last executing test programs: 30.304607947s ago: executing program 2 (id=377): setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x4}, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x43, 0xfffffffffffffffe}, 0x1d) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 29.905526272s ago: executing program 2 (id=383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'vcan0\x00', 0x400}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x33a) 29.441033127s ago: executing program 2 (id=390): r0 = socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) (async) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) socket$kcm(0x29, 0x1, 0x0) (async) socket$kcm(0x29, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0xfffffffffffffcd8, &(0x7f0000000540)=[{&(0x7f0000000880)="90b9", 0x2}, {&(0x7f00000000c0)}, {&(0x7f0000000740)="64c56d8a5faaf88f56ebe711ef55c48e3a48a4c677eadc07fbfc83ecc2f8eab94f3afa5d84eab7cd3fc9d2678dff7bc4fad70f4e5d7fe82cac8be88cfb35d86216e45459759de1823f633f257a649998c1f53890ca143c75b11884bdfb930ab3b62a136c5ac65797fa949e98507c539c061ff826370534376b36d00011046860b109a21a546537cd18a8d4d5b753eadaaaa4cbb30144c8821a5cce2a107bf312cb9c843127365e988a1402e3d2ced3982624a92fc2115111f179c55a59ca185da4c90915e2bc1cffae800e8f48e4eb69f814f44bc42893507d6b", 0xda}, {&(0x7f00000005c0)="bdcba9bbb24f5a5cd45c9b4b31486c49c6ab8d13a35340a64be30252110685215e1a0ca098bbc0214f73b3ffcded0783ec3d5ea5d68bd8ffe50ae0e92b7b464e544edbfb79a379a297ce0fe5208e74a4f4bf54d08cdc2cb46e94dcb33c6d7f2e9c", 0x61}], 0x4}}], 0x400000000000221, 0x15) (async) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0xfffffffffffffcd8, &(0x7f0000000540)=[{&(0x7f0000000880)="90b9", 0x2}, {&(0x7f00000000c0)}, {&(0x7f0000000740)="64c56d8a5faaf88f56ebe711ef55c48e3a48a4c677eadc07fbfc83ecc2f8eab94f3afa5d84eab7cd3fc9d2678dff7bc4fad70f4e5d7fe82cac8be88cfb35d86216e45459759de1823f633f257a649998c1f53890ca143c75b11884bdfb930ab3b62a136c5ac65797fa949e98507c539c061ff826370534376b36d00011046860b109a21a546537cd18a8d4d5b753eadaaaa4cbb30144c8821a5cce2a107bf312cb9c843127365e988a1402e3d2ced3982624a92fc2115111f179c55a59ca185da4c90915e2bc1cffae800e8f48e4eb69f814f44bc42893507d6b", 0xda}, {&(0x7f00000005c0)="bdcba9bbb24f5a5cd45c9b4b31486c49c6ab8d13a35340a64be30252110685215e1a0ca098bbc0214f73b3ffcded0783ec3d5ea5d68bd8ffe50ae0e92b7b464e544edbfb79a379a297ce0fe5208e74a4f4bf54d08cdc2cb46e94dcb33c6d7f2e9c", 0x61}], 0x4}}], 0x400000000000221, 0x15) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f00000001c0)=""/121, 0x79}, {0x0}, {&(0x7f0000000580)=""/45, 0x2d}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000a00)={'filter\x00', 0xb3, "2c04c717c4a368a7af3c07dee19e8a910c10b90a07403a930fb10f434b8ee67590deac8916f1582ee01ef855f861f66b79914dd61a307fc1c6f9f2c1d38ed23b73eaa0e297b5a96a0b4bca7ae3ab1a01065e7f43c83b4a5679104ebf808e19ed86fca538cf21965eb8b31116b970c0feb4d2ab01d97856020891f8166016be5b13c3fc030a34e77f25c0b4fe3127410718f9dc816fe37d7d32b8926e77820641b27f355c22c7c27c09fed7f332c5d7172a455c"}, &(0x7f00000002c0)=0xd7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x4e24, @multicast2}], 0x58) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200618294ff0051f60a84c9f4d4938037e786a6d000102df2a13f60f3da6c96661a00000e4509c5bbcd72c6c9530000000000", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200618294ff0051f60a84c9f4d4938037e786a6d000102df2a13f60f3da6c96661a00000e4509c5bbcd72c6c9530000000000", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$MRT_DEL_MFC(r0, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="71050507030380d80bfb03060340397df21ea7a082fcfdb4770127ebbc8eff183078b139d9aa6843722e592fe8abcc55de643f30d694575c21cf8a24cc9fa0919ba72abf7690f8d18d610876ce7977bc7411ad15b772869df9171b6d5188805e0ac10a9a37"], 0x65) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@getroute={0x14, 0x1a, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50831}, 0x0) 28.552451006s ago: executing program 0 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2401c004}, 0x440d1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r8, r5}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) 28.417253567s ago: executing program 0 (id=405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x7, 0x0, 0x0, 0x6, 0x10001, 0x101}}) 28.400490147s ago: executing program 2 (id=406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0x21) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xd405}, 0x8) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.41574211s ago: executing program 0 (id=415): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e20, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 27.392529791s ago: executing program 2 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000788c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xb8825000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xfffffffffffffe00, 0x3, 0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x22, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x1, 0x6, 0x0, 0xa, 0x1, 0x10}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000340)='GPL\x00', 0x2, 0x61, &(0x7f0000000380)=""/97, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x4, 0x8}], 0x10, 0x85}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x2e, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c) 27.155962637s ago: executing program 2 (id=419): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffe0c, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYBLOB="150b2cbd7000fddb00030000000000000000", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="310000001000010840000000fbdb000000000000ed092e9268c374a3138dfae5", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32=r14, @ANYBLOB="080003000800000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x805) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 27.040512684s ago: executing program 0 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x64, &(0x7f0000000380)={@random="45afe15874c6", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'E?\v', 0x0, 0x6, 0x0, @private0, @remote, {[@routing={0x3a, 0x0, 0x1, 0x7f, 0x0, [@local, @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0xfffffff9}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x3, 0x0, 0x21, 0x177, [0x4602, 0x1, 0x6, 0x4, 0x1, 0x5]}}, @padn={0x1, 0x0, [0x0]}, @generic={0x2, 0x0, "f102904baa2bd22152001c3f5eefa8aba87e1584574422da1e8b78b650df9b9c7d03e9f5d07172cbe2493d23907eaa4b03956fe37d91acffc1ee6708e8dcfd99b08a9c649fd6870a520b43d40abef2179ab0ab85bea6252ab1067c42f1044451d56e6ca2bef971c93c0ae3b678e3a096eb938c33821e4e1825d63c8d6e05fbf62b0e6f0ca15b72fd9434c9781a"}, @jumbo={0xc2, 0x4, 0x3}, @jumbo, @generic={0x3c, 0x0, "921c06103d8f619bb5e8b054f08415dca8eb5f4b111f1d04ddd61b9efb23593a86777773ba1024f38a1b4a5217728e5e0860f34951386c7c54a1697ce7f863c4acc2056088695c88f2196b048ad8d2ecfcd8dbf43116ae29bf5477772de4cedd192f98e5d2195de5fbec97ced19a8811c713b7f0a1"}, @padn={0x1, 0x0, [0x0, 0x0]}]}, @hopopts={0x40d613a7587c4eb3, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x0, {0x2, 0x0, 0x2, 0x8552, [0x3, 0x0, 0x10001, 0x3]}}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x0, @private2}, @enc_lim={0x4, 0x1, 0x7e}]}, @srh={0x3c, 0x0, 0x4, 0x0, 0x16, 0x0, 0x2, [@private0, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @mcast2]}], @payload_direct={{{{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x2, 0x2, 0x3, 0xfff, 0x81, 0x3, 0x4e24, 0x4e23}, 0x2, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x82c, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c801}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x0, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) 26.991495036s ago: executing program 0 (id=423): syz_emit_ethernet(0xda, &(0x7f00000001c0)={@random="659b3dfadf01", @empty, @void, {@llc={0x4, {@snap={0x1, 0xaa, "94", "6fa9f5", 0x6002, "80f460ffe78099afc4ee8cbb9c9b1f5b697a54abc7e40428bf8a8ee5b05ae0cf13a93e5255a5006ac62587a7eadaf37a8b879943bee6b5a6b5cf62f36883d031ffbc4c1d8c56e9e14a7def53e64b329c08815a4948910339bef4e2187f4c8772e667d22dfd15a2091f56c3afdb69c3cd0cab7260d3a29214bd37ee2b797351e27778b7cb6e841802adc26ddec1b0634339c0b8fd1adfd005dd64a347566dbb4ed121b407919b7e2022d7da0e716fec1e3e37f2d79513743ae47e55e5efa63cb80bf0c594"}}}}}, 0x0) (async) syz_emit_ethernet(0xda, &(0x7f00000001c0)={@random="659b3dfadf01", @empty, @void, {@llc={0x4, {@snap={0x1, 0xaa, "94", "6fa9f5", 0x6002, "80f460ffe78099afc4ee8cbb9c9b1f5b697a54abc7e40428bf8a8ee5b05ae0cf13a93e5255a5006ac62587a7eadaf37a8b879943bee6b5a6b5cf62f36883d031ffbc4c1d8c56e9e14a7def53e64b329c08815a4948910339bef4e2187f4c8772e667d22dfd15a2091f56c3afdb69c3cd0cab7260d3a29214bd37ee2b797351e27778b7cb6e841802adc26ddec1b0634339c0b8fd1adfd005dd64a347566dbb4ed121b407919b7e2022d7da0e716fec1e3e37f2d79513743ae47e55e5efa63cb80bf0c594"}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x28e6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x68, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x100, @private2, 0x7}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x9}]}, &(0x7f0000000340)=0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 26.769993946s ago: executing program 0 (id=426): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4001080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4001080) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.180772214s ago: executing program 3 (id=517): r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x0, 0x8000002, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60ff690b00482f00fc020000000eff000000000000000000ff0200000200"], 0x0) 17.179143802s ago: executing program 4 (id=518): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.132119589s ago: executing program 1 (id=519): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2008045) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000280)="95dd8b4d688964ab876b3e781ad8611b9cbfa0b8f930bbae7e43a88cba079a00eaf7696d") write$nci(r3, &(0x7f00000002c0)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x1, {0x1, 0x9}}, 0x5) (async) r4 = accept4$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000340)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000380)=0x2c) recvmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5, &(0x7f00000005c0)=""/20, 0x14}, 0xa6f6}, {{&(0x7f0000000600)=@pppoe, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/42, 0x2a}, {&(0x7f00000007c0)=""/251, 0xfb}], 0x3, &(0x7f0000000900)=""/24, 0x18}, 0x10}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000009c0)=""/188, 0xbc}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x2, &(0x7f0000001ac0)=""/81, 0x51}, 0x7}, {{&(0x7f0000001b40)=@ax25={{0x3, @bcast}, [@remote, @null, @netrom, @netrom, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)=""/139, 0x8b}, {&(0x7f0000001c80)=""/4, 0x4}, {&(0x7f0000001cc0)=""/94, 0x5e}, {&(0x7f0000001d40)=""/30, 0x1e}, {&(0x7f0000001d80)=""/48, 0x30}], 0x5, &(0x7f0000001e40)=""/85, 0x55}, 0x8}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f40)=""/83, 0x53}, {&(0x7f0000001fc0)=""/149, 0x95}, {&(0x7f0000002080)=""/161, 0xa1}, {&(0x7f0000002140)=""/34, 0x22}, {&(0x7f0000002180)=""/149, 0x95}], 0x5, &(0x7f00000022c0)=""/20, 0x14}, 0x6}], 0x5, 0x40000000, &(0x7f0000002440)) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000002480), &(0x7f00000024c0)=0x8) (async) read(r0, &(0x7f0000002500)=""/156, 0x9c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000025c0)={'NETMAP\x00'}, &(0x7f0000002600)=0x1e) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000002640)={{}, "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"}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000003640)=@caif=@dgm, 0x80, &(0x7f00000048c0)=[{&(0x7f00000036c0)=""/245, 0xf5}, {&(0x7f00000037c0)=""/240, 0xf0}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004900)=""/4096, 0x1000}, 0x8}], 0x1, 0x100, &(0x7f0000005940)={0x77359400}) (async) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000005980)={{0x2, 0x4e24, @empty}, {0x6, @broadcast}, 0x28, {0x2, 0x4e20, @multicast1}, 'veth0_to_hsr\x00'}) (async) r7 = accept$ax25(r0, &(0x7f0000005a00)={{0x3, @rose}, [@default, @netrom, @remote, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000005a80)=0x48) ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000005ac0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000005b00)=0xbf9, 0x8) (async) r8 = accept$netrom(r3, &(0x7f0000005b40)={{0x3, @netrom}, [@default, @bcast, @bcast, @default, @netrom, @remote, @null, @rose]}, &(0x7f0000005bc0)=0x48) bind$netrom(r8, &(0x7f0000005c00)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000005f00)={0x3, 0x11, &(0x7f0000005c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005d40)='GPL\x00', 0x0, 0x7, &(0x7f0000005d80)=""/7, 0x41000, 0x28, '\x00', 0x0, @sched_cls=0x2e, r3, 0x8, &(0x7f0000005dc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000005e00)={0x1, 0xf, 0x2, 0xa}, 0x10, 0x0, r0, 0x7, &(0x7f0000005e40)=[r0], &(0x7f0000005e80)=[{0x2, 0x3, 0xf, 0x2}, {0x5, 0x1, 0xa, 0xc}, {0x5, 0x5, 0xa, 0xc}, {0x2, 0x2, 0xa, 0xb}, {0x1, 0x2, 0x6, 0x8}, {0x2, 0x3, 0x10, 0x16}, {0x0, 0x2, 0x5, 0x4}], 0x10, 0x9}, 0x94) sendfile(r6, r9, &(0x7f0000005fc0)=0x5, 0x76) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000006000)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "8fdc82cb2725494a636c9954607115b8b081e7210c3db86ace8d3e880de9debacd5f8a26755351db2ec75540e522fedfb41252b2196f7e3165b68ae711ac398dcf1803f22723caa735f05bd55d6ade73"}, 0xd8) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000006100), 0xffffffffffffffff) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000006140)={'nat\x00', 0xe0, "d06135888f7d3fb1ead4147a796e32169476de4bdbc61327287dc3fb16cfa9dc7b24d727d570d5063284a8cd1b78d3ace99d042bcb0fdc002a907b3cc07f10015d932e4248500621f55c0a7396d15e5390fc377e4d0502c60b61379fde8891793f19c7ba9ef58ba19b65b29581a1dfc19061a292442b08fff87ae0846ddea5b241eeadb00f898a91e15d2b8a6c18696f5e3a2227e3e73d6d605a9078ef820571395269926c0fa5f5e2a7fe217e521c200244345c1e33578dab07f8b6fba1dd271cd34e68da7d47df57bdd6750893e5568cff975e991166f4dd5cef21795fecf0"}, &(0x7f0000006280)=0x104) 17.040551455s ago: executing program 3 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0x7d, 0x55, &(0x7f0000000280)="a06ad876d56a0064d082778c39397763acc54086793998b6dcb93796e81c5b5c5691727df82f4546392298cf2e638e49bd53830bf44b997cb969ad5ce0cfe5f01937f28f8b21aa1eec80004f576a364493ec2774135a004943aa41d300fe686cec93dd29305d5148d552a6d823ab56a26600"/125, &(0x7f0000000140)=""/85, 0x1, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x2, 0x0, 0x4}, 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (rerun: 32) 16.984537542s ago: executing program 4 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050907000000000005000300df00000008000200", @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a3000000000090002"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x2b4, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x250, 0x1, [@m_gact={0xf0, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x156e}}]}, {0xb8, 0x6, "350cae3369f2e2c9512b1cf89248b699f6834043afd5a16cdc7c2149ebeb647390588c893a43d3f84677122c5bfcf1ebc1d7dfb01caa6ed3ae4f4072c4ef14b3a26c2e7ee0edb5005454a4e81d3658759fcf3763d0a5e8f3eb6358d5e6723f179c0cf763c40e4d60b238e472a2f406d374a7e5cd32d018f0bf886e3cff5d86a106669627f56cda5fc831ba28cae84849fd886a996984682430b3cec648bae5008f7502267b8e8c3bff463b7546de45d0aea2ae1c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x15c, 0xb, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6ec2923b, 0x47, 0x7, 0xeef, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0xfc, 0x6, "efb2abcdfe9ca82db843a8a3f9685301b1736a2e565576e38b5c104ae44d0aa2ce0fa37c814a7de61056f7c8537051c1c9295d70d41904279a80670e000ee82ec2fe3ecc02f855e7cc47d2ab9f6eee6cd7eb373713c408f3ae99f8e539989a0b53b271a101463c08beaaff55da1791b944eff233c54ede0a49059f951750b9eba6fb9a5602e047cfb236c89864a5965b5a7b4a1f6643c56d9a8232be9ddb7223015669c1f569b318e806f14d120cc8bb223095ba1cc3be4d545cb6fce42a2300d362c6eda3fe88300fd37f3d3a6e6f7dfa33565958410580a7db4bf427c320885cef5e8471017e5ed98e12eb55dcaa76f45ce6f79343d0d8"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2b4}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@private=0xa010100, @multicast2, r1}, 0xc) 16.888355095s ago: executing program 1 (id=522): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000001500)='0', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) r4 = accept4$llc(r0, 0x0, &(0x7f0000000040), 0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) 16.830293999s ago: executing program 4 (id=523): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x29, 0x6, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) 16.724592798s ago: executing program 3 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 16.724015076s ago: executing program 1 (id=525): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x5, 0x5, 0xfc, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="bd591511", 0x4}], 0x1}}], 0x1, 0x400300) 16.636203976s ago: executing program 4 (id=526): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r4, 0xfffffffc}, 0x8) 16.624466709s ago: executing program 3 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008b0"], 0x178}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f010018000000000340000000000001000000002e0018010061612e0000000000000000000000010000000000"], &(0x7f0000000080)=""/24, 0x2d, 0x18, 0x1, 0x100}, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @flow_dissector, r2}, 0x94) 16.528348441s ago: executing program 1 (id=528): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2818a}, [@IFLA_MAP={0x24, 0xe, {0x8, 0x1, 0xfffe, 0x45, 0x3, 0x1}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet(0x2, 0x800, 0xffffbe88) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0), 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 16.448487087s ago: executing program 3 (id=529): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020400) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x100808, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100290004006617b80cf875948e00e92fe1d19be94ebd4e0bb17ae3e8beca7cb001f511f8a200e2545f0024a5b8d7ee39af"], 0x24}}, 0x20008000) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r8, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r9, 0x0, 0x10d00, 0xf) 16.289956134s ago: executing program 3 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x38, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="9326988d2516e0e7f7fe51cd3040c3a64fdbc8caab96d3061d1fe91ff5027d0c"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x4000080) 16.200675744s ago: executing program 1 (id=531): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 16.129569091s ago: executing program 1 (id=532): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x240400c0) 15.667069632s ago: executing program 4 (id=533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002dbd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="fd228008652f61d398a6"], 0x28}, 0x1, 0x0, 0x0, 0x30048011}, 0x2404c000) 15.149990189s ago: executing program 4 (id=534): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) close(0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20000c01}, 0x0) 12.127348935s ago: executing program 32 (id=419): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffe0c, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYBLOB="150b2cbd7000fddb00030000000000000000", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="310000001000010840000000fbdb000000000000ed092e9268c374a3138dfae5", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32=r14, @ANYBLOB="080003000800000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x805) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 11.100410097s ago: executing program 33 (id=426): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4001080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4001080) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.06805918s ago: executing program 34 (id=532): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x240400c0) 1.040815366s ago: executing program 35 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x38, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="9326988d2516e0e7f7fe51cd3040c3a64fdbc8caab96d3061d1fe91ff5027d0c"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x4000080) 0s ago: executing program 36 (id=534): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) close(0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20000c01}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.252' (ED25519) to the list of known hosts. [ 83.498349][ T5815] cgroup: Unknown subsys name 'net' [ 83.615472][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.624656][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.268056][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.500905][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.510551][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.521947][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.530485][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.542317][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.559109][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.567449][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.576147][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.584907][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.591128][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.592873][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.600485][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.614311][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.622802][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.630489][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.637708][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.646659][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.649076][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.654971][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.662867][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.670146][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.676427][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.690011][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.690041][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.699243][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.356976][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 90.445626][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.545347][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 90.583732][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.691699][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.699383][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.707156][ T5826] bridge_slave_0: entered allmulticast mode [ 90.714831][ T5826] bridge_slave_0: entered promiscuous mode [ 90.765681][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.772962][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.780579][ T5826] bridge_slave_1: entered allmulticast mode [ 90.789236][ T5826] bridge_slave_1: entered promiscuous mode [ 90.827062][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.834917][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.842192][ T5834] bridge_slave_0: entered allmulticast mode [ 90.849598][ T5834] bridge_slave_0: entered promiscuous mode [ 90.861372][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.868471][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.876249][ T5834] bridge_slave_1: entered allmulticast mode [ 90.884894][ T5834] bridge_slave_1: entered promiscuous mode [ 90.987557][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.999407][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.028304][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.042400][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.054147][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.091035][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.098721][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.106252][ T5842] bridge_slave_0: entered allmulticast mode [ 91.114088][ T5842] bridge_slave_0: entered promiscuous mode [ 91.169035][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.176426][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.184261][ T5842] bridge_slave_1: entered allmulticast mode [ 91.192327][ T5842] bridge_slave_1: entered promiscuous mode [ 91.222445][ T5826] team0: Port device team_slave_0 added [ 91.232847][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.240001][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.247489][ T5825] bridge_slave_0: entered allmulticast mode [ 91.254783][ T5825] bridge_slave_0: entered promiscuous mode [ 91.289617][ T5834] team0: Port device team_slave_0 added [ 91.297645][ T5826] team0: Port device team_slave_1 added [ 91.304092][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.311404][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.318582][ T5825] bridge_slave_1: entered allmulticast mode [ 91.325988][ T5825] bridge_slave_1: entered promiscuous mode [ 91.351595][ T5834] team0: Port device team_slave_1 added [ 91.385387][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.446852][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.476069][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.483176][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.509210][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.524342][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.560629][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.568080][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.594579][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.606536][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.613624][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.640026][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.660123][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.696057][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.703947][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.703994][ T52] Bluetooth: hci1: command tx timeout [ 91.730548][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.769018][ T5842] team0: Port device team_slave_0 added [ 91.775186][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.782421][ T5839] Bluetooth: hci0: command tx timeout [ 91.783713][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.788621][ T52] Bluetooth: hci3: command tx timeout [ 91.796651][ T5827] bridge_slave_0: entered allmulticast mode [ 91.801677][ T5839] Bluetooth: hci2: command tx timeout [ 91.807268][ T5831] Bluetooth: hci4: command tx timeout [ 91.815570][ T5827] bridge_slave_0: entered promiscuous mode [ 91.827096][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.834418][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.841666][ T5827] bridge_slave_1: entered allmulticast mode [ 91.848855][ T5827] bridge_slave_1: entered promiscuous mode [ 91.871439][ T5842] team0: Port device team_slave_1 added [ 91.928943][ T5825] team0: Port device team_slave_0 added [ 91.953198][ T939] cfg80211: failed to load regulatory.db [ 91.981429][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.005144][ T5825] team0: Port device team_slave_1 added [ 92.026280][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.033557][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.059606][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.076661][ T5826] hsr_slave_0: entered promiscuous mode [ 92.083631][ T5826] hsr_slave_1: entered promiscuous mode [ 92.092743][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.106646][ T5834] hsr_slave_0: entered promiscuous mode [ 92.113418][ T5834] hsr_slave_1: entered promiscuous mode [ 92.119607][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.125495][ T5834] Cannot create hsr debugfs directory [ 92.145240][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.152312][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.178437][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.222554][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.229619][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.255635][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.268844][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.275961][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.302779][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.338141][ T5827] team0: Port device team_slave_0 added [ 92.412205][ T5827] team0: Port device team_slave_1 added [ 92.423520][ T5842] hsr_slave_0: entered promiscuous mode [ 92.429925][ T5842] hsr_slave_1: entered promiscuous mode [ 92.436629][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.442782][ T5842] Cannot create hsr debugfs directory [ 92.512868][ T5825] hsr_slave_0: entered promiscuous mode [ 92.519424][ T5825] hsr_slave_1: entered promiscuous mode [ 92.525773][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 92.532453][ T5825] Cannot create hsr debugfs directory [ 92.596616][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.603820][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.629967][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.676998][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.684169][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.710191][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.925035][ T5827] hsr_slave_0: entered promiscuous mode [ 92.932989][ T5827] hsr_slave_1: entered promiscuous mode [ 92.939176][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.945197][ T5827] Cannot create hsr debugfs directory [ 93.185604][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.197992][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.230637][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.257006][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.324305][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.343416][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.354800][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.365603][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.457900][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.476213][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.487098][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.513984][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.601008][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.612829][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.623796][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.640130][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.737701][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.782510][ T5831] Bluetooth: hci1: command tx timeout [ 93.800587][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.815159][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.825754][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.837970][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.856761][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.864659][ T5831] Bluetooth: hci2: command tx timeout [ 93.865081][ T52] Bluetooth: hci0: command tx timeout [ 93.870249][ T5839] Bluetooth: hci3: command tx timeout [ 93.881793][ T5831] Bluetooth: hci4: command tx timeout [ 93.904839][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.924198][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.931527][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.953113][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.960228][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.027272][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.057336][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.068645][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.084995][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.092248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.128361][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.135576][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.160028][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.206398][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.292387][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.317492][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.333182][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.340329][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.386307][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.393543][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.405769][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.413062][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.438080][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.445348][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.545221][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.576062][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.612912][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.661136][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.668369][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.734870][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.742073][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.928045][ T5826] veth0_vlan: entered promiscuous mode [ 94.963111][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.994209][ T5826] veth1_vlan: entered promiscuous mode [ 95.153468][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.162254][ T5826] veth0_macvtap: entered promiscuous mode [ 95.169539][ T5842] veth0_vlan: entered promiscuous mode [ 95.186740][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.203008][ T5842] veth1_vlan: entered promiscuous mode [ 95.229706][ T5826] veth1_macvtap: entered promiscuous mode [ 95.310189][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.337404][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.354704][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.401248][ T5825] veth0_vlan: entered promiscuous mode [ 95.420257][ T5834] veth0_vlan: entered promiscuous mode [ 95.440526][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.456687][ T5842] veth0_macvtap: entered promiscuous mode [ 95.479309][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498938][ T5834] veth1_vlan: entered promiscuous mode [ 95.509473][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.519740][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.546577][ T5842] veth1_macvtap: entered promiscuous mode [ 95.613590][ T5825] veth1_vlan: entered promiscuous mode [ 95.676455][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.739014][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.786693][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.798774][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.827653][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.837306][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.857383][ T5834] veth0_macvtap: entered promiscuous mode [ 95.870163][ T5834] veth1_macvtap: entered promiscuous mode [ 95.878771][ T5839] Bluetooth: hci1: command tx timeout [ 95.883346][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.893015][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.902348][ T5827] veth0_vlan: entered promiscuous mode [ 95.923597][ T5825] veth0_macvtap: entered promiscuous mode [ 95.935304][ T5825] veth1_macvtap: entered promiscuous mode [ 95.942862][ T5839] Bluetooth: hci0: command tx timeout [ 95.948306][ T5839] Bluetooth: hci3: command tx timeout [ 95.952124][ T5831] Bluetooth: hci4: command tx timeout [ 95.955115][ T5839] Bluetooth: hci2: command tx timeout [ 95.960300][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.969401][ T5827] veth1_vlan: entered promiscuous mode [ 95.980186][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.046837][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.074456][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.131862][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.169769][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.208407][ T5945] veth3: entered allmulticast mode [ 96.218801][ T5827] veth0_macvtap: entered promiscuous mode [ 96.234481][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.250289][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.266061][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281100][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.297007][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.334603][ T5827] veth1_macvtap: entered promiscuous mode [ 96.345157][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.354381][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.357069][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.373404][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.400616][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.409913][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.446810][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.448861][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.498862][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.507945][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.526464][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.564730][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.608014][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.654832][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684324][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.723757][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.754319][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770181][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.841675][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.851955][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.930567][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.959491][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.039802][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.061121][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.079509][ T5958] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.105599][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.122230][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.136371][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.237786][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.261447][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.705873][ T5980] netlink: 'syz.1.15': attribute type 15 has an invalid length. [ 97.757315][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.771671][ T5981] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 97.944107][ T5831] Bluetooth: hci1: command tx timeout [ 98.022656][ T5831] Bluetooth: hci2: command tx timeout [ 98.022690][ T5829] Bluetooth: hci3: command tx timeout [ 98.028122][ T52] Bluetooth: hci0: command tx timeout [ 98.031151][ T5839] Bluetooth: hci4: command tx timeout [ 98.176667][ T6001] gre1: entered promiscuous mode [ 98.183091][ T6001] gre1: entered allmulticast mode [ 98.330230][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 98.345911][ T6012] Zero length message leads to an empty skb [ 98.591574][ T6010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.623209][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.682256][ T6027] sch_tbf: burst 88 is lower than device bond0 mtu (1514) ! [ 98.710941][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.136981][ T6053] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.257381][ T6056] sctp: [Deprecated]: syz.1.31 (pid 6056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.257381][ T6056] Use struct sctp_sack_info instead [ 99.321658][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 99.577042][ T6073] C: renamed from lo (while UP) [ 99.591830][ T1211] IPVS: starting estimator thread 0... [ 99.705107][ T6076] IPVS: using max 28 ests per chain, 67200 per kthread [ 99.889705][ T6091] ip6gretap0: mtu less than device minimum [ 138.024580][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.031037][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.307119][ T6163] netlink: 'syz.1.42': attribute type 142 has an invalid length. [ 176.590521][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 177.179594][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 177.184812][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 177.406329][ T6220] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 177.433794][ T6220] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 177.455495][ T6220] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 177.472811][ T6220] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 177.482363][ T6220] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 177.664812][ T6231] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.62'. [ 177.888459][ T6241] netlink: 264 bytes leftover after parsing attributes in process `syz.0.66'. [ 178.007378][ T6243] bridge1: entered promiscuous mode [ 178.015124][ T6243] bridge1: entered allmulticast mode [ 178.119144][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 178.286168][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.299984][ T6255] syz.3.71 uses obsolete (PF_INET,SOCK_PACKET) [ 178.349835][ T6253] netlink: 72 bytes leftover after parsing attributes in process `syz.3.71'. [ 178.439122][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 178.448655][ T6262] block nbd0: Unsupported socket: should be TCP or UNIX. [ 178.465064][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 178.513341][ T6263] block nbd0: Unsupported socket: should be TCP or UNIX. [ 178.673693][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'. [ 178.763505][ T6273] bond1: Unable to set down delay as MII monitoring is disabled [ 178.779741][ T6273] bond1 (unregistering): Released all slaves [ 178.836397][ T6288] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 178.844797][ T6288] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 178.867160][ T6288] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 178.901115][ T6288] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 178.996637][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.017956][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.053524][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.064787][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.267312][ T6296] macvtap1: entered promiscuous mode [ 179.291873][ T6296] vlan0: entered promiscuous mode [ 179.304167][ T6296] macvtap1: entered allmulticast mode [ 179.326503][ T6296] vlan0: entered allmulticast mode [ 179.340073][ T6296] veth0_vlan: entered allmulticast mode [ 179.571846][ T5924] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 179.722720][ T6324] sctp: [Deprecated]: syz.2.92 (pid 6324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.722720][ T6324] Use struct sctp_sack_info instead [ 179.831127][ T6330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.077813][ T6341] bond1: entered promiscuous mode [ 180.085108][ T6341] bond1: entered allmulticast mode [ 180.090667][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.155193][ T6347] bond1: option arp_missed_max: invalid value (0) [ 180.194772][ T6347] bond1: option arp_missed_max: allowed values 1 - 255 [ 180.254192][ T6347] bond1 (unregistering): Released all slaves [ 180.477456][ T6372] Bluetooth: MGMT ver 1.23 [ 180.660062][ T6382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.935036][ T6399] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 181.476811][ T6425] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 182.005122][ T6445] nbd: couldn't find device at index 61440 [ 182.073879][ T6447] __nla_validate_parse: 10 callbacks suppressed [ 182.073899][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 182.108109][ T6450] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.128'. [ 182.129264][ T6452] validate_nla: 6 callbacks suppressed [ 182.129282][ T6452] netlink: 'syz.4.127': attribute type 13 has an invalid length. [ 182.132005][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 182.355611][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 182.445617][ T6461] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.132'. [ 182.577569][ T6463] sit1: entered promiscuous mode [ 182.595925][ T6463] sit1: entered allmulticast mode [ 183.451416][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 183.604210][ T6509] netlink: 184 bytes leftover after parsing attributes in process `syz.1.145'. [ 183.823956][ T6521] netlink: 224 bytes leftover after parsing attributes in process `syz.4.149'. [ 186.194185][ T6603] netlink: 'syz.4.170': attribute type 10 has an invalid length. [ 186.306091][ T6603] team0: Port device dummy0 added [ 186.576979][ T6618] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 186.587321][ T6615] syzkaller1: entered promiscuous mode [ 186.597887][ T6615] syzkaller1: entered allmulticast mode [ 186.677100][ T6623] tipc: Started in network mode [ 186.689379][ T6623] tipc: Node identity cad00279c333, cluster identity 4711 [ 186.711367][ T6623] tipc: Enabled bearer , priority 0 [ 186.731026][ T6627] syzkaller0: entered promiscuous mode [ 186.739524][ T6627] syzkaller0: entered allmulticast mode [ 186.777353][ T6626] trusted_key: syz.4.174 sent an empty control message without MSG_MORE. [ 186.809931][ T6623] tipc: Resetting bearer [ 186.834578][ T6632] tipc: Started in network mode [ 186.840283][ T6632] tipc: Node identity b6cd54901a14, cluster identity 4711 [ 186.848217][ T6632] tipc: Enabled bearer , priority 0 [ 186.861092][ T6633] 8021q: VLANs not supported on wg1 [ 186.867352][ T6622] tipc: Resetting bearer [ 186.929054][ T6622] tipc: Disabling bearer [ 186.979326][ T6632] tipc: Disabling bearer [ 187.017551][ T6639] syzkaller0: entered allmulticast mode [ 187.132800][ T6647] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 187.140703][ T6647] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 187.505811][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 187.507756][ T6663] xt_hashlimit: size too large, truncated to 1048576 [ 187.674448][ T6674] netlink: 'syz.3.188': attribute type 28 has an invalid length. [ 187.806436][ T6674] netlink: 'syz.3.188': attribute type 3 has an invalid length. [ 187.861554][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.188'. [ 187.973037][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.030387][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 188.043576][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 188.508834][ T6692] team0 (unregistering): Port device team_slave_0 removed [ 188.524170][ T6692] team0 (unregistering): Port device team_slave_1 removed [ 188.851579][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'. [ 188.887509][ T6722] netlink: 168 bytes leftover after parsing attributes in process `syz.4.206'. [ 189.294561][ T6734] tipc: Started in network mode [ 189.321283][ T6734] tipc: Node identity 2218aa01e57f, cluster identity 4711 [ 189.328701][ T6734] tipc: Enabled bearer , priority 0 [ 189.412378][ T6729] tipc: Resetting bearer [ 191.045158][ T6729] tipc: Disabling bearer [ 191.071403][ T6750] tipc: Enabling of bearer rejected, failed to enable media [ 191.084212][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 191.171334][ T9] tipc: Node number set to 3345459713 [ 191.191323][ T6787] netlink: 2 bytes leftover after parsing attributes in process `syz.0.217'. [ 191.289088][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 191.491712][ T6803] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 191.519378][ T6807] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 191.729160][ T6814] bond1: (slave geneve3): making interface the new active one [ 191.739573][ T6814] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 191.788130][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.807857][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.852254][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.881269][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.070117][ T6830] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 192.308057][ T6838] bond2: entered promiscuous mode [ 192.345805][ T6838] bond2: entered allmulticast mode [ 192.363505][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.472595][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 192.672274][ T6852] nbd: socks must be embedded in a SOCK_ITEM attr [ 192.972695][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 193.004883][ T6869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.100608][ T6875] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 193.174413][ T6878] netlink: 244 bytes leftover after parsing attributes in process `syz.0.241'. [ 193.202667][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 193.307220][ T6875] gretap1: entered promiscuous mode [ 193.338769][ T6875] bond2: (slave gretap1): making interface the new active one [ 193.356036][ T6875] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 193.560399][ T6888] syzkaller1: entered promiscuous mode [ 193.574405][ T6888] syzkaller1: entered allmulticast mode [ 193.954889][ T6918] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 194.094169][ T6926] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 194.225642][ T6938] sctp: [Deprecated]: syz.4.256 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.225642][ T6938] Use struct sctp_sack_info instead [ 194.343530][ T6942] syzkaller0: entered promiscuous mode [ 194.350305][ T6942] syzkaller0: entered allmulticast mode [ 194.506593][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 194.525601][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 194.651462][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 195.030489][ T6985] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20001 [ 195.049049][ T6981] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 195.109820][ T6988] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20001 [ 195.171875][ T5845] IPVS: starting estimator thread 0... [ 195.195248][ T6989] tipc: Started in network mode [ 195.201786][ T6989] tipc: Node identity a6e8abcc0c05, cluster identity 4711 [ 195.218110][ T6989] tipc: Enabled bearer , priority 0 [ 195.264364][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 195.273347][ T6994] IPVS: using max 31 ests per chain, 74400 per kthread [ 195.507793][ T6989] syzkaller0: entered promiscuous mode [ 195.513646][ T6989] syzkaller0: entered allmulticast mode [ 195.520285][ T6989] tipc: Resetting bearer [ 195.635970][ T12] tipc: Resetting bearer [ 195.650074][ T7002] dvmrp0: entered allmulticast mode [ 195.655946][ T7006] dvmrp0: left allmulticast mode [ 195.683608][ T7004] geneve0: entered promiscuous mode [ 195.689391][ T6986] tipc: Resetting bearer [ 195.962186][ T7016] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 196.111449][ T5839] Bluetooth: hci4: command 0x0401 tx timeout [ 196.770916][ T6986] tipc: Disabling bearer [ 196.806850][ T7004] geneve0: left promiscuous mode [ 196.831627][ T9] tipc: Node number set to 2867702732 [ 197.031390][ T7031] netlink: 'syz.1.284': attribute type 3 has an invalid length. [ 197.058451][ T7031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.284'. [ 197.283740][ T7052] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20002 [ 197.374680][ T7048] can: request_module (can-proto-4) failed. [ 197.381049][ T7049] wg2: entered promiscuous mode [ 197.387646][ T7049] wg2: entered allmulticast mode [ 197.427716][ T7058] sctp: [Deprecated]: syz.4.289 (pid 7058) Use of int in maxseg socket option. [ 197.427716][ T7058] Use struct sctp_assoc_value instead [ 197.675560][ T7075] : entered promiscuous mode [ 197.968324][ T7086] syzkaller0: entered promiscuous mode [ 197.974205][ T7086] syzkaller0: entered allmulticast mode [ 198.122939][ T7086] netlink: 76 bytes leftover after parsing attributes in process `syz.1.296'. [ 198.728741][ T7124] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 199.389808][ T7124] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 199.468466][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.487472][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.711768][ T7143] netlink: 6 bytes leftover after parsing attributes in process `syz.3.309'. [ 199.722801][ T7143] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 199.730582][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.309'. [ 199.747048][ T7149] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:0 [ 199.762802][ T7149] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336 [ 199.839369][ T7143] team0: Port device geneve0 added [ 199.929359][ T7156] syzkaller0: entered promiscuous mode [ 199.951271][ T7156] syzkaller0: entered allmulticast mode [ 200.244525][ T7167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.253901][ T7175] netlink: 5 bytes leftover after parsing attributes in process `syz.4.316'. [ 200.301290][ T7175] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 200.343822][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 200.362214][ T7178] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.316'. [ 200.401507][ T7175] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.316'. [ 200.475040][ T7167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.732033][ T7167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.760895][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.318'. [ 200.915310][ T7167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.952065][ T7194] team0: No ports can be present during mode change [ 200.979812][ T7198] netlink: 'syz.2.323': attribute type 11 has an invalid length. [ 200.989559][ T7198] netlink: 228 bytes leftover after parsing attributes in process `syz.2.323'. [ 201.041390][ T7196] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 201.189743][ T1153] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.226289][ T7203] : entered promiscuous mode [ 201.283277][ T1153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.376283][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.447100][ T7219] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 201.667127][ T7219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.677075][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.838315][ T6025] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.860215][ T6025] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.892055][ T6025] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.915571][ T6025] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.159385][ T7256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.339'. [ 202.171765][ T7256] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 202.194309][ T7253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.232526][ T7256] bond3 (unregistering): Released all slaves [ 202.348469][ T7258] ip6tnl1: entered promiscuous mode [ 202.357132][ T7258] ip6tnl1: entered allmulticast mode [ 203.227780][ T7303] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 203.241848][ T7305] __nla_validate_parse: 4 callbacks suppressed [ 203.241866][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 203.318255][ T7307] netlink: 'syz.2.355': attribute type 39 has an invalid length. [ 203.557746][ T7323] vlan1: entered allmulticast mode [ 203.567916][ T7322] netlink: 'syz.0.360': attribute type 11 has an invalid length. [ 203.577162][ T7322] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.360'. [ 203.853296][ T7338] team0: Port device dummy0 removed [ 203.879792][ T7338] bridge_slave_0: left allmulticast mode [ 203.885956][ T7338] bridge_slave_0: left promiscuous mode [ 203.895811][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.915768][ T7338] bridge_slave_1: left allmulticast mode [ 203.922079][ T7338] bridge_slave_1: left promiscuous mode [ 203.928013][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.946942][ T7338] bond0: (slave bond_slave_0): Releasing backup interface [ 203.993265][ T7338] bond0: (slave bond_slave_1): Releasing backup interface [ 204.083872][ T7338] team0: Port device team_slave_0 removed [ 204.163386][ T7338] team0: Port device team_slave_1 removed [ 204.170136][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.195361][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.231985][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.241117][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.276382][ T7338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.596792][ T7368] openvswitch: netlink: Key type 234 is out of range max 32 [ 204.795948][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 204.812343][ T7370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.082618][ T7398] netlink: 'syz.4.378': attribute type 16 has an invalid length. [ 205.093792][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 205.119823][ T7396] netlink: 'syz.2.377': attribute type 5 has an invalid length. [ 205.121012][ T7398] netlink: 'syz.4.378': attribute type 3 has an invalid length. [ 205.135288][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 205.163387][ T7398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.378'. [ 205.188755][ T7396] geneve2: entered promiscuous mode [ 205.211316][ T7396] geneve2: entered allmulticast mode [ 205.222888][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 205.252899][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 205.281310][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 205.332658][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 205.508669][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 205.540066][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 205.565190][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 205.626985][ T7419] netlink: 96 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.862695][ T7430] openvswitch: netlink: Missing key (keys=40, expected=100) [ 206.757313][ T7468] netlink: 'syz.3.400': attribute type 23 has an invalid length. [ 207.034088][ T7491] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 207.053690][ T7491] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 207.252558][ T7504] netlink: 'syz.1.411': attribute type 4 has an invalid length. [ 207.293301][ T7504] netlink: 'syz.1.411': attribute type 4 has an invalid length. [ 207.424819][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.432652][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.564614][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.587849][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.727981][ T7504] vlan0: left allmulticast mode [ 207.733094][ T7504] vlan0: left promiscuous mode [ 207.755583][ T144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.765581][ T144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.775170][ T144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.804901][ T144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.044027][ T7534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.161799][ T7547] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 208.310662][ T7549] __nla_validate_parse: 10 callbacks suppressed [ 208.310683][ T7549] netlink: 17 bytes leftover after parsing attributes in process `syz.2.419'. [ 209.522292][ T7578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.529630][ T7578] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 209.573299][ T7618] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.434'. [ 209.638868][ T7578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.655952][ T7578] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 209.666031][ T7623] netlink: 356 bytes leftover after parsing attributes in process `syz.3.435'. [ 209.680525][ T7578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.689026][ T7578] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.689739][ T7623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.435'. [ 209.754959][ T7578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.761038][ T7578] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.878673][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 209.912839][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 209.942231][ T7578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.961738][ T7631] netlink: 'syz.1.437': attribute type 5 has an invalid length. [ 209.971274][ T7578] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 209.997124][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 210.379943][ T7642] team0: Device ip6gre2 is of different type [ 211.259554][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 212.277425][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 212.417327][ T7751] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'. [ 212.902605][ T7781] syzkaller0: entered promiscuous mode [ 212.908135][ T7781] syzkaller0: entered allmulticast mode [ 213.609553][ T7822] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 213.613383][ T7819] netlink: 7 bytes leftover after parsing attributes in process `syz.4.469'. [ 213.635363][ T7819] netlink: 7 bytes leftover after parsing attributes in process `syz.4.469'. [ 213.823116][ T7827] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 213.910851][ T7840] 8021q: VLANs not supported on ipvlan1 [ 214.068997][ T7849] pim6reg1: entered promiscuous mode [ 214.077776][ T7849] pim6reg1: entered allmulticast mode [ 214.087871][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 214.127769][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 214.145337][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 214.154434][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 214.155260][ T7851] xt_NFQUEUE: number of total queues is 0 [ 214.345797][ T7856] xt_time: unknown flags 0xf4 [ 214.374866][ T7859] netlink: 216 bytes leftover after parsing attributes in process `syz.1.479'. [ 214.492413][ T7863] netlink: 'syz.3.481': attribute type 13 has an invalid length. [ 214.511456][ T7863] netlink: 'syz.3.481': attribute type 58 has an invalid length. [ 214.519245][ T7863] netlink: 152 bytes leftover after parsing attributes in process `syz.3.481'. [ 214.728234][ T7873] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 214.887680][ T7884] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 214.914265][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 214.925599][ T7888] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 214.954947][ T7888] netlink: 240 bytes leftover after parsing attributes in process `syz.4.489'. [ 215.201511][ T7906] netlink: 'syz.3.490': attribute type 21 has an invalid length. [ 215.222317][ T7909] netlink: 'syz.3.490': attribute type 21 has an invalid length. [ 215.385467][ T7913] sctp: [Deprecated]: syz.4.492 (pid 7913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.385467][ T7913] Use struct sctp_sack_info instead [ 215.453250][ T7917] bridge_slave_0: left allmulticast mode [ 215.458959][ T7917] bridge_slave_0: left promiscuous mode [ 215.508700][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.523226][ T7917] bridge_slave_1: left allmulticast mode [ 215.528919][ T7917] bridge_slave_1: left promiscuous mode [ 215.534900][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.548953][ T7917] bond0: (slave bond_slave_0): Releasing backup interface [ 215.564210][ T7917] bond0: (slave bond_slave_1): Releasing backup interface [ 215.579256][ T7917] team0: Port device team_slave_0 removed [ 215.589374][ T7917] team0: Port device team_slave_1 removed [ 215.596964][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.606423][ T7917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.746054][ T7922] bridge_slave_0: left allmulticast mode [ 215.761475][ T7922] bridge_slave_0: left promiscuous mode [ 215.781053][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.848440][ T7922] bridge_slave_1: left allmulticast mode [ 215.872366][ T7922] bridge_slave_1: left promiscuous mode [ 215.878395][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.939798][ T7922] bond0: (slave bond_slave_0): Releasing backup interface [ 215.969657][ T7922] bond0: (slave bond_slave_1): Releasing backup interface [ 215.994492][ T7946] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 216.024170][ T7922] team0: Port device team_slave_0 removed [ 216.047699][ T7922] team0: Port device team_slave_1 removed [ 216.064966][ T7922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.149343][ T7946] bond1: entered promiscuous mode [ 216.159519][ T7946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.275832][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.290747][ T7956] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 216.304095][ T7956] netlink: 'syz.3.501': attribute type 7 has an invalid length. [ 216.312556][ T7956] NCSI netlink: No device for ifindex 65584 [ 216.318725][ T7960] NCSI netlink: No device for ifindex 65584 [ 216.319216][ T7947] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 216.338369][ T7947] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 216.355514][ T7947] bond1: (slave gre1): making interface the new active one [ 216.363436][ T7947] gre1: entered promiscuous mode [ 216.370409][ T7947] bond1: (slave gre1): Enslaving as an active interface with an up link [ 216.398985][ T7961] gtp0: entered promiscuous mode [ 216.426112][ T7961] gtp0: entered allmulticast mode [ 216.520298][ T7967] sctp: [Deprecated]: syz.3.503 (pid 7967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.520298][ T7967] Use struct sctp_sack_info instead [ 216.627621][ T7965] bond2: (slave erspan0): Device is not bonding slave [ 216.636775][ T7965] bond2: option active_slave: invalid value (erspan0) [ 216.650980][ T7965] bond2 (unregistering): Released all slaves [ 217.153627][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.170846][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.198283][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.250196][ T7999] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.318593][ T7999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.472825][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.516868][ T8010] bond0: (slave rose0): Enslaving as an active interface with an up link [ 217.575024][ T8015] macvtap1: entered promiscuous mode [ 217.580377][ T8015] vlan0: entered promiscuous mode [ 217.618772][ T8015] macvtap1: entered allmulticast mode [ 217.625331][ T8015] vlan0: entered allmulticast mode [ 217.640705][ T8015] veth0_vlan: entered allmulticast mode [ 217.662537][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.671746][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.720948][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.785229][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 217.856938][ T7999] hsr0 speed is unknown, defaulting to 1000 [ 218.768031][ T8083] validate_nla: 4 callbacks suppressed [ 218.768051][ T8083] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 218.786439][ T8082] x_tables: unsorted underflow at hook 2 [ 218.797080][ T8085] --map-set only usable from mangle table [ 218.832910][ T8085] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 218.850881][ T8085] __nla_validate_parse: 16 callbacks suppressed [ 218.850899][ T8085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.528'. [ 218.881471][ T8085] NCSI netlink: No device for ifindex 0 [ 218.903479][ T8085] netlink: 'syz.1.528': attribute type 29 has an invalid length. [ 218.914603][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 219.095437][ T8098] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æOʫ} [ 260.904790][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.911176][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.344823][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.351289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.341427][ T31] INFO: task kworker/1:3:5837 blocked for more than 143 seconds. [ 370.349284][ T31] Not tainted syzkaller #0 [ 370.355298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.364254][ T31] task:kworker/1:3 state:D stack:24792 pid:5837 tgid:5837 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 370.376605][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 370.383494][ T31] Call Trace: [ 370.386789][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 370.389721][ T31] __schedule+0x1798/0x4cc0 [ 370.394959][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.400677][ T31] ? __pfx___schedule+0x10/0x10 [ 370.405835][ T31] ? schedule+0x91/0x360 [ 370.410120][ T31] schedule+0x165/0x360 [ 370.414449][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.421007][ T31] __mutex_lock+0x7e6/0x1350 [ 370.451134][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.455981][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.475849][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.481034][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.488480][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.494559][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.500655][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.506904][ T31] process_scheduled_works+0xae1/0x17b0 [ 370.512799][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.519209][ T31] worker_thread+0x8a0/0xda0 [ 370.523993][ T31] kthread+0x711/0x8a0 [ 370.528093][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.533267][ T31] ? __pfx_kthread+0x10/0x10 [ 370.537881][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.543158][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.548385][ T31] ? __pfx_kthread+0x10/0x10 [ 370.553224][ T31] ret_from_fork+0x4bc/0x870 [ 370.557843][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.563026][ T31] ? __switch_to_asm+0x39/0x70 [ 370.567809][ T31] ? __switch_to_asm+0x33/0x70 [ 370.572906][ T31] ? __pfx_kthread+0x10/0x10 [ 370.577546][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.582591][ T31] [ 370.585706][ T31] INFO: task syz.2.419:7548 blocked for more than 143 seconds. [ 370.593468][ T31] Not tainted syzkaller #0 [ 370.598420][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.607216][ T31] task:syz.2.419 state:D stack:25960 pid:7548 tgid:7548 ppid:5825 task_flags:0x400040 flags:0x00080003 [ 370.619346][ T31] Call Trace: [ 370.622717][ T31] [ 370.625669][ T31] __schedule+0x1798/0x4cc0 [ 370.630185][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.635132][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.640010][ T31] ? __pfx___schedule+0x10/0x10 [ 370.645003][ T31] ? schedule+0x91/0x360 [ 370.649283][ T31] schedule+0x165/0x360 [ 370.653517][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.659006][ T31] __mutex_lock+0x7e6/0x1350 [ 370.663726][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.668531][ T31] ? rfkill_unregister+0xc8/0x220 [ 370.673627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.678697][ T31] ? __pfx_device_del+0x10/0x10 [ 370.683854][ T31] rfkill_unregister+0xc8/0x220 [ 370.688741][ T31] nfc_unregister_device+0x96/0x2a0 [ 370.693997][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 370.699789][ T31] virtual_ncidev_close+0x56/0x90 [ 370.704900][ T31] __fput+0x44c/0xa70 [ 370.708918][ T31] task_work_run+0x1d4/0x260 [ 370.713573][ T31] ? __pfx_task_work_run+0x10/0x10 [ 370.718720][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 370.724266][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 370.729577][ T31] do_syscall_64+0x2bd/0xfa0 [ 370.734273][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.739526][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.745784][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.750508][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.756456][ T31] RIP: 0033:0x7f631d98f6c9 [ 370.760895][ T31] RSP: 002b:00007ffe81849e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 370.769370][ T31] RAX: 0000000000000000 RBX: 00007f631dbe7da0 RCX: 00007f631d98f6c9 [ 370.777379][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 370.785410][ T31] RBP: 00007f631dbe7da0 R08: 00000000000001d8 R09: 0000001a8184a12f [ 370.793578][ T31] R10: 00007f631dbe7cb0 R11: 0000000000000246 R12: 0000000000033062 [ 370.801630][ T31] R13: 00007f631dbe6180 R14: ffffffffffffffff R15: 00007ffe81849f50 [ 370.809633][ T31] [ 370.812758][ T31] INFO: task syz.0.426:7578 blocked for more than 143 seconds. [ 370.820327][ T31] Not tainted syzkaller #0 [ 370.825860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.834602][ T31] task:syz.0.426 state:D stack:24664 pid:7578 tgid:7577 ppid:5834 task_flags:0x400140 flags:0x00080003 [ 370.846625][ T31] Call Trace: [ 370.849920][ T31] [ 370.852956][ T31] __schedule+0x1798/0x4cc0 [ 370.857515][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.862491][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.867372][ T31] ? __pfx___schedule+0x10/0x10 [ 370.872304][ T31] ? schedule+0x91/0x360 [ 370.876577][ T31] schedule+0x165/0x360 [ 370.880765][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.886306][ T31] __mutex_lock+0x7e6/0x1350 [ 370.890930][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.895777][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 370.901435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.906538][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.911823][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 370.917739][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.924222][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 370.929975][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 370.935180][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 370.940929][ T31] rfkill_set_block+0x1d2/0x440 [ 370.945866][ T31] rfkill_fop_write+0x44b/0x570 [ 370.950746][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 370.956211][ T31] ? security_kernfs_init_security+0x250/0x290 [ 370.962454][ T31] ? rw_verify_area+0x255/0x4d0 [ 370.967315][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.972253][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 370.977654][ T31] vfs_write+0x27e/0xb30 [ 370.982070][ T31] ? __pfx_vfs_write+0x10/0x10 [ 370.986900][ T31] ? __fget_files+0x2a/0x420 [ 370.991600][ T31] ? __fget_files+0x2a/0x420 [ 370.996223][ T31] ? __fget_files+0x3a0/0x420 [ 371.000921][ T31] ? __fget_files+0x2a/0x420 [ 371.005604][ T31] ksys_write+0x145/0x250 [ 371.009997][ T31] ? __pfx_ksys_write+0x10/0x10 [ 371.015165][ T31] ? do_syscall_64+0xbe/0xfa0 [ 371.019908][ T31] do_syscall_64+0xfa/0xfa0 [ 371.024494][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.029726][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.035855][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.040559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.046517][ T31] RIP: 0033:0x7f173f18f6c9 [ 371.050948][ T31] RSP: 002b:00007f173ffbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.059411][ T31] RAX: ffffffffffffffda RBX: 00007f173f3e5fa0 RCX: 00007f173f18f6c9 [ 371.067527][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 371.075569][ T31] RBP: 00007f173f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.083633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.091716][ T31] R13: 00007f173f3e6038 R14: 00007f173f3e5fa0 R15: 00007ffffb206058 [ 371.099724][ T31] [ 371.102840][ T31] INFO: task syz.3.530:8098 blocked for more than 144 seconds. [ 371.110397][ T31] Not tainted syzkaller #0 [ 371.117605][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.126546][ T31] task:syz.3.530 state:D stack:23368 pid:8098 tgid:8096 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 371.138549][ T31] Call Trace: [ 371.141994][ T31] [ 371.144955][ T31] __schedule+0x1798/0x4cc0 [ 371.149472][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.154393][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.159272][ T31] ? __pfx___schedule+0x10/0x10 [ 371.164234][ T31] ? schedule+0x91/0x360 [ 371.168522][ T31] schedule+0x165/0x360 [ 371.172769][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.178260][ T31] __mutex_lock+0x7e6/0x1350 [ 371.182951][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.187742][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.192586][ T31] ? rfkill_register+0x37/0x8e0 [ 371.197461][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.202553][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 371.207511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.212792][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 371.218102][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 371.223822][ T31] rfkill_register+0x37/0x8e0 [ 371.228561][ T31] wiphy_register+0x2231/0x2aa0 [ 371.233722][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 371.238959][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 371.244139][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 371.250235][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 371.255789][ T31] ? ieee80211_register_hw+0x1401/0x40d0 [ 371.261526][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 371.267357][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 371.273336][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 371.279270][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 371.285715][ T31] ? __hrtimer_setup+0x187/0x210 [ 371.290697][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 371.296555][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 371.302450][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 371.308534][ T31] ? trace_kmalloc+0x1f/0xd0 [ 371.313171][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 371.319789][ T31] ? kstrndup+0xbf/0x160 [ 371.324122][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 371.329290][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 371.335080][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.340682][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.345761][ T31] ? __nla_parse+0x40/0x60 [ 371.350208][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 371.356623][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 371.362272][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.368403][ T31] ? bpf_lsm_capable+0x9/0x20 [ 371.373160][ T31] ? security_capable+0x7e/0x2e0 [ 371.378142][ T31] genl_rcv_msg+0x60e/0x790 [ 371.382823][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.387876][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.393547][ T31] ? __asan_memcpy+0x40/0x70 [ 371.398169][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.403681][ T31] netlink_rcv_skb+0x208/0x470 [ 371.408472][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.413364][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.418414][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.423800][ T31] ? down_read+0x1ad/0x2e0 [ 371.428240][ T31] genl_rcv+0x28/0x40 [ 371.432307][ T31] netlink_unicast+0x82f/0x9e0 [ 371.437107][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 371.442474][ T31] ? netlink_sendmsg+0x642/0xb30 [ 371.447424][ T31] ? skb_put+0x11b/0x210 [ 371.451912][ T31] netlink_sendmsg+0x805/0xb30 [ 371.456700][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.462161][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.467134][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.472487][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.477792][ T31] __sock_sendmsg+0x21c/0x270 [ 371.482541][ T31] ____sys_sendmsg+0x505/0x830 [ 371.487337][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.492734][ T31] ? import_iovec+0x74/0xa0 [ 371.497272][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 371.502031][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.507274][ T31] ? __fget_files+0x2a/0x420 [ 371.511914][ T31] ? __fget_files+0x3a0/0x420 [ 371.516615][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 371.521632][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.527124][ T31] ? do_syscall_64+0xbe/0xfa0 [ 371.531887][ T31] do_syscall_64+0xfa/0xfa0 [ 371.536431][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.541865][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.547958][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.552706][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.558648][ T31] RIP: 0033:0x7f139c98f6c9 [ 371.563332][ T31] RSP: 002b:00007f139d8dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.572009][ T31] RAX: ffffffffffffffda RBX: 00007f139cbe5fa0 RCX: 00007f139c98f6c9 [ 371.580003][ T31] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 371.588060][ T31] RBP: 00007f139ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.596071][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.604108][ T31] R13: 00007f139cbe6038 R14: 00007f139cbe5fa0 R15: 00007ffdecb9c558 [ 371.612165][ T31] [ 371.615220][ T31] INFO: task syz.1.532:8105 blocked for more than 144 seconds. [ 371.623042][ T31] Not tainted syzkaller #0 [ 371.627998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.636929][ T31] task:syz.1.532 state:D stack:27016 pid:8105 tgid:8104 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 371.648996][ T31] Call Trace: [ 371.652326][ T31] [ 371.655278][ T31] __schedule+0x1798/0x4cc0 [ 371.659794][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.664708][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.669594][ T31] ? __pfx___schedule+0x10/0x10 [ 371.674715][ T31] ? schedule+0x91/0x360 [ 371.678993][ T31] schedule+0x165/0x360 [ 371.683216][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.688697][ T31] __mutex_lock+0x7e6/0x1350 [ 371.693365][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.698157][ T31] ? genl_rcv_msg+0x10d/0x790 [ 371.703120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.708169][ T31] ? stack_trace_save+0x9c/0xe0 [ 371.713075][ T31] ? radix_tree_lookup+0x240/0x290 [ 371.718211][ T31] genl_rcv_msg+0x10d/0x790 [ 371.722797][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.727695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.732775][ T31] netlink_rcv_skb+0x208/0x470 [ 371.737555][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.742476][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.747536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.752889][ T31] ? down_read+0x1ad/0x2e0 [ 371.757358][ T31] genl_rcv+0x28/0x40 [ 371.761423][ T31] netlink_unicast+0x82f/0x9e0 [ 371.766226][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 371.771564][ T31] ? netlink_sendmsg+0x642/0xb30 [ 371.776528][ T31] ? skb_put+0x11b/0x210 [ 371.780771][ T31] netlink_sendmsg+0x805/0xb30 [ 371.785811][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.791172][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.796124][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.801471][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.806771][ T31] __sock_sendmsg+0x21c/0x270 [ 371.811491][ T31] __sys_sendto+0x3bd/0x520 [ 371.816011][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 371.821029][ T31] ? count_memcg_event_mm+0x21/0x260 [ 371.826440][ T31] ? exc_page_fault+0x82/0x100 [ 371.831270][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 371.836570][ T31] __x64_sys_sendto+0xde/0x100 [ 371.841446][ T31] do_syscall_64+0xfa/0xfa0 [ 371.845995][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.851239][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.857319][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.862174][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.868093][ T31] RIP: 0033:0x7f07f3d9155c [ 371.872549][ T31] RSP: 002b:00007f07f4b95ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 371.880990][ T31] RAX: ffffffffffffffda RBX: 00007f07f4b95fc0 RCX: 00007f07f3d9155c [ 371.889043][ T31] RDX: 0000000000000024 RSI: 00007f07f4b96010 RDI: 0000000000000006 [ 371.897206][ T31] RBP: 0000000000000000 R08: 00007f07f4b95f14 R09: 000000000000000c [ 371.905233][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 371.913233][ T31] R13: 00007f07f4b95f68 R14: 00007f07f4b96010 R15: 0000000000000000 [ 371.921291][ T31] [ 371.924336][ T31] INFO: task syz.4.534:8126 blocked for more than 144 seconds. [ 371.931956][ T31] Not tainted syzkaller #0 [ 371.936904][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.945952][ T31] task:syz.4.534 state:D stack:26888 pid:8126 tgid:8125 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 371.957945][ T31] Call Trace: [ 371.961302][ T31] [ 371.964240][ T31] __schedule+0x1798/0x4cc0 [ 371.968784][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.973693][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.978567][ T31] ? __pfx___schedule+0x10/0x10 [ 371.983536][ T31] ? schedule+0x91/0x360 [ 371.987835][ T31] schedule+0x165/0x360 [ 371.992044][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.997523][ T31] __mutex_lock+0x7e6/0x1350 [ 372.002386][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.007184][ T31] ? genl_rcv_msg+0x10d/0x790 [ 372.012000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.017060][ T31] ? __schedule+0x17ae/0x4cc0 [ 372.021812][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.026952][ T31] genl_rcv_msg+0x10d/0x790 [ 372.031593][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.036466][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.041552][ T31] netlink_rcv_skb+0x208/0x470 [ 372.046326][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.051516][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.056584][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.061972][ T31] ? down_read+0x1ad/0x2e0 [ 372.066411][ T31] genl_rcv+0x28/0x40 [ 372.070395][ T31] netlink_unicast+0x82f/0x9e0 [ 372.075220][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.080535][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.085543][ T31] ? skb_put+0x11b/0x210 [ 372.089813][ T31] netlink_sendmsg+0x805/0xb30 [ 372.094647][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.099958][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.104983][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.110297][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.115803][ T31] __sock_sendmsg+0x21c/0x270 [ 372.120517][ T31] ____sys_sendmsg+0x505/0x830 [ 372.125454][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.130768][ T31] ? import_iovec+0x74/0xa0 [ 372.135320][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 372.140018][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.145308][ T31] ? __fget_files+0x2a/0x420 [ 372.149917][ T31] ? __fget_files+0x3a0/0x420 [ 372.154641][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 372.159602][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.165144][ T31] ? do_syscall_64+0xbe/0xfa0 [ 372.169858][ T31] do_syscall_64+0xfa/0xfa0 [ 372.174442][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.179675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.185890][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.190604][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.196645][ T31] RIP: 0033:0x7f4a4e78f6c9 [ 372.201124][ T31] RSP: 002b:00007f4a4f6de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.209567][ T31] RAX: ffffffffffffffda RBX: 00007f4a4e9e5fa0 RCX: 00007f4a4e78f6c9 [ 372.217629][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 372.225669][ T31] RBP: 00007f4a4e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.233910][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.241927][ T31] R13: 00007f4a4e9e6038 R14: 00007f4a4e9e5fa0 R15: 00007ffcb6f0ca78 [ 372.249943][ T31] [ 372.253055][ T31] INFO: task syz-executor:8144 blocked for more than 145 seconds. [ 372.260863][ T31] Not tainted syzkaller #0 [ 372.265890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.274617][ T31] task:syz-executor state:D stack:28008 pid:8144 tgid:8144 ppid:1 task_flags:0x400040 flags:0x00080000 [ 372.286609][ T31] Call Trace: [ 372.289902][ T31] [ 372.292916][ T31] __schedule+0x1798/0x4cc0 [ 372.297481][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.302391][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.307277][ T31] ? __pfx___schedule+0x10/0x10 [ 372.312241][ T31] ? schedule+0x91/0x360 [ 372.316516][ T31] schedule+0x165/0x360 [ 372.320690][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.326197][ T31] __mutex_lock+0x7e6/0x1350 [ 372.330824][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.335672][ T31] ? rfkill_register+0x37/0x8e0 [ 372.340560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.346127][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 372.351540][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 372.356964][ T31] ? device_initialize+0x24b/0x440 [ 372.362151][ T31] rfkill_register+0x37/0x8e0 [ 372.366864][ T31] hci_register_dev+0x3f5/0x890 [ 372.371811][ T31] vhci_create_device+0x39c/0x650 [ 372.376898][ T31] vhci_write+0x3ce/0x4a0 [ 372.381313][ T31] vfs_write+0x5c9/0xb30 [ 372.385623][ T31] ? __pfx_vhci_write+0x10/0x10 [ 372.390483][ T31] ? __pfx_vfs_write+0x10/0x10 [ 372.395333][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.400657][ T31] ksys_write+0x145/0x250 [ 372.405062][ T31] ? __pfx_ksys_write+0x10/0x10 [ 372.409945][ T31] ? do_syscall_64+0xbe/0xfa0 [ 372.414709][ T31] do_syscall_64+0xfa/0xfa0 [ 372.419236][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.424483][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.430621][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.435368][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.441306][ T31] RIP: 0033:0x7fe833d8e140 [ 372.445721][ T31] RSP: 002b:00007ffcdbd0ea88 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 372.454362][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe833d8e140 [ 372.462396][ T31] RDX: 0000000000000002 RSI: 00007ffcdbd0ea9a RDI: 00000000000000ca [ 372.470384][ T31] RBP: 00007fe833fe67b8 R08: 0000000000000000 R09: 00007fe834b1d6c0 [ 372.478438][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 372.486459][ T31] R13: 0000000000000003 R14: 00007ffcdbd0ede8 R15: 0000000000000000 [ 372.494546][ T31] [ 372.497647][ T31] INFO: task syz-executor:8147 blocked for more than 145 seconds. [ 372.505521][ T31] Not tainted syzkaller #0 [ 372.510473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.519210][ T31] task:syz-executor state:D stack:28008 pid:8147 tgid:8147 ppid:1 task_flags:0x400040 flags:0x00080000 [ 372.531196][ T31] Call Trace: [ 372.534486][ T31] [ 372.537421][ T31] __schedule+0x1798/0x4cc0 [ 372.541979][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.546850][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.551770][ T31] ? __pfx___schedule+0x10/0x10 [ 372.556661][ T31] ? schedule+0x91/0x360 [ 372.560913][ T31] schedule+0x165/0x360 [ 372.565343][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.570868][ T31] __mutex_lock+0x7e6/0x1350 [ 372.575543][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.580345][ T31] ? rfkill_register+0x37/0x8e0 [ 372.585394][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.590455][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 372.595801][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 372.601263][ T31] ? device_initialize+0x24b/0x440 [ 372.606399][ T31] rfkill_register+0x37/0x8e0 [ 372.611144][ T31] hci_register_dev+0x3f5/0x890 [ 372.616034][ T31] vhci_create_device+0x39c/0x650 [ 372.621159][ T31] vhci_write+0x3ce/0x4a0 [ 372.625520][ T31] vfs_write+0x5c9/0xb30 [ 372.629832][ T31] ? __pfx_vhci_write+0x10/0x10 [ 372.634759][ T31] ? __pfx_vfs_write+0x10/0x10 [ 372.639546][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.644917][ T31] ksys_write+0x145/0x250 [ 372.649275][ T31] ? __pfx_ksys_write+0x10/0x10 [ 372.654196][ T31] ? do_syscall_64+0xbe/0xfa0 [ 372.658941][ T31] do_syscall_64+0xfa/0xfa0 [ 372.663692][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.668952][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.675255][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.679956][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.685931][ T31] RIP: 0033:0x7fa76ab8e140 [ 372.690387][ T31] RSP: 002b:00007fff2639a9e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 372.698849][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa76ab8e140 [ 372.706870][ T31] RDX: 0000000000000002 RSI: 00007fff2639a9fa RDI: 00000000000000ca [ 372.714904][ T31] RBP: 00007fa76ade67b8 R08: 0000000000000000 R09: 00007fa76b91d6c0 [ 372.722933][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 372.730903][ T31] R13: 0000000000000003 R14: 00007fff2639ad48 R15: 0000000000000000 [ 372.738969][ T31] [ 372.742078][ T31] [ 372.742078][ T31] Showing all locks held in the system: [ 372.749807][ T31] 1 lock held by khungtaskd/31: [ 372.754713][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 372.764705][ T31] 2 locks held by getty/5585: [ 372.769380][ T31] #0: ffff88803307d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 372.779188][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 372.789546][ T31] 3 locks held by kworker/1:3/5837: [ 372.794834][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 372.805895][ T31] #1: ffffc9000426fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 372.819430][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 372.830938][ T31] 2 locks held by syz.2.419/7548: [ 372.836005][ T31] #0: ffff88805753c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 372.845871][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 372.856048][ T31] 2 locks held by syz.0.426/7578: [ 372.861151][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 372.871359][ T31] #1: ffff88805753c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 372.881125][ T31] 6 locks held by kworker/u8:10/7777: [ 372.886511][ T31] 3 locks held by syz.3.530/8098: [ 372.891794][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.900064][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 372.909279][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 372.919498][ T31] 2 locks held by syz.1.532/8105: [ 372.924681][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.932936][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 372.941995][ T31] 2 locks held by syz.4.534/8126: [ 372.947028][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.955280][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 372.964372][ T31] 2 locks held by syz-executor/8144: [ 372.969680][ T31] #0: ffff88804aebf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 372.979762][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 372.989791][ T31] 2 locks held by syz-executor/8147: [ 372.995128][ T31] #0: ffff88807a23f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.005381][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.015398][ T31] 2 locks held by syz-executor/8165: [ 373.020697][ T31] #0: ffff8880311e4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.030856][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.040890][ T31] 2 locks held by syz-executor/8166: [ 373.046237][ T31] #0: ffff888054c8f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.056376][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.066395][ T31] 2 locks held by syz-executor/8170: [ 373.074284][ T31] #0: ffff888054eac118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.084366][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.094460][ T31] 2 locks held by syz-executor/8175: [ 373.099771][ T31] #0: ffff8880575f5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.109873][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.120046][ T31] 2 locks held by syz-executor/8178: [ 373.125390][ T31] #0: ffff8880575f7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.135541][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.145552][ T31] 2 locks held by syz-executor/8181: [ 373.150852][ T31] #0: ffff88807e269918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.160967][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.171041][ T31] 2 locks held by syz-executor/8182: [ 373.176443][ T31] #0: ffff8880240a1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.186582][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.196630][ T31] 2 locks held by syz-executor/8186: [ 373.201999][ T31] #0: ffff888057ac3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.212104][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.222314][ T31] 2 locks held by syz-executor/8191: [ 373.227614][ T31] #0: ffff88805629d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.237792][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.247833][ T31] 2 locks held by syz-executor/8194: [ 373.253172][ T31] #0: ffff88807e227118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.263287][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.273292][ T31] 2 locks held by syz-executor/8197: [ 373.278588][ T31] #0: ffff88807df52118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.288724][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.298763][ T31] 2 locks held by syz-executor/8199: [ 373.304154][ T31] #0: ffff88807f33f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.314243][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.324270][ T31] 2 locks held by syz-executor/8201: [ 373.329566][ T31] #0: ffff88802615b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.339864][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.349922][ T31] [ 373.352284][ T31] ============================================= [ 373.352284][ T31] [ 373.360694][ T31] NMI backtrace for cpu 1 [ 373.360714][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.360729][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.360738][ T31] Call Trace: [ 373.360744][ T31] [ 373.360750][ T31] dump_stack_lvl+0x189/0x250 [ 373.360775][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.360795][ T31] ? __pfx__printk+0x10/0x10 [ 373.360819][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.360837][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.360855][ T31] ? __pfx__printk+0x10/0x10 [ 373.360872][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.360897][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.360916][ T31] watchdog+0xf60/0xfa0 [ 373.360934][ T31] ? watchdog+0x1e2/0xfa0 [ 373.360952][ T31] kthread+0x711/0x8a0 [ 373.360974][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.360987][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.361025][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.361043][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361062][ T31] ret_from_fork+0x4bc/0x870 [ 373.361090][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.361117][ T31] ? __switch_to_asm+0x39/0x70 [ 373.361132][ T31] ? __switch_to_asm+0x33/0x70 [ 373.361147][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361173][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.361207][ T31] [ 373.500452][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.505750][ C0] NMI backtrace for cpu 0 [ 373.505775][ C0] CPU: 0 UID: 0 PID: 144 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 373.505793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.505804][ C0] Workqueue: events_unbound toggle_allocation_gate [ 373.505825][ C0] RIP: 0010:preempt_count_sub+0x5/0x170 [ 373.505844][ C0] Code: 8f e8 8f d4 95 00 e9 5c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <53> 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 60 93 79 99 48 c1 e8 03 [ 373.505857][ C0] RSP: 0018:ffffc90002e47570 EFLAGS: 00000047 [ 373.505871][ C0] RAX: ffffffff8e048900 RBX: ffff88801a058a00 RCX: 0000000000000000 [ 373.505882][ C0] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: 0000000000000001 [ 373.505892][ C0] RBP: ffffc90002e47690 R08: dffffc0000000000 R09: 000000000002f7df [ 373.505904][ C0] R10: dffffc0000000000 R11: ffffed100340b0ec R12: ffff88801a058000 [ 373.505916][ C0] R13: 0000000000000000 R14: 0000000000000008 R15: ffff8880b8838f40 [ 373.505926][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 373.505939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.505950][ C0] CR2: 000056144ada9000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 373.505964][ C0] Call Trace: [ 373.505970][ C0] [ 373.505977][ C0] flush_tlb_mm_range+0xbfb/0x12d0 [ 373.506010][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 373.506035][ C0] ? kasan_check_range+0x2b0/0x2c0 [ 373.506050][ C0] ? __text_poke+0x636/0xa10 [ 373.506073][ C0] ? __kmalloc_node_noprof+0xe5/0x800 [ 373.506097][ C0] __text_poke+0x6e9/0xa10 [ 373.506121][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 373.506143][ C0] ? __kmalloc_node_noprof+0xe5/0x800 [ 373.506166][ C0] ? __pfx___text_poke+0x10/0x10 [ 373.506185][ C0] ? rcu_is_watching+0x15/0xb0 [ 373.506204][ C0] ? trace_contention_end+0x39/0x120 [ 373.506232][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 373.506261][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 373.506286][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 373.506318][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 373.506343][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 373.506368][ C0] static_key_enable+0x1a/0x20 [ 373.506390][ C0] toggle_allocation_gate+0xad/0x240 [ 373.506406][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 373.506421][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.506449][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.506466][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.506483][ C0] process_scheduled_works+0xae1/0x17b0 [ 373.506516][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.506542][ C0] worker_thread+0x8a0/0xda0 [ 373.506561][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.506587][ C0] ? __kthread_parkme+0x7b/0x200 [ 373.506611][ C0] kthread+0x711/0x8a0 [ 373.506634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 373.506651][ C0] ? __pfx_kthread+0x10/0x10 [ 373.506673][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.506696][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.506717][ C0] ? __pfx_kthread+0x10/0x10 [ 373.506738][ C0] ret_from_fork+0x4bc/0x870 [ 373.506756][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 373.506776][ C0] ? __switch_to_asm+0x39/0x70 [ 373.506789][ C0] ? __switch_to_asm+0x33/0x70 [ 373.506801][ C0] ? __pfx_kthread+0x10/0x10 [ 373.506823][ C0] ret_from_fork_asm+0x1a/0x30 [ 373.506846][ C0]