last executing test programs: 24.061875782s ago: executing program 1 (id=1720): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x485feb0f659fbb4e, 0x1, 0x7, 0xff, 0x56, @loopback, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7, 0x10, 0x5, 0xfffff24f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x8b, 0x13b, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x37, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xb4, [@loopback, @rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @remote, @local]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0xa, [{@private=0xa010101, 0xf0a}, {@multicast1, 0x3}, {@broadcast, 0xfff}, {@remote, 0x2}, {@local, 0x7}]}]}}}}}) sendmsg$inet(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="52f8532bddb4a06029d2ab43bd9fb7b69b40f42d33dd85763b393373475517e1ea182256d14a99e828634d2f0f41", 0x2e}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="d6e437b70ebaee0149003b106bb70c858085f4028611f24f2415d838f690443e82f20a53bfd04da2aef39f26d283e99a0b", 0x31}, {&(0x7f0000001140)="e7bfd020ac663f8bcf624d50180fbc0047a7befd60824f2bada150cdd54c47858c3e9cbe819543e18be0c3b2ff23c5c12279d0d4ac0c9baa711d56c0058440dd97f98510b71724aa40f2ed5141116a492413d95164eb4b3eb3b8c65a390e50eca09e9ffdb1df5dff6a3646727f5f152023f713", 0x73}, {&(0x7f00000011c0)="59e1a361fe663a8cf834ef92f2f0c1108f2c1bfa136eb5e6d798f2a1870b664d5afd25abbc0460e7777be3a1a0c41ff4c0f5225ba9b3c71e51172cd25a8e0454", 0x40}, {&(0x7f0000001200)="1d6b067bca9698e9836235795112d7ff53f82f32cd6ac65153dc700943fbd8edca3e075c5677b8cc3f117bd87803b4a5d5d4943f11eba45e827b89190378666a1ffe67795d2871c74274f89916a1b904a38c5518", 0x54}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @multicast1}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x7, 0x11, "6dad782267df33d9a3718c512a4918"}, @rr={0x7, 0x27, 0x66, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x23}, @local, @loopback, @rand_addr=0x64010101, @local, @rand_addr=0x64010101, @broadcast, @remote]}, @timestamp_addr={0x44, 0x2c, 0x4f, 0x1, 0xe, [{@multicast2, 0x3}, {@loopback, 0x9}, {@broadcast, 0x81}, {@private=0xa010100, 0x401}, {@remote, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010100}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x77, 0x2, [{0x2, 0x4, "75b9"}, {0x0, 0x10, "fabba352fbfc2f55e479b955c231"}, {0x1, 0x11, "1e18902c1592b575571a2dce5e77dd"}, {0x6, 0x10, "1f6ba8d1d4a9f575924e6d53cdd0"}, {0x2, 0x8, "87ada30a6d0f"}, {0x74872445b8dabf3f, 0xa, "ca62debf0b35ab19"}, {0x1, 0x8, "94bd17b413ce"}, {0x1, 0xd, "d4ce795944a00185576f65"}, {0x6, 0x4, "d55d"}, {0x5, 0x11, "a601eb73860dfba49cb6e9bdf68e9c"}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x7, 0x7, "c99739724b"}]}, @generic={0x94, 0x4, '~Y'}, @timestamp={0x44, 0x10, 0xe6, 0x0, 0xc, [0x5, 0x6, 0xfff]}, @end, @timestamp={0x44, 0xc, 0x6f, 0x0, 0xd, [0x3, 0x1]}, @noop, @timestamp={0x44, 0x14, 0x7, 0x0, 0xc, [0xf987, 0x9a, 0x5, 0x5d6]}]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x57, 0x3, 0x2, [{@multicast2, 0xa4a}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa0}, {@empty, 0x3a}, {@multicast1, 0x80000001}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xd67f}]}, @rr={0x7, 0x2b, 0x15, [@empty, @rand_addr=0x64010102, @broadcast, @loopback, @local, @local, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0xd, [0x2, 0x5, 0x40]}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x8, [{@multicast2, 0x34}, {@broadcast, 0x6}, {@remote, 0x5}]}, @rr={0x7, 0x17, 0x4f, [@remote, @local, @local, @broadcast, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x66, [@multicast2, @broadcast, @private=0xa010100]}, @generic={0x3d8cd97d56adc575, 0x8, "f85fa91132e2"}, @lsrr={0x83, 0x13, 0xeb, [@multicast1, @multicast2, @private=0xa010100, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x7, [{@multicast2, 0xd734}]}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x2, [{@local, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x2f8}, 0x44800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@delneigh={0x1c, 0x1d, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x10, 0x80, 0x1}}, 0x1c}}, 0x4800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x1010, 0xffffffffffffffff, 0x19553000) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/87, 0x57}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/120, 0x78}], 0x4, 0x9, 0x5) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001b40)={0x0, 0x7, 0x1, [0x6, 0xb4, 0x29, 0x7, 0x2], [0x40, 0x9, 0x6, 0x8, 0x1, 0x8000000000000001, 0x2, 0x8, 0x1, 0xf19, 0x7, 0xe7d, 0xffff, 0x2ac, 0x3, 0x1000, 0xffffffff, 0x5, 0x6000, 0x1, 0x100000000, 0x800, 0x7, 0x1, 0x7fffffff, 0x3, 0x7, 0x0, 0xa7b5, 0x1, 0x2, 0x5, 0x7, 0x8000, 0x7fffffffffffffff, 0x3, 0x2, 0xffff, 0x5, 0x191, 0xc, 0x401, 0x6, 0x0, 0x9, 0x7fffffff, 0x9, 0xb, 0x101, 0xb06, 0xd9fd, 0xcd6, 0x6, 0x2, 0x101, 0x8, 0x8, 0x8000000000000001, 0x600000000, 0x9, 0x800, 0x4, 0x101c, 0x7, 0xfffffffffffff34e, 0x0, 0xff, 0xffffffffffffffd6, 0x8, 0x1, 0x2, 0x3d, 0xf, 0x5, 0x8, 0xb9, 0x0, 0x128, 0x1e98, 0x5, 0x6, 0x7, 0xffffffffffffffc0, 0x3, 0x4, 0x3, 0x10, 0x57d8a60d, 0x10000, 0x6, 0x1ff, 0x9, 0x9, 0x318, 0x8000, 0xeafb, 0x8000000000000000, 0x8001, 0xe, 0x8, 0x8000000000000001, 0x400000000000, 0x7, 0x793, 0x5, 0x6, 0x1000, 0x6, 0x10000, 0x2, 0xfff, 0x101, 0x1, 0x3, 0x9e, 0x6, 0x3, 0xffffffffffff9517, 0xffff, 0x9, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001f80)={0x1, 0x3, {0x3, @usage=0x6, r3, 0x0, 0x2, 0x4, 0x4, 0x3, 0x0, @struct={0xffffffff}, 0x7fff, 0x5, [0x8, 0x65e, 0xb, 0xffffffff80000000, 0x6, 0x1]}, {0x9, @struct={0x4, 0x5}, 0x0, 0x10000, 0xffffffffffff7fff, 0xfffffffffffffff0, 0x0, 0x8e2, 0x88, @usage=0x2, 0x80, 0x5, [0x0, 0x7, 0x1, 0x3, 0x8, 0xa]}, {0x4, @usage=0x3, 0x0, 0xb051, 0x6fe, 0x1, 0x6, 0x6, 0x12, @struct={0x0, 0x7}, 0x9, 0x81, [0x0, 0x7, 0x4, 0x4, 0x4, 0xd66]}, {0x0, 0xff, 0x4}}) r5 = accept(r0, &(0x7f0000002380)=@nfc_llcp, &(0x7f0000002400)=0x80) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000002440), &(0x7f0000002480)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000024c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2, 0x6}}, 0x80, 0x5}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000002600)={0x1, 0x1, {0x7, @struct={0xa4d, 0x79b4396c}, r4, 0x8001, 0x10, 0x5, 0x4f4e, 0x0, 0xd8, @struct={0x3, 0x80}, 0x5, 0x6c1, [0x401, 0x9, 0x4, 0x6, 0x10000, 0x1]}, {0x10, @struct={0xb7, 0x5}, r4, 0x5, 0x6, 0x8, 0x2, 0x100000001, 0x40c, @usage=0x6, 0xfffffffc, 0x7, [0x8000, 0x5366, 0x1, 0x3a, 0x3, 0x6]}, {0x8, @usage=0x8, r4, 0x5, 0x7, 0x2000000, 0x6, 0x11, 0x40, @usage=0x6, 0x800a, 0x1, [0x17f4, 0x3, 0x9, 0x7ff, 0x83e3, 0x3]}, {0x7ff, 0x8000, 0xfffffffffffffffa}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a40), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0xdc, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0xc040) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x1a, 0x1d, &(0x7f0000002c00)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000002d00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000002d40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002d80)={0x2, 0xd, 0xe, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002dc0)=[r6], &(0x7f0000002e00)=[{0x2, 0x1, 0x1, 0xb}, {0x0, 0x1, 0x6, 0x6}, {0x5, 0x5, 0x9, 0xb}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003000)={@map=r6, 0x4, 0x0, 0x8, &(0x7f0000002f00)=[0x0], 0x1, 0x0, &(0x7f0000002f40)=[0x0], &(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000032c0)={0x6, 0x12, &(0x7f0000003080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12}, @jmp={0x5, 0x1, 0x9, 0x2, 0xb, 0x1, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003140)='syzkaller\x00', 0x4, 0x25, &(0x7f0000003180)=""/37, 0x41100, 0x22, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x1, 0x6}, 0x8, 0x10, &(0x7f0000003200)={0x2, 0xf, 0x3ff, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003240)=[r6], &(0x7f0000003280)=[{0x1, 0x2, 0x3, 0x2}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003040)={@fallback=r0, r8, 0x0, 0x0, 0x0, @void, @value=r10, @void, @void, r9}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003380), r5) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), r5) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000003740)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003700)={&(0x7f0000003440)={0x298, r11, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0x257, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="ad8ef269eeca", {0x0, 0x4}, @value=@ver_80211n={0x0, 0x54b4, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x3401, 0x7, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x5, 0x76}}, [{0xdd, 0x55, "125bb1f0d915f593f36fba86b86c1cdfed01a218bfd89e731cbb0d6e0bf5d724364f72cf6243d307d2de3d59a7ed31e2e2816719144af566f07e5062513492e4dfdd295328afcd560fb56d0b25b9b7483c8bd04823"}, {0xdd, 0x98, "98df26c577a368123fbdc1b6477b5d36ff0086d8d512765b39b883ef2c244114b1b275d2619a6bd7e44c9512c4e66f170a7d795eacce7be5f724c6d188a78d8720bd1feea65564584a631caf9e2115fb21141831a5179e3d019a3b5123b56d902c2ab25ac0be22ef798abda8a97fc2a841583e537ed7407bcfd0b6d158d9b06d373bcd08b1caf047545958b9dba8f8696636ca9e5fe5045e"}, {0xdd, 0x94, "ecf7c842ce3197911cf75b9d85403d830d1fa37bf1bc005b8dabb730c8c4a30c1b05b61a661661b64d2ac5ea894430f1afb0e94219ffd9d6f891cc9a7381b4f077732a2f8f8a5db76f7a581d438349a4a55f3d57bcde843896c254ce292475fc1b2f3b64c8d0d0ca896f329902ace1d8500159a8adece7c2b6db9dea175d6c55b747836996c8b2648c7ca28a8cd91c0499ae7ee2"}, {0xdd, 0x7e, "5affcfccd8d9928cb03dad46332ca9ecf08666e1b24bd842f5e92628cfba1627737ee92eeb687a89cce06f8416f91ddd2bd6ab1b6aa7bb43f32191ae788e31533f7cdb77ccf2f375fe0489ffe5f919a84d56b7fdbb362c5b67400dd874acb9d9ac05879db89d0f90c3a60e8936ebd354009989811752c687dd29b7d2a5d2"}]}}]}, 0x298}}, 0x4000) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000003780)=0x1) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000037c0)={r13, 0x4, 0xa, 0x7ff}) sendmsg$nl_route_sched(r5, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0xe}, {0xfffd, 0x8}, {0xa, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x2c004809) 24.031947769s ago: executing program 1 (id=1722): socket(0x10, 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000200005080017205edc1d8806000000000000002abbf40663f642aada7a64c5581334cd3dc2d80c22ad8876df5a5de53db29722e6e3142c7508cd346ce19c09b41199b1de32c7c6252bb29583a7aa47541a72db", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="110000000400000004"], 0x48) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$nl802154(0x0, r1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000414}, 0x40d1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_fc_stats\x00', r5}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e7a5b43d6acb04c0f08ebf940c0a", @ANYRES16=r8, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4814) 23.879849648s ago: executing program 1 (id=1727): unshare(0x20000400) socket$inet(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7f, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffee1, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffd71, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$cgroup_int(r5, &(0x7f0000000380)=0x1, 0x12) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp256-generic,ecb(blowfish))\x00'}, 0x58) 22.745285982s ago: executing program 1 (id=1737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(r3, 0x0, 0xc0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [@exit, @call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x8}, 0x7, 0x0, 0x2, 0xf, 0x23, 'syz0\x00', "a11ffcbf1f7fb8b535a0cb6543b89e4b119cf834fa2818bfbbc372d3437005f6", "fa109367f61369632a91395dda6b5ec1f352918a3a960d47a34ab369ee80b8b0", [{0x45f, 0x5, {0x2, 0xfffff5e0}}, {0x88c2, 0x60e, {0x0, 0x7}}, {0x7, 0x2, {0x0, 0xa0c}}, {0x3ff, 0x1, {0x1, 0x2}}, {0xb, 0x9, {0x1, 0x2}}, {0x3, 0x8ca, {0x2, 0xc000}}, {0x0, 0x81, {0x1, 0x10000}}, {0x5, 0x8, {0x2, 0x8}}, {0x2, 0x8, {0x1, 0x6}}, {0x8000, 0x400, {0x2, 0x5}}, {0xb9a, 0x7f, {0x3}}, {0x10, 0xfff3, {0x3, 0x7c745e24}}, {0x8000, 0x83, {0x3, 0x1}}, {0xd, 0x8, {0x1, 0x3336cf4c}}, {0x328, 0x0, {0x0, 0x5}}, {0x1, 0xff75, {0xff631663b720b3cd, 0x2}}, {0x9, 0x2, {0x3, 0x5}}, {0x0, 0x7fff, {0x3, 0x6}}, {0x1, 0x1, {0x0, 0xfffffffe}}, {0x9, 0x8000, {0x2, 0x4}}, {0x98c5, 0x8000, {0x2, 0x1}}, {0x1, 0x3, {0x3, 0x7}}, {0x2, 0xf329, {0x0, 0xda7b}}, {0x7ff, 0xfff1, {0x3, 0x800}}, {0x8, 0x5, {0x0, 0x7f}}, {0x7, 0x401, {0x2, 0x13ad}}, {0xf, 0x3, {0x2}}, {0x6, 0x1, {0x3, 0x100}}, {0x0, 0x4, {0x2, 0x5}}, {0x8, 0x2, {0x1, 0x4}}, {0x5, 0x0, {0x1, 0x3}}, {0xf811, 0xa999, {0x3, 0x8}}, {0x800, 0x1, {0x0, 0x5}}, {0x9, 0x25, {0x2, 0x3}}, {0x101, 0x7, {0x2, 0x7}}, {0x3, 0xc, {0x3, 0x4}}, {0x10, 0xff, {0x0, 0x1000}}, {0x4, 0x7f, {0x0, 0x5}}, {0x6, 0x1, {0x0, 0x2}}, {0x8df, 0x5, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000000000000000000deffffff18117f07", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000030", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) 22.545654524s ago: executing program 1 (id=1738): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000080000000000c0000000c00000005000000010000000000001010000000006100000012c3704b170d8dcb6dbc15c50e0afef9f3eadd15d3e6cb40e70d7a8b999f8ac101af8f0ef5b9f0da448414d1c3c7f80edd9e10a9d2c01146fd8cb68a505dfd71ee7263f42847de5f2bf70893d40cc6bf48e3cb0a6f4e23af14044e862073de1f530f12245ed85bad4beeed6fec084ea4d536abfb392594c7c9ff0301903c9f5612f4a9dd27f8fdb811d7961350d3cf338a306812386a585bc1acf5256624a32a4218457769ec8b2ae92f2022d925ce809860d7cbae29"], &(0x7f0000000200)=""/32, 0x29, 0x20, 0x0, 0x8}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900fb00189058e3d19600"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03a0005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="c1ea6fd7da4be200080f06ba2ac069ffc2e84bd0e4882367fabe249389c7073ccd7cc1ac1f24f3ae808936eefa8ab2364545111b09639389c169e5c6820d10ee509c339a72868033113380261359769fbf76fe8c5f1eae2e", @ANYRES64=r0, @ANYRES32=r3, @ANYRES64=r1, @ANYRES16=0x0, @ANYRES64=r2, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x2, 0x8a, &(0x7f0000000240)=""/138, 0x0, 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r6, 0x1, 0x48, &(0x7f0000000340), 0x4) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x40040c4, &(0x7f00000002c0)={0x11, 0x4, r8, 0x1, 0x84, 0x6, @broadcast}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r10 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r9, 0x8917, 0x0) 22.526759028s ago: executing program 2 (id=1739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) (async) listen(r0, 0xfff) (async) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)=0x7) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x31ec, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x31bc, 0x2, [@TCA_BASIC_ACT={0x3020, 0x3, [@m_nat={0x106c, 0x1b, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x1, 0x3}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0xffffffffffffffff, 0x2, 0x81}, @loopback, @rand_addr=0x64010102, 0xffffff00}}]}, {0xff4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x110, 0xc, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xd6, 0x6, "0b02b6b7b1a1cb8fa59b93d8f562fbdfbd5f2dd2ffda4fceb8e1bb05854fa220835b6796ff6d70b6c7c901fa66c2214e3bb9127eb11ba53f62a884c4e3bbe8873e8568c061013e984f2631b91fbe382db4898dd0129c090f83b9ab75f7d6f23200fdb35369d808ee2483bd04c9fe4e4f6a2e4a7dee674d7b07884762568a84c76d168108bdbdfec27351cde04fc92dd9bba05182d753f49f7384d9dcfca827557c983c2f0b46d6d7dc8ea8ed4db6ef69a5752ea63435656cf1a223c1fbfd7957947fabc16a97227b4e9dc1c79b061d412456"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb0, 0x15, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "aa1369dd73a93727b7ea29a4c4962169"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_LABELS={0x14, 0x7, "1ffdd214f44cee9820d5613a7220abe5"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_LABELS_MASK={0x14, 0x8, "edeff2f4772b8eacc85a5d8c3e72fdb9"}]}, {0x1a, 0x6, "52366888a5688c06e6db1d7e93123cab6b7a1b48f443"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x1df0, 0x16, 0x0, 0x0, {{0xb}, {0x1d94, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfe, 0x9, 0x9, 0x9, 0xfec3, 0x0, 0x6, 0x81, 0x1, 0x10, 0xfff, 0x200, 0x8, 0xe, 0xa64, 0xfff, 0x3f57f099, 0x7fffffff, 0x4, 0x4, 0x7fff, 0xa, 0x5, 0x80, 0x800, 0x1, 0x8, 0x4, 0x40, 0x5, 0x4, 0xdc, 0x3, 0x6, 0x4, 0xaa, 0xfffffffd, 0x5, 0x5, 0x0, 0x6, 0xa3c4, 0x5, 0x3, 0x0, 0x7, 0x5, 0x3ba, 0x5b, 0xe23, 0xffff, 0x7, 0xffffffff, 0x3ff, 0x7f, 0xffff, 0x5dccc883, 0x2, 0x400, 0x1, 0x8, 0x420, 0xffff7fff, 0xd, 0x5, 0x5, 0x3, 0x0, 0x5, 0x5, 0xeb46f7e, 0x0, 0x8, 0x98d, 0xc50, 0x6, 0x101, 0x1, 0x3, 0x0, 0x981, 0x40b2, 0x0, 0x14000000, 0x2, 0x1, 0x80000000, 0x10001, 0x7, 0x2000, 0x8, 0x2, 0x7, 0x1, 0xfffffeff, 0x7, 0x6, 0x8, 0x6, 0x0, 0x8, 0xc00, 0x3, 0x200, 0x0, 0x7, 0x36d0, 0x8, 0x0, 0x7, 0xfffffffc, 0x1, 0x7510, 0x6, 0x7, 0x2, 0x8, 0x9, 0x2, 0x2, 0x5ab, 0x567f, 0x7, 0xfffffffb, 0x2, 0x7f, 0x6, 0x9d, 0x3, 0x1, 0x0, 0x6, 0x200, 0x9, 0x2, 0x374b, 0x4, 0x6, 0x3, 0x401, 0x1, 0x1, 0x3ca, 0x1, 0xd367, 0x6, 0x7, 0x1, 0x2, 0x9, 0x7ff, 0xb80, 0x8, 0x0, 0x10000, 0x5, 0x4, 0x7ff, 0xffffffff, 0x3, 0x3, 0x5, 0x34cc, 0x7, 0x1, 0x1, 0x9, 0x6, 0x1, 0x1, 0x8, 0x8a4, 0x7, 0x1000, 0xfffffffd, 0x8, 0x6, 0x9, 0x2, 0x3, 0x0, 0x9, 0xc3, 0x3, 0x89, 0x80000000, 0x2, 0x1, 0x7, 0x8, 0x5, 0x7, 0x9, 0xb0, 0x8, 0x2, 0x0, 0x804, 0x1, 0x9, 0x2, 0x846, 0xffffffff, 0x0, 0x541, 0x7fffffff, 0xc, 0x80000000, 0x10001, 0x27, 0x6, 0x6, 0x101, 0x6, 0x5f, 0x2, 0x1000, 0x80000000, 0x8, 0x7ff, 0x1aa6699c, 0xc36, 0x6, 0x5, 0x0, 0x2, 0x7c7, 0x8, 0x808, 0xd, 0x4, 0x1, 0xfb4, 0x8000, 0x1, 0x8, 0x1, 0xffffffff, 0x400, 0x4, 0x8, 0x6, 0x5, 0x7, 0x1, 0x200, 0x8, 0x3, 0x8, 0x17, 0x4, 0x4, 0x4, 0x1, 0x81, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1ff, 0x2, 0x200, 0x0, 0x0, 0x1, 0x6, 0x2, 0x8, 0x0, 0x5, 0x401, 0xfffffffd, 0x7fffffff, 0x12, 0x3, 0x5, 0x7, 0x401, 0x3, 0x148, 0x2, 0x1, 0x0, 0x0, 0x5, 0x4, 0x4, 0x413, 0x7, 0x9, 0x2, 0x0, 0xd, 0x2, 0xc, 0x8, 0xfffffffb, 0x3, 0xe9e, 0x9, 0x100, 0x1ff, 0x10000, 0x974, 0x80, 0x9, 0x7fff, 0x511, 0x7, 0x4, 0x7, 0x7, 0x0, 0xfffffffa, 0xffff, 0x3, 0xc37, 0x2, 0x0, 0x88a6, 0x2, 0xfffffffb, 0x9, 0x1, 0x949, 0x4, 0x10000, 0x5, 0x0, 0x9, 0x7, 0x10, 0x0, 0x7, 0x7, 0xe2c7, 0x6, 0x4, 0x1, 0x9, 0x100, 0x3, 0x7, 0xb, 0x8, 0xfffffffe, 0x156975e7, 0x9, 0x1ff, 0x4, 0x7fff, 0x0, 0x8001, 0x7, 0x1, 0x2, 0x4, 0x5, 0xfffffdd9, 0x1000, 0x2, 0x0, 0x2, 0xffff, 0x9, 0x8, 0x6, 0x110c000, 0x7, 0x9, 0x1, 0xfffff18f, 0x10001, 0x4, 0x4, 0x3, 0x6, 0x80000000, 0x6, 0xb2b0, 0x3, 0x80000001, 0x1, 0x10001, 0x4, 0xffff2650, 0x800, 0x2250, 0x20, 0xffff, 0x9, 0xfffffff8, 0x1, 0xee2, 0x5, 0x9, 0x0, 0x5, 0x7ff, 0xfffffffa, 0x7fff, 0x296e, 0xa9, 0x7, 0x9, 0xd8d4, 0x80, 0x2, 0x0, 0x6, 0x1000, 0x9, 0xc, 0x3, 0x7fffffff, 0x7fff, 0xffff, 0x9, 0x3, 0x1, 0x8000, 0x4, 0x0, 0x1, 0x9, 0x3, 0x800, 0x5c99, 0x100, 0xb, 0x4, 0xfffffffb, 0x3, 0x0, 0x8, 0x9, 0x3f, 0xffff, 0x4, 0x401, 0x200, 0xf6, 0x8, 0x88e, 0x1a05, 0x40, 0x3, 0x10001, 0x2, 0x7, 0x4d, 0x1, 0x0, 0x0, 0xffffffc0, 0x8, 0x4, 0x6, 0xe, 0x5, 0x4, 0xc, 0x70c1ce96, 0x8000, 0x1, 0x1, 0x5d8, 0x3, 0xfffffffb, 0x7, 0x7, 0x7, 0x0, 0x7fffffff, 0x992, 0x3, 0x6, 0x4, 0x7, 0x52, 0x9, 0xff, 0x7, 0x7, 0x5, 0x2, 0x4, 0x1, 0x6, 0x5, 0xfffffff9, 0x0, 0x8, 0x4, 0x7, 0x0, 0x2, 0x8, 0x4, 0xffffffff, 0x8, 0x3, 0x502, 0x1, 0x9, 0x7b205bef, 0x7, 0x1, 0x0, 0xc, 0x5a9840d2, 0x92, 0x8, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x60d, 0x9, 0x5c, 0x6, 0x7fff, 0x0, 0x0, 0x65c5, 0x4, 0xc, 0x96, 0x100, 0x1, 0x7, 0x0, 0x9, 0x2, 0x4, 0x3, 0x5, 0x8, 0x4, 0x2, 0x3, 0x800, 0xfffffffc, 0x4, 0x0, 0x3, 0x5, 0x9, 0x80000000, 0x7, 0x7, 0x3, 0x7f, 0x9, 0x3, 0xa6, 0x6662, 0x7, 0x6, 0xa86a665, 0x3ff, 0x2, 0x9d, 0xfffffff4, 0x7, 0x7f9, 0x2, 0x8, 0xfffffffc, 0x4, 0x5, 0x6, 0x8c58, 0x4, 0x3, 0x4, 0x0, 0x7, 0x10000, 0x2, 0x0, 0x0, 0x24d, 0x9, 0x8, 0x8b5f, 0x1, 0x3, 0x0, 0x7, 0xffff7fff, 0x6, 0x401, 0xbd77, 0x4, 0x0, 0x8, 0x7, 0x7, 0x2, 0x400, 0x2, 0x5, 0x4, 0x6, 0x6, 0x1, 0x4, 0x7, 0xfffffffb, 0x5, 0xffffffff, 0x0, 0x5291, 0x5, 0x7, 0x5, 0xcb, 0x4, 0xffffffff, 0x8, 0x66e, 0x17712, 0xffffffff, 0x7, 0x6, 0x81, 0xfffffffa, 0x1, 0x4, 0x1ff, 0x3, 0x9b, 0x2, 0xb, 0x400, 0xf1e6, 0x6, 0x5, 0x8, 0x1ff, 0x8, 0x0, 0x1, 0x1000, 0xfffffffa, 0x0, 0x6, 0x7, 0x4, 0x3, 0xf, 0xc06c, 0x6, 0x0, 0x280, 0x5, 0x3, 0x3ff, 0x7, 0x0, 0x9, 0x4343, 0xfffffffe, 0x80000000, 0x7f, 0x3, 0x68, 0x0, 0x8, 0xe17b, 0x80000001, 0x1, 0x9, 0x8, 0x10000, 0x2, 0x7000, 0x4, 0x3, 0x10001, 0x10000, 0x6, 0x8000, 0xcb08, 0xfe1, 0x5, 0x2, 0x14000000, 0x5, 0x7, 0x200, 0x1, 0x9, 0x5, 0x101, 0x2, 0x1, 0x7, 0x8000, 0xfffffffc, 0x494, 0x9, 0x3a45a7f0, 0x8f0, 0x9, 0x3, 0x0, 0x4, 0x3, 0x80000001, 0xe, 0x8, 0x3, 0x5, 0x9, 0x0, 0x61, 0x7fffffff, 0x8, 0x5, 0xffff8000, 0x1000, 0x1, 0x0, 0x9, 0x8, 0x100, 0x0, 0x800, 0x7, 0x9, 0x3, 0x2, 0x1ea, 0x25, 0x200, 0x3, 0x1, 0x34fa41bb, 0x2, 0x2, 0x10, 0x9, 0xffffff80, 0x7, 0x4, 0x4, 0x2, 0xbb, 0x1aa3, 0xa, 0x6, 0x40, 0x1, 0x1000, 0x7fffffff, 0x6, 0x8001, 0xffffffc0, 0x4, 0x3, 0x5, 0x8, 0x8, 0x6b31b4a4, 0xe, 0x7, 0x4, 0x8, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0xffffffffffffffff, 0x8, 0x1, 0xfff, {0xf9, 0x1, 0x9, 0x1, 0x5, 0x4000000}, {0xfd, 0x2, 0x80, 0x8, 0x4}, 0x3, 0x4c, 0xffc0}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x400, 0x428, 0x6, 0x5, 0x40000000, 0x9, 0x3, 0x7, 0xa, 0x7fffffff, 0x10, 0x7, 0x9, 0x1, 0x3, 0xd, 0x8, 0x3, 0xa, 0x1000, 0x5, 0x0, 0xc4, 0xde, 0x13, 0x7, 0x5, 0x1, 0xffffffff, 0xab14, 0x2, 0x4, 0x4, 0x5, 0x6, 0x800, 0x5, 0x0, 0x3, 0xffff8000, 0x2, 0x1, 0x2, 0x401, 0x1, 0x2, 0x3, 0x4, 0xe, 0x0, 0x5, 0x0, 0x8, 0x4, 0x0, 0xff, 0x7fffffff, 0x101, 0x9, 0x8, 0x4, 0xc75b, 0x7, 0x3, 0x8, 0x9, 0x1000, 0xfffffe00, 0x5, 0x9, 0x0, 0xf7, 0x4a2981d5, 0xfffffffa, 0x7ff, 0x1, 0x1, 0x10001, 0x2, 0xe6c3, 0x383f7d9d, 0x3, 0x7ff, 0x7, 0x0, 0x9, 0x2, 0x0, 0x4, 0x98d, 0x2, 0x5, 0x2, 0x5, 0x744595d8, 0x77c, 0x4, 0x2, 0x0, 0x5, 0x8, 0x8, 0x6396c21e, 0x0, 0x80000, 0x0, 0x8, 0x3, 0x4, 0x5, 0x1, 0x0, 0x9, 0x40, 0x3, 0x7fffffff, 0x3, 0xfffff001, 0xf6, 0x6, 0x1, 0x1, 0x7c44, 0x4, 0xb0, 0x10, 0x7fff, 0x7, 0x1a1a, 0x5, 0x3, 0x2, 0xe1c9, 0x5, 0x40, 0x930, 0x4b7, 0x7, 0x40, 0x1, 0x0, 0x168, 0x1, 0x4, 0xa, 0x200, 0xd856, 0x4, 0x9, 0x6, 0xffff7fff, 0x4, 0x0, 0x7, 0x6, 0x5e323b8b, 0x9, 0x3, 0xffffff01, 0xbe72, 0x200, 0x506, 0x7, 0x7fffffff, 0x7, 0x7, 0x1, 0x1, 0x4, 0x495db6fc, 0x86, 0x8, 0x100, 0x5, 0x2, 0x3, 0x97, 0x1, 0x8, 0x4, 0x64d, 0x3, 0x1945, 0x7f, 0x0, 0xa2d7, 0x1, 0x6, 0x7, 0x4, 0x7f, 0xe26, 0x9, 0xf25d, 0x7192, 0xbfb, 0xfffffff9, 0xffff5d0c, 0xd, 0xb6a, 0x5, 0x80, 0x80, 0x7a, 0xa6, 0xe, 0xfc000000, 0x3, 0x529, 0x5a10, 0x9, 0x6d6, 0xffffffff, 0x7, 0x1, 0x10000, 0x4, 0x6, 0x2, 0x1, 0x7f, 0x6, 0x5, 0x0, 0x7fffffff, 0x17e, 0x4, 0xb, 0x9, 0x0, 0xfff, 0x4, 0xd0c, 0x9, 0xe, 0x7, 0x2, 0x8, 0x5, 0x4, 0xe0, 0x8, 0x2, 0x3, 0x42d, 0xb, 0x9, 0x7, 0x7, 0x10000, 0x9555, 0x4, 0xffffffff, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6fec, 0x6, 0x1, 0x6, 0x5, {0x6, 0x0, 0x0, 0x7, 0x4, 0x3}, {0x3, 0x1, 0xe, 0x2, 0x9, 0x1ff}, 0x3, 0xd, 0x1ebc6375}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x8, 0x2, 0x4, 0xffff, 0x30defd9c, 0x5, 0x1, 0x7fff, 0x8, 0x7, 0x2, 0x8, 0x7, 0x9547, 0x7, 0x3, 0x800, 0x0, 0x6, 0x7cb, 0x2, 0x8000, 0xfc8d, 0x101, 0x50, 0xfffffff9, 0x6, 0x6, 0x2, 0xe, 0x0, 0x3, 0x1, 0x7f, 0x3, 0x8001, 0x3, 0x65, 0x5, 0x4, 0x5, 0x80000000, 0x6, 0x7fffffff, 0x0, 0x7, 0x3, 0x101, 0xa, 0xfff, 0xfffffc01, 0x1, 0x6, 0x7f, 0xffff, 0xd, 0xffff8001, 0x1, 0xca6, 0x2, 0x80, 0xf, 0x6de, 0x4, 0x401, 0x8000, 0x200, 0x400, 0x1, 0x5, 0x5, 0xbd, 0x1, 0x8c6f, 0x5, 0x7, 0xfffffff7, 0xff, 0xfffffffb, 0x44, 0x7ff, 0x2f6a, 0x1, 0x9, 0x8, 0x6, 0x9, 0x5, 0xf2, 0xe0e6, 0x6, 0x513, 0x3, 0x60, 0x3, 0x7fffffff, 0x6, 0x80000001, 0x7, 0x8, 0x4, 0x5, 0x7, 0xb, 0x7, 0x92e1, 0x3, 0x7, 0x3e5, 0x7ff, 0x200000, 0xe5, 0x5, 0x3ff, 0x1, 0x3, 0xf, 0x1, 0xfffffffa, 0x2, 0x71, 0x4d2, 0x82, 0xac5f, 0x0, 0x3b6, 0x80000000, 0x2d, 0x9, 0xffff, 0x9, 0x7fffffff, 0xffff, 0x101, 0x101, 0x8000, 0x4, 0x9, 0xfffffff7, 0x97d, 0x4, 0x4, 0x5, 0x200, 0x5, 0x8, 0x6, 0x6, 0x9, 0x0, 0x55814e7, 0x80000000, 0x8, 0x80000000, 0x1ff, 0x0, 0x3, 0x4, 0x3, 0xbfa, 0xfffff801, 0x4, 0x2, 0x4, 0x0, 0x5f45, 0x1, 0x6f00, 0x1, 0x5, 0x8, 0xfffffffe, 0x1, 0x10, 0x7, 0x2, 0xffffffff, 0x100, 0x2, 0xfffffffb, 0x1, 0x5, 0xb0ef, 0xffffffff, 0x8, 0x1, 0x9, 0x81, 0x7, 0x6, 0x1, 0x4, 0x2, 0x1, 0x9, 0x10001, 0xe6e, 0x5, 0xbc78, 0x4, 0x1, 0x7, 0x3, 0x1d12, 0xfffffffc, 0x2, 0x40, 0x5, 0x2c940000, 0x6, 0x1, 0x0, 0xa9, 0x8, 0xc, 0xff, 0x5, 0x3, 0x8, 0xcf, 0x10, 0x3, 0x0, 0x1, 0xd0d5, 0x8, 0x75, 0x5, 0x1, 0x10, 0x6, 0x1, 0x1, 0x5, 0x8, 0x4, 0x3, 0x8001, 0xb, 0x1, 0x4, 0xa0d, 0x0, 0x7, 0xffffff54, 0x5, 0x6, 0xff, 0x2, 0x6, 0xfff, 0x9, 0x8, 0x10001]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xfffffffc, 0x8, 0x8, {0x44, 0x2, 0x80, 0x2, 0x1, 0x100}, {0x5, 0x1, 0x10, 0x7f, 0x5, 0x9}, 0x8, 0x46, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x8, 0x7, 0x96, {0xee, 0x1, 0xb765, 0x3, 0x9, 0x9}, {0x40, 0x2, 0x81, 0x3, 0x4, 0xfffffff2}, 0x8, 0x0, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4c, 0x6, 0x6, 0xfffffffc, 0x1, 0x3, 0x7ff, 0x7, 0xd77, 0x8, 0x466de341, 0x2, 0x1, 0x3d, 0xf992, 0x4, 0x400, 0x6, 0x5, 0x0, 0xfffffffb, 0x10, 0x2, 0x0, 0x4, 0x4, 0x7, 0x4, 0x2, 0x4, 0xfffffffb, 0x6, 0x4, 0x7, 0xc8a, 0x7, 0xd, 0x100, 0x8, 0x401, 0x0, 0x7, 0x6, 0x80, 0xc, 0x5, 0x200, 0xf1, 0x8e36, 0x6, 0x8, 0x2, 0xfffffffc, 0xb8, 0x9, 0x4, 0x3, 0x400, 0xfffffe01, 0x1, 0xb, 0x5, 0x7ff, 0x1, 0x4, 0x9b4, 0x1, 0x1, 0xc, 0x3, 0xd9, 0x2, 0x1, 0x10000, 0x7, 0x0, 0x3, 0x6, 0x101, 0x0, 0x3, 0x1, 0x4, 0x7, 0x2, 0x3, 0x6, 0xaa16, 0x8, 0x101, 0x8, 0x3, 0x4, 0x8, 0x7ff, 0x3, 0xf, 0x8, 0x8, 0x9, 0x80000000, 0x5, 0x12000, 0x8, 0xfffffffa, 0xe, 0x6, 0x926, 0x0, 0x5, 0x3, 0x6, 0x8, 0x7, 0x3, 0xffffff2c, 0x0, 0xbf5, 0x1, 0x0, 0xf14, 0x6, 0x40, 0x8001, 0x40, 0xed, 0xd5c, 0x62e7, 0xfffffffd, 0x1, 0x267, 0xffffffff, 0x5, 0x7, 0x5, 0x5, 0x8, 0x5, 0x1, 0x4, 0x5, 0x5, 0x6, 0x1004000, 0x2, 0x81, 0xc3, 0x6, 0x4, 0x0, 0x1, 0x6, 0x4, 0x80000001, 0x1, 0xfffffffd, 0x100, 0x3, 0x9, 0x0, 0x6, 0x1000, 0xbb9c, 0xc5, 0x4, 0x2, 0xf, 0x0, 0x1, 0x8000, 0x9, 0x54, 0x0, 0x9, 0x3, 0x758c3d54, 0x4, 0xc0, 0x7, 0x0, 0x40, 0x3, 0x0, 0xfffffffe, 0x5, 0x10001, 0x10000, 0xf, 0x5, 0x0, 0x9, 0x100, 0x6, 0x0, 0xc4, 0x6, 0x3, 0x0, 0x7ff, 0x9, 0x3, 0xb, 0x2, 0x23, 0xa75, 0x0, 0x5, 0x1, 0x1, 0x7, 0x9, 0x2, 0x165d, 0x9, 0xd4, 0x8, 0x400000, 0x80000000, 0x1000, 0x80000001, 0x6, 0x1000, 0x0, 0x90b6, 0x3, 0x0, 0x9, 0x80000001, 0x800, 0x6, 0x5, 0x0, 0x5, 0x51eb6cf, 0x9, 0x8, 0x81, 0x2, 0x7, 0x401, 0x6, 0x1, 0x80, 0x1, 0xd5, 0xa1ce, 0x5, 0x895, 0x6, 0x8, 0x3, 0x8234, 0x7, 0xffff, 0x8001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x451}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fe0000, 0x6, 0x3, 0x2, 0x8, {0x3, 0x0, 0xb2, 0x101, 0x1, 0x800}, {0xf3, 0x0, 0x100, 0x4, 0xff7f, 0x40}, 0x2, 0x8, 0xfffffffd}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x957, 0x9, 0x3, 0x616ccce4, 0x450, 0x0, 0x81, 0x3, 0xfc70, 0x2, 0xffffff7f, 0xffffffff, 0x4, 0x7fff, 0x8001, 0x7, 0xfffffffe, 0x8001, 0xf5b1, 0x3, 0x7000000, 0x4, 0x7, 0x24a, 0x80000001, 0xcd4c, 0x7, 0xffff, 0x8, 0xfffff4d6, 0xfffffc00, 0x35c9, 0x0, 0x7ff, 0x7, 0x7fff, 0x4, 0x3, 0x72, 0x400, 0x3, 0x4, 0x3, 0x3, 0xe3, 0xffff, 0x80000001, 0x8b, 0xfffffc01, 0x1f8d, 0x11, 0x0, 0x3, 0x3f89, 0x7f, 0xfffffffe, 0x80, 0x92b3, 0x78f, 0x8, 0xffffffff, 0x9, 0x41a, 0x8, 0x5, 0xfffeffff, 0xcc8, 0x6, 0xc, 0x2, 0x8c, 0x9, 0xde, 0xcb, 0x76, 0x4, 0x800, 0xbe3, 0xffffffff, 0x9, 0xfff, 0x4322, 0x748, 0xf0, 0x63, 0xe, 0x8, 0x3, 0x4, 0x3b56, 0x800, 0x3453, 0x3ff, 0x9, 0x9, 0x6, 0x7ff, 0x8860, 0x7, 0x7, 0x401, 0x37, 0x3, 0x0, 0x200, 0x3, 0x101, 0xfffffffe, 0x514e, 0x1, 0x58, 0x8001, 0x4, 0x1, 0x1, 0xb, 0x3, 0x2, 0x2fc, 0xffffff79, 0x5f2, 0x7ff, 0x3ff, 0x8, 0x2000, 0xfffffff7, 0x7, 0x0, 0x4, 0x400, 0x6, 0x80, 0x7, 0x8, 0x8, 0xf, 0x2, 0x0, 0x7, 0x1, 0x8a74, 0x2, 0x5, 0x6, 0xb, 0xcb, 0x2, 0x8, 0xf4, 0x6, 0x4b, 0xfffffff9, 0xfffff801, 0x4, 0x0, 0x3, 0x1, 0x4, 0x400, 0x7, 0x4, 0xdf, 0xf, 0x7, 0xd6, 0x6, 0x4, 0x4, 0x80000001, 0xfac2, 0x1fffc0, 0x407, 0x1e, 0xc37d, 0x6, 0x5, 0x3, 0x9, 0xf, 0xbda2, 0xffffffff, 0xd2, 0xfffffffd, 0xf9, 0x6, 0xa, 0x9, 0x0, 0x3f8000, 0x6, 0x71db, 0x90, 0xdb, 0xd03, 0x4, 0x1, 0x0, 0xb1c, 0x0, 0x2, 0xa, 0x6, 0x0, 0xfffffffb, 0x0, 0x9, 0x2, 0x4, 0x2, 0x1, 0x8001, 0x6, 0x1ff, 0x6, 0x8b9, 0x10000, 0x40000000, 0x8, 0x8, 0x80, 0x2, 0xffffffff, 0x1, 0x0, 0x8000, 0x2, 0xfffffff7, 0x5c81, 0xffffaec8, 0x5, 0xffffffff, 0x0, 0x4000, 0x0, 0x2, 0xa, 0xb3, 0x400, 0x7, 0x3, 0x955, 0x8, 0x406, 0x3, 0x11c5982f, 0x1, 0xffff, 0x7, 0x7, 0xd1ea, 0xd, 0x1, 0xe, 0x3, 0x4, 0x5]}]]}, {0x31, 0x6, "85b4fb830be36597886fc32deaf109199f7aff7da716e6adc66f52ced76a34a39c0a9a77e8a5c6d7c74a51d164"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0xf0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x31ec}}, 0x2000c800) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x1222, 0x1, 0x4, '\x00', r2, r3, 0x2, 0x2, 0x2, 0x8}, 0x50) 22.378078212s ago: executing program 2 (id=1741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x49400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@loopback, 0x3, 0x2, 0x3, 0x4, 0x1, 0x9}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x10000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg$unix(r1, &(0x7f0000004d80)=[{{0x0, 0x7, 0x0}}], 0x1, 0x40012000, 0x0) (async, rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}, @dstopts={{0x18}}], 0x40, 0x7ffffff7}}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) 22.259462181s ago: executing program 2 (id=1742): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xb0}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001000)=ANY=[], 0x190) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000001280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="76b6939e031833d84849623a32403fb4bee581d5177b28ad5fe175be156097d8d51c42910f7b666c3ca659af7418559555b83a134d5a7d694de73d76673b9c9570cb5d86f4e683565b99eca59bcc00d2e0dd69a369bfbe2e36362dee2c8954c0d279e2124bb59fb1254d2c493aeee9025a116e84f6dd235e32b4e23fe637a74bfce81656852005c1dd68618aabb077e8fa3d024dd1871b894c895b316fa780c26be7de8fdfa9a17e4ef7c491ed9127d41c5067e35a0ea8e704028581c093c7c64de95055928bd58831b4f140adf4024ff47c13b939b08f8419a83278265b7746b5544d55f9da44bf4c88516d6739f5f1ae805f5c54d1831b3c5d3c93d569cf7881b7d066e0d57b3d77d97bc24964556d875f80c5bee4fc81b8fc3731468a3df2ee385149ae7e40c9762218f34d8cc4c5f1df58efc17f05ef6da8d8d1e961e10197c59e8b06bca9df2c7cacf0de9760d1520871b15fef8462a93e51795ebeb2e7b2835686fc37310299b3582f4988e80538b15edf45cf9397f4bcc39bcbd8cad3d0f1e7bfd86f4882c176b22a07ad78c7efaf22dd34502c71f36a13eedce6c92a93e01b6082b842cb2481aff9239dcd72f22c84d5240b1543487386ba908ee50203e706877f73a0df9dae6ae1b54627638e351e8780b1612ca111fc978e52b0d2887ee99927d8db35dc4581e18e70bd2e724b02b9b54ac9564f7bf2556f8dc72b716dff5b3ccb259d0dd83439caac7afd94a67dd97ca29d2fc9aa7d85d92134195b5edbb3c86633558a95f01d8e223e917fa352d1a7f76f7ebbe099d72f4353b608d25f2aaedb48c50cd5dd22dbb26bda8435b52896352e754b6d903da9b579d688e6a774ca93c7cdab0b7983ba9d7270cc34586d0224e491e30e726d90e060be227b426d5aac3bcf3e4d6c37b4216e208b0a05341a56d89669ffed1a66a342e8924d3617c4b8a7880bdf10afbaddb8aa07fd84851f41e779025270db83785ea0ebd43ecf8ac3bd3a9075bdc1a97a914014726bfc64a2d2d2947fee50195d91234ba48ca3a785733e95039ca847053bab108bcbba20436127be3777f1880e32281651dbe26356c9184d130ce0e69661e47bd9505969e5b2299f9359f5cd9272c7e6e4fb1064512bcfe4baea2a7adc7128966f18146357eb4dfdbd0d16790568f3e6ccf94bacebb7bb060c4e011024350237672fb3fb32f684234869b38bab2aed92549c96fd1272a54ec730daa2fe22013609ab6559c71480cae33dbf0ef89060a91e7e07ec43ee5bb4fc02bffa55a6529d7a6b04ed609ba978161f5599962306e529960bf1c335051216efcbb1c77594f103ff9606491a50c65d596e6e6cc46b2d5e8480bd5144802d5b81b9646b7d965249b3839f1e5ab1f65411889a744d6231fc31446cad25944947aaf5fd912481d36d81c1f4d4f766a8a9f1788e1030cf8b2ceb4e72630f86a96d319a8e568024559a26ffed789a118bd4ce9d6fcc9965cc8260d0cc09c54fd809740f3cf4f501fd056c7cc2c57ecce1e051787d2aaff9a77f083fed3e8dc8937f9e9c873633db3fe886ae9575420636f961bd8ed850a66f36c26c7f21cf045d5781345f05a9bf930f2d19399b413b4fcc4c0afbd7187e5f11bc74cc8c1c9f15ba00cbe14c890f04fbef25fe5bc2a93b4dd331034e0bae25fda41ae03526a77f5538fb080470a73b9b512d4020398173a25398802a9dfd7a9878c929ce16c65b40e0130ce0dd919f86cc86a5a1e2278e9fc8119ac52a9f1195b70e2fdaed99ff628bc5aa0894d96c37304b9b44438e9336611198407ab7ce0a8545799b5c0346b858ab5647ba38cc10b20a8f5add11d81949b412ecf76cf9936ab1c2abb22b8649957717000cadd7387fc5729edc5acfc65a8d6dcd1840a589a81302350313cf7d88987eb8d6c084733929824e664bff0a7027aaba5e4a2c1acbe9045e8e901943d94754efbdcc7fc08f2c52314a6f97b64d4ec6d2cd90a38f20916b646a25f63af7c6e66c00aeed782620ccb7da1a5c23d179d04a406fdcfd479c10b617c9b5894ee4553850421554b0a04cd6ba49f0e809c4a732f203fcd8314f3fb3c68848a37df697a32bd40626fdd1903d4ee0a998ffee0b9c4186af1d8eb8ca93fc9724905fc3664017c81a7c9aa46fcb8466af1fb8245bcd0e7a030342220fd04955a5820212d80dd46bbbcea08b8e94eb23609f27c7181ab2e89650906f5bd3da0a6d59d3ae20908349b5ac1709cf1d5ca97f97d12feb65633ea9097ceb73983225a17abb581f924febae264a9ce8fa9cacbcc1f617a9af8761ec6fc1ac8d92d510b831a4ff7e2bdfb4e55219b8619e701964e7e14914ed55894ee0905c36178122790bc68943bbd3cb95100ce257e9314c0647b374f19665a72ef6b8135f597f6d99fbbf58af04267f5862abdc1253bc4ec21747dcbda6dfbf78d8c12fc11cda17a1721c69ca50f2861229f16aea81ef155595ad78cdb0218be5c39aca5eaddc649aa963e13b95ac46829f438c138c3c38e5f7c2631171ef3cc5bf967ada957203bce81ac029cc744a15553083424952bcf8f91b823d760b4f043497c95aa55b476341b333a7f6ac526e63d736103efb68aa356b6e734a3094de6cbb46e4bdb65b0c0a5d7b38803ecf75da55182fb626c65b038c54989a491ef5336cc43744fee365156c4c5e63e854719e7a51076aa3ad2a02e5b7eb7697d8474f04db6314c9f763fa5ff849209b2dc1cda603fa127151e9d39933575bfb79543d230f185bfd00ca8fe0322dc756ea1b681f3b62c6a47f780a226a120e4e5299234bb03ba0e3d6919c5e9ccc7a725f80080513610c8c71ceefc1e23b98e1961633bb5dce54a7e5504c5b94e4cd5e0f040be3678139c739876b23342b7b058843c93b54432a55f2c233db179c61b405917660e35094df63ecc5acc2f31ccf712346a4703608d19a6075efb326684a127502062707a98504df6230bfd0e97d5b70fc1ba2c90dd61ff909f9d1af8b134a1178112a116823657ac52eb94947fa41d3b8fd65e9790ccb495d1565626d0604ec96bffb5923675f838cdc8567114c7fa5020ed624e1741107feb005476fbf4d855e59d3f8c0be488f34294a5dac5f45363eb8199b2d3813cba42bb9c5a647a99f9fda0c09b507bac2c0a689e2b529425add15adcd37d65db01d09a196f2c233a5b3dcad4facba47be72e5738a2203c03f10643b2be22f057d9478049d0f6376a622151246ffa1ae2d04c14d2a4a758c05bc1f43c100a7613446c4d23851fa5eebefa64da7ff781809091099be7b212cdd52a621002bac81d5082e7713e6a2e29a15b18ef1261e262f0eeebc6348f430d510cc64d4e40d20ae43436b557c2ffffab3892f2e0645bb17bb6d0a439ec7d909a8f3ecc0846cdf4d95855886bd911096033b40ae3b3605c464e053dc6dbc0a38835f1aa0b46acaa036bf847b1364bbe27d381e14204a1e47736c245078049eba40a53e90af1cca53ecb062cb9c7cd4208c56e8cfc2f4931658f9c4540fc53ddd0c63125007986cd02e0d05edca099be1d42e1c1771e5016095d4f5172dca0a83a98e40c218a31d411d6b2f93254fc58ee6145f4e9c3418d817c8d0609988b7b4ca322e6e44006b3d0e37ef14803590f525f7810966801f6c56b1d7e187a4948237a0e2ed8ad60ab468a6dd1330daa135e366072e8c9c7a7096eb6a0ff47cb91656727fe3990c6f738ba3d38ac257f83cb9784d9e9c1d958cd1776fe75a0573c93507cc5a84f808eff3d3096cf7a3594f6a8b43819fe758a5fa587974562fb5563a7372487fd5977bb41806bc277f320c3eab67c325b9492dd1f6906ef96ed5b8fd1f022ceb3f432840451caf63c21517cc6bb7a7b414968f81a6f9a9c5dd4f8d1df13f61dc8e3df12cbd5b315a13b1d39c08bd35b8671bf9adb474173a49ae9defaa53fd8c82edff109a1c65d77b4f68dd7d8701806133516b68c9dcf36b860347ffaf8c86af00bd04d18e76a84328578ed63be375ffc22be39819a43ec38f6d0ad2c4b9e0c3303c75f847c9a3bb4a475fe4ef8ea7d2947d9adb30ff17f11ab2991e91ea5d921a0fe99b897a736a22dc2b69b97f8447397334d8cd1dff4f5cb55bfc394e45fd51dc50a4b0c1e1b9f0637083afccd39c0112ff8c91848e2481acf58c8c6e2d21bd61d4716b5f1738c9ca07c9659867a604a569717b4eb0575543d8a3804bd146688d713d4b0d9df86988412c4d0872a657ff954b88ba773cccbd0ab82b3b1394622c15da2cb73bd57353c85da07a98e153a2d27f99c8ed644c3533b6a8719f830852b93230887bf52b2bd60ebf7347aac9606b34eb94697635900e1c0e361d4bb41f02ce336559c78b12592fcf71811ac658b6c8259d3be52035bba026437be2cff139e986e3add9a5649b26e9369fe123c6116b0f7593ad3ff3d6a0a70732c414b2e9ca6f554edc7f00c6f86d2e1e756b32d7b9fb22022b1eed0e59d7fe80f08448aa23ed4e53904481acdd069fcf6469a88d28853766763c2803527139a2dd5169b8dda0c25e2f596412fdba180ba892534c3e815fdcd04e1f3c87acffa4d7198f483cfb3da6a9930ebb26421d6866d23904e024a61211c29f900e86d1007a954ad29eb7805ed08c36494e39cb236c395c848f4e82e6f02caec73aa6204f2f5c07bad93bc04820718be19a7ace2be9b0d94949a029f750ad284bd83babb38bd309a588e44e577e8e01fbc5c3c24bb4db36c6fc78f943a854a9049991ab00be0cf21511f97fb1edb9bc3d78d6deaa97dc7da6ad00c02c5c77950fef2376b88ce034612ed1e6f0e3161c715ea127696516801ab2a662c0d5dfc7ff7585f3de1e326f036530a4652b82adc3493d4cfd431c68e0c4c82b12e3fd4e547197e663ffa1dfa0d5f228f2b0bd9b0cf2e1180c375bec44e8dcb7", 0xd9d}], 0x1}, 0x40004) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000000203030000000000000000000200000f080001000100326713623d4a0f9970140000000000000000000000c8cb0bb254237b839e29b739c86f7c170cfd427d26cc3efba3225626906048e520d2deede77161c9dd2d897e9c33543e3d2ae1be46007fa46cd469a932a1361df5ce5757e0bde8d726d39c414fe1bb67654778ab93b4115255faf409f990f0892301346bbbd7be0b67b38602173b0abf6547997f0000fd82d8980a1babb423766710ee482d7d95f01a369df717a9a5f568e736e01f1ff07c0e9c6e5c67e54dd096c030226a37fa76ded93700"/228], 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000040) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="38105b96757f66940c6fa91d10f9c79dbbd26f6cc77ac8b831932c6af866b7c782153e42bd2024045a48030046a85558839f2e"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 22.035301634s ago: executing program 1 (id=1745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000009440)=0x0) bind$nfc_llcp(r12, &(0x7f0000009480)={0x27, r13, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18000003}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x2081}, 0x4000) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r14, &(0x7f0000000340)="3f000000010003", 0x7) preadv(r14, &(0x7f0000000740)=[{&(0x7f0000000280)=""/179}, {&(0x7f0000000380)=""/215}, {&(0x7f00000005c0)=""/167}, {&(0x7f00000007c0)=""/171}, {&(0x7f0000000680)=""/173}], 0x12ec, 0x1, 0x81) 21.985734855s ago: executing program 2 (id=1747): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, [0xff, 0x100, 0xffffffffffff6f98, 0x2, 0x7ff, 0x2]}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) ioctl$int_out(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/42, 0x2a, 0x0, &(0x7f0000000140)=""/242, 0xf2}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0000c0}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffa0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x42000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x6a}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000480)={r4, 0x15, "f1f846bdcf36c59434d1b9e855e632efbe073b4e53"}, &(0x7f00000004c0)=0x1d) r5 = socket$inet6_sctp(0xa, 0x7ef2f931112b3125, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000500)={r4, 0x10, 0x30, 0x9, 0xffffffffffffffff}, &(0x7f0000000540)=0x18) write(r1, &(0x7f0000000580)="59a03abc4d20d6d417a9ec9cadb2377a0289a8cecb116796a5922c8dc1aa8120093f2aa93da933c346e1153bede1e49e699a639c94c9cbdc3b3354ef3e6fe30f8c3d087642a3c3baec1e4bd337fc666be2b00585a62e24ce9e594ee81b7198d6d99a92107d5cf05358e042eb734ed5d0d9e0858ded4e86cb52f675786873595083fd3157939f41d8bef361b37ff9692bed5fe5c359e9d707dd1348020eb30ee5a8d73903c3887ec516cd664cc9468eead254196614a46a6d80a3ff845b8b9166cec05b543f9cbf179871b419c1949cbf6506a6a64c9f6546e1a8b3b2dcfacf9ef6b00811304219a8e04405", 0xeb) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000680)={r4, 0x1}, 0xc) accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000700)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000740)={r4, 0x4, 0x0, 0x1, 0x7, 0x80000000}, 0x14) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x20, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffff0}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x60000050) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r2, 0x3, 0x3, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={&(0x7f00000008c0)="5d2ad84489e73654826125a7185fc827cc4b62e95cbe6772f905814dc326af2e", &(0x7f0000000900)=""/190, &(0x7f00000009c0)="1ed87f88244a0e6a4d49d07764f62740fd625d141212f92c7af83280da68f020541ffc7e11291d458e2bb6ba18c35259d5dfd2c696fda38c4f1292f8490db989d54b006378f1fdfdd344", &(0x7f0000000a40)="2eff8a69725ed38b528b6f3dae478638e464e1a872be5ae104b529890cc97ec96d14b9eaf6129374b5c6ba46bd2af0de2e75f2410b274eb871644a9c8ba27ca308af46c87108c26fc07bbde49f05f69a5fa7f0b08dbe6f897f4c4c740dacbe2ad57f0078638471cf10b300491d4abb740e379c362af3bb522f1540d83ddfa7ae733af631844e26", 0x5, r7}, 0x38) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000c00)=@newtaction={0x7d4, 0x30, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{0x28c, 0x1, [@m_ipt={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xe, 0x6, "e5d0f80166d025d1ae6b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xc8, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x71, 0x6, "240b086b4d19e3e67e168fb7684e310190becffca20961ae49f6833cff620680b94c1d8b170078a904b5a0be759ccede377ffcc8f1fb460862162878d4d559bbd30bac7cb49c26c64efd3ca09b4839b5b296131659c9b1d3a513b9863fc7390713c46c78d1411d137920a71774"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x178, 0x1c, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xffc00}, @TCA_IPT_TARG={0x64, 0x6, {0x8, 'filter\x00', 0x8, 0x6, "eff48078fa43173d9668880c2697b44192c5780f131ae7baca788d70b2dae3f37c2c89b76d1dcb3ecbf53ef283f562308931ff487d1c63e13712"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x98, 0x6, "4a6dd697aef4a049fe922336ef253a5dc8eab1c624613a33816ee32e195b6fe1abd3c7d29fa8c4214a6668913682fcb4158a4ac0cd4d549c9256006d0b224df600dcc66166e89c80a077e6bb72dfb2c773a2629fe7ec83569b2dc5abf0759107d04b294cd7a506d4ee5edf102e3a3ae7274e2a0acfd10c70746245d79a811869ef784578ee2e92277fbc990ff2db45aca7119462"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x534, 0x1, [@m_ipt={0x530, 0x5, 0x0, 0x0, {{0x8}, {0x414, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10a, 0x6, {0xfff, 'mangle\x00', 0x1, 0xfff9, "5af871be067382a8aafce022851adad01318f4b9d2af01ba71cd94b9819a4951ee74c40e155ecf99e830e333f9b6530f88e5b035082a15d1a2f71ca3bf70ac52b77c5e2789b2fd782cc7ec5131f5a7dd571705c4fe2ff9adb2c04adfa41a95d8bfd8ae938f6e7270fd849ce09a93a1d977359b859d2214d06aad2caea44ad3499d654ba2005ac304468ae02b717758025e5d885134d2acc173e170d710336152c5ac7b5f8fc16a8c8de3d760ad754b67aa6a19452527f859edf44bca3c958bfffe2ef6cb2e93800587c31d63bf20323c79ae80dfd9ab92cdead624e757dbad08"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3eaf}, @TCA_IPT_TARG={0x10f, 0x6, {0x0, 'filter\x00', 0x3, 0x3, "a9f5d49020befebea1dd347d201834de3aa4c2a911209e523e473bb105193e812014e64e75fda6cc9ef9cfa9761bc14c318b01a47de7dbc07fe525c5bf2f6322a3cc6b0081b886837cda1020ecfa63bfd4479cf27ef1f0fc222a1dda62f5ef5a737ae6fc1065bb5b9b49e3c125e438ee613b3d6fc51147e77d8a9fba93a52c1ff5583074caa3b2cedc42761b7ae1823d3eaf49352490b32a81e8a915223d7c6399910ac01800c51ce2c31cabd70501fa89cec6c6f853a00e8997ecebf83618b4fe06ac9b2694037c3bea4ba703f6f1e79aae9743154ef3e53a8b900621bf1929fd051b0d9f"}}, @TCA_IPT_TARG={0x90, 0x6, {0xb, 'security\x00', 0x2b, 0x4, "8c05bf66172932a1e2f92470bf4599680b78d074912930b0da044e8546128252d1b98f891f384184bab2116a0457fdee4ae0e5a25a83f219c4ab0327076b19f6463f31de7d6fae5a42c412d3803cee5fd23fe1a1de8589e988673c9cd267cc555c31934d1075"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x0, 0x3, "d2acb26f509b3e5ff977cab084560ea22e11cf2b615a899b45a9eb7f02e7c8cc99fe9c6639fc339cbd7b16d2199ebcff9594685d8f3ab9c6b38667c1673740afc4d9a91d5d3539695024aa69327f8cd2ad4e5084a4cfb0f6ffb1a8e98f957a4c9457323daff10719947ec565fc085e241e77b24f3aeeb9"}}, @TCA_IPT_TARG={0x91, 0x6, {0xfffd, 'nat\x00', 0x78, 0x0, "d0a54ae58d108320962dc460054b4497960144ff08122fb874f7670da5784ffc0152986835b2062c5ade9a6945b25ffe82aa17852079308c8b4590f5da9e26124537f5153984cf8f15c30b12f4fa19d408c71472c29c83478b659cb9bcea9baa8f00f33c5f3014"}}]}, {0xf6, 0x6, "b4281b367bc393a3977582bffe4298ccc40438b314cd821920795def76448572c5d1de3a2be2130f1fc283fba0eee22c8c6e463959b7ed2498dfa534ac7c93ac5a080f4f59a09f75224fd04a828d1b789e2615e68d23468050cdaf4a24c525b8f1a3a780f86e7362c5dbf41f050a77fc8ad2067c72d381ba4316666e7b1f45db87b708bc0f53ef7f7dab28d0fec52c95cf7700f02ef064a019a5c8aa200054973766d751e50b2214ff5b80796b63fc3d2c3145988714560515f2ff886e2f659178fa066ea6078c3648a838d3cceb6e370d07eaf9ac03afc61761e6eec2109804b217049e0d3e6b26b1883933cb578d62244c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x850}, 0x10) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001480)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f00000014c0)=0x8000000000000001, 0x8) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000001500)={0x10}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r10, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xd4, r11, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x82ad}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) 21.927637073s ago: executing program 2 (id=1750): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015300e4ffffffffffff01"], 0x34}, 0x1, 0x40030000000000}, 0x14004054) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000006c0)={0x3c, r7, 0x109, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x74cc076ec6639121}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000740)}, 0x1f00) (async, rerun: 32) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @private0, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000300)="06aec371c1317499ff94fa4bb3c8b56c85f151190f598c3f24690795df28c4ab415b7f3009ebe94e7b42d5aadd7962aa747a1d7af1b88357f84a9416d71213c8d82cc93852d366f18dc08e30bf54d11b0f", 0x51}], 0x1, &(0x7f0000000440)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x87}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0xc0}, 0x844) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r5, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x7a, 0x2}, {0x3, 0x4}], "7ecd4163b8fccf09"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x17, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async) socket$can_j1939(0x1d, 0x2, 0x7) 21.718178468s ago: executing program 2 (id=1751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000002c0100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES32=r0], 0xfdef) 21.530842578s ago: executing program 0 (id=1757): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_stats}) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) recvfrom$rose(r0, &(0x7f0000000000)=""/245, 0xf5, 0x40000020, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_stats}) (async) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) (async) recvfrom$rose(r0, &(0x7f0000000000)=""/245, 0xf5, 0x40000020, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) (async) 20.318973249s ago: executing program 0 (id=1762): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='vegas\x00', 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r4) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000400)=0x10, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) close(r0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000480)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}]}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000004c0)=""/4096) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2c5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x41) r6 = socket$netlink(0x10, 0x3, 0x8) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001640)=0x9, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001680)={0x1f, 0x2, 0x1}, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffffc, '\x00', 0x0, r0, 0x2, 0x3, 0x4}, 0x50) getpeername$packet(r0, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001880)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x18, &(0x7f0000001740)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0xb, 0xb, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x3, 0x2, 0x2, 0x6, 0xa, 0x6, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000001800)='syzkaller\x00', 0x3fb82667, 0x0, 0x0, 0x41100, 0x40, '\x00', r8, 0x0, r0, 0x8, &(0x7f00000018c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x3, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000001a00)={0xa, 0x4e24, 0x29ce, @empty, 0x974c}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001a40)="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", 0xfc}, {&(0x7f0000001b40)="870a54e4340844b07a6314ea7793b6dce1d227be6a", 0x15}, {&(0x7f0000001b80)="6939a2097051c2d375e38007cddfa6cf38351c2c19f73ad80650871fe7bd9bb55f5451b4792791b07959908dcc499a200bc53e7d3d79b4c51f74adc910763270ee8a8bd2705d77c4c08f419388857f47d90d42d0088bfd383824052ea12206c4ee4606f3da84b53b3b50aaa9b1b9cc0fb3f5e9c816b90d01a385aa54a718e64ca71da6afc3cce0", 0x87}, {&(0x7f0000001c40)="68860113faf6aa2c380967bb79a6b60409", 0x11}], 0x4, &(0x7f0000001cc0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x3b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8181}, @ra={0x5, 0x2, 0xc000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffa}}, @hopopts={{0x40, 0x29, 0x36, {0x1d, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @dstopts={{0x98, 0x29, 0x37, {0xc60f389a0cf7831, 0xf, '\x00', [@generic={0x4, 0x76, "5571951b1fbcbcbe57c739a887f73c6f3ba96fbf5848751619342dabf4d49de082e8b64cf50bc19fb512baca34a2127922a7d1e86d1c26eb55cecccee4db6357a04d6f8dbec578c445e16e71ffbadee225537f059097f16bcfaa501b0504bce5e857b1a4ce3a910ca0cc6f7e70ef697094bc6dff56e6"}, @padn={0x1, 0x1, [0x0]}]}}}], 0x148}}, {{&(0x7f0000001e40)={0xa, 0x4e21, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcc67}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000001e80)="aabd73ab057b8b1c461266a0c74b568e491e4704ac2e0ca7286e8aa3a33a3cc43c0f38565a75ade94cc89b13b981c2c30cd37c7af07c1f738b040efd69788f6274ee15533acef5bcfc8858d24712ccee86602d9c963b8764821a0329b7307e3edcc784fb7cab", 0x66}, {&(0x7f0000001f00)="ed989e1ab2fc77daf658bbe0333d0049e139dad58bfd4af20c218ab311186625c0c9d9b5", 0x24}, {&(0x7f0000001f40)="a18a75178d46556c70f9ba05976262d41b3c5ea84ae514c19e8493b4c8cf3b4871bfbc8214162ef22ed9854f19a5c01c0a246b1536913ada8a5a74cbf9af7f24b330ef7c509bc53983cc8ca51b962736a820", 0x52}, {&(0x7f0000001fc0)="33683250805eb3da43bd208385b2f1e90879585837e825260ec6efeff58feb2ac970f276f5bcea090e85472be93ab124b940aa91f3dc7617f9bb4418d4f1b76123f3cd366a011229228216d17edf41e158aee60d51f73c35bf46b10a13c656fea5b85bc435aec0b7368842575eb62c0d47d09841a6dc00eb2d5e730b2d10f068764dab76eba1053db226296b15d0ebb7f65234c42d7703f3321cfebf8174f367309e611efd816810d86b003fb4c304ee5b5c14f71bcc58582454", 0xba}, {&(0x7f0000002080)="93df3565947b2077041f88053d29284309c78215029d21603d3b210df73d5cd9e632d786ac4a11eb9543a6e0de69a40261db50df00fa33d2d08ae42edd2a1888cdcfff3851122e8f8e2c5b2e50f16a4b32f2826105509f6da64a09a8108b055ee90991367706171dafac6b087c37efaad372107d4875820de727b9b45fa04c30a61f9a7b6ae479cc85e817e3683ab4083e624c1e91f3241d659e00126fea9ba970ace233605eaf4cbb6a4dc55be98b7c16fe1677c21d8ae3f62325f39c3300cb09bba7986416aba747a34c41bca7915231bc1f751e7619008f44407a766238a46b2b6165df9efd5f4131", 0xea}, {&(0x7f0000002180)="29d23bfb656f87a429662dfbebe19f3ae0ee5408fed3e317589c50ee136a2412dbd70a87291bbdca179523a1bc4f07441af0ac3f867300d5268bbaff57ed1e85d234b594c6661486f52b4bc56acfa32bd176c58c14ec684625bbfcac869ca5817fb58e9f5b1654a5c20be895258fbd026c2dc9f37dd89623a4d433216f1944f0814bc1e0fd20c028a5e09c6cc8512b25875c5ac00a034b58d3d0f7d9e1d739d912d13cacf7bb5fb4eeb10671a17f3e1a115b2e69f895b450e27382d13fe2bd32f3704d9a5ab45b8cb8969772e27913b54bde1b6740c8876a381346cd0032ab3ac81d3a7c2d75e743f60a871e5e9d0885d47c820a93df", 0xf6}, {&(0x7f0000002280)="e01b13b867c29048e117e54c830f4bedf0f49c77f1ca66003c9892fa0a27e3695f15eeb3216ae2923ea5801546a37c59fe7951d941c8971d08e7fbefa0696841023728de6f7630b02fc198f67cc534995303bdf289", 0x55}, {&(0x7f0000002300)="53a9a8fcf70576a5f3adb3d5433aa46a863aca7b6f497d3e41875404aaf01c5e6a486ed4c0abcfc53910081e2bcde62baf37917592da344505116e437c10824d5a31f4b8", 0x44}], 0x8, &(0x7f0000002400)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}], 0x20}}], 0x2, 0x402539e9e28b66ee) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002500)={0x0, 0x10, &(0x7f00000024c0)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000002540)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002580)={0x8, 0x9, 0x8000, 0x6, 0x6, 0x7ff, 0x6, 0x7, r9}, 0x20) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000025c0)=0x1, &(0x7f0000002600)=0x4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000002740)={&(0x7f0000002640), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x122, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 20.317763056s ago: executing program 3 (id=1763): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x945efdbd55cacb66, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) pselect6(0x73, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x2004}) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) (async) sendfile(r1, r0, 0x0, 0xf03a0005) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x6ec, @none, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x6ec, @none, 0x4, 0x1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004780)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x17, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x14, 0x0, 0x0, @binary="b6eb98be69"}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2000c000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004780)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x17, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x14, 0x0, 0x0, @binary="b6eb98be69"}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) 20.21428287s ago: executing program 0 (id=1765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) (async, rerun: 32) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x3e) 20.213262687s ago: executing program 0 (id=1766): unshare(0x26020480) (async) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}, {&(0x7f0000000480)="f1436a2463449111e1f2f9b324845afcdd7a6d1ec8", 0x15}], 0x2, 0x0, 0x0, 0x20000080}, 0x40000c4) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}, {&(0x7f0000000480)="f1436a2463449111e1f2f9b324845afcdd7a6d1ec8", 0x15}], 0x2, 0x0, 0x0, 0x20000080}, 0x40000c4) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x12, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x5}, 0x94) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r7, 0x1, 0x70bd2d, 0x2000004, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYRES32=r9, @ANYRES8=r0], 0x10) close(r4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r10, @ANYBLOB="496dcc56606fec0280286f26fb78e11bde8d2099e995c28a2f69bf1c6f51b19166cc85d06bbb29c72609efd46741c4573048d46f8324d27e4f1f1ae46efc2465bcf6fa234f32424657ca596c3b4f6d6b5e4dfacdd2d0fc65a5f9bd014386158d3f5352805b0dac66c2cdf79e81c69e80dd9c17491f08daaf646647809e682fb2db326cb301ba40688d296f95891dbf3834f80405bafc1659c3c7ed7eba33ea782330674f06e484c1e4082aa10d2471e36931b987e1243376a3e5be4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r10, @ANYBLOB="496dcc56606fec0280286f26fb78e11bde8d2099e995c28a2f69bf1c6f51b19166cc85d06bbb29c72609efd46741c4573048d46f8324d27e4f1f1ae46efc2465bcf6fa234f32424657ca596c3b4f6d6b5e4dfacdd2d0fc65a5f9bd014386158d3f5352805b0dac66c2cdf79e81c69e80dd9c17491f08daaf646647809e682fb2db326cb301ba40688d296f95891dbf3834f80405bafc1659c3c7ed7eba33ea782330674f06e484c1e4082aa10d2471e36931b987e1243376a3e5be4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r13, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r13, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) (async) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000240), &(0x7f0000000140)=r14}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) 20.183310228s ago: executing program 3 (id=1767): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff4}, {0x2, 0xf}, {0xfff1, 0x9}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@qipcrtr={0x2a, 0x2, 0x27d4a5c404f92e1e}, {&(0x7f0000000140)=""/57, 0x39}, &(0x7f0000000240), 0x8}, 0xa0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000380)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000290000003e000000d26b12cc", 0x34) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c009900df0000002500000008009f00020000000800260080090000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 20.140063271s ago: executing program 0 (id=1768): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3a1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x364) r5 = socket$inet(0x2, 0x1, 0x100) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c85dcdf12f2130cf868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) 20.037013041s ago: executing program 3 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 19.982140379s ago: executing program 0 (id=1770): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"/301], 0x2c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0x0, 0x4, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x4}, {0x0, 0x3, 0x3ff}, {0x0, 0x5, 0x7}, {0x4, 0x5, 0x80000000}]}, @float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000000180)=""/124, 0x6a, 0x7c, 0x0, 0x80000001, 0x10000}, 0x28) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f80"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000012000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000080000008400302e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) close(r10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000280)={'ip_vti0\x00', 0x200}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @broadcast}, &(0x7f0000000540)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8d25947fce4b9481}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4840) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x30) 19.981820553s ago: executing program 3 (id=1771): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044840}, 0x800) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x12, 0x1, 0x70bd27, 0x25dfdbfc, {0x2a, 0x9, 0x2, 0xeb, {0x4e20, 0x4e24, [0x38000, 0x6, 0x400, 0x8], [0x0, 0xfffffc00, 0x1, 0xfffffff2], 0x0, [0x9, 0x4]}, 0xa, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8881}, 0x800) 19.969182846s ago: executing program 3 (id=1772): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x200000d4) 19.63608772s ago: executing program 3 (id=1773): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x814) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x14090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) unshare(0x24020400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001"], 0x3}}, 0x0) splice(r4, 0x0, r6, 0x0, 0x10d00, 0xf) 16.286229837s ago: executing program 4 (id=1783): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r6) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r11, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001340)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001b80)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r11, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 16.180204431s ago: executing program 4 (id=1784): r0 = socket(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0xaf, 0x9bd}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) 16.152817001s ago: executing program 4 (id=1785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000002b000100000000000000000008000000040003000c0001800600000088480000080002"], 0x2c}}, 0x40) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000080"], 0x30}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 16.058358483s ago: executing program 4 (id=1786): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x79, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x841}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000108000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 15.858801425s ago: executing program 4 (id=1787): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70b925, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r3, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000f8dbdf25010000000c00050023010000000000000c00060002000000000000000800010000000000bbfc0600010000000000000008000100000000001c00078061fc018008000100", @ANYRES32, @ANYBLOB="2100018008000100", @ANYRES32, @ANYBLOB="640007800c00018008000100", @ANYRES32, @ANYBLOB="7e2c6742bd1ea1fdffffff2801a5732b779b5937d8bc81cd05676129c85ad275353418cd30e8f315d4503635a317c1c4635cf18476b6d6369d149449b1a3a363f46b", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000069000305000000000900000000000000000000000800010000000000a5cf40e1638c3a768a3c7876"], 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r9, @ANYBLOB="010000000000f7dbdf2501000000140002007767300000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553ade901b9ff2f518c78042fb542c400088044000080080003000600000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922140004"], 0x110}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.808851249s ago: executing program 4 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x7f, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x8, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) close(0x4) 7.009038019s ago: executing program 32 (id=1745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000009440)=0x0) bind$nfc_llcp(r12, &(0x7f0000009480)={0x27, r13, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18000003}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x2081}, 0x4000) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r14, &(0x7f0000000340)="3f000000010003", 0x7) preadv(r14, &(0x7f0000000740)=[{&(0x7f0000000280)=""/179}, {&(0x7f0000000380)=""/215}, {&(0x7f00000005c0)=""/167}, {&(0x7f00000007c0)=""/171}, {&(0x7f0000000680)=""/173}], 0x12ec, 0x1, 0x81) 5.99248097s ago: executing program 33 (id=1751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000002c0100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES32=r0], 0xfdef) 4.970707044s ago: executing program 34 (id=1770): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"/301], 0x2c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0x0, 0x4, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x4}, {0x0, 0x3, 0x3ff}, {0x0, 0x5, 0x7}, {0x4, 0x5, 0x80000000}]}, @float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000000180)=""/124, 0x6a, 0x7c, 0x0, 0x80000001, 0x10000}, 0x28) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f80"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000012000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000080000008400302e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) close(r10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000280)={'ip_vti0\x00', 0x200}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @broadcast}, &(0x7f0000000540)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8d25947fce4b9481}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4840) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x30) 4.007153603s ago: executing program 35 (id=1773): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x814) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x14090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) unshare(0x24020400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001"], 0x3}}, 0x0) splice(r4, 0x0, r6, 0x0, 0x10d00, 0xf) 0s ago: executing program 36 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x7f, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x8, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) close(0x4) kernel console output (not intermixed with test programs): im netdevsim0 netdevsim2: renamed from eth2 [ 78.270688][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.293261][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.371925][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.397911][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.420371][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.426344][ T5862] Bluetooth: hci1: command tx timeout [ 78.427782][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.432928][ T5862] Bluetooth: hci2: command tx timeout [ 78.441265][ T5866] Bluetooth: hci0: command tx timeout [ 78.467018][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.480244][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.487424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.496687][ T5866] Bluetooth: hci3: command tx timeout [ 78.516118][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.551129][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.576569][ T5866] Bluetooth: hci4: command tx timeout [ 78.591509][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.598787][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.608978][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.616091][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.642704][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.649898][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.664041][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.690206][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.697381][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.757976][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.801781][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.809052][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.883691][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.890889][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.963773][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.110597][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.172550][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179761][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.254732][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.261964][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.282413][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.295505][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.424400][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.534616][ T5860] veth0_vlan: entered promiscuous mode [ 79.554889][ T5871] veth0_vlan: entered promiscuous mode [ 79.604051][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.625482][ T5871] veth1_vlan: entered promiscuous mode [ 79.642890][ T5860] veth1_vlan: entered promiscuous mode [ 79.805379][ T5859] veth0_vlan: entered promiscuous mode [ 79.833952][ T5859] veth1_vlan: entered promiscuous mode [ 79.849963][ T5860] veth0_macvtap: entered promiscuous mode [ 79.874701][ T5860] veth1_macvtap: entered promiscuous mode [ 79.908693][ T5871] veth0_macvtap: entered promiscuous mode [ 79.926207][ T5871] veth1_macvtap: entered promiscuous mode [ 79.970437][ T5859] veth0_macvtap: entered promiscuous mode [ 79.981396][ T5859] veth1_macvtap: entered promiscuous mode [ 79.991551][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.002373][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.024604][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.038451][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.048525][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.081758][ T5878] veth0_vlan: entered promiscuous mode [ 80.098789][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.106091][ T4522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.116035][ T4522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136088][ T4522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.150222][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.164032][ T4522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.173827][ T4522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.192013][ T5878] veth1_vlan: entered promiscuous mode [ 80.204213][ T4522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.213923][ T4522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.232522][ T4522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.241489][ T4522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279950][ T4522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.290291][ T4522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.328849][ T4522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.402205][ T5867] veth0_vlan: entered promiscuous mode [ 80.416065][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.422410][ T5867] veth1_vlan: entered promiscuous mode [ 80.435371][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.486796][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.494887][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.504989][ T5866] Bluetooth: hci2: command tx timeout [ 80.505018][ T51] Bluetooth: hci0: command tx timeout [ 80.516496][ T5862] Bluetooth: hci1: command tx timeout [ 80.548541][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.561958][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.576959][ T5862] Bluetooth: hci3: command tx timeout [ 80.583987][ T5878] veth0_macvtap: entered promiscuous mode [ 80.614439][ T5878] veth1_macvtap: entered promiscuous mode [ 80.641799][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.651433][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.666479][ T5862] Bluetooth: hci4: command tx timeout [ 80.704216][ T5867] veth0_macvtap: entered promiscuous mode [ 80.720627][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.730018][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749353][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749692][ T5867] veth1_macvtap: entered promiscuous mode [ 80.769598][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.770542][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.805009][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.813789][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.871038][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.889011][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.920432][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.932307][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.943643][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.958850][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.991218][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.132821][ T5988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.155201][ T3065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.174205][ T3065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199468][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.226017][ T5985] Bluetooth: MGMT ver 1.23 [ 81.253226][ T3065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.262595][ T3065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297798][ T5993] vxcan2: entered allmulticast mode [ 81.345443][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.382524][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.488794][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.491546][ T5996] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7'. [ 81.521474][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.523565][ T5996] netem: invalid attributes len -16 [ 81.538223][ T5996] netem: change failed [ 81.762644][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.783134][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.033305][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 82.182963][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.226603][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.260290][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.576777][ T5862] Bluetooth: hci1: command tx timeout [ 82.583018][ T51] Bluetooth: hci0: command tx timeout [ 82.587007][ T5866] Bluetooth: hci2: command tx timeout [ 82.663223][ T5866] Bluetooth: hci3: command tx timeout [ 82.736337][ T5866] Bluetooth: hci4: command tx timeout [ 82.871994][ T6028] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12'. [ 82.917163][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.203780][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 83.489634][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.512580][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 83.529126][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.562018][ T6048] netlink: 220 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.763054][ T6053] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 (while UP) [ 84.087424][ T6055] syzkaller1: entered promiscuous mode [ 84.107059][ T6055] syzkaller1: entered allmulticast mode [ 84.144416][ T6065] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.168495][ T6065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.607687][ T6080] netlink: 'syz.3.26': attribute type 9 has an invalid length. [ 84.969804][ T6087] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 85.417772][ T6098] tipc: Started in network mode [ 85.481503][ T6098] tipc: Node identity f24fc4ab3757, cluster identity 4711 [ 85.497390][ T6098] tipc: Enabled bearer , priority 0 [ 85.607179][ T6107] Zero length message leads to an empty skb [ 85.637011][ T6107] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 85.699150][ T6107] batman_adv: batadv0: Adding interface: virt_wifi0 [ 85.713734][ T6107] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.753068][ T6107] batman_adv: batadv0: Interface activated: virt_wifi0 [ 85.873313][ T6096] syzkaller0: entered promiscuous mode [ 85.885626][ T6096] syzkaller0: entered allmulticast mode [ 86.050818][ T6089] tipc: Resetting bearer [ 86.070473][ T6089] tipc: Disabling bearer [ 86.295832][ T6121] __nla_validate_parse: 5 callbacks suppressed [ 86.295852][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 86.368341][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 86.725485][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.733833][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.756891][ T886] cfg80211: failed to load regulatory.db [ 87.090889][ T6159] Illegal XDP return value 4294967262 on prog (id 26) dev N/A, expect packet loss! [ 87.280165][ T6169] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.46'. [ 87.288991][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.323894][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.740513][ T6121] hsr_slave_0: left promiscuous mode [ 87.747973][ T6121] hsr_slave_1: left promiscuous mode [ 87.849585][ T6159] netlink: 112 bytes leftover after parsing attributes in process `syz.1.45'. [ 87.860476][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 87.878961][ T5913] syz1: Port: 1 Link DOWN [ 87.901829][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.913088][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.027747][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.050977][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.279156][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 88.577271][ T6215] pimreg: tun_chr_ioctl cmd 1074025677 [ 88.587508][ T6215] pimreg: linktype set to 780 [ 88.634014][ T6217] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 88.666505][ T6213] pimreg: tun_chr_ioctl cmd 35111 [ 89.101024][ T6239] bridge_slave_0: left allmulticast mode [ 89.108806][ T6239] bridge_slave_0: left promiscuous mode [ 89.128628][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.191673][ T6239] bridge_slave_1: left allmulticast mode [ 89.200835][ T6239] bridge_slave_1: left promiscuous mode [ 89.211454][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244009][ T6239] bond0: (slave bond_slave_0): Releasing backup interface [ 89.273337][ T6239] bond0: (slave bond_slave_1): Releasing backup interface [ 89.303468][ T6239] team0: Failed to send options change via netlink (err -105) [ 89.312436][ T6239] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 89.323177][ T6239] team0: Port device team_slave_0 removed [ 89.337447][ T6239] team0: Failed to send options change via netlink (err -105) [ 89.345674][ T6239] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 89.356956][ T6239] team0: Port device team_slave_1 removed [ 89.363409][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.372235][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.381682][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.389241][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.399999][ T6239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.417747][ T6244] team0: Failed to send options change via netlink (err -105) [ 89.425219][ T6244] team0: Mode changed to "activebackup" [ 89.498970][ T6256] dvmrp0: entered allmulticast mode [ 89.630961][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 89.711656][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 89.718942][ T6265] syz.0.65 (6265) used greatest stack depth: 17864 bytes left [ 89.744568][ T6273] lo speed is unknown, defaulting to 1000 [ 89.754272][ T6273] lo speed is unknown, defaulting to 1000 [ 89.754286][ T920] IPVS: starting estimator thread 0... [ 89.771091][ T6273] lo speed is unknown, defaulting to 1000 [ 89.824081][ T6273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.854661][ T6278] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 89.867789][ T6275] IPVS: using max 36 ests per chain, 86400 per kthread [ 89.950685][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.005124][ T6278] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.018269][ T6273] lo speed is unknown, defaulting to 1000 [ 90.044926][ T6273] lo speed is unknown, defaulting to 1000 [ 90.053895][ T6273] lo speed is unknown, defaulting to 1000 [ 90.068430][ T6273] lo speed is unknown, defaulting to 1000 [ 90.136965][ T6273] lo speed is unknown, defaulting to 1000 [ 90.166020][ T6287] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 90.235224][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 90.251234][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.261348][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 90.308455][ T6289] netlink: 'syz.1.72': attribute type 32 has an invalid length. [ 90.345428][ T6289] (unnamed net_device) (uninitialized): option coupled_control: invalid value (6) [ 90.472456][ T6289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.581245][ T6289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.731635][ T6329] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.749918][ T6289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.828329][ T6287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.834410][ T6287] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 90.847498][ T6289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.865497][ T6287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.871627][ T6287] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 90.883171][ T6332] warning: `syz.2.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.912558][ T6287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.918737][ T6287] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 90.951127][ T6287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.957958][ T6287] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 90.988654][ T6287] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.004578][ T6287] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 91.052338][ T3065] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.089217][ T3065] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.161792][ T3065] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.195246][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.510590][ T6359] __nla_validate_parse: 7 callbacks suppressed [ 91.510608][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 91.541033][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 91.576974][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 91.739670][ T6362] bridge_slave_1: left allmulticast mode [ 91.745475][ T6362] bridge_slave_1: left promiscuous mode [ 91.777580][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.800415][ T6362] bridge_slave_0: left allmulticast mode [ 91.806294][ T6362] bridge_slave_0: left promiscuous mode [ 91.821198][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.078646][ T6374] macvtap1: entered allmulticast mode [ 92.094387][ T6374] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 92.116755][ T6374] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 92.207352][ T6391] dvmrp8: entered allmulticast mode [ 92.218784][ T6355] lo speed is unknown, defaulting to 1000 [ 92.227555][ T6390] dvmrp8: left allmulticast mode [ 92.342503][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 92.830240][ T6429] tipc: Enabling of bearer rejected, failed to enable media [ 93.221540][ T6472] netlink: 'syz.3.108': attribute type 30 has an invalid length. [ 93.223487][ T6471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.109'. [ 93.425181][ T6483] siw: device registration error -23 [ 93.512706][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 93.618825][ T6492] dvmrp8: entered allmulticast mode [ 93.711093][ T6492] lo speed is unknown, defaulting to 1000 [ 93.720204][ T6496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.905676][ T6503] netlink: 'syz.2.122': attribute type 16 has an invalid length. [ 93.944378][ T6503] netlink: 'syz.2.122': attribute type 17 has an invalid length. [ 94.041379][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.049921][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.069716][ T6503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.089068][ T6180] lo speed is unknown, defaulting to 1000 [ 94.094969][ T6180] syz2: Port: 1 Link ACTIVE [ 94.197264][ T6520] batadv_slave_0: entered allmulticast mode [ 94.239134][ T6521] nbd: must specify a size in bytes for the device [ 94.295366][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 94.295852][ T6524] lo speed is unknown, defaulting to 1000 [ 94.473912][ T6531] macsec1: entered promiscuous mode [ 94.480159][ T6531] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 94.488774][ T6531] macsec1: entered allmulticast mode [ 94.499650][ T6531] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 94.712718][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 95.085547][ T6555] syzkaller1: entered promiscuous mode [ 95.092081][ T6555] syzkaller1: entered allmulticast mode [ 95.179134][ T6558] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 95.375642][ T6566] syz_tun: entered allmulticast mode [ 95.399986][ T6563] syz_tun: left allmulticast mode [ 95.620328][ T6579] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.146'. [ 95.724249][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.041549][ T6611] lo speed is unknown, defaulting to 1000 [ 96.191824][ T6617] netlink: 'syz.1.153': attribute type 10 has an invalid length. [ 96.323604][ T6617] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 96.461084][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.337360][ T6654] __nla_validate_parse: 4 callbacks suppressed [ 97.337378][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'. [ 97.411443][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 97.595435][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 97.627862][ T6671] ipvlan2: entered promiscuous mode [ 97.649664][ T6673] netlink: 184 bytes leftover after parsing attributes in process `syz.1.167'. [ 97.738918][ T6677] netlink: 'syz.3.170': attribute type 3 has an invalid length. [ 97.759226][ T6671] ipvlan2: entered promiscuous mode [ 97.802704][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 97.809797][ T6684] netlink: 'syz.2.173': attribute type 2 has an invalid length. [ 97.812375][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 97.830939][ T6677] bridge_slave_1: left allmulticast mode [ 97.837621][ T6677] bridge_slave_1: left promiscuous mode [ 97.843508][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.891926][ T6677] bridge_slave_0: left allmulticast mode [ 97.926041][ T6677] bridge_slave_0: left promiscuous mode [ 97.940343][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.042058][ T6671] ipvlan2: entered promiscuous mode [ 98.083059][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 98.128502][ T6671] ipvlan2: entered promiscuous mode [ 98.169651][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 98.188140][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 98.214505][ T6671] ipvlan2: entered promiscuous mode [ 98.297960][ T6671] ipvlan2: entered promiscuous mode [ 98.385239][ T6671] ipvlan2: entered promiscuous mode [ 98.398670][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 98.444411][ T6718] tap0: tun_chr_ioctl cmd 35108 [ 98.501377][ T6720] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 98.583896][ T6726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.769975][ T6736] netlink: 'syz.1.189': attribute type 9 has an invalid length. [ 99.136054][ T6755] lo speed is unknown, defaulting to 1000 [ 99.772843][ T6797] pim6reg1: entered promiscuous mode [ 99.783645][ T6797] pim6reg1: entered allmulticast mode [ 99.889738][ T6797] lo speed is unknown, defaulting to 1000 [ 100.223101][ T6818] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 100.390545][ T6828] tipc: Enabling of bearer rejected, failed to enable media [ 100.401626][ T6828] syzkaller0: entered promiscuous mode [ 100.408854][ T6828] syzkaller0: entered allmulticast mode [ 100.673590][ T6843] syz_tun: entered allmulticast mode [ 100.704369][ T6842] syz_tun: left allmulticast mode [ 101.021708][ T6855] dvmrp8: entered allmulticast mode [ 101.101889][ T6855] lo speed is unknown, defaulting to 1000 [ 101.219589][ T6854] dvmrp8: left allmulticast mode [ 101.857620][ T6885] IPv6: sit1: Disabled Multicast RS [ 102.348382][ T6908] lo speed is unknown, defaulting to 1000 [ 102.877738][ T6939] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 102.928579][ T6939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.039924][ T6939] __nla_validate_parse: 73 callbacks suppressed [ 103.039944][ T6939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 103.066485][ T6946] tipc: Started in network mode [ 103.071566][ T6946] tipc: Node identity ac14142f, cluster identity 4711 [ 103.091697][ T6946] tipc: New replicast peer: 0.0.0.0 [ 103.104423][ T6946] tipc: Enabled bearer , priority 10 [ 103.126241][ T6943] lo speed is unknown, defaulting to 1000 [ 103.190153][ T6951] netlink: 'syz.1.256': attribute type 11 has an invalid length. [ 103.214027][ T6947] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 103.383615][ T6958] 8021q: VLANs not supported on ipvlan1 [ 103.434615][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 103.457551][ T6963] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 103.593966][ T6963] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 103.601719][ T6969] gretap1: entered allmulticast mode [ 104.217251][ T6178] tipc: Node number set to 2886997039 [ 104.264533][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.310398][ T6999] netlink: 92 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.311696][ T6990] tipc: Enabled bearer , priority 0 [ 104.326927][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.349142][ T6999] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 104.372947][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.735130][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 104.744958][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 104.745981][ T6980] tipc: Disabling bearer [ 104.892439][ T7033] netlink: 'syz.0.279': attribute type 21 has an invalid length. [ 104.901364][ T7033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.279'. [ 104.912217][ T7033] netlink: 3 bytes leftover after parsing attributes in process `syz.0.279'. [ 105.015759][ T7035] netlink: 'syz.0.280': attribute type 28 has an invalid length. [ 105.039364][ T7035] netlink: 'syz.0.280': attribute type 2 has an invalid length. [ 105.085581][ T7035] k›*·: entered promiscuous mode [ 105.117526][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.548475][ T7122] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 106.616726][ T7124] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 106.703434][ T7127] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 106.779643][ T7138] team1: entered promiscuous mode [ 106.784714][ T7138] team1: entered allmulticast mode [ 106.790579][ T7138] 8021q: adding VLAN 0 to HW filter on device team1 [ 107.409742][ T7185] ipvlan2: entered promiscuous mode [ 107.889961][ T7188] lo speed is unknown, defaulting to 1000 [ 107.981303][ T7201] netlink: 'syz.1.327': attribute type 11 has an invalid length. [ 107.982052][ T7202] netlink: 'syz.1.327': attribute type 11 has an invalid length. [ 108.403945][ T7224] __nla_validate_parse: 31 callbacks suppressed [ 108.403964][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 108.467212][ T6180] IPVS: starting estimator thread 0... [ 108.568203][ T7236] tipc: Started in network mode [ 108.571405][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'. [ 108.573094][ T7236] tipc: Node identity 0a010101, cluster identity 4711 [ 108.573152][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 108.586950][ T7230] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.622553][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 108.691995][ T7231] lo speed is unknown, defaulting to 1000 [ 108.948015][ T7242] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 108.961288][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 108.979190][ T7242] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 109.044905][ T7244] lo speed is unknown, defaulting to 1000 [ 109.463353][ T7267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.342'. [ 109.528289][ T7270] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 109.548575][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 109.556995][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 109.956436][ T7298] netlink: 'syz.1.350': attribute type 58 has an invalid length. [ 109.975510][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 110.032483][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 110.073702][ T7306] bond0: option mode: unable to set because the bond device has slaves [ 110.220126][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 110.248804][ T7316] tipc: Enabled bearer , priority 0 [ 110.255894][ T7317] syzkaller0: entered promiscuous mode [ 110.261535][ T7317] syzkaller0: entered allmulticast mode [ 110.280158][ T7316] tipc: Resetting bearer [ 110.287940][ T7315] tipc: Resetting bearer [ 110.301081][ T7315] tipc: Disabling bearer [ 110.396997][ T7321] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 110.745293][ T7340] netlink: 'syz.4.364': attribute type 12 has an invalid length. [ 110.784911][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.089404][ T7357] syzkaller1: entered promiscuous mode [ 111.094918][ T7357] syzkaller1: entered allmulticast mode [ 111.218363][ T7361] tipc: Enabled bearer , priority 0 [ 111.253882][ T7361] syzkaller0: entered promiscuous mode [ 111.290562][ T7361] syzkaller0: entered allmulticast mode [ 111.303681][ T7372] veth0_to_bridge: entered promiscuous mode [ 111.317437][ T7372] veth0_to_bridge: left promiscuous mode [ 111.447682][ T7383] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 111.464188][ T7361] lo speed is unknown, defaulting to 1000 [ 111.483163][ T7383] batadv0: entered promiscuous mode [ 111.507803][ T7383] batadv0: entered allmulticast mode [ 111.535531][ T7383] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 111.563588][ T7390] IPv6: addrconf: prefix option has invalid lifetime [ 111.629043][ T7379] lo speed is unknown, defaulting to 1000 [ 111.794687][ T7395] syz_tun: entered promiscuous mode [ 111.801563][ T7395] macsec1: entered allmulticast mode [ 111.807092][ T7395] syz_tun: entered allmulticast mode [ 111.820936][ T7395] syz_tun: left allmulticast mode [ 111.826549][ T7395] syz_tun: left promiscuous mode [ 112.048132][ T7396] syzkaller0: entered promiscuous mode [ 112.053618][ T7396] syzkaller0: entered allmulticast mode [ 112.082509][ T7382] tipc: Resetting bearer [ 112.228143][ T886] tipc: Node number set to 3306734763 [ 113.199030][ T7360] tipc: Resetting bearer [ 113.213275][ T7360] tipc: Disabling bearer [ 113.508981][ T7432] geneve2: entered promiscuous mode [ 113.517684][ T7433] veth0_to_bond: entered promiscuous mode [ 113.529131][ T7426] __nla_validate_parse: 5 callbacks suppressed [ 113.529148][ T7426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.387'. [ 114.088176][ T7463] lo speed is unknown, defaulting to 1000 [ 114.145871][ T7466] lo speed is unknown, defaulting to 1000 [ 114.483173][ T7485] lo speed is unknown, defaulting to 1000 [ 114.495756][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.402'. [ 114.687260][ T7478] lo speed is unknown, defaulting to 1000 [ 115.202793][ T7519] netlink: 'syz.4.412': attribute type 21 has an invalid length. [ 115.216345][ T7519] netlink: 156 bytes leftover after parsing attributes in process `syz.4.412'. [ 115.285575][ T7524] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 115.293732][ T7524] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 115.390286][ T7528] netlink: 276 bytes leftover after parsing attributes in process `syz.4.415'. [ 115.483664][ T7533] netlink: zone id is out of range [ 115.499723][ T7533] netlink: zone id is out of range [ 115.505214][ T7533] netlink: zone id is out of range [ 115.521728][ T7533] netlink: zone id is out of range [ 115.528354][ T7533] netlink: zone id is out of range [ 115.568679][ T7533] netlink: zone id is out of range [ 115.587796][ T7542] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 115.596417][ T7533] netlink: zone id is out of range [ 115.612000][ T7533] netlink: zone id is out of range [ 115.654688][ T7533] netlink: zone id is out of range [ 115.668462][ T7533] netlink: zone id is out of range [ 115.698122][ T7540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.804934][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 115.874865][ T7542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.944598][ T7551] bond3: (slave wlan0): Opening slave failed [ 115.991912][ T7524] vlan2: entered allmulticast mode [ 115.997770][ T7524] veth1: entered allmulticast mode [ 116.008884][ T7524] bond3: (slave vlan2): making interface the new active one [ 116.022210][ T7524] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 116.048419][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 116.509842][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 116.555829][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.567044][ T7591] block nbd0: server does not support multiple connections per device. [ 116.580730][ T7591] block nbd0: shutting down sockets [ 116.631494][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 116.819078][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 116.930567][ T7629] tap0: tun_chr_ioctl cmd 35108 [ 117.038971][ T7637] netlink: 11 bytes leftover after parsing attributes in process `syz.3.442'. [ 117.185658][ T7644] lo speed is unknown, defaulting to 1000 [ 117.325216][ T7662] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 117.480770][ T7663] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.494974][ T7663] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 117.534215][ T7662] gretap1: entered promiscuous mode [ 117.551343][ T7662] bond2: (slave gretap1): making interface the new active one [ 117.578933][ T7662] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 118.980071][ T7725] __nla_validate_parse: 8 callbacks suppressed [ 118.980089][ T7725] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.470'. [ 119.538185][ T7742] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 120.017252][ T7757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.478'. [ 120.314031][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 120.720581][ T7795] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 120.743061][ T7795] netlink: 'syz.1.491': attribute type 11 has an invalid length. [ 120.754500][ T7795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.491'. [ 120.772974][ T7782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.856020][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 120.868979][ T7782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.920302][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.494'. [ 120.955660][ T7782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.999521][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 121.061108][ T7782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.078898][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 121.207811][ T3065] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.229802][ T3065] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.251151][ T3065] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.272637][ T3065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.845660][ T7841] dvmrp8: left allmulticast mode [ 122.329839][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 122.693330][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 122.840861][ T7858] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 122.887150][ T7858] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 123.043900][ T7860] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 124.053803][ T7895] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 124.227403][ T7902] netlink: 'syz.2.522': attribute type 6 has an invalid length. [ 124.262486][ T7902] netlink: 'syz.2.522': attribute type 12 has an invalid length. [ 124.270455][ T7902] __nla_validate_parse: 6 callbacks suppressed [ 124.270472][ T7902] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.522'. [ 124.371924][ T7909] netlink: 'syz.1.524': attribute type 29 has an invalid length. [ 124.398943][ T7909] netlink: 'syz.1.524': attribute type 29 has an invalid length. [ 124.417200][ T7909] netlink: 'syz.1.524': attribute type 29 has an invalid length. [ 124.534945][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 124.756887][ T7922] lo speed is unknown, defaulting to 1000 [ 124.854643][ T7936] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.529'. [ 125.132030][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 125.390352][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 125.470309][ T7964] syzkaller1: entered promiscuous mode [ 125.479688][ T7964] syzkaller1: entered allmulticast mode [ 126.274902][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 126.514271][ T8015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.588266][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 126.914690][ T8059] !: renamed from dummy0 (while UP) [ 126.956833][ T8061] tc_dump_action: action bad kind [ 127.285045][ T8067] lo speed is unknown, defaulting to 1000 [ 128.538693][ T8138] tipc: Started in network mode [ 128.549920][ T8138] tipc: Node identity 62b3b641eeaa, cluster identity 4711 [ 128.586442][ T8138] tipc: Enabled bearer , priority 0 [ 128.690359][ T8138] syzkaller0: entered promiscuous mode [ 128.712954][ T8138] syzkaller0: entered allmulticast mode [ 128.750663][ T8158] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 128.801324][ T8138] tipc: Resetting bearer [ 128.868038][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 129.016541][ T8137] tipc: Resetting bearer [ 129.153517][ T8137] tipc: Disabling bearer [ 129.628773][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 129.899297][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'. [ 130.029762][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 130.148967][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 130.168251][ T8248] validate_nla: 27 callbacks suppressed [ 130.168271][ T8248] netlink: 'syz.1.597': attribute type 21 has an invalid length. [ 130.198596][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.597'. [ 130.425449][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.605'. [ 130.597737][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 130.609619][ T8280] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 130.972604][ T8303] veth0: entered promiscuous mode [ 130.985324][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 131.013356][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 131.231179][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 131.330341][ T8322] net_ratelimit: 218 callbacks suppressed [ 131.330357][ T8322] openvswitch: netlink: Message has 16 unknown bytes. [ 131.565679][ T8352] IPv6: Can't replace route, no match found [ 131.598888][ T8351] netlink: 'syz.4.631': attribute type 39 has an invalid length. [ 131.620092][ T8351] veth0_macvtap: left promiscuous mode [ 131.681612][ T8358] Unsupported ieee802154 address type: 0 [ 132.049021][ T8378] sctp: [Deprecated]: syz.3.644 (pid 8378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.049021][ T8378] Use struct sctp_sack_info instead [ 132.291346][ T8399] netlink: 'syz.4.649': attribute type 13 has an invalid length. [ 132.302256][ T8399] netlink: 'syz.4.649': attribute type 17 has an invalid length. [ 132.498972][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.521896][ T8399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.686574][ T8405] lo speed is unknown, defaulting to 1000 [ 132.823874][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830352][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864986][ T8416] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 132.923858][ T8416] bond4 (unregistering): Released all slaves [ 132.936324][ T8421] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 132.998984][ T8421] netlink: zone id is out of range [ 133.005790][ T8421] netlink: zone id is out of range [ 133.011693][ T8421] netlink: zone id is out of range [ 133.020237][ T8421] netlink: zone id is out of range [ 133.025368][ T8421] netlink: zone id is out of range [ 133.030901][ T8421] netlink: zone id is out of range [ 133.036045][ T8421] netlink: zone id is out of range [ 133.330814][ T8434] Bluetooth: MGMT ver 1.23 [ 133.624723][ T8451] lo speed is unknown, defaulting to 1000 [ 133.644844][ T8455] netlink: 'syz.4.666': attribute type 29 has an invalid length. [ 133.664375][ T8455] netlink: 'syz.4.666': attribute type 29 has an invalid length. [ 134.163890][ T8469] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 135.566076][ T8479] lo speed is unknown, defaulting to 1000 [ 135.740175][ T8483] lo speed is unknown, defaulting to 1000 [ 136.514399][ T8514] __nla_validate_parse: 12 callbacks suppressed [ 136.514420][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 136.602420][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.683'. [ 136.976744][ T8533] netlink: 228 bytes leftover after parsing attributes in process `syz.2.687'. [ 137.081079][ T8544] nbd: socks must be embedded in a SOCK_ITEM attr [ 137.149347][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 137.172746][ T8544] lo speed is unknown, defaulting to 1000 [ 137.229067][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 137.252173][ T8538] lo speed is unknown, defaulting to 1000 [ 137.285663][ T8549] ip6gre1: entered allmulticast mode [ 137.361221][ T8546] lo speed is unknown, defaulting to 1000 [ 137.460653][ T8550] lo speed is unknown, defaulting to 1000 [ 137.622502][ T8558] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 137.658149][ T8558] netlink: 128 bytes leftover after parsing attributes in process `syz.2.693'. [ 137.703505][ T8558] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 137.711640][ T8558] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 137.720019][ T8558] netlink: 3 bytes leftover after parsing attributes in process `syz.2.693'. [ 137.773872][ T8560] netlink: 'syz.0.695': attribute type 4 has an invalid length. [ 137.808225][ T8567] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 137.816572][ T8567] netlink: 244 bytes leftover after parsing attributes in process `syz.1.696'. [ 138.189549][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 138.352525][ T8607] netlink: 'syz.3.706': attribute type 9 has an invalid length. [ 138.624528][ T8609] syzkaller0: entered promiscuous mode [ 138.630295][ T8609] syzkaller0: entered allmulticast mode [ 138.670152][ T8618] netlink: 244 bytes leftover after parsing attributes in process `syz.0.708'. [ 140.133801][ T8634] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 140.172416][ T8628] lo speed is unknown, defaulting to 1000 [ 140.328806][ T8660] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 140.364230][ T8660] bond0: (slave wlan1): Opening slave failed [ 140.424901][ T8662] bond_slave_0: entered promiscuous mode [ 140.430940][ T8662] bond_slave_1: entered promiscuous mode [ 140.436785][ T8662] team_slave_0: entered promiscuous mode [ 140.442618][ T8662] team_slave_1: entered promiscuous mode [ 140.449876][ T8662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.460086][ T8662] bond1: (slave macvlan2): making interface the new active one [ 140.469001][ T8662] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 140.504328][ T8661] netlink: 'syz.4.718': attribute type 12 has an invalid length. [ 140.513830][ T8666] netlink: 'syz.4.718': attribute type 12 has an invalid length. [ 140.606685][ T8679] tipc: Enabled bearer , priority 0 [ 140.614241][ T8679] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 140.621762][ T8679] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 140.636638][ T8679] tipc: Resetting bearer [ 141.095349][ T8713] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 141.505287][ T8726] lo speed is unknown, defaulting to 1000 [ 142.303991][ T8766] sctp: [Deprecated]: syz.4.751 (pid 8766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.303991][ T8766] Use struct sctp_sack_info instead [ 142.327103][ T8768] net_ratelimit: 5 callbacks suppressed [ 142.327121][ T8768] openvswitch: netlink: Message has 16 unknown bytes. [ 142.474453][ T8776] lo speed is unknown, defaulting to 1000 [ 142.541217][ T8780] lo speed is unknown, defaulting to 1000 [ 142.567176][ T8786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.078353][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.118687][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.125957][ T8805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.160751][ T8805] bridge0: entered promiscuous mode [ 143.169144][ T8805] team0: Port device bridge0 added [ 143.500378][ T8819] __nla_validate_parse: 7 callbacks suppressed [ 143.500395][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 143.592443][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 143.654763][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'. [ 144.061566][ T8847] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 144.069587][ T8854] netlink: 'syz.4.776': attribute type 5 has an invalid length. [ 144.082833][ T8857] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 144.092251][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 144.219653][ T8864] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.778'. [ 144.365367][ T8855] batadv_slave_0: left allmulticast mode [ 144.524184][ T8855] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 144.536268][ T8855] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 144.544897][ T8855] macsec1: left promiscuous mode [ 144.550017][ T8855] macsec1: left allmulticast mode [ 144.557022][ T8855] geneve2: left promiscuous mode [ 144.565666][ T8855] gretap1: left promiscuous mode [ 144.598696][ T8855] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 144.606025][ T8855] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 144.613707][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 144.626297][ T3488] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.645768][ T3488] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.745719][ T3488] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.771809][ T3488] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.827770][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 145.270852][ T8900] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.501542][ T8909] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 145.598322][ T6180] lo speed is unknown, defaulting to 1000 [ 145.623530][ T6180] syz2: Port: 1 Link DOWN [ 145.719020][ T8913] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 145.955907][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 146.336835][ T8923] team0 (unregistering): Port device team_slave_0 removed [ 146.360740][ T8923] team0 (unregistering): Port device team_slave_1 removed [ 146.478753][ T8928] lo speed is unknown, defaulting to 1000 [ 146.815040][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 146.918998][ T8960] netlink: 'syz.4.805': attribute type 11 has an invalid length. [ 146.951621][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 147.273508][ T8988] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.518400][ T9004] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 147.542475][ T9004] dummy0: entered promiscuous mode [ 147.573109][ T9004] team0: Port device dummy0 added [ 147.604889][ T9021] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 147.634197][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.644363][ T9021] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.990083][ T9030] "syz.2.827" (9030) uses obsolete ecb(arc4) skcipher [ 148.082033][ T9048] netlink: del zone limit has 4 unknown bytes [ 148.141555][ T9057] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 148.334560][ T9069] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 148.354938][ T9069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.371237][ T9067] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 148.379073][ T9067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.467067][ T9071] lo speed is unknown, defaulting to 1000 [ 148.528689][ T9077] __nla_validate_parse: 6 callbacks suppressed [ 148.528705][ T9077] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.836'. [ 148.553467][ T9081] lo speed is unknown, defaulting to 1000 [ 148.553482][ T9082] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.836'. [ 148.687624][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 148.750671][ T9092] dvmrp0: entered allmulticast mode [ 149.328337][ T9110] validate_nla: 1 callbacks suppressed [ 149.328353][ T9110] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 149.396780][ T9110] netlink: 140 bytes leftover after parsing attributes in process `syz.0.846'. [ 149.417009][ T9110] netlink: 96 bytes leftover after parsing attributes in process `syz.0.846'. [ 149.628449][ T9120] syzkaller1: entered promiscuous mode [ 149.633971][ T9120] syzkaller1: entered allmulticast mode [ 149.645587][ T9121] syzkaller1: left promiscuous mode [ 149.653521][ T9121] syzkaller1: left allmulticast mode [ 149.802937][ T9124] syzkaller0: entered promiscuous mode [ 149.808590][ T9124] syzkaller0: entered allmulticast mode [ 149.915351][ T9136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.922629][ T9136] IPv6: NLM_F_CREATE should be set when creating new route [ 150.049931][ T9145] FAULT_INJECTION: forcing a failure. [ 150.049931][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.063333][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.0.855 Not tainted syzkaller #0 PREEMPT(full) [ 150.063357][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.063373][ T9145] Call Trace: [ 150.063381][ T9145] [ 150.063388][ T9145] dump_stack_lvl+0x189/0x250 [ 150.063419][ T9145] ? __pfx____ratelimit+0x10/0x10 [ 150.063437][ T9145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.063456][ T9145] ? __pfx__printk+0x10/0x10 [ 150.063477][ T9145] ? __might_fault+0xb0/0x130 [ 150.063508][ T9145] should_fail_ex+0x414/0x560 [ 150.063545][ T9145] _copy_from_iter+0x1de/0x1790 [ 150.063571][ T9145] ? rcu_is_watching+0x15/0xb0 [ 150.063589][ T9145] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 150.063609][ T9145] ? __pfx__copy_from_iter+0x10/0x10 [ 150.063627][ T9145] ? __build_skb_around+0x257/0x3e0 [ 150.063646][ T9145] ? netlink_sendmsg+0x642/0xb30 [ 150.063661][ T9145] ? skb_put+0x11b/0x210 [ 150.063680][ T9145] netlink_sendmsg+0x6b2/0xb30 [ 150.063704][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.063722][ T9145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 150.063738][ T9145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.063753][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.063769][ T9145] __sock_sendmsg+0x21c/0x270 [ 150.063787][ T9145] ____sys_sendmsg+0x505/0x830 [ 150.063809][ T9145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.063835][ T9145] ? import_iovec+0x74/0xa0 [ 150.063856][ T9145] ___sys_sendmsg+0x21f/0x2a0 [ 150.063876][ T9145] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.063925][ T9145] ? __fget_files+0x2a/0x420 [ 150.063937][ T9145] ? __fget_files+0x3a0/0x420 [ 150.063959][ T9145] __x64_sys_sendmsg+0x19b/0x260 [ 150.063979][ T9145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.064005][ T9145] ? __pfx_ksys_write+0x10/0x10 [ 150.064022][ T9145] ? rcu_is_watching+0x15/0xb0 [ 150.064040][ T9145] ? do_syscall_64+0xbe/0x3b0 [ 150.064060][ T9145] do_syscall_64+0xfa/0x3b0 [ 150.064074][ T9145] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.064089][ T9145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.064102][ T9145] ? clear_bhb_loop+0x60/0xb0 [ 150.064119][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.064133][ T9145] RIP: 0033:0x7f07f6d8ec29 [ 150.064157][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.064169][ T9145] RSP: 002b:00007f07f7bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.064189][ T9145] RAX: ffffffffffffffda RBX: 00007f07f6fd5fa0 RCX: 00007f07f6d8ec29 [ 150.064199][ T9145] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 150.064208][ T9145] RBP: 00007f07f7bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 150.064216][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.064225][ T9145] R13: 00007f07f6fd6038 R14: 00007f07f6fd5fa0 R15: 00007ffd918181b8 [ 150.064249][ T9145] [ 150.479855][ T9149] netlink: 'syz.0.857': attribute type 16 has an invalid length. [ 150.490037][ T9149] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.857'. [ 151.611197][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 151.632294][ T9164] siw: device registration error -23 [ 151.650654][ T9157] veth1: entered promiscuous mode [ 151.658448][ T9167] netlink: 'syz.4.860': attribute type 13 has an invalid length. [ 151.690049][ T9157] netlink: 'syz.1.859': attribute type 8 has an invalid length. [ 151.698015][ T9167] netlink: 'syz.4.860': attribute type 17 has an invalid length. [ 151.715122][ T9157] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 151.750005][ T9172] netlink: 'syz.0.864': attribute type 6 has an invalid length. [ 151.860367][ T9178] FAULT_INJECTION: forcing a failure. [ 151.860367][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 151.897777][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.2.866 Not tainted syzkaller #0 PREEMPT(full) [ 151.897801][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.897811][ T9178] Call Trace: [ 151.897818][ T9178] [ 151.897825][ T9178] dump_stack_lvl+0x189/0x250 [ 151.897846][ T9178] ? __pfx____ratelimit+0x10/0x10 [ 151.897861][ T9178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.897876][ T9178] ? __pfx__printk+0x10/0x10 [ 151.897901][ T9178] ? __lock_acquire+0xab9/0xd20 [ 151.897930][ T9178] should_fail_ex+0x414/0x560 [ 151.897958][ T9178] should_failslab+0xa8/0x100 [ 151.897981][ T9178] kmem_cache_alloc_noprof+0x73/0x3c0 [ 151.898001][ T9178] ? skb_clone+0x212/0x3a0 [ 151.898026][ T9178] skb_clone+0x212/0x3a0 [ 151.898049][ T9178] __netlink_deliver_tap+0x404/0x850 [ 151.898081][ T9178] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.898102][ T9178] netlink_deliver_tap+0x19c/0x1b0 [ 151.898122][ T9178] netlink_unicast+0x7fa/0x9e0 [ 151.898146][ T9178] ? __pfx_netlink_unicast+0x10/0x10 [ 151.898164][ T9178] ? netlink_sendmsg+0x642/0xb30 [ 151.898180][ T9178] ? skb_put+0x11b/0x210 [ 151.898201][ T9178] netlink_sendmsg+0x805/0xb30 [ 151.898230][ T9178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.898251][ T9178] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.898269][ T9178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.898286][ T9178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.898305][ T9178] __sock_sendmsg+0x21c/0x270 [ 151.898325][ T9178] ____sys_sendmsg+0x505/0x830 [ 151.898352][ T9178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.898380][ T9178] ? import_iovec+0x74/0xa0 [ 151.898404][ T9178] ___sys_sendmsg+0x21f/0x2a0 [ 151.898427][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.898484][ T9178] ? __fget_files+0x2a/0x420 [ 151.898498][ T9178] ? __fget_files+0x3a0/0x420 [ 151.898530][ T9178] __x64_sys_sendmsg+0x19b/0x260 [ 151.898553][ T9178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.898583][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 151.898601][ T9178] ? rcu_is_watching+0x15/0xb0 [ 151.898624][ T9178] ? do_syscall_64+0xbe/0x3b0 [ 151.898646][ T9178] do_syscall_64+0xfa/0x3b0 [ 151.898662][ T9178] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.898679][ T9178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898694][ T9178] ? clear_bhb_loop+0x60/0xb0 [ 151.898715][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898731][ T9178] RIP: 0033:0x7f94df18ec29 [ 151.898746][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.898758][ T9178] RSP: 002b:00007f94e00b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.898776][ T9178] RAX: ffffffffffffffda RBX: 00007f94df3d5fa0 RCX: 00007f94df18ec29 [ 151.898787][ T9178] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 151.898798][ T9178] RBP: 00007f94e00b0090 R08: 0000000000000000 R09: 0000000000000000 [ 151.898808][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.898818][ T9178] R13: 00007f94df3d6038 R14: 00007f94df3d5fa0 R15: 00007ffe1e57a778 [ 151.898849][ T9178] [ 152.271729][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.282466][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.297559][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.335797][ T9173] lo speed is unknown, defaulting to 1000 [ 152.758485][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 153.026781][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.875'. [ 153.036245][ T9217] netlink: 560 bytes leftover after parsing attributes in process `syz.4.875'. [ 153.536763][ T9227] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 153.549942][ T9227] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 153.579255][ T9227] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 153.590185][ T9217] netlink: 'syz.4.875': attribute type 4 has an invalid length. [ 153.614163][ T9217] netlink: 'syz.4.875': attribute type 4 has an invalid length. [ 153.665424][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 153.811904][ T9237] FAULT_INJECTION: forcing a failure. [ 153.811904][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 153.834939][ T9237] CPU: 1 UID: 0 PID: 9237 Comm: syz.3.881 Not tainted syzkaller #0 PREEMPT(full) [ 153.834968][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.834978][ T9237] Call Trace: [ 153.834985][ T9237] [ 153.834992][ T9237] dump_stack_lvl+0x189/0x250 [ 153.835017][ T9237] ? __pfx____ratelimit+0x10/0x10 [ 153.835035][ T9237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.835054][ T9237] ? __pfx__printk+0x10/0x10 [ 153.835114][ T9237] ? __pfx___might_resched+0x10/0x10 [ 153.835130][ T9237] ? fs_reclaim_acquire+0x7d/0x100 [ 153.835151][ T9237] should_fail_ex+0x414/0x560 [ 153.835179][ T9237] should_failslab+0xa8/0x100 [ 153.835203][ T9237] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 153.835224][ T9237] ? __alloc_skb+0x112/0x2d0 [ 153.835247][ T9237] __alloc_skb+0x112/0x2d0 [ 153.835270][ T9237] netlink_ack+0x146/0xa50 [ 153.835287][ T9237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.835304][ T9237] ? ref_tracker_free+0x63a/0x7d0 [ 153.835321][ T9237] ? __asan_memcpy+0x40/0x70 [ 153.835338][ T9237] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.835365][ T9237] netlink_rcv_skb+0x28c/0x470 [ 153.835385][ T9237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.835405][ T9237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.835436][ T9237] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.835463][ T9237] netlink_unicast+0x82f/0x9e0 [ 153.835489][ T9237] ? __pfx_netlink_unicast+0x10/0x10 [ 153.835508][ T9237] ? netlink_sendmsg+0x642/0xb30 [ 153.835524][ T9237] ? skb_put+0x11b/0x210 [ 153.835545][ T9237] netlink_sendmsg+0x805/0xb30 [ 153.835573][ T9237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.835595][ T9237] ? aa_sock_msg_perm+0xf1/0x1d0 [ 153.835614][ T9237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.835631][ T9237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.835651][ T9237] __sock_sendmsg+0x21c/0x270 [ 153.835671][ T9237] ____sys_sendmsg+0x505/0x830 [ 153.835698][ T9237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.835729][ T9237] ? import_iovec+0x74/0xa0 [ 153.835753][ T9237] ___sys_sendmsg+0x21f/0x2a0 [ 153.835776][ T9237] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.835832][ T9237] ? __fget_files+0x2a/0x420 [ 153.835846][ T9237] ? __fget_files+0x3a0/0x420 [ 153.835871][ T9237] __x64_sys_sendmsg+0x19b/0x260 [ 153.835895][ T9237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.835926][ T9237] ? __pfx_ksys_write+0x10/0x10 [ 153.835944][ T9237] ? rcu_is_watching+0x15/0xb0 [ 153.835966][ T9237] ? do_syscall_64+0xbe/0x3b0 [ 153.835988][ T9237] do_syscall_64+0xfa/0x3b0 [ 153.836003][ T9237] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.836019][ T9237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.836035][ T9237] ? clear_bhb_loop+0x60/0xb0 [ 153.836055][ T9237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.836070][ T9237] RIP: 0033:0x7f263498ec29 [ 153.836092][ T9237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.836103][ T9237] RSP: 002b:00007f26357d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.836120][ T9237] RAX: ffffffffffffffda RBX: 00007f2634bd5fa0 RCX: 00007f263498ec29 [ 153.836131][ T9237] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 153.836140][ T9237] RBP: 00007f26357d3090 R08: 0000000000000000 R09: 0000000000000000 [ 153.836150][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.836160][ T9237] R13: 00007f2634bd6038 R14: 00007f2634bd5fa0 R15: 00007ffe74c5cc08 [ 153.836185][ T9237] [ 154.187724][ T9239] lo speed is unknown, defaulting to 1000 [ 154.612353][ T9262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.887'. [ 155.531536][ T9297] lo speed is unknown, defaulting to 1000 [ 155.804834][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 155.840777][ T9311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.901'. [ 155.882574][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 156.155638][ T9318] lo speed is unknown, defaulting to 1000 [ 156.161462][ T9333] raw_sendmsg: syz.1.906 forgot to set AF_INET. Fix it! [ 156.162590][ T9331] sctp: [Deprecated]: syz.1.906 (pid 9331) Use of int in max_burst socket option. [ 156.162590][ T9331] Use struct sctp_assoc_value instead [ 156.223956][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 156.305798][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 156.486045][ T9352] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.912'. [ 156.534306][ T9350] netlink: 'syz.3.912': attribute type 5 has an invalid length. [ 156.729664][ T9364] netlink: 'syz.3.916': attribute type 7 has an invalid length. [ 157.321102][ T9388] lo speed is unknown, defaulting to 1000 [ 157.342495][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 157.529520][ T9404] vlan2: entered promiscuous mode [ 157.536329][ T9404] bond0: entered promiscuous mode [ 157.542219][ T9404] team0: entered promiscuous mode [ 157.745286][ T9429] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0 [ 158.019222][ T9445] lo speed is unknown, defaulting to 1000 [ 158.085001][ T49] syzkaller0: tun_net_xmit 76 [ 158.090578][ T49] syzkaller0: tun_net_xmit 48 [ 158.106758][ T6178] syzkaller0: tun_net_xmit 76 [ 159.588329][ T9472] netlink: 3 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.611812][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.622513][ T9472] netlink: 3 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.637427][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.650732][ T9472] netlink: 3 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.799410][ T9489] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.953'. [ 159.885726][ T9498] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 159.924459][ T9498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.936750][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.955'. [ 159.968359][ T9498] bond2: (slave veth3): Enslaving as an active interface with a down link [ 159.997095][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 160.007346][ T9504] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.954'. [ 160.060019][ T9504] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.954'. [ 160.403350][ T9517] lo speed is unknown, defaulting to 1000 [ 160.710970][ T9554] gtp0: entered promiscuous mode [ 160.803110][ T9558] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 160.813767][ T9558] netlink: 'syz.0.972': attribute type 4 has an invalid length. [ 160.868957][ T9560] netlink: 'syz.1.971': attribute type 10 has an invalid length. [ 160.881397][ T9560] dummy0: entered promiscuous mode [ 160.889117][ T9560] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 161.356757][ T9577] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 161.371200][ T9577] tc_dump_action: action bad kind [ 161.416336][ T9578] lo speed is unknown, defaulting to 1000 [ 161.685107][ T9589] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 162.344241][ T9599] veth1_macvtap: left promiscuous mode [ 163.207406][ T9641] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 163.215261][ T9641] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 163.670581][ T9668] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 163.719884][ T9668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.744611][ T9668] bond2: (slave geneve2): making interface the new active one [ 163.753902][ T9668] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 163.763657][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.812555][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.826399][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.850069][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.223975][ T9695] lo speed is unknown, defaulting to 1000 [ 164.454702][ T9714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 164.552671][ T9718] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 164.638420][ T9718] team0: Port device dummy0 removed [ 164.648535][ T9721] trusted_key: syz.1.1018 sent an empty control message without MSG_MORE. [ 164.673043][ T9718] bridge0: port 3(dummy0) entered blocking state [ 164.700361][ T9718] bridge0: port 3(dummy0) entered disabled state [ 164.727478][ T9718] dummy0: entered allmulticast mode [ 164.814124][ T9724] lo speed is unknown, defaulting to 1000 [ 165.336372][ T9753] __nla_validate_parse: 19 callbacks suppressed [ 165.336389][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 165.383331][ T9750] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1026'. [ 165.401229][ T9751] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1026'. [ 165.435562][ T9750] blkio.reset_stats is deprecated [ 165.554009][ T9768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.563396][ T9768] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.594973][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 165.613803][ T9769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.623950][ T9769] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.674043][ T9765] lo speed is unknown, defaulting to 1000 [ 165.784678][ T9781] netlink: 'syz.1.1037': attribute type 4 has an invalid length. [ 165.797597][ T9772] lo speed is unknown, defaulting to 1000 [ 166.036169][ T9774] lo speed is unknown, defaulting to 1000 [ 166.220231][ T920] IPVS: starting estimator thread 0... [ 166.326247][ T9800] IPVS: using max 33 ests per chain, 79200 per kthread [ 166.753003][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 167.114197][ T9830] lo speed is unknown, defaulting to 1000 [ 167.205318][ T9844] netlink: 'syz.4.1054': attribute type 2 has an invalid length. [ 167.561693][ T9856] netlink: 'syz.2.1055': attribute type 6 has an invalid length. [ 167.570667][ T9856] netlink: 'syz.2.1055': attribute type 6 has an invalid length. [ 167.606020][ T9853] tipc: Enabled bearer , priority 0 [ 167.646654][ T9853] syzkaller0: entered promiscuous mode [ 167.659353][ T9853] syzkaller0: entered allmulticast mode [ 167.673913][ T9862] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1058'. [ 167.713563][ T9853] tipc: Resetting bearer [ 167.737117][ T9851] tipc: Resetting bearer [ 167.759774][ T9851] tipc: Disabling bearer [ 167.869400][ T9871] tipc: Enabled bearer , priority 0 [ 167.877025][ T9871] syzkaller0: entered promiscuous mode [ 167.882683][ T9871] syzkaller0: entered allmulticast mode [ 167.897969][ T9869] tipc: Resetting bearer [ 167.933176][ T9869] tipc: Disabling bearer [ 168.159085][ T9875] dvmrp0: entered allmulticast mode [ 168.321025][ T9893] lo speed is unknown, defaulting to 1000 [ 169.494313][ T9951] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 169.693621][ T9951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.740466][ T9966] tipc: Enabled bearer , priority 0 [ 169.771769][ T9961] syzkaller0: entered promiscuous mode [ 169.780375][ T9961] syzkaller0: entered allmulticast mode [ 169.791624][ T9968] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 169.872189][ T9961] tipc: Resetting bearer [ 169.891973][ T9958] tipc: Resetting bearer [ 169.971584][ T9958] tipc: Disabling bearer [ 170.055885][ T9985] openvswitch: netlink: Multiple metadata blocks provided [ 170.513110][ T9987] dummy0: left promiscuous mode [ 170.591733][ T9987] batadv0: left promiscuous mode [ 170.603711][ T9987] batadv0: left allmulticast mode [ 170.612710][T10022] netlink: 'syz.3.1095': attribute type 9 has an invalid length. [ 170.621009][T10022] netlink: 'syz.3.1095': attribute type 7 has an invalid length. [ 170.629542][T10022] netlink: 'syz.3.1095': attribute type 8 has an invalid length. [ 170.717685][ T9987] veth1: left promiscuous mode [ 170.818587][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.843143][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.011198][ T9987] team1: left promiscuous mode [ 171.016277][ T9987] team1: left allmulticast mode [ 171.103090][ T8029] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.160188][ T8029] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.188823][T10036] netlink: 'syz.2.1097': attribute type 32 has an invalid length. [ 171.188907][ T8029] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.232930][T10036] __nla_validate_parse: 4 callbacks suppressed [ 171.232945][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 171.248390][ T8029] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.275393][T10040] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 171.276451][T10036] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 171.315387][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1099'. [ 171.364912][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1101'. [ 171.436619][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1104'. [ 171.665079][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 171.797790][T10059] lo speed is unknown, defaulting to 1000 [ 172.137963][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 172.210114][T10084] pimreg: entered allmulticast mode [ 172.231724][T10084] pimreg: left allmulticast mode [ 172.410144][T10089] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.699033][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1115'. [ 172.755889][T10103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.016676][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 173.171641][T10130] lo speed is unknown, defaulting to 1000 [ 173.445132][T10150] tipc: Enabling of bearer rejected, failed to enable media [ 173.616928][T10158] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 173.820769][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 174.037623][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 174.452216][T10202] sctp: [Deprecated]: syz.1.1138 (pid 10202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.452216][T10202] Use struct sctp_sack_info instead [ 174.533630][T10204] sctp: [Deprecated]: syz.1.1138 (pid 10204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.533630][T10204] Use struct sctp_sack_info instead [ 174.563805][T10202] netlink: 'syz.1.1138': attribute type 18 has an invalid length. [ 174.605195][T10207] netlink: 'syz.4.1139': attribute type 13 has an invalid length. [ 174.605207][T10209] netlink: 'syz.4.1139': attribute type 13 has an invalid length. [ 174.605220][T10209] netlink: 'syz.4.1139': attribute type 17 has an invalid length. [ 174.644046][T10207] netlink: 'syz.4.1139': attribute type 17 has an invalid length. [ 174.739478][T10209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.778520][T10217] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 174.832307][T10207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.863309][T10217] bond0: (slave wlan1): Opening slave failed [ 174.962355][T10224] netlink: 'syz.0.1141': attribute type 12 has an invalid length. [ 174.975486][T10217] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5) [ 175.046903][T10228] lo speed is unknown, defaulting to 1000 [ 175.086217][T10234] openvswitch: netlink: IP tunnel TTL not specified. [ 175.513855][T10248] tipc: Enabling of bearer rejected, failed to enable media [ 175.576683][T10253] pim6reg1: entered promiscuous mode [ 175.582449][T10253] pim6reg1: entered allmulticast mode [ 175.626018][T10263] veth1_macvtap: left promiscuous mode [ 176.152543][T10302] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 176.249764][T10298] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 176.257623][T10298] __nla_validate_parse: 7 callbacks suppressed [ 176.257638][T10298] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1166'. [ 176.365867][T10307] sock: sock_timestamping_bind_phc: sock not bind to device [ 176.671995][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'. [ 176.780565][T10315] lo speed is unknown, defaulting to 1000 [ 176.799545][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 177.043485][T10329] netlink: 'syz.4.1175': attribute type 13 has an invalid length. [ 177.075399][T10329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.169086][T10329] lo speed is unknown, defaulting to 1000 [ 177.312893][T10346] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1179'. [ 177.436064][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 177.757406][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 177.835251][T10366] lo speed is unknown, defaulting to 1000 [ 177.904622][T10374] syzkaller1: entered promiscuous mode [ 177.914112][T10374] syzkaller1: entered allmulticast mode [ 178.190412][T10375] lo speed is unknown, defaulting to 1000 [ 178.678129][T10399] lo speed is unknown, defaulting to 1000 [ 178.772381][T10403] lo speed is unknown, defaulting to 1000 [ 178.940249][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 179.192256][T10429] ieee802154 phy1 wpan1: encryption failed: -90 [ 179.319481][T10437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1197'. [ 179.393565][T10439] bond0: (slave rose0): Enslaving as an active interface with an up link [ 179.425158][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 179.878969][T10458] lo speed is unknown, defaulting to 1000 [ 179.950009][T10462] lo speed is unknown, defaulting to 1000 [ 179.988996][T10477] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1207'. [ 180.314993][T10490] validate_nla: 2 callbacks suppressed [ 180.315010][T10490] netlink: 'syz.4.1214': attribute type 13 has an invalid length. [ 180.330045][T10490] netlink: 'syz.4.1214': attribute type 17 has an invalid length. [ 180.350832][T10493] bond_slave_1: entered promiscuous mode [ 180.358756][T10493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.368559][T10493] bond5: (slave macvlan2): making interface the new active one [ 180.377487][T10493] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 180.423201][T10490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.478010][T10495] lo speed is unknown, defaulting to 1000 [ 180.800895][T10511] tipc: Enabled bearer , priority 0 [ 180.808395][T10511] syzkaller0: entered promiscuous mode [ 180.813879][T10511] syzkaller0: entered allmulticast mode [ 180.857773][T10511] tipc: Resetting bearer [ 180.870397][T10510] tipc: Resetting bearer [ 180.901217][T10516] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 180.916836][T10510] tipc: Disabling bearer [ 180.943562][T10516] bridge0: port 3(dummy0) entered blocking state [ 180.950359][T10516] bridge0: port 3(dummy0) entered forwarding state [ 181.484504][T10564] __nla_validate_parse: 3 callbacks suppressed [ 181.484521][T10564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1231'. [ 181.538069][T10566] netlink: 'syz.4.1232': attribute type 7 has an invalid length. [ 181.745117][T10559] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.1232'. [ 181.828297][T10566] : entered promiscuous mode [ 181.833732][T10567] tipc: Enabled bearer , priority 0 [ 181.841315][T10569] syzkaller0: entered promiscuous mode [ 181.891458][T10569] syzkaller0: entered allmulticast mode [ 181.947282][T10564] tipc: Resetting bearer [ 182.000817][T10554] tipc: Resetting bearer [ 182.058139][T10554] tipc: Disabling bearer [ 182.134820][T10580] lo speed is unknown, defaulting to 1000 [ 182.238018][T10594] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 182.348888][T10600] sctp: [Deprecated]: syz.0.1241 (pid 10600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.348888][T10600] Use struct sctp_sack_info instead [ 182.662308][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1245'. [ 182.726484][T10614] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1243'. [ 182.737823][T10613] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1243'. [ 182.775570][T10615] lo speed is unknown, defaulting to 1000 [ 182.840484][T10624] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1246'. [ 182.871658][T10624] batadv1: entered promiscuous mode [ 182.877174][T10624] batadv1: entered allmulticast mode [ 182.962065][T10632] tipc: Failed to remove unknown binding: 66,1,1/0:2227982963/2227982965 [ 182.971748][T10632] tipc: Failed to remove unknown binding: 66,1,1/0:2227982963/2227982965 [ 183.366807][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 183.465891][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 183.471685][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 183.486229][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 183.623990][T10666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 183.677106][T10666] batman_adv: batadv0: Adding interface: gretap1 [ 183.683472][T10666] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.759874][T10666] batman_adv: batadv0: Interface activated: gretap1 [ 183.789658][ T5947] IPVS: starting estimator thread 0... [ 183.800742][T10676] Bluetooth: MGMT ver 1.23 [ 183.809810][T10676] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 183.878784][T10677] IPVS: using max 29 ests per chain, 69600 per kthread [ 183.940741][T10686] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 184.130411][T10699] lo speed is unknown, defaulting to 1000 [ 184.592122][T10721] lo speed is unknown, defaulting to 1000 [ 184.853172][T10748] syzkaller1: entered promiscuous mode [ 184.859247][T10748] syzkaller1: entered allmulticast mode [ 184.892303][T10748] lo speed is unknown, defaulting to 1000 [ 185.258800][T10764] veth0: renamed from veth1_vlan [ 185.274660][T10772] sit0: entered promiscuous mode [ 185.305777][T10772] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 185.334003][T10772] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 185.353220][T10772] team0: Port device dummy0 added [ 185.546566][T10789] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 185.566042][T10789] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 186.032982][T10808] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.100410][T10812] bridge0: entered promiscuous mode [ 186.106796][T10812] macsec0: entered promiscuous mode [ 186.113315][T10812] bridge0: port 1(macsec0) entered blocking state [ 186.127953][T10812] bridge0: port 1(macsec0) entered disabled state [ 186.139732][T10812] macsec0: entered allmulticast mode [ 186.145232][T10812] bridge0: entered allmulticast mode [ 186.155007][T10812] macsec0: left allmulticast mode [ 186.164295][T10812] bridge0: left allmulticast mode [ 186.171777][T10812] bridge0: left promiscuous mode [ 186.283800][T10826] syzkaller0: entered promiscuous mode [ 186.291590][T10826] syzkaller0: entered allmulticast mode [ 186.450933][T10839] tipc: Invalid UDP bearer configuration [ 186.450989][T10839] tipc: Enabling of bearer rejected, failed to enable media [ 186.895308][T10850] dvmrp0: entered allmulticast mode [ 186.943021][T10850] tipc: Enabled bearer , priority 0 [ 186.975113][T10850] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 187.010867][T10850] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 187.033259][T10850] tipc: Resetting bearer [ 187.099432][T10850] __nla_validate_parse: 5 callbacks suppressed [ 187.099448][T10850] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1309'. [ 187.151554][T10861] bond_slave_1: mtu less than device minimum [ 187.170324][T10856] bond_slave_1: mtu less than device minimum [ 187.239114][ T8029] tipc: Resetting bearer [ 187.364172][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 187.506588][T10884] tipc: Enabling of bearer rejected, already enabled [ 187.530922][T10884] tipc: Resetting bearer [ 187.645624][T10890] netlink: 'syz.3.1322': attribute type 9 has an invalid length. [ 187.653552][T10890] netlink: 211980 bytes leftover after parsing attributes in process `syz.3.1322'. [ 187.668509][T10890] netlink: 'syz.3.1322': attribute type 9 has an invalid length. [ 187.679161][T10890] netlink: 211980 bytes leftover after parsing attributes in process `syz.3.1322'. [ 187.682097][T10897] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1325'. [ 187.691080][T10890] netlink: 'syz.3.1322': attribute type 9 has an invalid length. [ 187.754501][T10902] batadv1: entered promiscuous mode [ 187.760026][T10901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1323'. [ 187.776182][T10902] batadv1: entered allmulticast mode [ 187.781715][T10890] netlink: 211980 bytes leftover after parsing attributes in process `syz.3.1322'. [ 187.901534][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1328'. [ 188.035477][T10909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1328'. [ 188.112532][T10922] lo speed is unknown, defaulting to 1000 [ 188.302698][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.451602][T10925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.499368][T10938] bond0: Error: Cannot enslave bond to itself. [ 188.572475][T10941] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1335'. [ 188.935602][T10958] lo speed is unknown, defaulting to 1000 [ 189.258429][ T30] audit: type=1800 audit(1758424479.956:2): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1347" name="memory.events" dev="tmpfs" ino=1314 res=0 errno=0 [ 189.487683][T10988] tipc: Started in network mode [ 189.492899][T10988] tipc: Node identity 8e409b4530b1, cluster identity 4711 [ 189.501444][T10988] tipc: Enabled bearer , priority 0 [ 189.568761][T10988] syzkaller0: MTU too low for tipc bearer [ 189.574539][T10988] tipc: Disabling bearer [ 190.899124][T11050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.068137][T11065] lo speed is unknown, defaulting to 1000 [ 191.214217][T11079] openvswitch: netlink: Tunnel attr 4 has unexpected len 4 expected 1 [ 191.602224][T11091] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 [ 191.679002][T11099] syzkaller1: entered promiscuous mode [ 191.685794][T11099] syzkaller1: entered allmulticast mode [ 191.743293][T11096] unsupported nlmsg_type 40 [ 191.879476][T11107] pimreg: entered allmulticast mode [ 192.155267][T11126] __nla_validate_parse: 11 callbacks suppressed [ 192.155285][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 192.207626][T11125] lo speed is unknown, defaulting to 1000 [ 192.549423][T11144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 192.567575][T11147] syzkaller1: entered promiscuous mode [ 192.591950][T11147] syzkaller1: entered allmulticast mode [ 192.697278][T11144] kthread_run failed with err -4 [ 192.772462][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1390'. [ 192.845924][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 192.861956][T11161] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1391'. [ 193.576718][T11201] tipc: Enabling of bearer rejected, already enabled [ 193.590761][T11201] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.638588][T11204] lo speed is unknown, defaulting to 1000 [ 193.929647][T11219] netlink: 'syz.0.1407': attribute type 3 has an invalid length. [ 193.934192][T11228] lo speed is unknown, defaulting to 1000 [ 193.937715][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 194.260546][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.092124][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 195.104924][T11243] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 195.115325][T11243] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 195.126871][T11243] tipc: Resetting bearer [ 195.132736][T11242] tipc: Enabling of bearer rejected, already enabled [ 195.257765][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 195.272319][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 195.310647][T11251] netlink: 'syz.4.1415': attribute type 30 has an invalid length. [ 195.563677][T11273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.721100][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 195.954821][T11284] tipc: Enabling of bearer rejected, already enabled [ 196.017056][ T8022] tipc: Resetting bearer [ 196.478994][T11291] pim6reg: entered allmulticast mode [ 196.497641][T11291] pim6reg: left allmulticast mode [ 197.097193][T11313] netlink: 'syz.0.1430': attribute type 25 has an invalid length. [ 197.132717][T11310] netlink: 'syz.0.1430': attribute type 25 has an invalid length. [ 197.280697][T11322] __nla_validate_parse: 2 callbacks suppressed [ 197.280714][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 197.533295][T11332] delete_channel: no stack [ 197.534114][T11336] tipc: Resetting bearer [ 197.609893][T11336] tipc: Resetting bearer [ 197.687666][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 197.848561][T11349] lo speed is unknown, defaulting to 1000 [ 197.873074][T11352] lo speed is unknown, defaulting to 1000 [ 198.490612][T11349] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 198.698483][T11376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.717664][T11376] bond0: (slave bond1): Enslaving as a backup interface with a down link [ 198.757835][T11355] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1439'. [ 198.968110][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 198.987142][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 199.199167][ T49] bond0 (unregistering): (slave bond1): Releasing backup interface [ 199.229579][ T49] bond0 (unregistering): Released all slaves [ 199.509922][ T49] bond1 (unregistering): Released all slaves [ 199.898432][T11420] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1455'. [ 199.935477][T11422] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 199.943460][T11422] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1454'. [ 199.954488][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 200.035599][T11429] netlink: 'syz.2.1457': attribute type 11 has an invalid length. [ 200.151018][T11435] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1458'. [ 200.241920][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 200.548417][T11462] syzkaller0: entered promiscuous mode [ 200.553933][T11462] syzkaller0: entered allmulticast mode [ 200.675991][T11461] bridge0: port 3(dummy0) entered disabled state [ 200.682644][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.901608][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.923650][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.130391][ T6155] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.140547][ T6155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.159727][ T6155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.190290][ T6155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.341257][T11479] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 201.711509][T11511] netlink: 'syz.0.1477': attribute type 11 has an invalid length. [ 201.728912][T11511] netlink: 'syz.0.1477': attribute type 11 has an invalid length. [ 202.155596][T11520] netlink: 'syz.3.1479': attribute type 10 has an invalid length. [ 202.920496][T11509] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 202.929299][T11509] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 202.959727][T11519] bond0: (slave bond_slave_0): Releasing backup interface [ 202.997601][T11519] bond0: (slave bond_slave_1): Releasing backup interface [ 203.020181][T11519] bond_slave_1: left promiscuous mode [ 203.048555][T11519] team0: Port device team_slave_0 removed [ 203.075574][T11519] team0: Port device team_slave_1 removed [ 203.091122][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.098676][T11519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.112283][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.123480][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.139377][T11519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.157284][T11520] bond0: (slave wlan1): refused to change device type [ 203.173331][T11521] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 203.184054][T11521] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 203.200587][T11521] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 203.274465][T11531] veth1_to_bond: entered allmulticast mode [ 203.438973][T11530] veth1_to_bond: left allmulticast mode [ 203.583623][T11551] __nla_validate_parse: 4 callbacks suppressed [ 203.583640][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 203.607462][T11551] lo speed is unknown, defaulting to 1000 [ 203.630979][T11551] lo speed is unknown, defaulting to 1000 [ 203.644949][T11551] lo speed is unknown, defaulting to 1000 [ 203.683865][ T6165] IPVS: starting estimator thread 0... [ 203.836505][T11560] IPVS: using max 28 ests per chain, 67200 per kthread [ 203.929283][T11551] infiniband syz0: set down [ 203.934102][T11551] infiniband syz0: added lo [ 203.948464][ T6180] lo speed is unknown, defaulting to 1000 [ 203.952894][T11565] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1491'. [ 203.993505][T11565] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1491'. [ 204.005809][T11551] RDS/IB: syz0: added [ 204.027784][T11551] smc: adding ib device syz0 with port count 1 [ 204.044266][T11551] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 204.085542][T11570] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 204.115189][ T6180] lo speed is unknown, defaulting to 1000 [ 204.123771][T11551] lo speed is unknown, defaulting to 1000 [ 204.328778][T11574] lo speed is unknown, defaulting to 1000 [ 204.525333][ T30] audit: type=1804 audit(1758424495.216:3): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1498" name="/newroot/289/cgroup.controllers" dev="tmpfs" ino=1499 res=1 errno=0 [ 204.616286][ T30] audit: type=1800 audit(1758424495.216:4): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1498" name="cgroup.controllers" dev="tmpfs" ino=1499 res=0 errno=0 [ 204.673766][ T30] audit: type=1800 audit(1758424495.226:5): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1498" name="cgroup.controllers" dev="tmpfs" ino=1499 res=0 errno=0 [ 204.720318][T11551] lo speed is unknown, defaulting to 1000 [ 205.220897][ T30] audit: type=1800 audit(1758424495.916:6): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1499" name="cgroup.controllers" dev="tmpfs" ino=1505 res=0 errno=0 [ 205.279388][T11601] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 205.440941][T11574] lo speed is unknown, defaulting to 1000 [ 205.481098][T11608] syz_tun: entered promiscuous mode [ 205.504357][T11601] lo speed is unknown, defaulting to 1000 [ 205.805670][T11551] lo speed is unknown, defaulting to 1000 [ 205.884194][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 205.893428][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 206.069672][T11551] lo speed is unknown, defaulting to 1000 [ 206.211503][T11601] lo speed is unknown, defaulting to 1000 [ 206.373569][T11551] lo speed is unknown, defaulting to 1000 [ 206.395804][T11620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1508'. [ 206.597401][T11620] netlink: 'syz.1.1508': attribute type 1 has an invalid length. [ 206.617742][T11620] nbd: error processing sock list [ 206.639901][T11620] block nbd1: shutting down sockets [ 206.993428][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 207.010232][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 207.403206][T11652] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 207.412493][T11652] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1516'. [ 207.447474][T11652] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1516'. [ 207.650931][T11668] lo speed is unknown, defaulting to 1000 [ 207.671079][T11668] lo speed is unknown, defaulting to 1000 [ 207.874970][T11686] netlink: 'syz.3.1529': attribute type 23 has an invalid length. [ 208.002374][T11686] rdma_rxe: rxe_newlink: failed to add caif0 [ 208.443766][T11719] netlink: 'syz.1.1533': attribute type 11 has an invalid length. [ 208.663125][T11724] lo speed is unknown, defaulting to 1000 [ 208.671555][T11724] lo speed is unknown, defaulting to 1000 [ 208.878163][T11731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1534'. [ 209.015539][T11735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.066260][T11735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.122675][T11735] hsr0: entered promiscuous mode [ 209.129049][T11735] hsr0: entered allmulticast mode [ 209.134279][T11735] hsr_slave_0: entered allmulticast mode [ 209.141272][T11735] hsr_slave_1: entered allmulticast mode [ 209.505210][T11764] netlink: 'syz.4.1540': attribute type 13 has an invalid length. [ 209.534864][T11765] bond0: (slave team0): Releasing backup interface [ 209.569578][T11765] team0: Port device dummy0 removed [ 209.578807][T11765] bridge_slave_0: left allmulticast mode [ 209.584865][T11765] bridge_slave_0: left promiscuous mode [ 209.587084][T11764] netlink: 'syz.4.1540': attribute type 17 has an invalid length. [ 209.592534][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.611798][T11765] bridge_slave_1: left allmulticast mode [ 209.619656][T11765] bridge_slave_1: left promiscuous mode [ 209.626141][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.639276][T11765] bond0: (slave bond_slave_0): Releasing backup interface [ 209.651745][T11765] bond0: (slave bond_slave_1): Releasing backup interface [ 209.663441][T11765] team0: Port device team_slave_0 removed [ 209.672386][T11765] team0: Port device team_slave_1 removed [ 209.678703][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.687536][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.699098][T11765] bond2: (slave geneve2): Releasing active interface [ 209.711513][T11765] batman_adv: batadv0: Interface deactivated: gretap1 [ 209.718977][T11765] batman_adv: batadv0: Removing interface: gretap1 [ 209.749079][T11764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.783622][ T8022] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.858739][ T8022] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.887657][ T8022] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.917183][ T8022] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.983109][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1543'. [ 210.277825][T11796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.567891][T11816] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1553'. [ 210.965251][T11842] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 211.010312][T11842] syz_tun: entered promiscuous mode [ 211.020010][T11842] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 211.215507][T11858] tipc: Enabling of bearer rejected, already enabled [ 211.233599][T11858] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 211.255124][T11858] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 211.391667][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1570'. [ 211.409940][T11869] IPv6: sit1: Disabled Multicast RS [ 211.417405][T11869] sit1: entered allmulticast mode [ 211.589007][T11883] xt_HMARK: proto mask must be zero with L3 mode [ 211.708183][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 212.013204][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 212.102301][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 212.120665][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 212.607780][T11971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1600'. [ 212.621730][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 212.734835][T11969] syz.4.1598 uses old SIOCAX25GETINFO [ 212.802377][T11974] syz_tun: left promiscuous mode [ 213.926736][T12036] __nla_validate_parse: 5 callbacks suppressed [ 213.926754][T12036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1619'. [ 213.929832][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 213.971464][T12040] tipc: Enabled bearer , priority 0 [ 213.979300][T12040] syzkaller0: entered promiscuous mode [ 214.006685][T12040] syzkaller0: entered allmulticast mode [ 214.025070][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 214.039539][T12040] tipc: Resetting bearer [ 214.060474][T12039] tipc: Resetting bearer [ 214.082456][T12039] tipc: Disabling bearer [ 214.315039][T12051] lo speed is unknown, defaulting to 1000 [ 214.322344][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 214.324381][T12051] lo speed is unknown, defaulting to 1000 [ 214.670078][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 214.759627][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 214.782906][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 214.808470][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.827712][T12089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.115867][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1639'. [ 215.660367][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 215.757008][T12148] lo speed is unknown, defaulting to 1000 [ 215.774412][T12148] lo speed is unknown, defaulting to 1000 [ 215.865381][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 215.918845][T12159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.003288][T12165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.028919][T12165] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 216.071334][T12165] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 216.887319][T12187] block nbd1: shutting down sockets [ 217.321133][T12197] veth1_to_bond: entered allmulticast mode [ 217.361356][T12197] veth1_to_bond (unregistering): left allmulticast mode [ 217.665697][T12208] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 217.779799][T12213] bond4: (slave bridge5): making interface the new active one [ 217.828317][T12213] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 217.897041][T12209] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 217.925496][T12216] macsec0: entered promiscuous mode [ 217.942051][T12216] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 217.958432][T12216] macsec0: entered allmulticast mode [ 217.966019][T12216] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 218.764558][T12253] lo speed is unknown, defaulting to 1000 [ 218.789105][T12253] lo speed is unknown, defaulting to 1000 [ 219.089351][T12267] __nla_validate_parse: 3 callbacks suppressed [ 219.089368][T12267] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1679'. [ 219.111043][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1679'. [ 219.260393][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 220.070800][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 220.106664][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 220.150117][T12306] veth5: entered promiscuous mode [ 220.178044][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 220.224691][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 220.330743][T12323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1696'. [ 220.391887][T12323] lo speed is unknown, defaulting to 1000 [ 220.420356][T12323] lo speed is unknown, defaulting to 1000 [ 220.429733][T12327] syzkaller1: entered promiscuous mode [ 220.459271][T12327] syzkaller1: entered allmulticast mode [ 220.544438][T12332] netlink: 'syz.4.1698': attribute type 30 has an invalid length. [ 220.797393][T12340] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1700'. [ 221.142027][T12340] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 221.160535][T12340] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 221.194914][T12340] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.214766][T12362] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1705'. [ 221.457653][T12374] pimreg3: entered allmulticast mode [ 221.867270][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.874546][T12412] IPv6: NLM_F_CREATE should be set when creating new route [ 221.928766][T12406] lo speed is unknown, defaulting to 1000 [ 221.936734][T12406] lo speed is unknown, defaulting to 1000 [ 221.945270][T12420] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 222.067215][T12423] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 222.337245][T12443] netlink: 'syz.0.1726': attribute type 21 has an invalid length. [ 222.353889][T12443] netlink: 'syz.0.1726': attribute type 22 has an invalid length. [ 222.391233][T12443] netlink: 'syz.0.1726': attribute type 23 has an invalid length. [ 223.257068][T12474] vxcan1: entered allmulticast mode [ 223.501549][T12492] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 223.541587][T12483] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 223.964049][T12519] team0: Device ipip0 is up. Set it down before adding it as a team port [ 224.284488][T12545] __nla_validate_parse: 11 callbacks suppressed [ 224.284503][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 224.398180][T12545] bond0: (slave syz_tun): Releasing backup interface [ 224.825621][T12576] syz.0.1757: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.846944][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.0.1757 Not tainted syzkaller #0 PREEMPT(full) [ 224.846970][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.846979][T12576] Call Trace: [ 224.846986][T12576] [ 224.846994][T12576] dump_stack_lvl+0x189/0x250 [ 224.847022][T12576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.847042][T12576] ? __pfx__printk+0x10/0x10 [ 224.847063][T12576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 224.847084][T12576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 224.847104][T12576] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 224.847126][T12576] warn_alloc+0x214/0x310 [ 224.847156][T12576] ? __pfx_warn_alloc+0x10/0x10 [ 224.847187][T12576] ? __get_vm_area_node+0x28f/0x300 [ 224.847209][T12576] ? hash_netportnet_create+0x354/0xf90 [ 224.847233][T12576] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 224.847284][T12576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.847320][T12576] ? rcu_is_watching+0x15/0xb0 [ 224.847340][T12576] ? hash_netportnet_create+0x354/0xf90 [ 224.847359][T12576] ? hash_netportnet_create+0x354/0xf90 [ 224.847376][T12576] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 224.847400][T12576] ? hash_netportnet_create+0x354/0xf90 [ 224.847418][T12576] ? hash_netportnet_create+0x2fa/0xf90 [ 224.847443][T12576] hash_netportnet_create+0x354/0xf90 [ 224.847471][T12576] ? __nla_parse+0x40/0x60 [ 224.847489][T12576] ? __pfx_hash_netportnet_create+0x10/0x10 [ 224.847511][T12576] ip_set_create+0xa97/0x1940 [ 224.847529][T12576] ? ip_set_create+0x4a2/0x1940 [ 224.847557][T12576] ? __pfx_ip_set_create+0x10/0x10 [ 224.847620][T12576] nfnetlink_rcv_msg+0xb4a/0x1130 [ 224.847640][T12576] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 224.847677][T12576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.847728][T12576] ? __lock_acquire+0xab9/0xd20 [ 224.847767][T12576] netlink_rcv_skb+0x208/0x470 [ 224.847789][T12576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.847809][T12576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.847841][T12576] ? bpf_lsm_capable+0x9/0x20 [ 224.847861][T12576] ? security_capable+0x7e/0x2e0 [ 224.847892][T12576] nfnetlink_rcv+0x26a/0x2520 [ 224.847910][T12576] ? is_bpf_text_address+0x26/0x2b0 [ 224.847940][T12576] ? kernel_text_address+0xa5/0xe0 [ 224.847963][T12576] ? __kernel_text_address+0xd/0x40 [ 224.847984][T12576] ? unwind_get_return_address+0x4d/0x90 [ 224.848003][T12576] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.848022][T12576] ? arch_stack_walk+0xfc/0x150 [ 224.848057][T12576] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 224.848076][T12576] ? stack_depot_save_flags+0x40/0x860 [ 224.848103][T12576] ? __lock_acquire+0xab9/0xd20 [ 224.848152][T12576] ? __lock_acquire+0xab9/0xd20 [ 224.848186][T12576] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.848213][T12576] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.848241][T12576] netlink_unicast+0x82f/0x9e0 [ 224.848268][T12576] ? __pfx_netlink_unicast+0x10/0x10 [ 224.848288][T12576] ? netlink_sendmsg+0x642/0xb30 [ 224.848311][T12576] ? skb_put+0x11b/0x210 [ 224.848336][T12576] netlink_sendmsg+0x805/0xb30 [ 224.848365][T12576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.848387][T12576] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.848405][T12576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.848422][T12576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.848440][T12576] __sock_sendmsg+0x21c/0x270 [ 224.848460][T12576] ____sys_sendmsg+0x505/0x830 [ 224.848485][T12576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.848514][T12576] ? import_iovec+0x74/0xa0 [ 224.848537][T12576] ___sys_sendmsg+0x21f/0x2a0 [ 224.848560][T12576] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.848615][T12576] ? __fget_files+0x2a/0x420 [ 224.848630][T12576] ? __fget_files+0x3a0/0x420 [ 224.848655][T12576] __x64_sys_sendmsg+0x19b/0x260 [ 224.848678][T12576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.848709][T12576] ? rcu_is_watching+0x15/0xb0 [ 224.848732][T12576] ? do_syscall_64+0xbe/0x3b0 [ 224.848756][T12576] do_syscall_64+0xfa/0x3b0 [ 224.848772][T12576] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.848790][T12576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.848807][T12576] ? clear_bhb_loop+0x60/0xb0 [ 224.848828][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.848844][T12576] RIP: 0033:0x7f07f6d8ec29 [ 224.848861][T12576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.848876][T12576] RSP: 002b:00007f07f7b9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.848895][T12576] RAX: ffffffffffffffda RBX: 00007f07f6fd6090 RCX: 00007f07f6d8ec29 [ 224.848907][T12576] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 224.848918][T12576] RBP: 00007f07f6e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 224.848929][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.848939][T12576] R13: 00007f07f6fd6128 R14: 00007f07f6fd6090 R15: 00007ffd918181b8 [ 224.848971][T12576] [ 224.849477][T12576] Mem-Info: [ 225.077796][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 225.100725][T12576] active_anon:12682 inactive_anon:0 isolated_anon:0 [ 225.100725][T12576] active_file:3340 inactive_file:39923 isolated_file:0 [ 225.100725][T12576] unevictable:768 dirty:173 writeback:0 [ 225.100725][T12576] slab_reclaimable:12487 slab_unreclaimable:113496 [ 225.100725][T12576] mapped:32283 shmem:4215 pagetables:1114 [ 225.100725][T12576] sec_pagetables:0 bounce:0 [ 225.100725][T12576] kernel_misc_reclaimable:0 [ 225.100725][T12576] free:1294004 free_pcp:21057 free_cma:0 [ 225.384027][T12576] Node 0 active_anon:50728kB inactive_anon:0kB active_file:13360kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129132kB dirty:692kB writeback:0kB shmem:15324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13596kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.416010][T12576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.446225][T12576] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.475490][T12576] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 225.483293][T12576] Node 0 DMA32 free:1273108kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50684kB inactive_anon:0kB active_file:13360kB inactive_file:157920kB unevictable:1536kB writepending:692kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:65232kB local_pcp:36408kB free_cma:0kB [ 225.519898][T12576] lowmem_reserve[]: 0 0 1 1 1 [ 225.524715][T12576] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 225.561916][T12576] lowmem_reserve[]: 0 0 0 0 0 [ 225.567816][T12576] Node 1 Normal free:3887524kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19412kB local_pcp:14012kB free_cma:0kB [ 225.600607][T12576] lowmem_reserve[]: 0 0 0 0 0 [ 225.605409][T12576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.619809][T12576] Node 0 DMA32: 292*4kB (UME) 705*8kB (UME) 609*16kB (UME) 230*32kB (UM) 113*64kB (UME) 43*128kB (UME) 26*256kB (U) 15*512kB (UME) 8*1024kB (UE) 2*2048kB (UM) 299*4096kB (M) = 1287976kB [ 225.639569][T12576] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 225.652949][T12576] Node 1 Normal: 187*4kB (UE) 43*8kB (UME) 34*16kB (UME) 72*32kB (UME) 15*64kB (UME) 7*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3887524kB [ 225.671711][T12576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.681676][T12576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.691375][T12576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.701158][T12576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.710841][T12576] 44624 total pagecache pages [ 225.715524][T12576] 0 pages in swap cache [ 225.720172][T12576] Free swap = 124996kB [ 225.724327][T12576] Total swap = 124996kB [ 225.728999][T12576] 2097051 pages RAM [ 225.732826][T12576] 0 pages HighMem/MovableOnly [ 225.738325][T12576] 425681 pages reserved [ 225.742478][T12576] 0 pages cma reserved [ 225.962320][T12613] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 225.989803][T12616] netlink: 'syz.3.1767': attribute type 4 has an invalid length. [ 226.023226][T12616] netlink: 'syz.3.1767': attribute type 4 has an invalid length. [ 226.038153][T12616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 226.070907][T12619] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1764'. [ 226.940443][T12663] sctp: [Deprecated]: syz.4.1776 (pid 12663) Use of int in maxseg socket option. [ 226.940443][T12663] Use struct sctp_assoc_value instead [ 227.127710][T12675] vlan2: entered promiscuous mode [ 227.132974][T12675] bond0: entered promiscuous mode [ 228.004504][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 228.021740][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 228.030959][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 229.919927][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 229.988332][T12717] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 229.998173][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 230.072992][T12721] lo speed is unknown, defaulting to 1000 [ 230.079967][T12721] lo speed is unknown, defaulting to 1000 [ 230.110191][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 254.096693][ T6178] page_pool_release_retry() stalled pool shutdown: id 38, 1 inflight 60 sec [ 255.700241][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.139556][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.016177][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 376.023942][ T31] Not tainted syzkaller #0 [ 376.029058][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.037790][ T31] task:kworker/1:0 state:D stack:25896 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 376.049845][ T31] Workqueue: events rfkill_sync_work [ 376.055157][ T31] Call Trace: [ 376.058470][ T31] [ 376.061387][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.065877][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.071447][ T31] ? __pfx___schedule+0x10/0x10 [ 376.076377][ T31] ? schedule+0x91/0x360 [ 376.081164][ T31] schedule+0x165/0x360 [ 376.085423][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.090943][ T31] __mutex_lock+0x7e6/0x1350 [ 376.095553][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.100593][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 376.105902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.111139][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.116651][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 376.122563][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.129040][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 376.134775][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 376.140213][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 376.145945][ T31] rfkill_set_block+0x1cf/0x440 [ 376.150863][ T31] rfkill_sync_work+0x114/0x200 [ 376.155726][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 376.161496][ T31] process_scheduled_works+0xae1/0x17b0 [ 376.167136][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.173150][ T31] worker_thread+0x8a0/0xda0 [ 376.177977][ T31] kthread+0x70e/0x8a0 [ 376.182076][ T31] ? __pfx_worker_thread+0x10/0x10 [ 376.187555][ T31] ? __pfx_kthread+0x10/0x10 [ 376.192441][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.197786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.203012][ T31] ? __pfx_kthread+0x10/0x10 [ 376.207669][ T31] ret_from_fork+0x439/0x7d0 [ 376.212277][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.217449][ T31] ? __switch_to_asm+0x39/0x70 [ 376.246358][ T31] ? __switch_to_asm+0x33/0x70 [ 376.251180][ T31] ? __pfx_kthread+0x10/0x10 [ 376.255795][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.271825][ T31] [ 376.275037][ T31] INFO: task kworker/1:3:5913 blocked for more than 143 seconds. [ 376.282805][ T31] Not tainted syzkaller #0 [ 376.290781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.300639][ T31] task:kworker/1:3 state:D stack:22952 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 376.313357][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 376.320118][ T31] Call Trace: [ 376.323417][ T31] [ 376.326456][ T31] __schedule+0x1798/0x4cc0 [ 376.330981][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.336463][ T31] ? __pfx___schedule+0x10/0x10 [ 376.341583][ T31] ? schedule+0x91/0x360 [ 376.345900][ T31] schedule+0x165/0x360 [ 376.350509][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.356053][ T31] __mutex_lock+0x7e6/0x1350 [ 376.360675][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.366091][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 376.372362][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.377502][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 376.383251][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 376.389015][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 376.395079][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 376.400848][ T31] process_scheduled_works+0xae1/0x17b0 [ 376.406518][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.412536][ T31] worker_thread+0x8a0/0xda0 [ 376.417284][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.423638][ T31] ? __kthread_parkme+0x7b/0x200 [ 376.428636][ T31] kthread+0x70e/0x8a0 [ 376.432706][ T31] ? __pfx_worker_thread+0x10/0x10 [ 376.437939][ T31] ? __pfx_kthread+0x10/0x10 [ 376.442550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.447796][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.452994][ T31] ? __pfx_kthread+0x10/0x10 [ 376.457602][ T31] ret_from_fork+0x439/0x7d0 [ 376.462190][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.467312][ T31] ? __switch_to_asm+0x39/0x70 [ 376.472075][ T31] ? __switch_to_asm+0x33/0x70 [ 376.476847][ T31] ? __pfx_kthread+0x10/0x10 [ 376.481437][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.486249][ T31] [ 376.489314][ T31] INFO: task syz.1.1745:12526 blocked for more than 143 seconds. [ 376.497064][ T31] Not tainted syzkaller #0 [ 376.501993][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.510801][ T31] task:syz.1.1745 state:D stack:25096 pid:12526 tgid:12526 ppid:5860 task_flags:0x400040 flags:0x00004006 [ 376.522756][ T31] Call Trace: [ 376.526085][ T31] [ 376.529025][ T31] __schedule+0x1798/0x4cc0 [ 376.533525][ T31] ? validate_chain+0x897/0x2140 [ 376.538494][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.543338][ T31] ? __pfx___schedule+0x10/0x10 [ 376.548222][ T31] ? schedule+0x91/0x360 [ 376.552454][ T31] schedule+0x165/0x360 [ 376.556627][ T31] schedule_timeout+0x9a/0x270 [ 376.561402][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 376.566861][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.572086][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.577528][ T31] ? wait_for_completion+0x267/0x5d0 [ 376.582832][ T31] wait_for_completion+0x2bf/0x5d0 [ 376.588004][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 376.593652][ T31] ? __flush_work+0xd2/0xbc0 [ 376.598292][ T31] ? __flush_work+0xd2/0xbc0 [ 376.602877][ T31] __flush_work+0x9b9/0xbc0 [ 376.607400][ T31] ? __flush_work+0xd2/0xbc0 [ 376.611980][ T31] ? __pfx___flush_work+0x10/0x10 [ 376.617026][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 376.622317][ T31] ? __pfx___cancel_work+0x10/0x10 [ 376.627524][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 376.633169][ T31] __cancel_work_sync+0xbe/0x110 [ 376.638144][ T31] rfkill_unregister+0x92/0x220 [ 376.643001][ T31] nfc_unregister_device+0x96/0x2a0 [ 376.648267][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 376.653980][ T31] virtual_ncidev_close+0x56/0x90 [ 376.659086][ T31] __fput+0x44c/0xa70 [ 376.663098][ T31] task_work_run+0x1d1/0x260 [ 376.667726][ T31] ? __pfx_task_work_run+0x10/0x10 [ 376.672837][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 376.678424][ T31] exit_to_user_mode_loop+0xec/0x110 [ 376.683788][ T31] do_syscall_64+0x2bd/0x3b0 [ 376.688427][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.693616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.699726][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.704422][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.710387][ T31] RIP: 0033:0x7f26c598ec29 [ 376.714802][ T31] RSP: 002b:00007ffd348e1508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 376.723248][ T31] RAX: 0000000000000000 RBX: 00007f26c5bd7da0 RCX: 00007f26c598ec29 [ 376.731267][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 376.739245][ T31] RBP: 00007f26c5bd7da0 R08: 00000000000001fc R09: 0000001b348e17ff [ 376.747267][ T31] R10: 00007f26c5bd7cb0 R11: 0000000000000246 R12: 0000000000036e9d [ 376.755244][ T31] R13: 00007f26c5bd6180 R14: ffffffffffffffff R15: 00007ffd348e1620 [ 376.763252][ T31] [ 376.766325][ T31] INFO: task syz.1.1745:12529 blocked for more than 144 seconds. [ 376.774037][ T31] Not tainted syzkaller #0 [ 376.782075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.790780][ T31] task:syz.1.1745 state:D stack:25864 pid:12529 tgid:12526 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 376.803135][ T31] Call Trace: [ 376.806444][ T31] [ 376.809370][ T31] __schedule+0x1798/0x4cc0 [ 376.813863][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.818837][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.823714][ T31] ? __pfx___schedule+0x10/0x10 [ 376.828633][ T31] ? schedule+0x91/0x360 [ 376.832895][ T31] schedule+0x165/0x360 [ 376.837082][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.842564][ T31] __mutex_lock+0x7e6/0x1350 [ 376.847182][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.851945][ T31] ? rfkill_register+0x37/0x8e0 [ 376.856856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.861888][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 376.867288][ T31] ? device_initialize+0x24b/0x440 [ 376.872386][ T31] rfkill_register+0x37/0x8e0 [ 376.877083][ T31] nfc_register_device+0x14a/0x320 [ 376.882281][ T31] nci_register_device+0x87f/0x9d0 [ 376.887518][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 376.893662][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 376.898983][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 376.904345][ T31] virtual_ncidev_open+0x129/0x1a0 [ 376.909481][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 376.915104][ T31] misc_open+0x2b9/0x330 [ 376.919485][ T31] chrdev_open+0x4c9/0x5e0 [ 376.923891][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 376.928964][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 376.935402][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 376.940389][ T31] do_dentry_open+0x950/0x13f0 [ 376.945192][ T31] vfs_open+0x3b/0x340 [ 376.949284][ T31] ? path_openat+0x2ecd/0x3830 [ 376.954038][ T31] path_openat+0x2ee5/0x3830 [ 376.958641][ T31] ? arch_stack_walk+0xfc/0x150 [ 376.963494][ T31] ? stack_depot_save_flags+0x40/0x860 [ 376.968986][ T31] ? __pfx_path_openat+0x10/0x10 [ 376.973954][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.980058][ T31] do_filp_open+0x1fa/0x410 [ 376.984550][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.989432][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 376.994460][ T31] ? _raw_spin_unlock+0x28/0x50 [ 376.999337][ T31] ? alloc_fd+0x64c/0x6c0 [ 377.003664][ T31] do_sys_openat2+0x121/0x1c0 [ 377.008354][ T31] ? __se_sys_futex+0x36f/0x400 [ 377.013189][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.018391][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.023140][ T31] __x64_sys_openat+0x138/0x170 [ 377.028000][ T31] do_syscall_64+0xfa/0x3b0 [ 377.032489][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.037702][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.043789][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.048520][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.054406][ T31] RIP: 0033:0x7f26c598ec29 [ 377.059055][ T31] RSP: 002b:00007f26c67fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.067523][ T31] RAX: ffffffffffffffda RBX: 00007f26c5bd5fa0 RCX: 00007f26c598ec29 [ 377.075493][ T31] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 377.083476][ T31] RBP: 00007f26c5a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 377.091488][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.099475][ T31] R13: 00007f26c5bd6038 R14: 00007f26c5bd5fa0 R15: 00007ffd348e13a8 [ 377.107482][ T31] [ 377.110526][ T31] INFO: task syz.2.1751:12556 blocked for more than 144 seconds. [ 377.119875][ T31] Not tainted syzkaller #0 [ 377.124803][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.133523][ T31] task:syz.2.1751 state:D stack:26952 pid:12556 tgid:12555 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 377.145492][ T31] Call Trace: [ 377.148800][ T31] [ 377.151752][ T31] __schedule+0x1798/0x4cc0 [ 377.156325][ T31] ? kasan_save_free_info+0x46/0x50 [ 377.161556][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.166505][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.171376][ T31] ? __pfx___schedule+0x10/0x10 [ 377.176277][ T31] ? schedule+0x91/0x360 [ 377.180536][ T31] schedule+0x165/0x360 [ 377.184704][ T31] schedule_preempt_disabled+0x13/0x30 [ 377.190200][ T31] __mutex_lock+0x7e6/0x1350 [ 377.194779][ T31] ? __mutex_lock+0x5bb/0x1350 [ 377.199565][ T31] ? misc_open+0x51/0x330 [ 377.203888][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 377.208979][ T31] misc_open+0x51/0x330 [ 377.213145][ T31] chrdev_open+0x4c9/0x5e0 [ 377.217669][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.222862][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 377.229257][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.234289][ T31] do_dentry_open+0x950/0x13f0 [ 377.239095][ T31] vfs_open+0x3b/0x340 [ 377.243154][ T31] ? path_openat+0x2ecd/0x3830 [ 377.247949][ T31] path_openat+0x2ee5/0x3830 [ 377.252535][ T31] ? arch_stack_walk+0xfc/0x150 [ 377.257443][ T31] ? stack_depot_save_flags+0x40/0x860 [ 377.263686][ T31] ? __pfx_path_openat+0x10/0x10 [ 377.268663][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.274937][ T31] do_filp_open+0x1fa/0x410 [ 377.279470][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.284313][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 377.289410][ T31] ? _raw_spin_unlock+0x28/0x50 [ 377.294271][ T31] ? alloc_fd+0x64c/0x6c0 [ 377.298808][ T31] do_sys_openat2+0x121/0x1c0 [ 377.303514][ T31] ? __se_sys_futex+0x36f/0x400 [ 377.308416][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.313615][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.318492][ T31] __x64_sys_openat+0x138/0x170 [ 377.323366][ T31] do_syscall_64+0xfa/0x3b0 [ 377.327906][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.333184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.339361][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.344135][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.350094][ T31] RIP: 0033:0x7f94df18ec29 [ 377.355131][ T31] RSP: 002b:00007f94e00b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.363580][ T31] RAX: ffffffffffffffda RBX: 00007f94df3d5fa0 RCX: 00007f94df18ec29 [ 377.371685][ T31] RDX: 0000000000040241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 377.379729][ T31] RBP: 00007f94df211e41 R08: 0000000000000000 R09: 0000000000000000 [ 377.387743][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.395715][ T31] R13: 00007f94df3d6038 R14: 00007f94df3d5fa0 R15: 00007ffe1e57a778 [ 377.403726][ T31] [ 377.406805][ T31] INFO: task syz.0.1770:12623 blocked for more than 144 seconds. [ 377.414517][ T31] Not tainted syzkaller #0 [ 377.419517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.428207][ T31] task:syz.0.1770 state:D stack:27208 pid:12623 tgid:12622 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 377.440231][ T31] Call Trace: [ 377.443560][ T31] [ 377.446561][ T31] __schedule+0x1798/0x4cc0 [ 377.451075][ T31] ? kasan_save_free_info+0x46/0x50 [ 377.456316][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.461875][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.466776][ T31] ? __pfx___schedule+0x10/0x10 [ 377.471639][ T31] ? schedule+0x91/0x360 [ 377.475864][ T31] schedule+0x165/0x360 [ 377.480047][ T31] schedule_preempt_disabled+0x13/0x30 [ 377.485492][ T31] __mutex_lock+0x7e6/0x1350 [ 377.490099][ T31] ? __mutex_lock+0x5bb/0x1350 [ 377.494852][ T31] ? misc_open+0x51/0x330 [ 377.499214][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 377.504236][ T31] misc_open+0x51/0x330 [ 377.508413][ T31] chrdev_open+0x4c9/0x5e0 [ 377.512812][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.517792][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 377.524113][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.529088][ T31] do_dentry_open+0x950/0x13f0 [ 377.533845][ T31] vfs_open+0x3b/0x340 [ 377.538016][ T31] ? path_openat+0x2ecd/0x3830 [ 377.542800][ T31] path_openat+0x2ee5/0x3830 [ 377.547412][ T31] ? arch_stack_walk+0xfc/0x150 [ 377.552304][ T31] ? stack_depot_save_flags+0x40/0x860 [ 377.557791][ T31] ? __pfx_path_openat+0x10/0x10 [ 377.562726][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.568819][ T31] do_filp_open+0x1fa/0x410 [ 377.573318][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.578195][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 377.583223][ T31] ? _raw_spin_unlock+0x28/0x50 [ 377.588101][ T31] ? alloc_fd+0x64c/0x6c0 [ 377.592509][ T31] do_sys_openat2+0x121/0x1c0 [ 377.597321][ T31] ? __se_sys_futex+0x36f/0x400 [ 377.602186][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.607410][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.612157][ T31] __x64_sys_openat+0x138/0x170 [ 377.617038][ T31] do_syscall_64+0xfa/0x3b0 [ 377.621561][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.626814][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.632879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.637604][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.643479][ T31] RIP: 0033:0x7f07f6d8ec29 [ 377.648005][ T31] RSP: 002b:00007f07f7bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.656439][ T31] RAX: ffffffffffffffda RBX: 00007f07f6fd5fa0 RCX: 00007f07f6d8ec29 [ 377.664429][ T31] RDX: 0000000000008200 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 377.672428][ T31] RBP: 00007f07f6e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 377.680501][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.688489][ T31] R13: 00007f07f6fd6038 R14: 00007f07f6fd5fa0 R15: 00007ffd918181b8 [ 377.696493][ T31] [ 377.699530][ T31] INFO: task syz.3.1773:12643 blocked for more than 145 seconds. [ 377.707377][ T31] Not tainted syzkaller #0 [ 377.712310][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.721098][ T31] task:syz.3.1773 state:D stack:28096 pid:12643 tgid:12639 ppid:5859 task_flags:0x400140 flags:0x00004004 [ 377.733087][ T31] Call Trace: [ 377.736407][ T31] [ 377.739338][ T31] __schedule+0x1798/0x4cc0 [ 377.743845][ T31] ? kasan_save_free_info+0x46/0x50 [ 377.749224][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.754105][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.758983][ T31] ? __pfx___schedule+0x10/0x10 [ 377.763923][ T31] ? schedule+0x91/0x360 [ 377.768194][ T31] schedule+0x165/0x360 [ 377.772333][ T31] schedule_preempt_disabled+0x13/0x30 [ 377.777890][ T31] __mutex_lock+0x7e6/0x1350 [ 377.782471][ T31] ? __mutex_lock+0x5bb/0x1350 [ 377.787272][ T31] ? misc_open+0x51/0x330 [ 377.791603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 377.796705][ T31] misc_open+0x51/0x330 [ 377.800932][ T31] chrdev_open+0x4c9/0x5e0 [ 377.805380][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.810384][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 377.816835][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 377.821789][ T31] do_dentry_open+0x950/0x13f0 [ 377.826884][ T31] vfs_open+0x3b/0x340 [ 377.830959][ T31] ? path_openat+0x2ecd/0x3830 [ 377.835707][ T31] path_openat+0x2ee5/0x3830 [ 377.840318][ T31] ? arch_stack_walk+0xfc/0x150 [ 377.845169][ T31] ? stack_depot_save_flags+0x40/0x860 [ 377.850659][ T31] ? __pfx_path_openat+0x10/0x10 [ 377.855585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.861738][ T31] ? look_up_lock_class+0x74/0x170 [ 377.866901][ T31] do_filp_open+0x1fa/0x410 [ 377.871411][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.876284][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 377.881355][ T31] ? _raw_spin_unlock+0x28/0x50 [ 377.886261][ T31] ? alloc_fd+0x64c/0x6c0 [ 377.890604][ T31] do_sys_openat2+0x121/0x1c0 [ 377.895271][ T31] ? __se_sys_futex+0x36f/0x400 [ 377.900155][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.905356][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.910184][ T31] __x64_sys_openat+0x138/0x170 [ 377.915053][ T31] do_syscall_64+0xfa/0x3b0 [ 377.919593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.924790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.930927][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.935600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.941622][ T31] RIP: 0033:0x7f263498ec29 [ 377.946178][ T31] RSP: 002b:00007f26357b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.954616][ T31] RAX: ffffffffffffffda RBX: 00007f2634bd6090 RCX: 00007f263498ec29 [ 377.962632][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 377.970644][ T31] RBP: 00007f2634a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 377.978639][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.986640][ T31] R13: 00007f2634bd6128 R14: 00007f2634bd6090 R15: 00007ffe74c5cc08 [ 377.994634][ T31] [ 377.997850][ T31] INFO: task syz.4.1788:12728 blocked for more than 145 seconds. [ 378.005921][ T31] Not tainted syzkaller #0 [ 378.010973][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.019671][ T31] task:syz.4.1788 state:D stack:26344 pid:12728 tgid:12727 ppid:5878 task_flags:0x400140 flags:0x00004004 [ 378.031713][ T31] Call Trace: [ 378.034982][ T31] [ 378.037958][ T31] __schedule+0x1798/0x4cc0 [ 378.042452][ T31] ? kasan_save_free_info+0x46/0x50 [ 378.047801][ T31] ? __lock_acquire+0xab9/0xd20 [ 378.052670][ T31] ? __lock_acquire+0xab9/0xd20 [ 378.057553][ T31] ? __pfx___schedule+0x10/0x10 [ 378.062422][ T31] ? schedule+0x91/0x360 [ 378.066833][ T31] schedule+0x165/0x360 [ 378.071016][ T31] schedule_preempt_disabled+0x13/0x30 [ 378.076526][ T31] __mutex_lock+0x7e6/0x1350 [ 378.081229][ T31] ? __mutex_lock+0x5bb/0x1350 [ 378.086115][ T31] ? misc_open+0x51/0x330 [ 378.091077][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 378.096270][ T31] misc_open+0x51/0x330 [ 378.100454][ T31] chrdev_open+0x4c9/0x5e0 [ 378.104868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 378.109843][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 378.116200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 378.121173][ T31] do_dentry_open+0x950/0x13f0 [ 378.125959][ T31] vfs_open+0x3b/0x340 [ 378.130095][ T31] ? path_openat+0x2ecd/0x3830 [ 378.134866][ T31] path_openat+0x2ee5/0x3830 [ 378.139500][ T31] ? arch_stack_walk+0xfc/0x150 [ 378.144375][ T31] ? stack_depot_save_flags+0x40/0x860 [ 378.149880][ T31] ? __pfx_path_openat+0x10/0x10 [ 378.154818][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.160914][ T31] do_filp_open+0x1fa/0x410 [ 378.165407][ T31] ? __lock_acquire+0xab9/0xd20 [ 378.170293][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 378.175434][ T31] ? _raw_spin_unlock+0x28/0x50 [ 378.180316][ T31] ? alloc_fd+0x64c/0x6c0 [ 378.184651][ T31] do_sys_openat2+0x121/0x1c0 [ 378.189362][ T31] ? __se_sys_futex+0x36f/0x400 [ 378.194237][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.199507][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 378.204875][ T31] ? fd_install+0x30d/0x540 [ 378.209403][ T31] __x64_sys_openat+0x138/0x170 [ 378.214249][ T31] do_syscall_64+0xfa/0x3b0 [ 378.218827][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.224106][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.230637][ T31] ? clear_bhb_loop+0x60/0xb0 [ 378.235302][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.241218][ T31] RIP: 0033:0x7f980af8ec29 [ 378.245645][ T31] RSP: 002b:00007f980be6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 378.254092][ T31] RAX: ffffffffffffffda RBX: 00007f980b1d5fa0 RCX: 00007f980af8ec29 [ 378.262351][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 378.270635][ T31] RBP: 00007f980b011e41 R08: 0000000000000000 R09: 0000000000000000 [ 378.278662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.286674][ T31] R13: 00007f980b1d6038 R14: 00007f980b1d5fa0 R15: 00007ffc6d42f9e8 [ 378.294752][ T31] [ 378.297935][ T31] [ 378.297935][ T31] Showing all locks held in the system: [ 378.305657][ T31] 4 locks held by kworker/1:0/24: [ 378.310830][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.321987][ T31] #1: ffffc900001e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.334603][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 378.344702][ T31] #3: ffff88807c7ea100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 378.354396][ T31] 1 lock held by khungtaskd/31: [ 378.359286][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 378.369149][ T31] 2 locks held by kworker/u8:3/49: [ 378.374367][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.386123][ T31] #1: ffffc90000b97bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.398967][ T31] 2 locks held by getty/5626: [ 378.403654][ T31] #0: ffff88814d1910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.413424][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 378.423688][ T31] 3 locks held by kworker/1:3/5913: [ 378.428931][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.440039][ T31] #1: ffffc900041ffbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.453565][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 378.464917][ T31] 1 lock held by syz.1.1745/12526: [ 378.470048][ T31] #0: ffff88807c7ea100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 378.479813][ T31] 3 locks held by syz.1.1745/12529: [ 378.484984][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.493457][ T31] #1: ffff88804ddbb100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 378.503199][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 378.513181][ T31] 1 lock held by syz.2.1751/12556: [ 378.518300][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.526796][ T31] 1 lock held by syz.0.1770/12623: [ 378.531901][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.540406][ T31] 1 lock held by syz.3.1773/12643: [ 378.545516][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.554091][ T31] 1 lock held by syz.4.1788/12728: [ 378.559226][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.567747][ T31] 1 lock held by syz-executor/12733: [ 378.573791][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.585290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.592490][ T31] 1 lock held by syz-executor/12736: [ 378.597949][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.606964][ T31] 1 lock held by syz-executor/12738: [ 378.612262][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.620758][ T31] 1 lock held by syz-executor/12740: [ 378.626176][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.634656][ T31] 1 lock held by syz-executor/12742: [ 378.639979][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.648455][ T31] 1 lock held by syz-executor/12744: [ 378.653726][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.662208][ T31] 1 lock held by syz-executor/12746: [ 378.667506][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.675943][ T31] 1 lock held by syz-executor/12748: [ 378.681252][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.689777][ T31] 1 lock held by syz-executor/12750: [ 378.695055][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.703587][ T31] 1 lock held by syz-executor/12755: [ 378.708887][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.717369][ T31] 1 lock held by syz-executor/12757: [ 378.722647][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.731130][ T31] 1 lock held by syz-executor/12759: [ 378.736453][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.744930][ T31] 1 lock held by syz-executor/12761: [ 378.750260][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.758737][ T31] 1 lock held by syz-executor/12763: [ 378.764002][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.772458][ T31] 1 lock held by syz-executor/12765: [ 378.777762][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 378.786260][ T31] [ 378.788590][ T31] ============================================= [ 378.788590][ T31] [ 378.797082][ T31] NMI backtrace for cpu 1 [ 378.797100][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 378.797111][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.797118][ T31] Call Trace: [ 378.797122][ T31] [ 378.797126][ T31] dump_stack_lvl+0x189/0x250 [ 378.797145][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.797161][ T31] ? __pfx__printk+0x10/0x10 [ 378.797180][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 378.797196][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.797212][ T31] ? __pfx__printk+0x10/0x10 [ 378.797227][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.797243][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 378.797259][ T31] watchdog+0xf93/0xfe0 [ 378.797276][ T31] ? watchdog+0x1de/0xfe0 [ 378.797292][ T31] kthread+0x70e/0x8a0 [ 378.797306][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.797318][ T31] ? __pfx_kthread+0x10/0x10 [ 378.797331][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.797340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.797350][ T31] ? __pfx_kthread+0x10/0x10 [ 378.797362][ T31] ret_from_fork+0x439/0x7d0 [ 378.797373][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.797386][ T31] ? __switch_to_asm+0x39/0x70 [ 378.797398][ T31] ? __switch_to_asm+0x33/0x70 [ 378.797409][ T31] ? __pfx_kthread+0x10/0x10 [ 378.797421][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.797441][ T31] [ 378.797445][ T31] Sending NMI from CPU 1 to CPUs 0: [ 378.942112][ C0] NMI backtrace for cpu 0 [ 378.942129][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 378.942146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.942155][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 378.942176][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 378.942189][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 378.942204][ C0] RAX: 3d8c05ad96eef400 RBX: ffffffff819683f8 RCX: 3d8c05ad96eef400 [ 378.942216][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba56b RDI: ffffffff8be33f00 [ 378.942227][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 378.942239][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39030 [ 378.942250][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 378.942260][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 378.942273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.942284][ C0] CR2: 0000561f68a4bfb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 378.942298][ C0] Call Trace: [ 378.942304][ C0] [ 378.942310][ C0] default_idle+0x13/0x20 [ 378.942326][ C0] default_idle_call+0x74/0xb0 [ 378.942343][ C0] do_idle+0x1e8/0x510 [ 378.942360][ C0] ? __pfx_do_idle+0x10/0x10 [ 378.942383][ C0] cpu_startup_entry+0x44/0x60 [ 378.942397][ C0] rest_init+0x2de/0x300 [ 378.942415][ C0] start_kernel+0x3a9/0x410 [ 378.942433][ C0] x86_64_start_reservations+0x24/0x30 [ 378.942453][ C0] x86_64_start_kernel+0x143/0x1c0 [ 378.942472][ C0] common_startup_64+0x13e/0x147 [ 378.942497][ C0] [ 378.943124][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 379.124880][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 379.133995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.144040][ T31] Call Trace: [ 379.147312][ T31] [ 379.150248][ T31] dump_stack_lvl+0x99/0x250 [ 379.154845][ T31] ? __asan_memcpy+0x40/0x70 [ 379.159436][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.164644][ T31] ? __pfx__printk+0x10/0x10 [ 379.169249][ T31] vpanic+0x281/0x750 [ 379.173230][ T31] ? __pfx_vpanic+0x10/0x10 [ 379.177721][ T31] ? preempt_schedule+0xae/0xc0 [ 379.182564][ T31] ? preempt_schedule_common+0x83/0xd0 [ 379.188086][ T31] panic+0xb9/0xc0 [ 379.191824][ T31] ? __pfx_panic+0x10/0x10 [ 379.196248][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 379.201658][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 379.207830][ T31] watchdog+0xfd2/0xfe0 [ 379.212009][ T31] ? watchdog+0x1de/0xfe0 [ 379.216360][ T31] kthread+0x70e/0x8a0 [ 379.220502][ T31] ? __pfx_watchdog+0x10/0x10 [ 379.225290][ T31] ? __pfx_kthread+0x10/0x10 [ 379.229887][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.235168][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.240351][ T31] ? __pfx_kthread+0x10/0x10 [ 379.244936][ T31] ret_from_fork+0x439/0x7d0 [ 379.250052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 379.255169][ T31] ? __switch_to_asm+0x39/0x70 [ 379.259932][ T31] ? __switch_to_asm+0x33/0x70 [ 379.264711][ T31] ? __pfx_kthread+0x10/0x10 [ 379.269305][ T31] ret_from_fork_asm+0x1a/0x30 [ 379.274107][ T31] [ 379.277404][ T31] Kernel Offset: disabled [ 379.281711][ T31] Rebooting in 86400 seconds..