 143.416183][ T7743] veth1_macvtap: left promiscuous mode [ 143.465456][ T7743] macsec0: entered promiscuous mode [ 143.491570][ T7743] macsec0: entered allmulticast mode [ 143.565214][ T7745] veth1_macvtap: entered promiscuous mode [ 143.571035][ T7745] veth1_macvtap: entered allmulticast mode [ 143.590876][ T7745] macsec0: left promiscuous mode [ 143.596820][ T7745] macsec0: left allmulticast mode [ 143.602741][ T7745] veth1_macvtap: left allmulticast mode [ 144.444762][ T7772] __nla_validate_parse: 9 callbacks suppressed [ 144.444784][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. [ 144.557720][ T7774] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 144.566998][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 144.596348][ T7774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.480'. [ 144.745628][ T7772] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 144.967597][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 145.167562][ T7804] netlink: 51 bytes leftover after parsing attributes in process `syz.4.488'. [ 145.178856][ T7804] netlink: 9 bytes leftover after parsing attributes in process `syz.4.488'. [ 145.259810][ T7814] netlink: 10 bytes leftover after parsing attributes in process `syz.3.492'. [ 145.410533][ T7818] netlink: 96 bytes leftover after parsing attributes in process `syz.2.495'. [ 145.446080][ T7818] Bluetooth: MGMT ver 1.23 [ 145.454279][ T7823] netem: change failed [ 145.474746][ T7823] netem: change failed [ 145.642605][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 145.652552][ T7834] tc_dump_action: action bad kind [ 145.658605][ T7834] netlink: 'syz.3.499': attribute type 1 has an invalid length. [ 145.667729][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.499'. [ 145.932547][ T30] audit: type=1800 audit(1758362910.316:2): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="memory.events" dev="tmpfs" ino=573 res=0 errno=0 [ 145.978054][ T7848] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.998329][ T30] audit: type=1800 audit(1758362910.386:3): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="memory.events" dev="tmpfs" ino=573 res=0 errno=0 [ 147.116299][ T7902] gtp0: entered promiscuous mode [ 147.121323][ T7902] gtp0: entered allmulticast mode [ 147.155461][ T7904] gtp1: entered promiscuous mode [ 147.160482][ T7904] gtp1: entered allmulticast mode [ 147.398281][ T7912] sctp: [Deprecated]: syz.4.521 (pid 7912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.398281][ T7912] Use struct sctp_sack_info instead [ 147.590049][ T7923] bridge1: port 1(veth5) entered blocking state [ 147.618934][ T7923] bridge1: port 1(veth5) entered disabled state [ 147.635451][ T7923] veth5: entered allmulticast mode [ 147.647062][ T7923] veth5: entered promiscuous mode [ 147.676267][ T7924] vlan3: entered allmulticast mode [ 147.684339][ T7924] veth0_to_bond: entered allmulticast mode [ 147.690644][ T7924] bridge1: port 2(vlan3) entered blocking state [ 147.697757][ T7924] bridge1: port 2(vlan3) entered disabled state [ 147.710744][ T7924] vlan3: entered promiscuous mode [ 147.717872][ T7924] veth0_to_bond: entered promiscuous mode [ 147.949313][ T7934] IPVS: length: 8 != 1152 [ 147.966004][ T7936] sctp: [Deprecated]: syz.4.527 (pid 7936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.966004][ T7936] Use struct sctp_sack_info instead [ 148.102854][ T3522] wlan1: Trigger new scan to find an IBSS to join [ 148.144288][ T7910] lec:lec_atm_close: lec0: Shut down! [ 148.598979][ T7969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.606428][ T7969] IPv6: NLM_F_CREATE should be set when creating new route [ 148.745547][ T7975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.989607][ T3558] nci: nci_ntf_packet: unknown ntf opcode 0x805 [ 149.011697][ T7975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.310757][ T7975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.441277][ T7975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.505614][ T8013] __nla_validate_parse: 9 callbacks suppressed [ 149.505629][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 149.523333][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 149.690315][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.732389][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.759735][ T1005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.838585][ T1005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.989541][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 150.003497][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 150.022454][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 150.022460][ T3007] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.022594][ T3007] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.059178][ T3007] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.114959][ T1005] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.147260][ T8033] tipc: Enabled bearer , priority 0 [ 150.165291][ T8033] syzkaller0: entered promiscuous mode [ 150.171025][ T8033] syzkaller0: entered allmulticast mode [ 150.187651][ T8035] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 150.288400][ T8033] tipc: Resetting bearer [ 150.298835][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 150.410753][ T8042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.425330][ T8042] bond5: (slave bond6): making interface the new active one [ 150.434264][ T8042] bond5: (slave bond6): Enslaving as an active interface with an up link [ 150.446984][ T8025] tipc: Resetting bearer [ 150.467655][ T8025] tipc: Disabling bearer [ 150.486357][ T8045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.498620][ T8049] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 151.148453][ T1005] wlan1: Trigger new scan to find an IBSS to join [ 151.252927][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 151.259063][ T8082] lo speed is unknown, defaulting to 1000 [ 152.049350][ T8103] netlink: 256 bytes leftover after parsing attributes in process `syz.2.573'. [ 152.085557][ T8102] netlink: 256 bytes leftover after parsing attributes in process `syz.2.573'. [ 152.399657][ T8116] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 152.568512][ T8124] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 152.638955][ T8116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.714461][ T8117] bond3: (slave gretap1): making interface the new active one [ 152.725613][ T8117] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 152.753836][ T8119] vlan4: entered allmulticast mode [ 152.759141][ T8119] bond3: entered allmulticast mode [ 152.765222][ T8119] gretap1: entered allmulticast mode [ 152.776296][ T8119] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 152.860644][ T8131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.881413][ T8131] bond4: (slave bond5): making interface the new active one [ 152.890122][ T8131] bond4: (slave bond5): Enslaving as an active interface with an up link [ 152.943785][ T8132] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.981667][ T8132] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.361362][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.586'. [ 153.823321][ T8168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.121437][ T8195] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 154.138169][ T8195] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 154.549757][ T8208] veth3: entered allmulticast mode [ 154.783714][ T8219] lo speed is unknown, defaulting to 1000 [ 154.795550][ T8232] __nla_validate_parse: 6 callbacks suppressed [ 154.795570][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 155.145831][ T13] wlan1: Trigger new scan to find an IBSS to join [ 155.152191][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 155.186897][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.214685][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.256840][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.267589][ T8250] netlink: 72 bytes leftover after parsing attributes in process `syz.0.615'. [ 155.280799][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.063215][ T3007] wlan1: Creating new IBSS network, BSSID 1e:75:5f:b1:06:ff [ 156.719814][ T8265] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 156.761790][ T8265] bridge0: port 3(team0) entered blocking state [ 156.769769][ T8265] bridge0: port 3(team0) entered disabled state [ 156.823177][ T8265] team0: entered allmulticast mode [ 156.846247][ T8265] team_slave_0: entered allmulticast mode [ 156.868376][ T8265] team_slave_1: entered allmulticast mode [ 156.903956][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 156.926284][ T8265] team0: entered promiscuous mode [ 156.941832][ T8265] team_slave_0: entered promiscuous mode [ 156.951241][ T8265] team_slave_1: entered promiscuous mode [ 156.959357][ T8265] bridge0: port 3(team0) entered blocking state [ 156.966994][ T8265] bridge0: port 3(team0) entered forwarding state [ 156.991252][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.625'. [ 157.062639][ T5877] Bluetooth: hci0: command 0x0401 tx timeout [ 157.068903][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.554797][ T8312] nbd: must specify a size in bytes for the device [ 157.582688][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.634'. [ 157.757177][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 157.757577][ T5921] IPVS: starting estimator thread 0... [ 157.845876][ T8322] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 157.879617][ T8322] netlink: 224 bytes leftover after parsing attributes in process `syz.1.636'. [ 157.892774][ T8324] IPVS: using max 28 ests per chain, 67200 per kthread [ 158.190913][ T8346] netlink: 52 bytes leftover after parsing attributes in process `syz.2.642'. [ 158.218636][ T8349] netlink: 100 bytes leftover after parsing attributes in process `syz.1.643'. [ 158.315957][ T8353] xfrm1: entered promiscuous mode [ 158.322735][ T8353] xfrm1: entered allmulticast mode [ 158.745654][ T8379] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 158.787651][ T8379] team0: Device veth1_macvtap failed to register rx_handler [ 158.922248][ T8379] netlink: 'syz.4.654': attribute type 3 has an invalid length. [ 159.264542][ T8395] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 159.331232][ T8401] tipc: Enabled bearer , priority 0 [ 159.352478][ T8401] syzkaller0: entered promiscuous mode [ 159.358017][ T8401] syzkaller0: entered allmulticast mode [ 159.476768][ T8404] tipc: Resetting bearer [ 159.516401][ T8404] tipc: Disabling bearer [ 159.528563][ T8415] netlink: 'syz.1.664': attribute type 3 has an invalid length. [ 159.677488][ T8421] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 159.806057][ T8421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.853008][ T8421] bond6: (slave bond7): making interface the new active one [ 159.875383][ T8421] bond6: (slave bond7): Enslaving as an active interface with an up link [ 159.897719][ T8426] bond6: entered promiscuous mode [ 159.905852][ T8426] bond7: entered promiscuous mode [ 159.931857][ T8426] bond6: entered allmulticast mode [ 159.937261][ T8426] bond7: entered allmulticast mode [ 159.952880][ T8426] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.023134][ T8431] __nla_validate_parse: 9 callbacks suppressed [ 160.023155][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 160.347670][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 160.738464][ T8442] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 160.746589][ T8442] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.882094][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 161.091371][ T8462] netlink: 5 bytes leftover after parsing attributes in process `syz.4.680'. [ 161.748678][ T8497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.693'. [ 161.758869][ T8498] team0: Device wireguard0 is of different type [ 162.076030][ T8509] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 162.300235][ T8527] net_ratelimit: 219 callbacks suppressed [ 162.300257][ T8527] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 162.379794][ T8527] netlink: 'syz.4.701': attribute type 5 has an invalid length. [ 162.444578][ T8536] 8021q: VLANs not supported on vxcan1 [ 162.955092][ T8568] netlink: 'syz.4.713': attribute type 11 has an invalid length. [ 163.338827][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 163.386724][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 164.142304][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 164.453319][ T8639] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 164.468222][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 164.581632][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.590751][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.636058][ T8655] openvswitch: netlink: Message has 4 unknown bytes. [ 164.648731][ T8655] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 164.800394][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.738'. [ 164.876310][ T8633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.899873][ T8633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.090186][ T5955] lo speed is unknown, defaulting to 1000 [ 165.117654][ T5955] syz0: Port: 1 Link DOWN [ 165.197917][ T8642] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 165.336298][ T8679] __nla_validate_parse: 1 callbacks suppressed [ 165.336317][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 165.397351][ T1005] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.410601][ T1005] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.423781][ T1005] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.433490][ T1005] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.466388][ T8662] lo speed is unknown, defaulting to 1000 [ 165.530628][ T1005] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.545293][ T1005] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.593330][ T1005] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.614290][ T1005] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.805330][ T8702] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 165.830062][ T8702] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 165.949168][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.963698][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 165.969863][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.995679][ T8695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.012692][ T8670] lo speed is unknown, defaulting to 1000 [ 166.018831][ T8704] syzkaller0: entered promiscuous mode [ 166.027417][ T8670] syz0: Port: 1 Link ACTIVE [ 166.034793][ T8704] syzkaller0: entered allmulticast mode [ 166.044751][ T8703] tipc: Started in network mode [ 166.049805][ T8703] tipc: Node identity e216fe57f93d, cluster identity 4711 [ 166.057874][ T8703] tipc: Enabled bearer , priority 0 [ 166.088630][ T8651] lo speed is unknown, defaulting to 1000 [ 166.140696][ T8707] tipc: Resetting bearer [ 166.169931][ T8707] tipc: Disabling bearer [ 166.287731][ T8724] openvswitch: netlink: IPv6 tunnel dst address is zero [ 166.388902][ T8731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 166.632330][ T8740] team0: vlans aren't supported yet for dev_uc|mc_add() [ 166.917235][ T8753] geneve4: entered promiscuous mode [ 166.926790][ T8753] geneve4: entered allmulticast mode [ 166.937146][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 19999 - 0 [ 166.939437][ T8755] netlink: 277 bytes leftover after parsing attributes in process `syz.2.762'. [ 166.954505][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 19999 - 0 [ 166.968695][ T8753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.761'. [ 166.981271][ T8753] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 167.005166][ T1100] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 19999 - 0 [ 167.017972][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 19999 - 0 [ 167.320132][ T8777] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 167.414537][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.766'. [ 167.472900][ T8779] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.544474][ T8779] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 167.573140][ T8779] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 167.682893][ T8785] netlink: 'syz.4.767': attribute type 39 has an invalid length. [ 167.715598][ T8777] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.736666][ T8777] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 167.825892][ T8792] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 168.014404][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 168.175421][ T8805] bridge_slave_0: left allmulticast mode [ 168.181151][ T8805] bridge_slave_0: left promiscuous mode [ 168.245449][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.307376][ T8805] bridge_slave_1: left allmulticast mode [ 168.326897][ T8805] bridge_slave_1: left promiscuous mode [ 168.348389][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.386145][ T8805] bond0: (slave bond_slave_0): Releasing backup interface [ 168.420745][ T8805] bond0: (slave bond_slave_1): Releasing backup interface [ 168.445398][ T8805] team0: Port device team_slave_0 removed [ 168.456782][ T8805] team0: Port device team_slave_1 removed [ 168.463792][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.489792][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.512441][ T8805] bond3: (slave geneve2): Releasing backup interface [ 168.548406][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 168.557677][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 168.568823][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 168.580519][ T3558] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 168.613969][ T3558] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 168.642482][ T3558] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 168.670863][ T8829] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 168.679640][ T3558] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 168.744809][ T8829] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 168.777004][ T8835] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 168.855265][ T8835] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 169.213276][ T8864] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 169.711245][ T8893] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 169.734354][ T8893] dummy0: entered promiscuous mode [ 169.759722][ T8893] bridge0: port 3(dummy0) entered blocking state [ 169.812422][ T8893] bridge0: port 3(dummy0) entered disabled state [ 169.824807][ T8893] dummy0: entered allmulticast mode [ 169.839951][ T8893] bridge0: port 3(dummy0) entered blocking state [ 169.846554][ T8893] bridge0: port 3(dummy0) entered forwarding state [ 170.351999][ T8927] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 170.518970][ T8935] __nla_validate_parse: 8 callbacks suppressed [ 170.518990][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.812'. [ 170.674167][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.812'. [ 170.823731][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 170.856475][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 171.238735][ T8978] tipc: New replicast peer: 255.255.255.255 [ 171.247341][ T8978] tipc: Enabled bearer , priority 10 [ 171.464214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 171.491028][ T8992] netlink: 'syz.2.828': attribute type 2 has an invalid length. [ 171.511891][ T8992] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 171.985645][ T9014] netlink: 'syz.1.835': attribute type 5 has an invalid length. [ 172.131241][ T9015] veth3: entered allmulticast mode [ 172.362400][ T8661] tipc: Node number set to 455867991 [ 172.369441][ T9034] openvswitch: netlink: Invalid VLAN frame [ 172.397399][ T9034] raw_sendmsg: syz.1.842 forgot to set AF_INET. Fix it! [ 172.524133][ T9041] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 172.536458][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 172.541691][ T9046] sctp: [Deprecated]: syz.0.844 (pid 9046) Use of int in maxseg socket option. [ 172.541691][ T9046] Use struct sctp_assoc_value instead [ 172.566261][ T9041] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.843'. [ 172.580530][ T9041] nbd: must specify at least one socket [ 172.670238][ T9053] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 172.722927][ T9053] bond4: entered promiscuous mode [ 172.728425][ T9053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.773377][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.847'. [ 172.872659][ T9054] bond4: (slave bridge1): making interface the new active one [ 172.883242][ T9054] bridge1: entered promiscuous mode [ 172.890091][ T9054] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 173.167731][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 173.449043][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.853'. [ 173.691393][ T9086] netlink: 'syz.1.856': attribute type 15 has an invalid length. [ 173.718225][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 173.793326][ T3007] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.802190][ T9086] netlink: 'syz.1.856': attribute type 15 has an invalid length. [ 173.833398][ T3007] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.853779][ T3007] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.893978][ T3007] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.936094][ T9091] netlink: 'syz.2.859': attribute type 5 has an invalid length. [ 173.998291][ T9097] block nbd4: not configured, cannot reconfigure [ 174.057648][ T9096] bridge_slave_0: left allmulticast mode [ 174.070926][ T9096] bridge_slave_0: left promiscuous mode [ 174.088148][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.128952][ T9096] bridge_slave_1: left allmulticast mode [ 174.138130][ T9096] bridge_slave_1: left promiscuous mode [ 174.152265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.168828][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.195580][ T9096] bond0: (slave bond_slave_0): Releasing backup interface [ 174.228813][ T9096] bond0: (slave bond_slave_1): Releasing backup interface [ 174.276285][ T9096] team0: Port device team_slave_0 removed [ 174.307611][ T9096] team0: Port device team_slave_1 removed [ 174.329645][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.340952][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.349961][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.358493][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.382476][ T9096] bond0: (slave geneve1): Releasing backup interface [ 174.411372][ T9110] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 174.423637][ T9110] netlink: 'syz.3.864': attribute type 2 has an invalid length. [ 174.445146][ T9096] bond4: (slave geneve3): Releasing backup interface [ 174.460055][ T9096] bond5: (slave bond6): Releasing backup interface [ 174.518650][ T3558] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 174.547986][ T3558] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 174.592568][ T3558] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 174.630235][ T3558] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 174.656466][ T9116] netlink: 'syz.1.867': attribute type 12 has an invalid length. [ 174.813337][ T9124] netlink: 'syz.2.869': attribute type 11 has an invalid length. [ 175.275871][ T9146] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.571888][ T9168] __nla_validate_parse: 3 callbacks suppressed [ 175.571907][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 175.579156][ T9162] netlink: 52 bytes leftover after parsing attributes in process `syz.3.884'. [ 175.599873][ T9165] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 175.618609][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.882'. [ 175.789591][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 175.879890][ T9178] openvswitch: netlink: Missing key (keys=40, expected=100) [ 176.639152][ T9219] tipc: Bearer : already 2 bearers with priority 10 [ 176.683227][ T9219] tipc: Bearer : trying with adjusted priority [ 176.696230][ T9219] tipc: Enabling of bearer rejected, failed to enable media [ 177.165071][ T9252] dvmrp0: entered allmulticast mode [ 177.182855][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.914'. [ 177.208483][ T9255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.809275][ T9279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.333142][ T1005] syzkaller0: tun_net_xmit 76 [ 178.338764][ T1005] syzkaller0: tun_net_xmit 48 [ 178.382346][ T8670] syzkaller0: tun_net_xmit 76 [ 179.545752][ T9339] netlink: 56 bytes leftover after parsing attributes in process `syz.4.937'. [ 180.578328][ T9354] openvswitch: netlink: IPv4 tun info is not correct [ 180.607087][ T9357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.941'. [ 180.766748][ T9363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.798052][ T9366] xt_l2tp: wrong L2TP version: 0 [ 180.833423][ T9365] xt_l2tp: wrong L2TP version: 0 [ 180.848347][ T9366] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 180.856302][ T9366] netlink: 244 bytes leftover after parsing attributes in process `syz.2.944'. [ 181.541004][ T9415] netlink: 356 bytes leftover after parsing attributes in process `syz.1.956'. [ 181.999002][ T9442] netlink: 80 bytes leftover after parsing attributes in process `syz.1.967'. [ 182.054617][ T9449] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 182.075315][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 182.133526][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 182.322186][ T9462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.352946][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'. [ 182.775821][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 183.110859][ T9491] veth0: entered promiscuous mode [ 183.177540][ T9490] veth0: left promiscuous mode [ 183.443060][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 183.461887][ T9509] netlink: 388 bytes leftover after parsing attributes in process `syz.3.985'. [ 183.516083][ T9511] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 183.796768][ T9523] gtp0: entered promiscuous mode [ 183.819372][ T9523] gtp0: entered allmulticast mode [ 184.235630][ T9544] lo speed is unknown, defaulting to 1000 [ 184.739206][ T9563] tipc: Enabling of bearer rejected, failed to enable media [ 184.817993][ T9563] netlink: 'syz.4.999': attribute type 29 has an invalid length. [ 184.840823][ T9565] netlink: 'syz.0.1000': attribute type 8 has an invalid length. [ 185.408733][ T9585] tipc: Enabled bearer , priority 0 [ 185.416344][ T9587] syzkaller0: entered promiscuous mode [ 185.422947][ T9587] syzkaller0: entered allmulticast mode [ 185.433244][ T9585] tipc: Enabling of bearer rejected, already enabled [ 185.443433][ T9585] tipc: Enabling of bearer rejected, already enabled [ 185.464308][ T9585] tipc: Enabling of bearer rejected, already enabled [ 185.841069][ T9585] tipc: Resetting bearer [ 185.932282][ T9585] tipc: Disabling bearer [ 186.022603][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 186.076609][ T9604] netlink: 'syz.3.1010': attribute type 1 has an invalid length. [ 186.196520][ T9614] __nla_validate_parse: 7 callbacks suppressed [ 186.196542][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 186.265715][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1011'. [ 186.324541][ T9617] nbd: couldn't find device at index 151519240 [ 186.394784][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1014'. [ 186.681819][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 187.229231][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 187.237044][ T9655] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 187.238592][ T9652] netlink: 'syz.3.1024': attribute type 7 has an invalid length. [ 187.254639][ T9652] netlink: 'syz.3.1024': attribute type 8 has an invalid length. [ 187.273153][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 187.288394][ T9655] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 187.296955][ T9662] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 187.308831][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 187.351886][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 187.603826][ T9676] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 187.613973][ T9676] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 188.057949][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 188.082736][ T9704] openvswitch: netlink: Key type 29 is not supported [ 188.105041][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.309919][ T9712] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1044'. [ 188.514952][ T9723] syzkaller0: entered promiscuous mode [ 188.520499][ T9723] syzkaller0: entered allmulticast mode [ 188.544266][ T9723] tipc: Enabled bearer , priority 0 [ 188.555695][ T9723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.624619][ T9723] tipc: Resetting bearer [ 188.664110][ T9723] tipc: Resetting bearer [ 188.715102][ T9723] tipc: Disabling bearer [ 188.725448][ T9735] netlink: 'syz.3.1051': attribute type 16 has an invalid length. [ 188.949566][ T9737] netlink: 'syz.4.1053': attribute type 5 has an invalid length. [ 189.186088][ T9753] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.198018][ T9754] bond8: option mode: unable to set because the bond device is up [ 189.208177][ T9759] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 189.308901][ T9763] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 189.508383][ T9784] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.553665][ T9785] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.561081][ T9785] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 189.575469][ T9785] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 191.269292][ T9868] __nla_validate_parse: 11 callbacks suppressed [ 191.269313][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1096'. [ 191.317152][ T9868] unsupported nlmsg_type 40 [ 191.440610][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c8f400: rx timeout, send abort [ 191.550601][ T9884] vlan3: entered promiscuous mode [ 191.559724][ T9884] vlan3: entered allmulticast mode [ 191.565520][ T9884] hsr_slave_1: entered allmulticast mode [ 191.730755][ T9894] validate_nla: 5 callbacks suppressed [ 191.730775][ T9894] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 191.751977][ T9894] netlink: 'syz.3.1102': attribute type 11 has an invalid length. [ 191.768539][ T9894] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1102'. [ 191.789340][ T9894] netlink: 'syz.3.1102': attribute type 21 has an invalid length. [ 191.803295][ T9894] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1102'. [ 191.921200][ T9900] C: renamed from lo (while UP) [ 191.940734][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058077800: rx timeout, send abort [ 191.950061][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c8f400: abort rx timeout. Force session deactivation [ 192.093782][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 192.107259][ T9907] IPVS: Error joining to the multicast group [ 192.449082][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058077800: abort rx timeout. Force session deactivation [ 192.513811][ T9928] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 192.775285][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1115'. [ 193.081256][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.096401][ T9954] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 193.206329][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 193.556771][ T9972] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.668853][ T9972] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 193.715002][ T9972] bond5: (slave macvlan0): Enslaving as a backup interface with a down link [ 193.818119][ T9992] xt_socket: unknown flags 0x50 [ 194.584996][T10040] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 194.837097][T10044] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.877235][T10044] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 194.888852][T10044] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 194.954604][T10040] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.969837][T10040] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.218793][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 195.429112][T10072] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 195.498690][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 195.522375][T10070] netlink: 'syz.1.1151': attribute type 9 has an invalid length. [ 195.560816][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 195.605879][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 195.615829][ T3522] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 195.618952][T10070] netlink: 'syz.1.1151': attribute type 9 has an invalid length. [ 195.654783][ T3522] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 195.711946][ T3522] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 195.746875][ T3522] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 195.999426][T10101] netlink: zone id is out of range [ 196.025935][T10101] netlink: zone id is out of range [ 196.031128][T10101] netlink: zone id is out of range [ 196.063882][T10101] netlink: zone id is out of range [ 196.082018][T10101] netlink: get zone limit has 8 unknown bytes [ 196.090404][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 196.442809][T10136] __nla_validate_parse: 5 callbacks suppressed [ 196.442828][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 196.503948][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'. [ 196.646148][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 196.658481][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 196.670613][T10136] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 196.681138][T10136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.734919][T10139] vlan1: entered allmulticast mode [ 196.781992][T10139] veth0_to_bond: entered allmulticast mode [ 196.986970][T10156] netlink: 'syz.4.1175': attribute type 6 has an invalid length. [ 197.137083][T10171] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 197.285790][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 197.308405][T10186] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 197.387258][T10188] ip6erspan0: entered promiscuous mode [ 197.823342][T10205] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 197.854901][T10205] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1188'. [ 197.874941][T10205] nbd: must specify a device to reconfigure [ 198.294070][T10219] syzkaller0: entered promiscuous mode [ 198.300291][T10219] syzkaller0: entered allmulticast mode [ 198.317424][T10190] mpoa:mpoad_close: () going down [ 198.645059][T10207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.660811][T10207] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 198.713064][T10207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.719465][T10207] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 198.778843][T10207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.785509][T10207] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 198.818178][T10207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.829569][T10207] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 199.626826][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.322326][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1198'. [ 200.484897][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 200.751927][T10267] syzkaller1: entered promiscuous mode [ 200.764600][T10267] syzkaller1: entered allmulticast mode [ 200.827886][T10267] tipc: Enabled bearer , priority 0 [ 200.854586][T10269] tipc: Enabled bearer , priority 0 [ 200.862050][T10267] syzkaller0: entered promiscuous mode [ 200.877802][T10267] syzkaller0: entered allmulticast mode [ 200.903525][T10269] syzkaller0: entered promiscuous mode [ 200.909428][T10269] syzkaller0: entered allmulticast mode [ 200.970746][T10266] tipc: Resetting bearer [ 200.987871][T10266] tipc: Disabling bearer [ 201.010711][T10269] tipc: Resetting bearer [ 201.076000][T10268] tipc: Resetting bearer [ 201.116733][T10268] tipc: Disabling bearer [ 256.671828][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 257.488232][T10340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1226'. [ 257.503090][T10347] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 257.883618][T10374] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 258.076381][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 258.101903][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 258.171829][T10389] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.231939][T10391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1242'. [ 258.282218][T10398] netlink: 'syz.3.1243': attribute type 2 has an invalid length. [ 258.290049][T10398] netlink: 1176 bytes leftover after parsing attributes in process `syz.3.1243'. [ 258.832573][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'. [ 259.245932][T10433] ip6gre1: entered allmulticast mode [ 259.316802][T10438] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 [ 259.718632][T10455] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1262'. [ 260.190026][T10483] netlink: 'syz.0.1269': attribute type 9 has an invalid length. [ 260.215538][T10483] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1269'. [ 260.255939][T10482] IPVS: set_ctl: invalid protocol: 20 100.1.1.2:0 [ 260.439830][T10492] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 260.621082][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 260.630979][T10497] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 260.773159][T10502] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 260.773638][T10509] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 260.836131][T10502] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 260.936196][T10509] bond10: entered promiscuous mode [ 260.942189][T10509] 8021q: adding VLAN 0 to HW filter on device bond10 [ 260.958905][T10497] vlan0: entered allmulticast mode [ 260.964784][T10497] bridge0: entered allmulticast mode [ 260.977551][T10521] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 260.989303][T10497] bond4: (slave vlan0): making interface the new active one [ 261.020119][T10497] bond4: (slave vlan0): Enslaving as an active interface with an up link [ 261.068097][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.103778][T10512] 8021q: adding VLAN 0 to HW filter on device bond10 [ 261.138969][T10512] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 261.180454][T10512] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 261.236629][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.236973][T10512] bond10: (slave wireguard0): making interface the new active one [ 261.268071][T10512] wireguard0: entered promiscuous mode [ 261.276620][T10512] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 261.322304][T10514] macvlan0: entered promiscuous mode [ 261.327771][T10514] macvlan0: entered allmulticast mode [ 261.334317][T10514] bond4: entered promiscuous mode [ 261.335848][T10537] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 261.339477][T10514] vlan0: entered promiscuous mode [ 261.356825][T10514] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 261.368805][T10514] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of vlan0 [ 261.387987][T10514] bond4: left promiscuous mode [ 261.394220][T10514] vlan0: left promiscuous mode [ 261.444587][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.457814][T10537] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 261.467531][T10538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.475119][T10538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.484271][T10538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.494545][T10538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.510012][T10514] syz.2.1275 (10514) used greatest stack depth: 17816 bytes left [ 261.527487][T10538] bond0: (slave batadv0): Releasing backup interface [ 261.828616][T10549] veth3: left allmulticast mode [ 261.840693][T10549] ip6gre1: left allmulticast mode [ 262.195086][T10569] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 262.338911][T10578] __nla_validate_parse: 1 callbacks suppressed [ 262.338931][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 262.620737][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 262.814729][T10605] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 262.884492][T10605] bond5: entered promiscuous mode [ 262.891867][T10605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.085004][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 263.094554][T10621] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 263.477564][T10648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1318'. [ 263.530167][T10652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'. [ 264.026845][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 264.056927][T10677] openvswitch: netlink: IPv4 tun info is not correct [ 264.153994][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 264.185391][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 264.225452][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1331'. [ 264.346901][T10699] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1335'. [ 264.410130][T10699] tipc: Enabled bearer , priority 0 [ 264.456621][T10705] tls_set_device_offload_rx: netdev not found [ 264.554507][T10699] syzkaller0: entered promiscuous mode [ 264.560384][T10699] syzkaller0: entered allmulticast mode [ 264.567353][T10699] tipc: Resetting bearer [ 264.613882][T10697] tipc: Resetting bearer [ 265.466231][ T8670] tipc: Node number set to 2793110557 [ 266.764030][T10697] tipc: Disabling bearer [ 267.135052][T10754] netlink: 'syz.1.1352': attribute type 5 has an invalid length. [ 267.238234][T10762] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 267.504749][T10772] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 267.823681][T10786] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 267.876682][T10786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.030982][T10793] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 268.214025][T10799] __nla_validate_parse: 2 callbacks suppressed [ 268.214045][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 268.241215][T10801] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 268.262643][T10801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1360'. [ 268.342595][T10801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.350351][T10801] IPv6: NLM_F_CREATE should be set when creating new route [ 268.418244][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 268.423482][T10801] tipc: Enabling of bearer rejected, failed to enable media [ 268.604630][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 268.634476][T10823] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 268.650817][T10815] vlan1: entered allmulticast mode [ 268.674125][T10815] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 268.705129][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 268.705129][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 268.705156][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 268.737255][T10821] netlink: 'syz.4.1369': attribute type 14 has an invalid length. [ 268.779043][T10821] netlink: 'syz.4.1369': attribute type 13 has an invalid length. [ 268.794011][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 268.803427][T10826] netlink: 'syz.4.1369': attribute type 14 has an invalid length. [ 268.811301][T10826] netlink: 'syz.4.1369': attribute type 13 has an invalid length. [ 268.834340][T10831] sctp: [Deprecated]: syz.1.1372 (pid 10831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.834340][T10831] Use struct sctp_sack_info instead [ 269.014504][T10831] sctp: [Deprecated]: syz.1.1372 (pid 10831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.014504][T10831] Use struct sctp_sack_info instead [ 269.193437][T10848] batadv0: entered promiscuous mode [ 269.200271][T10848] batadv_slave_1: entered promiscuous mode [ 269.249047][T10848] batadv_slave_1: left promiscuous mode [ 269.300366][T10848] batadv0: left promiscuous mode [ 269.340762][T10859] dummy0: entered allmulticast mode [ 269.406047][T10851] tipc: Enabled bearer , priority 0 [ 269.431342][T10851] syzkaller0: entered promiscuous mode [ 269.485422][T10851] syzkaller0: entered allmulticast mode [ 269.537657][T10851] tipc: Resetting bearer [ 269.592696][T10850] tipc: Resetting bearer [ 269.610957][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 269.666561][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 269.703805][T10850] tipc: Disabling bearer [ 269.741075][T10880] sch_fq: defrate 0 ignored. [ 270.062255][T10897] netlink: 'syz.0.1394': attribute type 29 has an invalid length. [ 270.079887][T10898] bridge: RTM_NEWNEIGH with invalid ether address [ 270.093020][T10901] IPv6: Can't replace route, no match found [ 270.099292][T10900] netlink: 'syz.0.1394': attribute type 29 has an invalid length. [ 270.607730][T10929] openvswitch: netlink: Unknown nsh attribute 0 [ 270.615441][T10929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.727187][T10936] netlink: 'syz.1.1405': attribute type 21 has an invalid length. [ 271.015961][T10949] netlink: 'syz.0.1410': attribute type 13 has an invalid length. [ 271.298256][T10968] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 272.368552][T11019] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 273.312919][T11033] __nla_validate_parse: 16 callbacks suppressed [ 273.312941][T11033] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.1433'. [ 273.338990][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 274.031644][T11025] tipc: Started in network mode [ 274.036587][T11025] tipc: Node identity ac14140f, cluster identity 4711 [ 274.046264][T11025] tipc: New replicast peer: 255.255.255.255 [ 274.054565][T11025] tipc: Enabled bearer , priority 10 [ 274.143240][T11030] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 274.330292][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 274.407137][T11052] validate_nla: 3 callbacks suppressed [ 274.407157][T11052] netlink: 'syz.3.1439': attribute type 4 has an invalid length. [ 274.511338][T11058] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 274.530503][T11055] syzkaller0: entered promiscuous mode [ 274.538805][T11055] syzkaller0: entered allmulticast mode [ 274.561029][T11058] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1442'. [ 274.565422][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 274.582203][T11064] netlink: 'syz.1.1442': attribute type 5 has an invalid length. [ 274.589991][T11064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1442'. [ 274.636074][T11064] geneve3: entered promiscuous mode [ 274.643173][T11064] geneve3: entered allmulticast mode [ 274.653308][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 274.677937][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 274.738922][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 274.820345][T11077] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 274.830916][T11077] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 275.174740][ T8662] tipc: Node number set to 2886997007 [ 275.858548][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'. [ 275.921071][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 276.544182][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 276.561113][T11081] team0: Mode changed to "broadcast" [ 276.749360][T11104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1451'. [ 276.789998][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 277.072711][T11128] erspan0: entered allmulticast mode [ 277.200383][T11133] syzkaller0: entered promiscuous mode [ 277.217889][T11133] syzkaller0: entered allmulticast mode [ 277.397353][T11145] IPv6: sit1: Disabled Multicast RS [ 277.414725][T11145] sit1: entered allmulticast mode [ 277.502315][T11156] netlink: 'syz.4.1464': attribute type 2 has an invalid length. [ 277.886443][T11174] netlink: 'syz.4.1469': attribute type 2 has an invalid length. [ 277.918511][T11174] netlink: 'syz.4.1469': attribute type 2 has an invalid length. [ 278.483149][T11195] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 278.491118][T11195] __nla_validate_parse: 2 callbacks suppressed [ 278.491137][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1472'. [ 279.601016][T11195] `: renamed from bond0 (while UP) [ 279.651941][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 279.870394][ T1330] tipc: Subscription rejected, illegal request [ 280.108738][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.281881][ T30] audit: type=1800 audit(1758363044.646:4): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1484" name="memory.events" dev="tmpfs" ino=1616 res=0 errno=0 [ 280.434200][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 280.474112][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 281.397688][T11269] netlink: 'syz.1.1493': attribute type 1 has an invalid length. [ 281.412680][T11269] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1493'. [ 281.451823][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1496'. [ 281.735306][T11294] openvswitch: netlink: Message has 24 unknown bytes. [ 281.761892][T11294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.945061][T11307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1504'. [ 281.957170][T11309] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 281.982995][T11307] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1504'. [ 281.992514][T11309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1505'. [ 282.046357][T11308] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1507'. [ 282.053137][T11307] netlink: 'syz.0.1504': attribute type 5 has an invalid length. [ 282.084877][T11312] tipc: Can't bind to reserved service type 0 [ 282.382012][T11333] netlink: 'syz.0.1512': attribute type 8 has an invalid length. [ 282.413433][T11337] netlink: 'syz.0.1512': attribute type 8 has an invalid length. [ 282.630259][T11350] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 282.767818][T11352] team0: Device wireguard0 is of different type [ 283.690550][T11398] __nla_validate_parse: 7 callbacks suppressed [ 283.690571][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 283.888842][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 283.961171][T11402] netlink: 'syz.0.1525': attribute type 21 has an invalid length. [ 283.988705][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 284.164169][T11424] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1531'. [ 284.205264][T11424] vlan0: entered allmulticast mode [ 284.216001][T11424] hsr0: entered allmulticast mode [ 284.221225][T11424] hsr_slave_0: entered allmulticast mode [ 284.230071][T11426] netlink: 'syz.0.1532': attribute type 6 has an invalid length. [ 284.244642][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 284.729235][T11452] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 284.740684][T11452] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 284.752796][T11453] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 284.766205][T11453] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 284.792609][T11453] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 284.823448][T11453] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 284.839410][T11453] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 285.184632][T11477] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 285.332833][T11481] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 285.634248][T11504] tipc: Enabling of bearer rejected, media not registered [ 285.859586][T11519] 8021q: VLANs not supported on ip6_vti0 [ 285.868235][T11518] 8021q: VLANs not supported on ip6_vti0 [ 285.970484][T11521] C: renamed from lo [ 285.976518][T11521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 286.547759][T11546] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 286.556858][T11546] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 286.639658][T11551] pim6reg1: entered promiscuous mode [ 286.645703][T11551] pim6reg1: entered allmulticast mode [ 286.964141][T11565] hsr_slave_0: left promiscuous mode [ 287.090216][T11568] lo: Caught tx_queue_len zero misconfig [ 434.501735][ T31] INFO: task syz-executor:5873 blocked for more than 143 seconds. [ 434.509648][ T31] Not tainted syzkaller #0 [ 434.515370][ T31] Blocked by coredump. [ 434.520032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.528824][ T31] task:syz-executor state:D stack:20824 pid:5873 tgid:5873 ppid:1 task_flags:0x40014c flags:0x00004002 [ 434.541086][ T31] Call Trace: [ 434.545050][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.548034][ T31] __schedule+0x1798/0x4cc0 [ 434.552662][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.557577][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.562945][ T31] ? __pfx___schedule+0x10/0x10 [ 434.567876][ T31] ? schedule+0x91/0x360 [ 434.573327][ T31] schedule+0x165/0x360 [ 434.577539][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.583939][ T31] __mutex_lock+0x7e6/0x1350 [ 434.591719][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.596906][ T31] ? rfkill_unregister+0xc8/0x220 [ 434.611831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.616945][ T31] ? __pfx_device_del+0x10/0x10 [ 434.654141][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 434.659440][ T31] rfkill_unregister+0xc8/0x220 [ 434.665422][ T31] hci_unregister_dev+0x374/0x510 [ 434.670737][ T31] vhci_release+0x152/0x1a0 [ 434.678823][ T31] ? __pfx_vhci_release+0x10/0x10 [ 434.684216][ T31] __fput+0x44c/0xa70 [ 434.688254][ T31] task_work_run+0x1d1/0x260 [ 434.693907][ T31] ? __pfx_task_work_run+0x10/0x10 [ 434.699073][ T31] ? kmem_cache_free+0x18f/0x400 [ 434.704207][ T31] do_exit+0x6b5/0x2300 [ 434.708419][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.713927][ T31] ? sched_clock_cpu+0x74/0x430 [ 434.718811][ T31] ? __pfx_do_exit+0x10/0x10 [ 434.724043][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.729285][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.734688][ T31] do_group_exit+0x21c/0x2d0 [ 434.739326][ T31] __x64_sys_exit_group+0x3f/0x40 [ 434.744476][ T31] x64_sys_call+0x21f7/0x2200 [ 434.749187][ T31] do_syscall_64+0xfa/0x3b0 [ 434.754370][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.760560][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 434.766898][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.771782][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.777734][ T31] RIP: 0033:0x7f6bad38ec29 [ 434.782834][ T31] RSP: 002b:00007fff19a6ea38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 434.791299][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f6bad38ec29 [ 434.799408][ T31] RDX: 00007f6bad385493 RSI: 0000000000000000 RDI: 0000000000000007 [ 434.807476][ T31] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 434.816272][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.824544][ T31] R13: 00000000000927c0 R14: 0000000000045c43 R15: 00007fff19a6f780 [ 434.832690][ T31] [ 434.836071][ T31] INFO: task kworker/1:14:8661 blocked for more than 143 seconds. [ 434.844590][ T31] Not tainted syzkaller #0 [ 434.849574][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.858797][ T31] task:kworker/1:14 state:D stack:22424 pid:8661 tgid:8661 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 434.870920][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 434.878252][ T31] Call Trace: [ 434.881626][ T31] [ 434.884587][ T31] __schedule+0x1798/0x4cc0 [ 434.889125][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.894592][ T31] ? __pfx___schedule+0x10/0x10 [ 434.899495][ T31] ? schedule+0x91/0x360 [ 434.905237][ T31] schedule+0x165/0x360 [ 434.909516][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.915790][ T31] __mutex_lock+0x7e6/0x1350 [ 434.920436][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.925401][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 434.932343][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.937422][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.943375][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.949150][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 434.956489][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.962851][ T31] process_scheduled_works+0xae1/0x17b0 [ 434.968446][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.974539][ T31] worker_thread+0x8a0/0xda0 [ 434.979282][ T31] kthread+0x70e/0x8a0 [ 434.983533][ T31] ? __pfx_worker_thread+0x10/0x10 [ 434.988785][ T31] ? __pfx_kthread+0x10/0x10 [ 434.994039][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.999320][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.004600][ T31] ? __pfx_kthread+0x10/0x10 [ 435.009240][ T31] ret_from_fork+0x439/0x7d0 [ 435.013952][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 435.019190][ T31] ? __switch_to_asm+0x39/0x70 [ 435.024505][ T31] ? __switch_to_asm+0x33/0x70 [ 435.029295][ T31] ? __pfx_kthread+0x10/0x10 [ 435.033986][ T31] ret_from_fork_asm+0x1a/0x30 [ 435.038830][ T31] [ 435.041946][ T31] INFO: task syz.4.1526:11403 blocked for more than 143 seconds. [ 435.049685][ T31] Not tainted syzkaller #0 [ 435.055286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.064967][ T31] task:syz.4.1526 state:D stack:25096 pid:11403 tgid:11403 ppid:5887 task_flags:0x400040 flags:0x00004004 [ 435.077109][ T31] Call Trace: [ 435.080439][ T31] [ 435.084057][ T31] __schedule+0x1798/0x4cc0 [ 435.088642][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.093636][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.098559][ T31] ? __pfx___schedule+0x10/0x10 [ 435.103771][ T31] ? schedule+0x91/0x360 [ 435.108050][ T31] schedule+0x165/0x360 [ 435.112775][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.118255][ T31] __mutex_lock+0x7e6/0x1350 [ 435.122945][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.127782][ T31] ? rfkill_unregister+0xc8/0x220 [ 435.133001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.138080][ T31] ? __pfx_device_del+0x10/0x10 [ 435.145047][ T31] rfkill_unregister+0xc8/0x220 [ 435.149975][ T31] nfc_unregister_device+0x96/0x2a0 [ 435.155855][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 435.161868][ T31] virtual_ncidev_close+0x56/0x90 [ 435.166990][ T31] __fput+0x44c/0xa70 [ 435.171018][ T31] task_work_run+0x1d1/0x260 [ 435.175770][ T31] ? __pfx_task_work_run+0x10/0x10 [ 435.180937][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 435.186892][ T31] exit_to_user_mode_loop+0xec/0x110 [ 435.192335][ T31] do_syscall_64+0x2bd/0x3b0 [ 435.196968][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.202346][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.208457][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.213542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.219467][ T31] RIP: 0033:0x7f8246b8ec29 [ 435.224707][ T31] RSP: 002b:00007ffef9144788 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 435.233390][ T31] RAX: 0000000000000000 RBX: 00007f8246dd7da0 RCX: 00007f8246b8ec29 [ 435.241864][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 435.249898][ T31] RBP: 00007f8246dd7da0 R08: 0000000000000000 R09: 0000000ef9144a7f [ 435.257964][ T31] R10: 000000000003fd54 R11: 0000000000000246 R12: 0000000000045818 [ 435.266111][ T31] R13: 00007f8246dd6090 R14: ffffffffffffffff R15: 00007ffef91448a0 [ 435.274452][ T31] [ 435.277501][ T31] INFO: task syz.2.1528:11413 blocked for more than 144 seconds. [ 435.285470][ T31] Not tainted syzkaller #0 [ 435.290432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.299210][ T31] task:syz.2.1528 state:D stack:26952 pid:11413 tgid:11412 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 435.311528][ T31] Call Trace: [ 435.314846][ T31] [ 435.317815][ T31] __schedule+0x1798/0x4cc0 [ 435.322453][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.327369][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.332501][ T31] ? __pfx___schedule+0x10/0x10 [ 435.339762][ T31] ? schedule+0x91/0x360 [ 435.344397][ T31] schedule+0x165/0x360 [ 435.348677][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.354232][ T31] __mutex_lock+0x7e6/0x1350 [ 435.358859][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.363752][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 435.369082][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.374507][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.379816][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 435.386246][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.392718][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 435.398478][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 435.403987][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 435.409869][ T31] rfkill_set_block+0x1cf/0x440 [ 435.414918][ T31] rfkill_fop_write+0x44b/0x570 [ 435.419808][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 435.425276][ T31] ? security_kernfs_init_security+0x250/0x290 [ 435.431834][ T31] ? rw_verify_area+0x255/0x4d0 [ 435.436754][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.442007][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 435.447436][ T31] vfs_write+0x27b/0xb30 [ 435.451760][ T31] ? __pfx_vfs_write+0x10/0x10 [ 435.456564][ T31] ? __fget_files+0x2a/0x420 [ 435.461162][ T31] ? __fget_files+0x2a/0x420 [ 435.466230][ T31] ? __fget_files+0x3a0/0x420 [ 435.470973][ T31] ? __fget_files+0x2a/0x420 [ 435.475871][ T31] ksys_write+0x145/0x250 [ 435.480261][ T31] ? __pfx_ksys_write+0x10/0x10 [ 435.485254][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.490058][ T31] ? do_syscall_64+0xbe/0x3b0 [ 435.495097][ T31] do_syscall_64+0xfa/0x3b0 [ 435.499631][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.505018][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.511117][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.515868][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.522190][ T31] RIP: 0033:0x7f7015d8ec29 [ 435.526640][ T31] RSP: 002b:00007f7016bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.535127][ T31] RAX: ffffffffffffffda RBX: 00007f7015fd5fa0 RCX: 00007f7015d8ec29 [ 435.543466][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 435.552472][ T31] RBP: 00007f7015e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 435.560483][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.568716][ T31] R13: 00007f7015fd6038 R14: 00007f7015fd5fa0 R15: 00007ffe09bf0488 [ 435.577005][ T31] [ 435.580140][ T31] INFO: task syz.0.1574:11577 blocked for more than 144 seconds. [ 435.588232][ T31] Not tainted syzkaller #0 [ 435.593323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.602389][ T31] task:syz.0.1574 state:D stack:24168 pid:11577 tgid:11576 ppid:5878 task_flags:0x400140 flags:0x00004004 [ 435.614626][ T31] Call Trace: [ 435.617915][ T31] [ 435.620951][ T31] __schedule+0x1798/0x4cc0 [ 435.625993][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.631689][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.636772][ T31] ? __pfx___schedule+0x10/0x10 [ 435.642160][ T31] ? schedule+0x91/0x360 [ 435.646447][ T31] schedule+0x165/0x360 [ 435.650633][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.656215][ T31] __mutex_lock+0x7e6/0x1350 [ 435.660864][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.665905][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.670718][ T31] ? rfkill_register+0x37/0x8e0 [ 435.675931][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.680997][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 435.686097][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.691473][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 435.696836][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 435.702837][ T31] rfkill_register+0x37/0x8e0 [ 435.707564][ T31] wiphy_register+0x214c/0x28d0 [ 435.712849][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 435.718076][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 435.723331][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 435.729623][ T31] ieee80211_register_hw+0x3484/0x4100 [ 435.735538][ T31] ? ieee80211_register_hw+0x1491/0x4100 [ 435.741228][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 435.747159][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.753702][ T31] ? __hrtimer_setup+0x187/0x210 [ 435.758808][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 435.765019][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 435.770824][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 435.776833][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 435.783228][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 435.789023][ T31] ? __sock_sendmsg+0x219/0x270 [ 435.794320][ T31] ? ____sys_sendmsg+0x505/0x830 [ 435.799327][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 435.804732][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 435.810510][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 435.816171][ T31] ? __nla_parse+0x40/0x60 [ 435.820646][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 435.827416][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 435.833150][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.839307][ T31] ? bpf_lsm_capable+0x9/0x20 [ 435.844364][ T31] ? security_capable+0x7e/0x2e0 [ 435.849543][ T31] genl_rcv_msg+0x60e/0x790 [ 435.854584][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.859758][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 435.865517][ T31] ? __asan_memcpy+0x40/0x70 [ 435.870169][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.875765][ T31] netlink_rcv_skb+0x205/0x470 [ 435.881068][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.886564][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.891721][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.897069][ T31] ? down_read+0x1ad/0x2e0 [ 435.901631][ T31] genl_rcv+0x28/0x40 [ 435.905640][ T31] netlink_unicast+0x82f/0x9e0 [ 435.910429][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 435.916109][ T31] ? netlink_sendmsg+0x642/0xb30 [ 435.921099][ T31] ? skb_put+0x11b/0x210 [ 435.925462][ T31] netlink_sendmsg+0x805/0xb30 [ 435.930273][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.935668][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.940663][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.946452][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.951917][ T31] __sock_sendmsg+0x219/0x270 [ 435.956659][ T31] ____sys_sendmsg+0x505/0x830 [ 435.961620][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.966976][ T31] ? import_iovec+0x74/0xa0 [ 435.971860][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 435.976587][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.981940][ T31] ? __fget_files+0x2a/0x420 [ 435.986575][ T31] ? __fget_files+0x3a0/0x420 [ 435.991293][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 435.996610][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.002472][ T31] ? rcu_is_watching+0x15/0xb0 [ 436.007295][ T31] ? do_syscall_64+0xbe/0x3b0 [ 436.012085][ T31] do_syscall_64+0xfa/0x3b0 [ 436.016637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.022098][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.028221][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.033323][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.039261][ T31] RIP: 0033:0x7f441c18ec29 [ 436.043764][ T31] RSP: 002b:00007f441a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.052263][ T31] RAX: ffffffffffffffda RBX: 00007f441c3d5fa0 RCX: 00007f441c18ec29 [ 436.060278][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 436.068643][ T31] RBP: 00007f441c211e41 R08: 0000000000000000 R09: 0000000000000000 [ 436.076799][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.084888][ T31] R13: 00007f441c3d6038 R14: 00007f441c3d5fa0 R15: 00007ffd121c10e8 [ 436.093152][ T31] [ 436.096195][ T31] INFO: task syz.3.1575:11582 blocked for more than 144 seconds. [ 436.104840][ T31] Not tainted syzkaller #0 [ 436.110703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.119536][ T31] task:syz.3.1575 state:D stack:26920 pid:11582 tgid:11581 ppid:5880 task_flags:0x400140 flags:0x00004004 [ 436.132304][ T31] Call Trace: [ 436.135644][ T31] [ 436.138611][ T31] __schedule+0x1798/0x4cc0 [ 436.143255][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.148152][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.153219][ T31] ? __pfx___schedule+0x10/0x10 [ 436.158842][ T31] ? schedule+0x91/0x360 [ 436.163614][ T31] schedule+0x165/0x360 [ 436.167835][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.173549][ T31] __mutex_lock+0x7e6/0x1350 [ 436.178227][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.183100][ T31] ? genl_rcv_msg+0x10d/0x790 [ 436.187921][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.193377][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 436.198553][ T31] ? radix_tree_lookup+0x240/0x290 [ 436.203786][ T31] genl_rcv_msg+0x10d/0x790 [ 436.208340][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.213726][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 436.218799][ T31] ? __asan_memcpy+0x40/0x70 [ 436.223753][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 436.229151][ T31] netlink_rcv_skb+0x205/0x470 [ 436.234070][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.238963][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.244086][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.249417][ T31] ? down_read+0x1ad/0x2e0 [ 436.254279][ T31] genl_rcv+0x28/0x40 [ 436.258315][ T31] netlink_unicast+0x82f/0x9e0 [ 436.263814][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 436.269176][ T31] ? netlink_sendmsg+0x642/0xb30 [ 436.274251][ T31] ? skb_put+0x11b/0x210 [ 436.278565][ T31] netlink_sendmsg+0x805/0xb30 [ 436.283759][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.289084][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.294225][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.299574][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.305008][ T31] __sock_sendmsg+0x219/0x270 [ 436.310090][ T31] __sys_sendto+0x3bd/0x520 [ 436.314989][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 436.320095][ T31] ? count_memcg_event_mm+0x21/0x260 [ 436.325859][ T31] ? exc_page_fault+0x76/0xf0 [ 436.330589][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 436.336215][ T31] __x64_sys_sendto+0xde/0x100 [ 436.341033][ T31] do_syscall_64+0xfa/0x3b0 [ 436.347226][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.352572][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.358695][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.363517][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.369459][ T31] RIP: 0033:0x7f0346990abc [ 436.374287][ T31] RSP: 002b:00007f03478a6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 436.382837][ T31] RAX: ffffffffffffffda RBX: 00007f03478a6fc0 RCX: 00007f0346990abc [ 436.390853][ T31] RDX: 0000000000000020 RSI: 00007f03478a7010 RDI: 0000000000000004 [ 436.398946][ T31] RBP: 0000000000000000 R08: 00007f03478a6f14 R09: 000000000000000c [ 436.407224][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 436.415326][ T31] R13: 00007f03478a6f68 R14: 00007f03478a7010 R15: 0000000000000000 [ 436.423868][ T31] [ 436.426960][ T31] [ 436.426960][ T31] Showing all locks held in the system: [ 436.435376][ T31] 1 lock held by khungtaskd/31: [ 436.440263][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 436.450314][ T31] 1 lock held by klogd/5228: [ 436.455103][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 436.465507][ T31] 2 locks held by getty/5627: [ 436.470200][ T31] #0: ffff8880335de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 436.480090][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 436.490329][ T31] 1 lock held by syz-executor/5873: [ 436.496085][ T31] #0: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 436.506455][ T31] 3 locks held by kworker/1:14/8661: [ 436.511964][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 436.523411][ T31] #1: ffffc9000436fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 436.537067][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 436.549027][ T31] 2 locks held by syz.4.1526/11403: [ 436.554793][ T31] #0: ffff888031af1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 436.564984][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 436.575854][ T31] 2 locks held by syz.2.1528/11413: [ 436.581160][ T31] #0: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 436.591709][ T31] #1: ffff888031af1100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 436.602312][ T31] 3 locks held by syz.0.1574/11577: [ 436.607562][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 436.616004][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 436.625105][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.635728][ T31] 2 locks held by syz.3.1575/11582: [ 436.640963][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 436.649288][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 436.658427][ T31] 2 locks held by syz-executor/11588: [ 436.664511][ T31] #0: ffff88801dee8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.674648][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.684797][ T31] 2 locks held by syz-executor/11590: [ 436.690206][ T31] #0: ffff8880565ea118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.700867][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.710902][ T31] 2 locks held by syz-executor/11592: [ 436.716371][ T31] #0: ffff88807c45a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.727012][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.737144][ T31] 2 locks held by syz-executor/11595: [ 436.742668][ T31] #0: ffff888076b3b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.753636][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.763731][ T31] 2 locks held by syz-executor/11596: [ 436.769124][ T31] #0: ffff888076b39118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.779259][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.789728][ T31] 2 locks held by syz-executor/11599: [ 436.795219][ T31] #0: ffff888021718918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.805348][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.816198][ T31] 2 locks held by syz-executor/11601: [ 436.822211][ T31] #0: ffff88802eb06918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.832652][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.843291][ T31] 2 locks held by syz-executor/11603: [ 436.848694][ T31] #0: ffff888028898918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.859023][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.869044][ T31] 2 locks held by syz-executor/11606: [ 436.875187][ T31] #0: ffff888022a8f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.885495][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.895592][ T31] 2 locks held by syz-executor/11607: [ 436.900997][ T31] #0: ffff88807f53d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.912016][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.922078][ T31] 2 locks held by syz-executor/11610: [ 436.927490][ T31] #0: ffff88807aece918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.937825][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.948476][ T31] 2 locks held by syz-executor/11611: [ 436.953987][ T31] #0: ffff888055bca118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.964155][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 436.974721][ T31] 2 locks held by syz-executor/11615: [ 436.980212][ T31] #0: ffff8880249e5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 436.991158][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 437.001210][ T31] 2 locks held by syz-executor/11618: [ 437.007071][ T31] #0: ffff8880540dc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 437.017167][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 437.027193][ T31] 2 locks held by syz-executor/11619: [ 437.033315][ T31] #0: ffff8880540db118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 437.043462][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 437.053537][ T31] [ 437.055884][ T31] ============================================= [ 437.055884][ T31] [ 437.065264][ T31] NMI backtrace for cpu 0 [ 437.065290][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 437.065313][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.065325][ T31] Call Trace: [ 437.065333][ T31] [ 437.065341][ T31] dump_stack_lvl+0x189/0x250 [ 437.065376][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.065402][ T31] ? __pfx__printk+0x10/0x10 [ 437.065446][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 437.065480][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.065514][ T31] ? __pfx__printk+0x10/0x10 [ 437.065548][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.065584][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.065618][ T31] watchdog+0xf93/0xfe0 [ 437.065653][ T31] ? watchdog+0x1de/0xfe0 [ 437.065689][ T31] kthread+0x70e/0x8a0 [ 437.065727][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.065756][ T31] ? __pfx_kthread+0x10/0x10 [ 437.065783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.065816][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.065835][ T31] ? __pfx_kthread+0x10/0x10 [ 437.065862][ T31] ret_from_fork+0x439/0x7d0 [ 437.065886][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.065914][ T31] ? __switch_to_asm+0x39/0x70 [ 437.065939][ T31] ? __switch_to_asm+0x33/0x70 [ 437.065962][ T31] ? __pfx_kthread+0x10/0x10 [ 437.065987][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.066029][ T31] [ 437.066038][ T31] Sending NMI from CPU 0 to CPUs 1: [ 437.214813][ C1] NMI backtrace for cpu 1 [ 437.214831][ C1] CPU: 1 UID: 0 PID: 3522 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 437.214852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.214864][ C1] Workqueue: bat_events batadv_nc_worker [ 437.214896][ C1] RIP: 0010:lock_acquire+0x130/0x360 [ 437.214924][ C1] Code: 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e8 e0 02 00 00 48 83 c4 28 48 c7 c7 b5 98 ba 8d e8 20 14 dd 09 ff ff ff ff 65 0f c1 05 c3 b1 03 11 83 f8 01 0f 85 c9 00 00 00 [ 437.214939][ C1] RSP: 0018:ffffc9000b797910 EFLAGS: 00000086 [ 437.214953][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ae890a9152e5b400 [ 437.214965][ C1] RDX: 0000000000000000 RSI: ffffffff8dba98b5 RDI: ffffffff8be33f00 [ 437.214977][ C1] RBP: ffffffff8b48446a R08: 0000000000000000 R09: ffffffff8b48446a [ 437.214989][ C1] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: 0000000000000002 [ 437.215002][ C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 437.215013][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 437.215027][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.215039][ C1] CR2: 00005612f9edf000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 437.215054][ C1] Call Trace: [ 437.215061][ C1] [ 437.215074][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 437.215091][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 437.215108][ C1] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 437.215125][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 437.215142][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 437.215160][ C1] batadv_nc_worker+0x429/0x610 [ 437.215186][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 437.215204][ C1] process_scheduled_works+0xae1/0x17b0 [ 437.215234][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.215259][ C1] worker_thread+0x8a0/0xda0 [ 437.215288][ C1] kthread+0x70e/0x8a0 [ 437.215311][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.215327][ C1] ? __pfx_kthread+0x10/0x10 [ 437.215348][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.215375][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.215391][ C1] ? __pfx_kthread+0x10/0x10 [ 437.215412][ C1] ret_from_fork+0x439/0x7d0 [ 437.215430][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.215450][ C1] ? __switch_to_asm+0x39/0x70 [ 437.215473][ C1] ? __switch_to_asm+0x33/0x70 [ 437.215496][ C1] ? __pfx_kthread+0x10/0x10 [ 437.215516][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.215546][ C1] [ 437.215982][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.469539][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 437.478669][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.488747][ T31] Call Trace: [ 437.492216][ T31] [ 437.495158][ T31] dump_stack_lvl+0x99/0x250 [ 437.499764][ T31] ? __asan_memcpy+0x40/0x70 [ 437.504366][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.509583][ T31] ? __pfx__printk+0x10/0x10 [ 437.514199][ T31] vpanic+0x281/0x750 [ 437.518197][ T31] ? __pfx_vpanic+0x10/0x10 [ 437.522714][ T31] ? preempt_schedule+0xae/0xc0 [ 437.527576][ T31] ? preempt_schedule_common+0x83/0xd0 [ 437.533051][ T31] panic+0xb9/0xc0 [ 437.536788][ T31] ? __pfx_panic+0x10/0x10 [ 437.541311][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.546724][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 437.552901][ T31] watchdog+0xfd2/0xfe0 [ 437.557084][ T31] ? watchdog+0x1de/0xfe0 [ 437.561541][ T31] kthread+0x70e/0x8a0 [ 437.565662][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.570352][ T31] ? __pfx_kthread+0x10/0x10 [ 437.574963][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.580181][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.585387][ T31] ? __pfx_kthread+0x10/0x10 [ 437.590002][ T31] ret_from_fork+0x439/0x7d0 [ 437.594602][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.599728][ T31] ? __switch_to_asm+0x39/0x70 [ 437.604506][ T31] ? __switch_to_asm+0x33/0x70 [ 437.609372][ T31] ? __pfx_kthread+0x10/0x10 [ 437.613987][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.618870][ T31] [ 437.622237][ T31] Kernel Offset: disabled [ 437.626573][ T31] Rebooting in 86400 seconds..