last executing test programs: 21.620632394s ago: executing program 3 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) socket$inet6(0xa, 0x3, 0xff) 21.325587162s ago: executing program 3 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) unshare(0x8000000) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x80000001, 0x7131, 0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000200)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56a}, {0x6, 0x2, 0x0, 0xa1e}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x80108906, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) 21.117489139s ago: executing program 2 (id=788): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) r2 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}, {&(0x7f0000000380)="63d4d1b167a632e5b2cc71e6d65b5852ce914da800000000000000e0750ab7edd2486663a512648a4a748f1797a9b80b45f640b8329e6042bfb5bfcf7c624d5cac1095308895e0a31b964bb2a75dff523cfeaa", 0x53}], 0x2, 0x0, 0x0, 0x18080}, 0x0) (async) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x3, 0x5, 0x23, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x7800, 0xff, 0x6}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10) 20.985887885s ago: executing program 3 (id=791): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x2}, 0x8) (async) getsockname$packet(r2, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) getsockopt$llc_int(r1, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) bind$llc(r0, &(0x7f00000001c0)={0x1a, 0x206, 0x2, 0x2, 0x2, 0x8, @local}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xe}, 0x90) (async) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x1010, r10, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) 20.910655778s ago: executing program 2 (id=792): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c65005b02146caa616b16040042801400018006000600800a000008001c00", @ANYRES32=r2, @ANYBLOB="040008", @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x0, &(0x7f0000000080)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) pipe(&(0x7f0000000080)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.824513528s ago: executing program 3 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) (async) unshare(0x20040600) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r3 = socket$isdn(0x22, 0x3, 0x2) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r5}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r11 = socket$inet(0xa, 0x801, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @local, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x1, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3b8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r10}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r10, 0xffff}, &(0x7f00000001c0)=0x8) 20.658741698s ago: executing program 3 (id=795): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x11, 0x800, 0x6000, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000cc0)={0x284, r3, 0x802, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4d3}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x6}}]}, 0x284}, 0x1, 0x0, 0x0, 0x2000084b}, 0x4000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0xcc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x567}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 20.488062199s ago: executing program 2 (id=798): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0x1, 0x1}}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x12) sendfile(r3, r1, 0x0, 0xbdc4) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000008c0)={{r1}, "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"}) (async, rerun: 64) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) 20.435114285s ago: executing program 2 (id=800): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'team_slave_1\x00', {}, 0x1}) listen(r0, 0x7f3d) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 20.315635826s ago: executing program 2 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100004000"/56], 0x50}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pipe(&(0x7f0000002740)) 20.238244042s ago: executing program 3 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b808", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0xe8, 0x0, 0xb3, 0xb9, 0x5b, 0xe, 0xc, 0x2, 0x40, 0x9, 0x7, 0x7f, 0xa2, 0x9}, 0xe) getsockname$packet(r1, 0x0, &(0x7f0000000640)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x1, 0x5, 0x6, 0x3, 0xac, 0x4, {0x7, 0x2, "5d9ac5613540eda5"}, 0x7, 0x4, 0x6, 0xf8, 0x48, "a4797d6caf8d7eb7b7ea33376b046eca6f4ee4830638e927f996b33fb99aa7d3b5b7b465581f81859936dfb641c664166ee13091b76c1dc698397e98dc1ac19597d57216dea84e99"}}, 0x61) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900", 0x4}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="c216e384650f743df8ab46ffc22708980171a46b225404060000000000000043017cfce7dfb93a32dfd8da7d69", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 20.052396152s ago: executing program 2 (id=806): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="022c8e227690825e1d073427b24a183146c3ba99e567437f9ced05616caf84485eb2821894fc8535048781a2e0525439f483350e9c39bc58924247a824b4141c3373f18ccb73debf7526d1556ebe028df243fd702ded8336e9a88fb6a28de2e251b45bc09dfa6bae0fc8f5fc484f83e6530a2adecf0a3d2611c2405f9f61476a36768d67f8bc5e6124658853a25da57939c5", 0x92}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x4001c00) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) 18.49062973s ago: executing program 0 (id=822): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2d, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 18.119591294s ago: executing program 0 (id=825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x77801061241920b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfffd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x40, 0x0, 0xb, 0x0, 0x40}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 17.890624269s ago: executing program 0 (id=827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x70, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)='/proc/1/\b\x00\x00\x00\x00\x00\x00\x00\x98#YP\xee\x9c2G\xf0\x81*I\"_\x91\x0f\xd6\x86\xfe$\x7f\xbcK\x88\xe3\xe5\xcf\x8d\xbc\x86\xa26s\x96\xdf@\x89\x15\xb3{\x82\x14{\xec\xce\xce4\xff\x05\xec\b\xbfEU\x81\x1eA\x1c\xbe\xddj\xc7\x98\n\xa5K\x9f\xd7t\x04\xd0\x1f'}, 0x30) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000e0000002000000000000000000000000ff020000000000000000000000000001fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000150000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x134}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002a04800", @ANYRES32=0x0], 0x18}}, 0x0) 17.800955683s ago: executing program 4 (id=828): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x4c}}, 0xeb64d656041b2f26) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYBLOB="64a741b7295ed72c20cfdd951e27c120d293897e5549104caf881be097355dec336c6425b3275bf29cf8e065a18f17b5d360212bd797807fe2dde4a3d64bae44514ebb73a22cfcba59c3ff13fa3dad9327dd99a72aa4744dd38a1b6793d1ecb28e5ac93b382ac9265ec33e6c93d91b645bd59b5ba289405b2f2d6d8b80fe2392d3"], 0x20}, 0x1, 0x0, 0x0, 0x8048885}, 0x0) 17.722661088s ago: executing program 0 (id=830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000000000bf0053e0ef00bb9818b3d446000000000095000000000e638eb9d8ec29938b16d05a81013c"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, r6, 0x25, 0x4, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000240)="cd08991bb63163d2d500a1871c7ff6f2dd7ef5468e8274b1a1c6cafc72c4a4de1826d464187b2b79a057ccf41a75f430dc6e631bf118495f5bec88bd5ff6f618fa3cdb49f2adc101991097bb516bc4fa714884f7e5499e11a6232a491e7398f7ddbedf21c5b2d34484644694cdd740b41246eea93bd901fc75a9d3cc031d2486586717cb515aba0b943dde7bd1f8625f656a2c950b6ecde33955a419296bb51f0f3a4bc9b59d71cbba6bbd4c832aa32a5c8a8dc355e2798a887d3186d9e9ce974abb94bab8a0c47a0b0c10a4da536ea0999b1a91204b0c140d72c52a220e4525f713ce7808745e129416d62ba14dbe", 0xef}, {&(0x7f0000000340)="e02d2a449fa70cfc26ebefa74724b339112b795410213a8ee36a7849dfb6499b016a9c33f3b0d1cf0e6c3fd0060ce128830acf6f0421b279d89e3395e213fc1df342972a35eb34ea7c530e00a93446f17e37c03f024397764765dc601abd13caaa3d0241162690e34c0fe7807c3c74722a5191d2a54e28f6427db35064f13d7a4480d6849d4bc07f9d978289bb2269f0bc359ee19021d8c194fe085e1418026f6ab371517b18fda381d7a30367dd82944f636957707800daf2bc3b7c2d4263777153d630d2d7a0892e7831327d04e090432c6e5a22be0afa677ad08e90831e67fcb33c1ed7ee196a37b2a84c4de62941f7ce86e5462083e499cd", 0xfa}, {&(0x7f0000000600)="f2280925420ee4ed3804f5e2b9765bb0567fda6a476bddfa8ddec9efadcbe1982df15f548646d06e1c2ab3cee5eef2a140d7b46cfe8cdb95c1f5e5a2144586268b057735ba298b405bb62ac4126f4ba60dc8322bb50ca9e2e56d6430ef0edd2fe7d34e885aebe5dc42655b2132f38c50e8c6ade5616e6613ec26316a688fde7259bb69b8b8d405834714f3f2b441572f7c1711df5dfb02fd3da38d74b70c77b99891cc0cae4ee741eb0e617ff4f5fe770e54deb95d6032531529945ed24367fed925068c35ac0868179c2b23112fd3740b01439836", 0xd5}, {&(0x7f0000000700)="573be61dfc5071e6904bce3a7f066f579867ddc66a98f414e8ea36324e0df7296b2bf7e508aa0aabb25055d6023c53c9807528fdc2385d33e42c73d3dadf7fafa7a3c24266e31a860ce10c9dc029e468820a0f4fc9979a79e2e885190d260b4a7a283b57a8385d933adbf1458c4a99f0a234ba0f", 0x74}, {&(0x7f0000000780)="ac1d9fd3f03d2f879dd5728d5566602e087507a95f55faab51efe1934f20975501e321e47902affc0717d048c69a7cd2429983c71882956217e5bb359eaa3995ea54823e738728d82636c0ed912649236b2b9a0a54768731ee31271fe082b8b5abff890f03cced502bd96256c65c540fbc8bd9ff1bbb9f7758e3f875a44653bfa4724b4f581d075256910d", 0x8b}, {&(0x7f0000000840)="6293c5b28645c46fbaa3f535d7d87da0850b9450810804d8609691305afcdccfc9ac0c175855e9a39f890f270eadcf880b12e82d47a0b94059acccca5a68e4393f66a0975b9dc7aa0bb2574f31d23a7398611f679d25390b1a4ca3727d728a1f58281d9849e439552bfef963e45fed00f48544bc7cd3bfcb7290b97387cd88b6d8f87dd427c415fe211cbfa2cb5446ccc21085875071f0cb33f4382fb8d1411b023082f342766bc0d21e1832cb9f2eb58d1e131a4eefc6a45e2a230cca5e49e3306020efcbb7f99d136834dd6084000171f030335ec5c0", 0xd7}, {&(0x7f0000000940)="175b96580fee60e79d7f4e1169efb2c99391358388bae8a5f88238bf608a21b2637f1463de3324c6185fdc03072d238b996b840094e92e9110ddc365a2c071b7e198c34b8f8a183ea3251c8db652c0a2829f91daf0d1ce40bb61f511b34ad6f39e39bc6d8012f00aeb0d", 0x6a}], 0x7) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) 17.566554548s ago: executing program 4 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="000000f80900000077c6000000000000850000006100"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x82800, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000540)=0x4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x46}, 0x8edb5011b9aaa3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 17.541612652s ago: executing program 0 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, &(0x7f0000000380), 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) unshare(0xc040480) (async, rerun: 64) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async, rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 64) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xfd, 0xf2, 0x0, 0x1, [@typed={0x4, 0x18}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r11, 0x0, 0x0, 0x22000001, &(0x7f0000000480)={0xa, 0x2, 0xf, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}, 0x1c) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 17.461837125s ago: executing program 4 (id=834): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x24000011) 17.358629332s ago: executing program 0 (id=835): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r3, &(0x7f0000001440)=ANY=[@ANYBLOB="0e0307050402070614c00257e421e1d6973cd60e42a98c0865c703cee501"], 0x1e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r8, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x8603, 0x40000}}, 0x20}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 17.353818848s ago: executing program 4 (id=836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 17.181180836s ago: executing program 4 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.111074892s ago: executing program 4 (id=838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) 16.666524226s ago: executing program 1 (id=839): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) unshare(0x20400) unshare(0x20000400) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) (async) unshare(0x20400) (async) 16.61078446s ago: executing program 1 (id=840): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) listen(r0, 0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex=r3, r1, 0x22, 0x10, r1, @void, @value=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) 15.728561177s ago: executing program 1 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 15.614744608s ago: executing program 1 (id=842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x2c, r3, 0xb69dd009cc7ae55, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xef6a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002"], 0xb8}}, 0x0) (rerun: 32) pipe(&(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 15.570206817s ago: executing program 1 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15.433898147s ago: executing program 1 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 5.148431059s ago: executing program 32 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b808", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0xe8, 0x0, 0xb3, 0xb9, 0x5b, 0xe, 0xc, 0x2, 0x40, 0x9, 0x7, 0x7f, 0xa2, 0x9}, 0xe) getsockname$packet(r1, 0x0, &(0x7f0000000640)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x1, 0x5, 0x6, 0x3, 0xac, 0x4, {0x7, 0x2, "5d9ac5613540eda5"}, 0x7, 0x4, 0x6, 0xf8, 0x48, "a4797d6caf8d7eb7b7ea33376b046eca6f4ee4830638e927f996b33fb99aa7d3b5b7b465581f81859936dfb641c664166ee13091b76c1dc698397e98dc1ac19597d57216dea84e99"}}, 0x61) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900", 0x4}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="c216e384650f743df8ab46ffc22708980171a46b225404060000000000000043017cfce7dfb93a32dfd8da7d69", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 4.097718185s ago: executing program 33 (id=806): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="022c8e227690825e1d073427b24a183146c3ba99e567437f9ced05616caf84485eb2821894fc8535048781a2e0525439f483350e9c39bc58924247a824b4141c3373f18ccb73debf7526d1556ebe028df243fd702ded8336e9a88fb6a28de2e251b45bc09dfa6bae0fc8f5fc484f83e6530a2adecf0a3d2611c2405f9f61476a36768d67f8bc5e6124658853a25da57939c5", 0x92}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x4001c00) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) 2.061638279s ago: executing program 34 (id=835): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r3, &(0x7f0000001440)=ANY=[@ANYBLOB="0e0307050402070614c00257e421e1d6973cd60e42a98c0865c703cee501"], 0x1e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r8, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x8603, 0x40000}}, 0x20}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 2.030063896s ago: executing program 35 (id=838): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) 0s ago: executing program 36 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 84.855783][ T5818] cgroup: Unknown subsys name 'net' [ 85.027834][ T5818] cgroup: Unknown subsys name 'cpuset' [ 85.037163][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.737749][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.060882][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.085613][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.094795][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.102930][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.111226][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.122530][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.132275][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.142118][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.162124][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.169450][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.176684][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.184841][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.192702][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.197834][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.200575][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.215177][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.236324][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.257202][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.274610][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.279652][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.305426][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.313996][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.322385][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.344046][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.356189][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.956928][ T43] cfg80211: failed to load regulatory.db [ 92.013323][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.113969][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.255173][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.296600][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.428979][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.436676][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.444768][ T5842] bridge_slave_0: entered allmulticast mode [ 92.452227][ T5842] bridge_slave_0: entered promiscuous mode [ 92.472805][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 92.507567][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.515243][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.522554][ T5842] bridge_slave_1: entered allmulticast mode [ 92.530259][ T5842] bridge_slave_1: entered promiscuous mode [ 92.588254][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.595631][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.602821][ T5837] bridge_slave_0: entered allmulticast mode [ 92.610448][ T5837] bridge_slave_0: entered promiscuous mode [ 92.644799][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.652013][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.660133][ T5834] bridge_slave_0: entered allmulticast mode [ 92.667969][ T5834] bridge_slave_0: entered promiscuous mode [ 92.692127][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.701928][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.709806][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.717121][ T5837] bridge_slave_1: entered allmulticast mode [ 92.725421][ T5837] bridge_slave_1: entered promiscuous mode [ 92.755033][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.762199][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.769591][ T5834] bridge_slave_1: entered allmulticast mode [ 92.776902][ T5834] bridge_slave_1: entered promiscuous mode [ 92.786684][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.828994][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.836245][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.843730][ T5840] bridge_slave_0: entered allmulticast mode [ 92.851119][ T5840] bridge_slave_0: entered promiscuous mode [ 92.916231][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.923442][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.931097][ T5840] bridge_slave_1: entered allmulticast mode [ 92.938662][ T5840] bridge_slave_1: entered promiscuous mode [ 92.948585][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.959814][ T5842] team0: Port device team_slave_0 added [ 92.968570][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.014567][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.025211][ T5842] team0: Port device team_slave_1 added [ 93.034376][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.110451][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.118026][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.125780][ T5829] bridge_slave_0: entered allmulticast mode [ 93.133060][ T5829] bridge_slave_0: entered promiscuous mode [ 93.144576][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.192011][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.199966][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.207474][ T5829] bridge_slave_1: entered allmulticast mode [ 93.216515][ T5829] bridge_slave_1: entered promiscuous mode [ 93.225929][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.241389][ T5834] team0: Port device team_slave_0 added [ 93.248448][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.255789][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.282038][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.296159][ T5837] team0: Port device team_slave_0 added [ 93.314376][ T5839] Bluetooth: hci0: command tx timeout [ 93.344006][ T5834] team0: Port device team_slave_1 added [ 93.351412][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.358727][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.385012][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.396167][ T5839] Bluetooth: hci4: command tx timeout [ 93.399112][ T5837] team0: Port device team_slave_1 added [ 93.403901][ T5845] Bluetooth: hci3: command tx timeout [ 93.413007][ T5845] Bluetooth: hci2: command tx timeout [ 93.418984][ T5839] Bluetooth: hci1: command tx timeout [ 93.429711][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.485879][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.510284][ T5840] team0: Port device team_slave_0 added [ 93.530459][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.537611][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.563922][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.590195][ T5829] team0: Port device team_slave_0 added [ 93.598136][ T5840] team0: Port device team_slave_1 added [ 93.604919][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.611865][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.639052][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.651678][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.658778][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.684730][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.696600][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.703675][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.730402][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.743201][ T5829] team0: Port device team_slave_1 added [ 93.831805][ T5842] hsr_slave_0: entered promiscuous mode [ 93.839097][ T5842] hsr_slave_1: entered promiscuous mode [ 93.887384][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.894488][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.921078][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.964950][ T5834] hsr_slave_0: entered promiscuous mode [ 93.971341][ T5834] hsr_slave_1: entered promiscuous mode [ 93.977727][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 93.983539][ T5834] Cannot create hsr debugfs directory [ 93.990099][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.997279][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.023398][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.035790][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.042740][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.068921][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.105572][ T5837] hsr_slave_0: entered promiscuous mode [ 94.112002][ T5837] hsr_slave_1: entered promiscuous mode [ 94.118390][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 94.124192][ T5837] Cannot create hsr debugfs directory [ 94.130558][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.137739][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.163808][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.375508][ T5840] hsr_slave_0: entered promiscuous mode [ 94.382379][ T5840] hsr_slave_1: entered promiscuous mode [ 94.389666][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.395539][ T5840] Cannot create hsr debugfs directory [ 94.417386][ T5829] hsr_slave_0: entered promiscuous mode [ 94.423890][ T5829] hsr_slave_1: entered promiscuous mode [ 94.430193][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 94.436041][ T5829] Cannot create hsr debugfs directory [ 94.847265][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.860470][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.884569][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.910889][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.978549][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.996481][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.009860][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.021241][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.116656][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.148172][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.160294][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.173957][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.240559][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.259593][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.271295][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.306750][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.396138][ T5839] Bluetooth: hci0: command tx timeout [ 95.409361][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.438859][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.451149][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.470539][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.478471][ T5839] Bluetooth: hci1: command tx timeout [ 95.478508][ T5832] Bluetooth: hci3: command tx timeout [ 95.484950][ T5839] Bluetooth: hci4: command tx timeout [ 95.490116][ T5845] Bluetooth: hci2: command tx timeout [ 95.504680][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.552582][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.600230][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.631711][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.656771][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.668795][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.676230][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.686684][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.694019][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.735052][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.742168][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.751782][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.758927][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.800889][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.841306][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.848542][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.891230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.898419][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.935067][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.003009][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.046973][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.108658][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.115892][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.167932][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.175253][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.199312][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.256511][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.263847][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.278398][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.285603][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.458787][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.541877][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.697004][ T5842] veth0_vlan: entered promiscuous mode [ 96.785087][ T5842] veth1_vlan: entered promiscuous mode [ 96.857584][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.887159][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.996086][ T5842] veth0_macvtap: entered promiscuous mode [ 97.035451][ T5842] veth1_macvtap: entered promiscuous mode [ 97.062020][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.096572][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.111307][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.139472][ T5840] veth0_vlan: entered promiscuous mode [ 97.162792][ T5834] veth0_vlan: entered promiscuous mode [ 97.171697][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.181396][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.203564][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.216742][ T5840] veth1_vlan: entered promiscuous mode [ 97.231570][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.253485][ T5834] veth1_vlan: entered promiscuous mode [ 97.347425][ T5840] veth0_macvtap: entered promiscuous mode [ 97.363019][ T5840] veth1_macvtap: entered promiscuous mode [ 97.375333][ T5837] veth0_vlan: entered promiscuous mode [ 97.419671][ T5829] veth0_vlan: entered promiscuous mode [ 97.429859][ T5837] veth1_vlan: entered promiscuous mode [ 97.446370][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.460786][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.466530][ T5829] veth1_vlan: entered promiscuous mode [ 97.475193][ T5845] Bluetooth: hci0: command tx timeout [ 97.517517][ T5834] veth0_macvtap: entered promiscuous mode [ 97.541564][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.551097][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.557282][ T5834] veth1_macvtap: entered promiscuous mode [ 97.560349][ T5845] Bluetooth: hci2: command tx timeout [ 97.566697][ T5839] Bluetooth: hci3: command tx timeout [ 97.569795][ T5836] Bluetooth: hci4: command tx timeout [ 97.581010][ T5832] Bluetooth: hci1: command tx timeout [ 97.604874][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.615900][ T5837] veth0_macvtap: entered promiscuous mode [ 97.642091][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.662683][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.666810][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.673296][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.707883][ T5837] veth1_macvtap: entered promiscuous mode [ 97.725086][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.736259][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.806297][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.820436][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.834881][ T5829] veth0_macvtap: entered promiscuous mode [ 97.862534][ T5829] veth1_macvtap: entered promiscuous mode [ 97.884640][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.906144][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.981857][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.991578][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.000142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.000913][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045449][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.057886][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.096565][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.124650][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.160883][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.172111][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206347][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.217765][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.230563][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.239205][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.261334][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.281418][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.322009][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.338405][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.485553][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.512241][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.554978][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.562845][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.581182][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.622496][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.730817][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.749813][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.798426][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.814432][ T5974] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.859494][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.916281][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.967378][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.005603][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.136150][ T5982] Zero length message leads to an empty skb [ 99.152295][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 99.179697][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.302220][ T5986] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 99.429171][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.461180][ T5997] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 99.554664][ T5832] Bluetooth: hci0: command tx timeout [ 99.635968][ T5832] Bluetooth: hci1: command tx timeout [ 99.641679][ T5845] Bluetooth: hci3: command tx timeout [ 99.648260][ T5836] Bluetooth: hci2: command tx timeout [ 99.648272][ T5839] Bluetooth: hci4: command tx timeout [ 99.665142][ T6005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 99.690092][ T6003] geneve2: entered promiscuous mode [ 100.004059][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.082891][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 100.326364][ T6030] x_tables: duplicate entry at hook 1 [ 100.376385][ T6026] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22'. [ 100.527309][ T6040] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 101.006309][ T6057] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 101.257597][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.274512][ T6050] tipc: Started in network mode [ 101.293777][ T6050] tipc: Node identity e22054d170f9, cluster identity 4711 [ 101.301204][ T6050] tipc: Enabled bearer , priority 0 [ 101.370160][ T6057] syzkaller0: entered promiscuous mode [ 101.405509][ T6057] syzkaller0: entered allmulticast mode [ 101.444040][ T6068] tipc: Resetting bearer [ 101.492908][ T6074] team0: Device geneve2 is up. Set it down before adding it as a team port [ 101.833006][ T6084] syzkaller0: entered promiscuous mode [ 101.841234][ T6084] syzkaller0: entered allmulticast mode [ 101.855752][ T6049] tipc: Resetting bearer [ 101.878778][ T6049] tipc: Disabling bearer [ 101.909046][ T6094] netlink: 'syz.2.36': attribute type 4 has an invalid length. [ 101.919232][ T6094] netlink: 240 bytes leftover after parsing attributes in process `syz.2.36'. [ 102.272014][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 102.942124][ T6098] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.956405][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.549801][ T6114] IPVS: Unknown mcast interface: nicvf0 [ 104.576917][ T6168] __nla_validate_parse: 1 callbacks suppressed [ 104.576936][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 104.707971][ T6173] netlink: 72 bytes leftover after parsing attributes in process `syz.1.57'. [ 105.035267][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 105.054775][ T6190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.59'. [ 105.338108][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 105.487029][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 105.547378][ T6210] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 105.558753][ T6210] netlink: 'syz.4.67': attribute type 4 has an invalid length. [ 105.567326][ T6210] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.67'. [ 105.678726][ T6217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.942321][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 106.444094][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 106.553795][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 106.716028][ T6265] vlan2: entered promiscuous mode [ 106.721214][ T6265] bond0: entered promiscuous mode [ 106.735483][ T6265] bond_slave_0: entered promiscuous mode [ 106.741428][ T6265] bond_slave_1: entered promiscuous mode [ 106.878172][ T6274] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 107.497897][ T6301] syzkaller0: entered promiscuous mode [ 107.526357][ T6301] syzkaller0: entered allmulticast mode [ 107.835160][ T6334] hsr_slave_0: left promiscuous mode [ 107.860985][ T6334] hsr_slave_1: left promiscuous mode [ 108.029098][ T6337] netlink: 'syz.3.100': attribute type 5 has an invalid length. [ 108.331545][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.615961][ T6361] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 108.680944][ T6375] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.814450][ T6379] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 108.825644][ T6383] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 109.746332][ T6438] __nla_validate_parse: 11 callbacks suppressed [ 109.746355][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 109.820871][ T6438] bond1: option xmit_hash_policy: invalid value (64) [ 109.846722][ T6438] bond1 (unregistering): Released all slaves [ 109.884037][ T6441] warning: `syz.1.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.898977][ T6443] syzkaller0: entered promiscuous mode [ 109.908902][ T6443] syzkaller0: entered allmulticast mode [ 109.961363][ T6452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.101034][ T6455] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 110.474636][ T6473] RDS: rds_bind could not find a transport for fe80::10, load rds_tcp or rds_rdma? [ 110.618933][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.645657][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.662058][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 110.684283][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.736110][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 110.756338][ T6491] netlink: 'syz.4.141': attribute type 21 has an invalid length. [ 110.788486][ T6481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.815800][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 110.826113][ T6495] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 110.838071][ T6495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.141'. [ 110.847513][ T6491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.141'. [ 111.737739][ T6527] netlink: 80 bytes leftover after parsing attributes in process `syz.0.149'. [ 111.973025][ T6540] tipc: Started in network mode [ 111.988734][ T6540] tipc: Node identity e0000001, cluster identity 4711 [ 111.995814][ T6540] tipc: Enabling of bearer rejected, failed to enable media [ 112.043884][ T6543] netlink: 'syz.4.154': attribute type 9 has an invalid length. [ 112.699738][ T6579] syzkaller0: entered promiscuous mode [ 112.713767][ T6579] syzkaller0: entered allmulticast mode [ 113.545181][ T6614] 0: reclassify loop, rule prio 0, protocol 800 [ 113.635472][ T6629] netlink: 'syz.1.180': attribute type 13 has an invalid length. [ 114.091206][ T6654] ip6gre1: entered promiscuous mode [ 114.098093][ T6654] ip6gre1: entered allmulticast mode [ 114.226041][ T6656] IPVS: ip_vs_add_dest(): server weight less than zero [ 114.243833][ T43] IPVS: starting estimator thread 0... [ 114.368984][ T6660] IPVS: using max 36 ests per chain, 86400 per kthread [ 114.506184][ T6672] 8021q: VLANs not supported on ip_vti0 [ 114.828589][ T6696] __nla_validate_parse: 10 callbacks suppressed [ 114.828616][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 114.872970][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 114.980403][ T6704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.228029][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 115.281097][ T6707] syz.1.202 (6707) used greatest stack depth: 16056 bytes left [ 115.300946][ T6722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.205'. [ 115.301600][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 115.358250][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 115.371237][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 115.485686][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'. [ 115.837890][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 115.880251][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 116.153757][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 116.190074][ T6752] pim6reg1: entered promiscuous mode [ 116.190929][ T6750] netlink: 'syz.3.212': attribute type 7 has an invalid length. [ 116.204149][ T6752] pim6reg1: entered allmulticast mode [ 116.253890][ T6750] netlink: 'syz.3.212': attribute type 8 has an invalid length. [ 116.266681][ T6719] infiniband syz2: set active [ 116.271673][ T6719] infiniband syz2: added vxcan1 [ 116.277257][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 116.289563][ T6719] syz2: rxe_create_cq: returned err = -12 [ 116.303894][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 116.311218][ T6719] infiniband syz2: Couldn't create ib_mad CQ [ 116.323854][ T6719] infiniband syz2: Couldn't open port 1 [ 116.342512][ T6750] ip6gretap0: entered promiscuous mode [ 116.367293][ T6750] syz_tun: entered promiscuous mode [ 116.373491][ T6750] gretap0: entered promiscuous mode [ 116.394604][ T6719] RDS/IB: syz2: added [ 116.402499][ T6719] smc: adding ib device syz2 with port count 1 [ 116.427505][ T6719] smc: ib device syz2 port 1 has no pnetid [ 116.435546][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 116.446486][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 116.688872][ T6768] IPv6: sit1: Disabled Multicast RS [ 116.740460][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 116.760854][ T6775] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 116.982884][ T10] IPVS: starting estimator thread 0... [ 116.994096][ T6784] IPVS: ip_vs_edit_dest(): server weight less than zero [ 117.082782][ T6786] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 117.093785][ T6787] IPVS: using max 28 ests per chain, 67200 per kthread [ 117.124668][ T6786] netlink: 'syz.4.226': attribute type 3 has an invalid length. [ 117.201205][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 117.210164][ T6789] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 117.311669][ T6795] veth0: entered promiscuous mode [ 117.424443][ T6791] veth0: left promiscuous mode [ 117.610188][ T6812] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 117.640921][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.844614][ T6807] bridge_slave_1 (unregistering): left allmulticast mode [ 117.875196][ T6807] bridge_slave_1 (unregistering): left promiscuous mode [ 117.902414][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.028307][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 118.128079][ T6823] syzkaller1: entered promiscuous mode [ 118.163665][ T6823] syzkaller1: entered allmulticast mode [ 118.377284][ T6832] wg0: entered allmulticast mode [ 118.484151][ T6832] netlink: 'syz.1.239': attribute type 13 has an invalid length. [ 118.493882][ T6832] netlink: 'syz.1.239': attribute type 17 has an invalid length. [ 118.593828][ T5832] Bluetooth: hci4: command tx timeout [ 118.605429][ T6832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.715332][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 119.389729][ T6872] sctp: [Deprecated]: syz.3.252 (pid 6872) Use of int in maxseg socket option. [ 119.389729][ T6872] Use struct sctp_assoc_value instead [ 119.428981][ T6719] vxcan1 speed is unknown, defaulting to 1000 [ 119.687112][ T6883] sctp: [Deprecated]: syz.4.256 (pid 6883) Use of int in maxseg socket option. [ 119.687112][ T6883] Use struct sctp_assoc_value instead [ 119.745873][ T6882] sctp: [Deprecated]: syz.4.256 (pid 6882) Use of int in maxseg socket option. [ 119.745873][ T6882] Use struct sctp_assoc_value instead [ 120.086885][ T6910] __nla_validate_parse: 8 callbacks suppressed [ 120.086905][ T6910] netlink: 212 bytes leftover after parsing attributes in process `syz.1.262'. [ 120.441811][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 120.447516][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 120.544934][ T6944] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 120.582217][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.609678][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 120.722776][ T6952] openvswitch: netlink: Message has 592 unknown bytes. [ 120.733206][ T6952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.895994][ T6963] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 121.026950][ T6963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.055310][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.065985][ T6970] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.079597][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 121.090257][ T6970] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 121.092901][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 121.147589][ T6973] veth3: entered promiscuous mode [ 121.160404][ T6973] bond1: (slave veth3): Enslaving as an active interface with a down link [ 121.172389][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 121.184608][ T6963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.335871][ T6984] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 121.358211][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 121.587090][ T6996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.288'. [ 121.602311][ T6996] netlink: 'syz.2.288': attribute type 17 has an invalid length. [ 121.624879][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 121.932204][ T7018] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 122.278854][ T7042] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 122.298252][ T7042] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 122.325784][ T7045] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 122.373488][ T7045] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 122.548817][ T7056] syzkaller0: entered promiscuous mode [ 122.573717][ T7056] syzkaller0: entered allmulticast mode [ 122.868886][ T7076] bond1: entered promiscuous mode [ 122.923636][ T7076] bond1: entered allmulticast mode [ 122.960395][ T7076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.974841][ T7087] xt_hashlimit: size too large, truncated to 1048576 [ 123.177474][ T7097] syzkaller1: entered promiscuous mode [ 123.192095][ T7097] syzkaller1: entered allmulticast mode [ 123.703672][ T7121] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.726348][ T7121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.733895][ T7121] IPv6: NLM_F_CREATE should be set when creating new route [ 124.175554][ T7145] netlink: 'syz.3.336': attribute type 32 has an invalid length. [ 124.180880][ T7140] team0: Device gtp0 is of different type [ 124.252552][ T7145] bond1: option coupled_control: invalid value (27) [ 124.262664][ T7145] bond1 (unregistering): Released all slaves [ 124.542834][ T7158] tipc: Enabling of bearer rejected, failed to enable media [ 125.115538][ T7194] __nla_validate_parse: 7 callbacks suppressed [ 125.115558][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 125.139748][ T7197] netlink: 'syz.2.351': attribute type 13 has an invalid length. [ 125.147248][ T7194] bridge_slave_1: left allmulticast mode [ 125.153262][ T7194] bridge_slave_1: left promiscuous mode [ 125.159937][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.172008][ T7194] bridge_slave_0: left allmulticast mode [ 125.180476][ T7194] bridge_slave_0: left promiscuous mode [ 125.187271][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.307983][ T7204] trusted_key: syz.3.353 sent an empty control message without MSG_MORE. [ 125.695885][ T7224] netlink: 68 bytes leftover after parsing attributes in process `syz.2.359'. [ 125.785465][ T7227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.809410][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.858744][ T7225] delete_channel: no stack [ 125.859407][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 126.295649][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 126.419045][ T7250] ipt_REJECT: TCP_RESET invalid for non-tcp [ 126.451592][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 126.652639][ T7270] sctp: [Deprecated]: syz.4.375 (pid 7270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.652639][ T7270] Use struct sctp_sack_info instead [ 126.973080][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 127.468042][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 127.488743][ T7327] netlink: 'syz.2.392': attribute type 21 has an invalid length. [ 127.511319][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'. [ 127.577666][ T7330] netlink: 'syz.1.393': attribute type 18 has an invalid length. [ 127.685270][ T3480] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.724221][ T65] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.724640][ T7338] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 127.753125][ T65] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.863698][ T65] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.903310][ T7338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.336510][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.397721][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.661419][ T7394] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 128.680616][ T7396] tipc: MTU too low for tipc bearer [ 128.687132][ T7394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.858426][ T7399] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 128.883438][ T7404] macvtap1: entered promiscuous mode [ 128.889497][ T7404] vlan0: entered promiscuous mode [ 128.895820][ T7404] macvtap1: entered allmulticast mode [ 128.901237][ T7404] vlan0: entered allmulticast mode [ 128.906665][ T7404] veth0_vlan: entered allmulticast mode [ 128.917479][ T7399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.001607][ T7404] macvtap2: entered promiscuous mode [ 129.054108][ T7404] macvtap2: entered allmulticast mode [ 129.148604][ T7420] xt_CT: No such helper "snmp_trap" [ 129.519286][ T7438] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 129.782811][ T7457] netlink: 'syz.2.429': attribute type 62 has an invalid length. [ 130.132884][ T7478] __nla_validate_parse: 14 callbacks suppressed [ 130.132905][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 130.133369][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 131.449507][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.473989][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.496441][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.536165][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.593917][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.611660][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.621662][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.631708][ T7498] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 131.812202][ T7519] netlink: 'syz.0.443': attribute type 11 has an invalid length. [ 131.820124][ T7519] netlink: 224 bytes leftover after parsing attributes in process `syz.0.443'. [ 132.230812][ T7505] netlink: 'syz.0.443': attribute type 4 has an invalid length. [ 132.530770][ T7530] netlink: 57 bytes leftover after parsing attributes in process `syz.4.449'. [ 132.586108][ T7530] netlink: 57 bytes leftover after parsing attributes in process `syz.4.449'. [ 132.663126][ T7542] 8021q: VLANs not supported on ip6tnl0 [ 132.670248][ T7540] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 132.757548][ T7540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.775886][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 132.839497][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 132.876379][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 132.891377][ T7554] tipc: Enabled bearer , priority 0 [ 132.900002][ T7554] syzkaller0: entered promiscuous mode [ 132.923683][ T7554] syzkaller0: entered allmulticast mode [ 132.956416][ T7555] bond1: (slave dummy0): making interface the new active one [ 132.982591][ T7555] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 133.009734][ T7553] tipc: Resetting bearer [ 133.020818][ T7560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.460'. [ 133.033380][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 133.078587][ T7553] tipc: Disabling bearer [ 133.480760][ T7540] bond1 (unregistering): (slave dummy0): Releasing active interface [ 133.490006][ T7540] bond1 (unregistering): Released all slaves [ 133.866666][ T7599] syzkaller0: entered promiscuous mode [ 133.883309][ T7599] syzkaller0: entered allmulticast mode [ 133.909421][ T7599] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 134.086769][ T7617] 8021q: VLANs not supported on ip6tnl0 [ 134.716005][ T7645] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 134.750181][ T7645] netlink: 'syz.2.481': attribute type 5 has an invalid length. [ 135.160753][ T7670] __nla_validate_parse: 9 callbacks suppressed [ 135.160773][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 135.679183][ T7690] netlink: 'syz.1.494': attribute type 5 has an invalid length. [ 135.900917][ T7712] nbd: must specify an index to disconnect [ 135.955741][ T7723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.499'. [ 135.973305][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.500'. [ 136.053872][ T7733] net_ratelimit: 5096 callbacks suppressed [ 136.053893][ T7733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.110617][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.128329][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.278124][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 136.281322][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.285022][ T10] syz2: Port: 1 Link DOWN [ 136.333716][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.364333][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 136.490916][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.521305][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.556459][ T7747] netlink: 'syz.3.503': attribute type 13 has an invalid length. [ 136.578025][ T7747] netlink: 'syz.3.503': attribute type 17 has an invalid length. [ 136.660349][ T7747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.678375][ T7744] tipc: Started in network mode [ 136.683319][ T7744] tipc: Node identity 3299b9a527a6, cluster identity 4711 [ 136.699373][ T7744] tipc: Enabled bearer , priority 0 [ 136.720296][ T7754] team0: Device wireguard0 is of different type [ 136.750571][ T7744] syzkaller0: entered promiscuous mode [ 136.760952][ T7744] syzkaller0: entered allmulticast mode [ 136.772711][ T7752] vxcan1 speed is unknown, defaulting to 1000 [ 136.777569][ T7744] tipc: Enabling of bearer rejected, already enabled [ 136.791854][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 136.831947][ T7743] tipc: Resetting bearer [ 136.879059][ T7743] tipc: Disabling bearer [ 136.986963][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 137.014591][ T7767] netlink: 184 bytes leftover after parsing attributes in process `syz.1.509'. [ 137.428158][ T7786] netlink: 76 bytes leftover after parsing attributes in process `syz.4.515'. [ 137.518418][ T7787] netlink: 76 bytes leftover after parsing attributes in process `syz.4.515'. [ 137.746423][ T7797] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 137.862896][ T7800] block nbd0: server does not support multiple connections per device. [ 137.898235][ T7800] block nbd0: shutting down sockets [ 138.041282][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.054140][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.085155][ T7808] bond0: entered allmulticast mode [ 138.102126][ T7808] bond_slave_0: entered allmulticast mode [ 138.123913][ T7808] bond_slave_1: entered allmulticast mode [ 138.134696][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 138.160636][ T7814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 138.213416][ T7811] Illegal XDP return value 4294967289 on prog (id 176) dev N/A, expect packet loss! [ 199.476660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.483034][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.669593][ T7860] netlink: 'syz.4.542': attribute type 11 has an invalid length. [ 204.689981][ T7860] netlink: 'syz.4.542': attribute type 11 has an invalid length. [ 204.710111][ T7860] __nla_validate_parse: 4 callbacks suppressed [ 204.710141][ T7860] netlink: 224 bytes leftover after parsing attributes in process `syz.4.542'. [ 204.821418][ T7870] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.859843][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 204.999960][ T7884] syzkaller0: entered promiscuous mode [ 205.006725][ T7884] syzkaller0: entered allmulticast mode [ 205.159660][ T7888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.547'. [ 205.327573][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 205.358927][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 205.431878][ T7908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.552'. [ 205.705668][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.555'. [ 205.711719][ T7921] x_tables: duplicate underflow at hook 1 [ 205.748533][ T7918] unsupported nlmsg_type 40 [ 205.798886][ T7929] netlink: 27 bytes leftover after parsing attributes in process `syz.4.556'. [ 205.811086][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 205.820899][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 205.966129][ T7935] netlink: 'syz.0.559': attribute type 20 has an invalid length. [ 205.986815][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.996100][ T7935] netlink: 'syz.0.559': attribute type 20 has an invalid length. [ 206.014237][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.061861][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.103437][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.251983][ T7950] tipc: Enabled bearer , priority 10 [ 206.525868][ T7963] tipc: New replicast peer: 255.255.255.255 [ 206.533229][ T7963] tipc: Enabled bearer , priority 10 [ 206.540392][ T7964] tipc: Enabling of bearer rejected, already enabled [ 206.862857][ T7992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.928122][ T7988] vxcan1 speed is unknown, defaulting to 1000 [ 207.145483][ T8002] openvswitch: netlink: ct_state flags d54739e0 unsupported [ 207.687649][ T7741] tipc: Node number set to 3758096385 [ 207.899447][ T8024] tipc: Enabled bearer , priority 0 [ 207.960877][ T8023] tipc: Disabling bearer [ 208.175924][ T8041] Bluetooth: MGMT ver 1.23 [ 208.246502][ T8045] sctp: [Deprecated]: syz.1.595 (pid 8045) Use of int in max_burst socket option deprecated. [ 208.246502][ T8045] Use struct sctp_assoc_value instead [ 208.497782][ T8058] netlink: 'syz.2.599': attribute type 3 has an invalid length. [ 208.526672][ T8058] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 208.678052][ T8061] syzkaller0: entered promiscuous mode [ 208.687199][ T8061] syzkaller0: entered allmulticast mode [ 208.843711][ T8061] vxcan1 speed is unknown, defaulting to 1000 [ 208.896400][ T8081] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.950910][ T8083] netlink: 'syz.4.607': attribute type 12 has an invalid length. [ 209.304195][ T8100] tipc: Started in network mode [ 209.330172][ T8100] tipc: Node identity 7e97bbb510fc, cluster identity 4711 [ 209.350628][ T8100] tipc: Enabled bearer , priority 0 [ 209.483375][ T8100] syzkaller0: entered promiscuous mode [ 209.492308][ T8100] syzkaller0: entered allmulticast mode [ 209.638508][ T8107] tipc: Resetting bearer [ 209.663061][ T8099] tipc: Resetting bearer [ 209.675615][ T8099] tipc: Disabling bearer [ 210.016938][ T8125] netlink: 'syz.0.619': attribute type 11 has an invalid length. [ 210.062960][ T8125] netlink: 'syz.0.619': attribute type 11 has an invalid length. [ 210.089220][ T8125] __nla_validate_parse: 14 callbacks suppressed [ 210.089239][ T8125] netlink: 224 bytes leftover after parsing attributes in process `syz.0.619'. [ 210.466801][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 210.621833][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 210.634886][ T8147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'. [ 210.948467][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.626'. [ 211.184200][ T8172] syzkaller0: entered promiscuous mode [ 211.193045][ T8172] syzkaller0: entered allmulticast mode [ 211.434109][ T8189] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.632'. [ 211.796957][ T8206] ip6gre1: entered promiscuous mode [ 211.802315][ T8206] ip6gre1: entered allmulticast mode [ 212.854723][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 213.020165][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 213.089302][ T8290] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 213.104142][ T8291] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 213.186433][ T8291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.189602][ T8296] xt_socket: unknown flags 0x50 [ 213.202823][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 213.222796][ T8297] IPv6: sit2: Disabled Multicast RS [ 213.259905][ T8297] sit2: entered allmulticast mode [ 213.369336][ T8291] veth3: entered promiscuous mode [ 213.400706][ T8291] bond5: (slave veth3): Enslaving as an active interface with a down link [ 213.532554][ T8296] veth5: entered promiscuous mode [ 213.556708][ T8296] bond5: (slave veth5): Enslaving as an active interface with a down link [ 213.573470][ T8309] bond5: entered allmulticast mode [ 214.299619][ T8348] vxcan1 speed is unknown, defaulting to 1000 [ 214.518601][ T8359] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.553985][ T8359] xt_SECMARK: invalid mode: 9 [ 214.687724][ T8368] netlink: 'syz.1.676': attribute type 30 has an invalid length. [ 214.711580][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'. [ 214.738827][ T8369] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 214.878332][ T8368] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 214.924735][ T8368] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 215.164860][ T8387] __nla_validate_parse: 1 callbacks suppressed [ 215.164878][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 215.195055][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.215623][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.291867][ T8403] netlink: 'syz.4.683': attribute type 16 has an invalid length. [ 215.305375][ T8403] netlink: 'syz.4.683': attribute type 17 has an invalid length. [ 215.434041][ T8403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.861806][ T8435] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 215.868163][ T8433] syzkaller0: entered promiscuous mode [ 215.878740][ T8435] netlink: 'syz.1.695': attribute type 2 has an invalid length. [ 215.893694][ T8433] syzkaller0: entered allmulticast mode [ 215.992367][ T8433] tipc: Started in network mode [ 215.998143][ T8433] tipc: Node identity aa8efe827cd7, cluster identity 4711 [ 216.013001][ T8433] tipc: Enabled bearer , priority 0 [ 216.127744][ T8448] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 216.185575][ T8432] tipc: Resetting bearer [ 216.196753][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 216.232736][ T8432] tipc: Disabling bearer [ 216.239974][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 216.239974][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 216.321315][ T8448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.341039][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 216.344297][ T8450] bond2: (slave geneve2): making interface the new active one [ 216.360196][ T8450] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 216.401144][ T8445] bond4: option xmit_hash_policy: invalid value (64) [ 216.411705][ T8445] bond4 (unregistering): Released all slaves [ 216.437189][ T8456] Bluetooth: MGMT ver 1.23 [ 216.572751][ T8459] netlink: 'syz.3.702': attribute type 27 has an invalid length. [ 216.581218][ T8459] netlink: 'syz.3.702': attribute type 4 has an invalid length. [ 216.590937][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.702'. [ 216.607742][ T8459] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.702'. [ 216.618630][ T8461] netlink: 188 bytes leftover after parsing attributes in process `syz.2.703'. [ 216.776659][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 216.924676][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 216.929911][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 216.930814][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 216.937074][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 217.315648][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.613471][ T8511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.732548][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 217.821209][ T8538] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 217.844296][ T8537] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 217.858465][ T8538] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 217.887297][ T8537] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 218.271114][ T8561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.483845][ T8573] syzkaller0: entered promiscuous mode [ 218.489372][ T8573] syzkaller0: entered allmulticast mode [ 218.712945][ T8587] validate_nla: 3 callbacks suppressed [ 218.713056][ T8587] netlink: 'syz.3.737': attribute type 10 has an invalid length. [ 218.798468][ T30] audit: type=1800 audit(1763401575.788:2): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.738" name="memory.events" dev="tmpfs" ino=882 res=0 errno=0 [ 218.915063][ T8598] erspan1: entered allmulticast mode [ 220.430201][ T8675] __nla_validate_parse: 14 callbacks suppressed [ 220.430221][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.762'. [ 220.462847][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.762'. [ 220.498915][ T8677] tipc: Enabled bearer , priority 0 [ 220.532673][ T8677] syzkaller0: entered promiscuous mode [ 220.573787][ T8677] syzkaller0: entered allmulticast mode [ 220.655021][ T8677] tipc: Resetting bearer [ 220.672319][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.768'. [ 220.678496][ T8677] tipc: Disabling bearer [ 220.705417][ T8674] tipc: Resetting bearer [ 220.755299][ T8696] netlink: 332 bytes leftover after parsing attributes in process `syz.4.768'. [ 220.839096][ T8702] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 220.858601][ T8674] tipc: Disabling bearer [ 221.072837][ T8711] netlink: 'syz.1.772': attribute type 11 has an invalid length. [ 221.083379][ T8711] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 221.143490][ T8712] netlink: 'syz.4.773': attribute type 5 has an invalid length. [ 221.246758][ T8715] bond4: (slave bridge2): making interface the new active one [ 221.294697][ T8715] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 221.524597][ T8738] netlink: 'syz.2.780': attribute type 39 has an invalid length. [ 221.673779][ T8749] netlink: 'syz.0.783': attribute type 5 has an invalid length. [ 221.855446][ T8755] tipc: Enabled bearer , priority 0 [ 221.961894][ T8755] tipc: Disabling bearer [ 222.298111][ T8787] xt_l2tp: v2 tid > 0xffff: 1114244 [ 222.378973][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 222.388259][ T8796] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.465620][ T8798] netlink: 'syz.3.793': attribute type 4 has an invalid length. [ 222.473908][ T8799] netlink: 'syz.3.793': attribute type 4 has an invalid length. [ 222.855692][ T8821] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 223.002979][ T8824] wg1: entered promiscuous mode [ 223.027204][ T8824] wg1: entered allmulticast mode [ 223.339916][ T8855] Cannot find add_set index 1 as target [ 223.926101][ T8878] tipc: Enabled bearer , priority 0 [ 223.958165][ T8878] syzkaller0: entered promiscuous mode [ 223.981177][ T8878] syzkaller0: entered allmulticast mode [ 224.004799][ T8878] tipc: Resetting bearer [ 224.021089][ T8877] tipc: Resetting bearer [ 224.059777][ T8847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.083883][ T8847] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 224.092817][ T8877] tipc: Disabling bearer [ 224.121348][ T8847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.136415][ T8847] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.230743][ T8847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.279539][ T8847] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.322517][ T8847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.345885][ T8847] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.387219][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 224.420399][ T8847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.450000][ T8847] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 225.651104][ T8966] netlink: 'syz.4.832': attribute type 3 has an invalid length. [ 225.834265][ T8980] netlink: 44 bytes leftover after parsing attributes in process `syz.1.831'. [ 225.843874][ T8980] netlink: 35 bytes leftover after parsing attributes in process `syz.1.831'. [ 225.852769][ T8980] netlink: 'syz.1.831': attribute type 5 has an invalid length. [ 225.874333][ T8980] netlink: 'syz.1.831': attribute type 6 has an invalid length. [ 225.887303][ T8980] netlink: 35 bytes leftover after parsing attributes in process `syz.1.831'. [ 225.904783][ T8987] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.523443][ T9017] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.839'. [ 226.602679][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 260.916598][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.922936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.358343][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.364857][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.633862][ T31] INFO: task kworker/1:11:7720 blocked for more than 143 seconds. [ 371.641809][ T31] Not tainted syzkaller #0 [ 371.646822][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.655615][ T31] task:kworker/1:11 state:D stack:22728 pid:7720 tgid:7720 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 371.667850][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 371.674686][ T31] Call Trace: [ 371.677981][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.680918][ T31] __schedule+0x1798/0x4cc0 [ 371.685525][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.690943][ T31] ? __pfx___schedule+0x10/0x10 [ 371.698416][ T31] ? schedule+0x91/0x360 [ 371.702833][ T31] schedule+0x165/0x360 [ 371.707558][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.713061][ T31] __mutex_lock+0x7e6/0x1350 [ 371.753621][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.758474][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 371.779198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.784691][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 371.790457][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 371.796730][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 371.802846][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 371.809197][ T31] process_scheduled_works+0xae1/0x17b0 [ 371.815194][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.821235][ T31] worker_thread+0x8a0/0xda0 [ 371.826013][ T31] kthread+0x711/0x8a0 [ 371.830125][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.835392][ T31] ? __pfx_kthread+0x10/0x10 [ 371.840108][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.845384][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.850611][ T31] ? __pfx_kthread+0x10/0x10 [ 371.855342][ T31] ret_from_fork+0x4bc/0x870 [ 371.859977][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.865257][ T31] ? __switch_to_asm+0x39/0x70 [ 371.870063][ T31] ? __switch_to_asm+0x33/0x70 [ 371.875269][ T31] ? __pfx_kthread+0x10/0x10 [ 371.879902][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.884834][ T31] [ 371.887891][ T31] INFO: task syz.3.803:8827 blocked for more than 143 seconds. [ 371.895544][ T31] Not tainted syzkaller #0 [ 371.900495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.909240][ T31] task:syz.3.803 state:D stack:25960 pid:8827 tgid:8827 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 371.921350][ T31] Call Trace: [ 371.924713][ T31] [ 371.927679][ T31] __schedule+0x1798/0x4cc0 [ 371.932268][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.937186][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.942060][ T31] ? __pfx___schedule+0x10/0x10 [ 371.947056][ T31] ? schedule+0x91/0x360 [ 371.951332][ T31] schedule+0x165/0x360 [ 371.955755][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.961245][ T31] __mutex_lock+0x7e6/0x1350 [ 371.965906][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.970707][ T31] ? rfkill_unregister+0xc8/0x220 [ 371.975799][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.981063][ T31] ? __pfx_device_del+0x10/0x10 [ 371.986040][ T31] rfkill_unregister+0xc8/0x220 [ 371.990933][ T31] nfc_unregister_device+0x96/0x2a0 [ 371.996225][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 372.001984][ T31] virtual_ncidev_close+0x56/0x90 [ 372.007089][ T31] __fput+0x44c/0xa70 [ 372.011101][ T31] task_work_run+0x1d4/0x260 [ 372.015757][ T31] ? __pfx_task_work_run+0x10/0x10 [ 372.020902][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 372.026485][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 372.031793][ T31] do_syscall_64+0x2bd/0xfa0 [ 372.036604][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.042706][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.048964][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.053729][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.059668][ T31] RIP: 0033:0x7f687fd8f6c9 [ 372.064207][ T31] RSP: 002b:00007ffd0648c148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 372.072651][ T31] RAX: 0000000000000000 RBX: 00007f687ffe7da0 RCX: 00007f687fd8f6c9 [ 372.080739][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 372.088781][ T31] RBP: 00007f687ffe7da0 R08: 00000000000001dc R09: 000000190648c43f [ 372.096896][ T31] R10: 00007f687ffe7cb0 R11: 0000000000000246 R12: 0000000000036a3f [ 372.105110][ T31] R13: 00007f687ffe6090 R14: ffffffffffffffff R15: 00007ffd0648c260 [ 372.113126][ T31] [ 372.116346][ T31] INFO: task syz.2.806:8847 blocked for more than 143 seconds. [ 372.124448][ T31] Not tainted syzkaller #0 [ 372.129423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.138277][ T31] task:syz.2.806 state:D stack:23624 pid:8847 tgid:8844 ppid:5842 task_flags:0x400140 flags:0x00080003 [ 372.150295][ T31] Call Trace: [ 372.153683][ T31] [ 372.156634][ T31] __schedule+0x1798/0x4cc0 [ 372.161154][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.166095][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.170978][ T31] ? __pfx___schedule+0x10/0x10 [ 372.175917][ T31] ? schedule+0x91/0x360 [ 372.180202][ T31] schedule+0x165/0x360 [ 372.184615][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.190278][ T31] __mutex_lock+0x7e6/0x1350 [ 372.195069][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.199890][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 372.205244][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.210302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.215581][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 372.221504][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.227909][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 372.233711][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 372.238838][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 372.244637][ T31] rfkill_set_block+0x1d2/0x440 [ 372.249528][ T31] rfkill_fop_write+0x44b/0x570 [ 372.254446][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 372.259839][ T31] ? security_kernfs_init_security+0x250/0x290 [ 372.266038][ T31] ? rw_verify_area+0x255/0x4d0 [ 372.270921][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.275905][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 372.281314][ T31] vfs_write+0x27e/0xb30 [ 372.285747][ T31] ? __pfx_vfs_write+0x10/0x10 [ 372.290554][ T31] ? __fget_files+0x2a/0x420 [ 372.295242][ T31] ? __fget_files+0x2a/0x420 [ 372.299857][ T31] ? __fget_files+0x3a0/0x420 [ 372.304585][ T31] ? __fget_files+0x2a/0x420 [ 372.309244][ T31] ksys_write+0x145/0x250 [ 372.313640][ T31] ? __pfx_ksys_write+0x10/0x10 [ 372.318529][ T31] ? do_syscall_64+0xbe/0xfa0 [ 372.323259][ T31] do_syscall_64+0xfa/0xfa0 [ 372.327817][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.333046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.339185][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.343936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.349925][ T31] RIP: 0033:0x7fbb59d8f6c9 [ 372.354494][ T31] RSP: 002b:00007fbb5ace1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.362952][ T31] RAX: ffffffffffffffda RBX: 00007fbb59fe5fa0 RCX: 00007fbb59d8f6c9 [ 372.371097][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 372.379136][ T31] RBP: 00007fbb59e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.387164][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.395197][ T31] R13: 00007fbb59fe6038 R14: 00007fbb59fe5fa0 R15: 00007ffd266714b8 [ 372.403187][ T31] [ 372.406296][ T31] INFO: task syz.0.835:8983 blocked for more than 144 seconds. [ 372.413908][ T31] Not tainted syzkaller #0 [ 372.418864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.431145][ T31] task:syz.0.835 state:D stack:26856 pid:8983 tgid:8981 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 372.443148][ T31] Call Trace: [ 372.446505][ T31] [ 372.449455][ T31] __schedule+0x1798/0x4cc0 [ 372.454048][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.458923][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.463856][ T31] ? __pfx___schedule+0x10/0x10 [ 372.468760][ T31] ? schedule+0x91/0x360 [ 372.473010][ T31] schedule+0x165/0x360 [ 372.477228][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.482722][ T31] __mutex_lock+0x7e6/0x1350 [ 372.487400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.492293][ T31] ? rfkill_register+0x37/0x8e0 [ 372.497217][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.502307][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 372.507757][ T31] ? device_initialize+0x24b/0x440 [ 372.512894][ T31] rfkill_register+0x37/0x8e0 [ 372.517676][ T31] nfc_register_device+0x14a/0x320 [ 372.522815][ T31] nci_register_device+0x87f/0x9d0 [ 372.528007][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 372.533695][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 372.539016][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 372.544475][ T31] virtual_ncidev_open+0x129/0x1a0 [ 372.549627][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 372.555338][ T31] misc_open+0x2d5/0x350 [ 372.559609][ T31] chrdev_open+0x4cc/0x5e0 [ 372.564118][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.569075][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.575471][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.580433][ T31] do_dentry_open+0x953/0x13f0 [ 372.585290][ T31] vfs_open+0x3b/0x340 [ 372.589385][ T31] ? path_openat+0x2ecd/0x3830 [ 372.594253][ T31] path_openat+0x2ee5/0x3830 [ 372.598899][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.603909][ T31] do_filp_open+0x1fa/0x410 [ 372.608439][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.613297][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.618404][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.623283][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.627667][ T31] do_sys_openat2+0x121/0x1c0 [ 372.632369][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.637628][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.642418][ T31] __x64_sys_openat+0x138/0x170 [ 372.647336][ T31] do_syscall_64+0xfa/0xfa0 [ 372.651866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.657106][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.663196][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.667949][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.674266][ T31] RIP: 0033:0x7ff461b8f6c9 [ 372.678715][ T31] RSP: 002b:00007ff4629f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.687224][ T31] RAX: ffffffffffffffda RBX: 00007ff461de5fa0 RCX: 00007ff461b8f6c9 [ 372.695248][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 372.703243][ T31] RBP: 00007ff461c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.711309][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.719321][ T31] R13: 00007ff461de6038 R14: 00007ff461de5fa0 R15: 00007fffd2447458 [ 372.727364][ T31] [ 372.730411][ T31] INFO: task syz.4.838:8999 blocked for more than 144 seconds. [ 372.738013][ T31] Not tainted syzkaller #0 [ 372.742961][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.751723][ T31] task:syz.4.838 state:D stack:26696 pid:8999 tgid:8998 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 372.763763][ T31] Call Trace: [ 372.767189][ T31] [ 372.770132][ T31] __schedule+0x1798/0x4cc0 [ 372.774712][ T31] ? security_file_open+0xb1/0x270 [ 372.779992][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.784937][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.789906][ T31] ? __pfx___schedule+0x10/0x10 [ 372.794932][ T31] ? schedule+0x91/0x360 [ 372.799208][ T31] schedule+0x165/0x360 [ 372.803374][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.808992][ T31] __mutex_lock+0x7e6/0x1350 [ 372.813753][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.818563][ T31] ? misc_open+0x51/0x350 [ 372.822927][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.828087][ T31] misc_open+0x51/0x350 [ 372.832289][ T31] chrdev_open+0x4cc/0x5e0 [ 372.836848][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.841813][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.848195][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.853159][ T31] do_dentry_open+0x953/0x13f0 [ 372.858004][ T31] vfs_open+0x3b/0x340 [ 372.862099][ T31] ? path_openat+0x2ecd/0x3830 [ 372.866941][ T31] path_openat+0x2ee5/0x3830 [ 372.871604][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.876623][ T31] do_filp_open+0x1fa/0x410 [ 372.881169][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.886087][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.891162][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.896078][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.900451][ T31] do_sys_openat2+0x121/0x1c0 [ 372.905182][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.910419][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.915563][ T31] __x64_sys_openat+0x138/0x170 [ 372.920460][ T31] do_syscall_64+0xfa/0xfa0 [ 372.925021][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.930266][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.936495][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.941206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.947282][ T31] RIP: 0033:0x7f7f30b8f6c9 [ 372.951725][ T31] RSP: 002b:00007f7f31aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.960226][ T31] RAX: ffffffffffffffda RBX: 00007f7f30de5fa0 RCX: 00007f7f30b8f6c9 [ 372.968275][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 372.976312][ T31] RBP: 00007f7f30c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.984352][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.992438][ T31] R13: 00007f7f30de6038 R14: 00007f7f30de5fa0 R15: 00007ffe005f1e98 [ 373.000931][ T31] [ 373.004046][ T31] INFO: task syz.1.844:9073 blocked for more than 144 seconds. [ 373.011694][ T31] Not tainted syzkaller #0 [ 373.016671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.025389][ T31] task:syz.1.844 state:D stack:28296 pid:9073 tgid:9071 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 373.038013][ T31] Call Trace: [ 373.041309][ T31] [ 373.044301][ T31] __schedule+0x1798/0x4cc0 [ 373.048840][ T31] ? security_file_open+0xb1/0x270 [ 373.054051][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.058957][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.063890][ T31] ? __pfx___schedule+0x10/0x10 [ 373.068816][ T31] ? schedule+0x91/0x360 [ 373.073122][ T31] schedule+0x165/0x360 [ 373.077374][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.082859][ T31] __mutex_lock+0x7e6/0x1350 [ 373.087519][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.092324][ T31] ? misc_open+0x51/0x350 [ 373.096824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.101901][ T31] misc_open+0x51/0x350 [ 373.106125][ T31] chrdev_open+0x4cc/0x5e0 [ 373.110566][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.115551][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 373.121907][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.126918][ T31] do_dentry_open+0x953/0x13f0 [ 373.131722][ T31] vfs_open+0x3b/0x340 [ 373.135858][ T31] ? path_openat+0x2ecd/0x3830 [ 373.140664][ T31] path_openat+0x2ee5/0x3830 [ 373.145350][ T31] ? __pfx_path_openat+0x10/0x10 [ 373.150343][ T31] do_filp_open+0x1fa/0x410 [ 373.154932][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.159827][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 373.164951][ T31] ? _raw_spin_unlock+0x28/0x50 [ 373.169815][ T31] ? alloc_fd+0x64c/0x6c0 [ 373.174225][ T31] do_sys_openat2+0x121/0x1c0 [ 373.178941][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.184451][ T31] ? exc_page_fault+0x82/0x100 [ 373.189266][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 373.194632][ T31] __x64_sys_openat+0x138/0x170 [ 373.199517][ T31] do_syscall_64+0xfa/0xfa0 [ 373.204277][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.209521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.215667][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.220372][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.226316][ T31] RIP: 0033:0x7f840eb8f6c9 [ 373.230758][ T31] RSP: 002b:00007f840f9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 373.239304][ T31] RAX: ffffffffffffffda RBX: 00007f840ede5fa0 RCX: 00007f840eb8f6c9 [ 373.247365][ T31] RDX: 00000000000a8442 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 373.255497][ T31] RBP: 00007f840ec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.263616][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.271613][ T31] R13: 00007f840ede6038 R14: 00007f840ede5fa0 R15: 00007fff14e6d468 [ 373.279771][ T31] [ 373.282853][ T31] [ 373.282853][ T31] Showing all locks held in the system: [ 373.290660][ T31] 1 lock held by khungtaskd/31: [ 373.295575][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.305507][ T31] 2 locks held by kworker/u8:3/50: [ 373.310662][ T31] 1 lock held by klogd/5190: [ 373.315313][ T31] 2 locks held by getty/5591: [ 373.320009][ T31] #0: ffff88814db750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.329873][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 373.340066][ T31] 3 locks held by kworker/1:11/7720: [ 373.345388][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.356434][ T31] #1: ffffc9000b037ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.369999][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.381381][ T31] 2 locks held by syz.3.803/8827: [ 373.386442][ T31] #0: ffff88804a647100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 373.396307][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 373.406497][ T31] 2 locks held by syz.2.806/8847: [ 373.411534][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 373.421678][ T31] #1: ffff88804a647100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 373.431509][ T31] 3 locks held by syz.0.835/8983: [ 373.436769][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.445305][ T31] #1: ffff88807978c100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 373.455013][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.465067][ T31] 1 lock held by syz.4.838/8999: [ 373.470032][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.478623][ T31] 1 lock held by syz.1.844/9073: [ 373.483710][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.492419][ T31] 1 lock held by syz-executor/9118: [ 373.497668][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.506289][ T31] 1 lock held by syz-executor/9120: [ 373.511502][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.520015][ T31] 1 lock held by syz-executor/9123: [ 373.525255][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.533756][ T31] 1 lock held by syz-executor/9124: [ 373.538964][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.547489][ T31] 1 lock held by syz-executor/9126: [ 373.552695][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.565500][ T31] 1 lock held by syz-executor/9132: [ 373.570862][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.579901][ T31] 1 lock held by syz-executor/9134: [ 373.585371][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.594013][ T31] 1 lock held by syz-executor/9137: [ 373.599228][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.607944][ T31] 1 lock held by syz-executor/9138: [ 373.613163][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.621811][ T31] 1 lock held by syz-executor/9140: [ 373.627058][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.635633][ T31] 1 lock held by syz-executor/9146: [ 373.640842][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.649360][ T31] 1 lock held by syz-executor/9148: [ 373.654603][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.663057][ T31] 1 lock held by syz-executor/9151: [ 373.668280][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.676813][ T31] 1 lock held by syz-executor/9152: [ 373.682008][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.690513][ T31] 1 lock held by syz-executor/9154: [ 373.695744][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 373.704275][ T31] [ 373.706616][ T31] ============================================= [ 373.706616][ T31] [ 373.715126][ T31] NMI backtrace for cpu 0 [ 373.715150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.715173][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.715185][ T31] Call Trace: [ 373.715193][ T31] [ 373.715202][ T31] dump_stack_lvl+0x189/0x250 [ 373.715238][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.715267][ T31] ? __pfx__printk+0x10/0x10 [ 373.715302][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.715329][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.715356][ T31] ? __pfx__printk+0x10/0x10 [ 373.715399][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.715435][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.715462][ T31] watchdog+0xf60/0xfa0 [ 373.715488][ T31] ? watchdog+0x1e2/0xfa0 [ 373.715516][ T31] kthread+0x711/0x8a0 [ 373.715546][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.715566][ T31] ? __pfx_kthread+0x10/0x10 [ 373.715596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.715622][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.715649][ T31] ? __pfx_kthread+0x10/0x10 [ 373.715677][ T31] ret_from_fork+0x4bc/0x870 [ 373.715702][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.715731][ T31] ? __switch_to_asm+0x39/0x70 [ 373.715746][ T31] ? __switch_to_asm+0x33/0x70 [ 373.715761][ T31] ? __pfx_kthread+0x10/0x10 [ 373.715788][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.715820][ T31] [ 373.715828][ T31] Sending NMI from CPU 0 to CPUs 1: [ 373.860943][ C1] NMI backtrace for cpu 1 [ 373.860969][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 373.860988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.860998][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 373.861027][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 373.861040][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 373.861055][ C1] RAX: f15a48c7e3ef5b00 RBX: ffffffff81967b47 RCX: f15a48c7e3ef5b00 [ 373.861068][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 373.861080][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 373.861093][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce870 [ 373.861105][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003950b58 [ 373.861116][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 373.861135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.861146][ C1] CR2: 000056370601c000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 373.861160][ C1] Call Trace: [ 373.861168][ C1] [ 373.861174][ C1] default_idle+0x13/0x20 [ 373.861189][ C1] default_idle_call+0x73/0xb0 [ 373.861206][ C1] do_idle+0x1e7/0x510 [ 373.861229][ C1] ? __pfx_do_idle+0x10/0x10 [ 373.861255][ C1] cpu_startup_entry+0x44/0x60 [ 373.861274][ C1] start_secondary+0x101/0x110 [ 373.861289][ C1] common_startup_64+0x13e/0x147 [ 373.861321][ C1]