last executing test programs: 24.405125941s ago: executing program 2 (id=658): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000091}, 0x4080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 24.201159533s ago: executing program 4 (id=661): r0 = socket(0x25, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x1d, 0x19, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x9, [0x4]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x58, {0x3, 0x14, 0x0, 0x6070, [0x6, 0x4, 0x7, 0x1, 0x8, 0xd, 0x8000000000000001, 0x5, 0xdd15, 0x6]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0xd, 0xdf3, [0xba, 0x10000, 0x5, 0x5, 0x0, 0x3]}}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x8}]}, 0xd8) close(r0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x1021, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000011c0)={&(0x7f0000000140)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000001180)={&(0x7f0000000180)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4011}, 0x80) bind$vsock_stream(r0, &(0x7f0000001200)={0x28, 0x0, 0xffffffff}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1dc, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @remote, 0xfffffffe}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4041}, 0x40c1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'ip6tnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xc, 0xc, 0x3, @local, @mcast1, 0x20, 0x8}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x4) getpeername$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001800)={0x1, 0x58, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000001880)=[0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000001900)=[{}], 0x8, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x7f, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000020c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002080)={&(0x7f0000001b40)={0x528, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.,![--\'\\-@\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "fa3522502cfce4a5e854f9dd313700132bfb5c51a2efb78baa7f3844dcf9e65cee32f8b389db42d21a5f4c77b226d6c65c14b831263c3662ab2f6bf403185a5b32f163057bde1fc4efca9e2810677659a53cddbf391a54e916f5edd01ae4e91cc7fe1aecf7f26e149d81a44f7e6335721d634e22799c8057ee3b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\{:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#\']E*%&)+-\\{}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\!\x95\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "241860975e076083668bccf1876ac915defddd5ad0cbb804ee998094b113780951d0642d90c4583847d1e4022fdb81ad8942301e42f0c6d7c60155364be423d53f4010e669a34de58c0c20f29f9e0f9beca553afd8c8c1721f1edd5ac1215a22a80d154090b39b3bccb24efb3f6d573cac3e6f2587fd86732582b646caba6d5f87a8c45ccd4428537280e4b7dd2efd10b4f18a35f4e22949efa04a7c5ab811a892d636b51d5ca00bd2139b24c4d537cf7d3be15c1ed1daf78326f132283e324e869ca7a196f33fb62d975e805703127ec867fa9f71318c34c315"}, @ETHTOOL_A_BITSET_MASK={0x58, 0x5, "535425eff62feac0325bb1ac82a341f7b211d4757992bb57d20781456e23c9848f28d28a1d05a51d1fbfa83f8f737dd2afe002dbf7a24f39e57aadc700605ce8e1006a450e9546bf7aa024b5374ad47d0002cbe9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\xf4{\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x528}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000002100)={0x1}) sendto$inet6(r0, &(0x7f0000002140)="55be3adcd58b04bc80b0", 0xa, 0x4000, &(0x7f0000002180)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}, 0x5c50ddba}, 0x1c) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000021c0), &(0x7f0000002200)=0x8) clock_gettime(0x0, &(0x7f0000003f40)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000003e40)=[{{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/238, 0xee}, {&(0x7f00000023c0)=""/68, 0x44}, {&(0x7f0000002440)=""/131, 0x83}, {&(0x7f0000002500)=""/252, 0xfc}, {&(0x7f0000002600)=""/184, 0xb8}, {&(0x7f00000026c0)=""/187, 0xbb}], 0x6, &(0x7f0000002800)=""/68, 0x44}, 0xf}, {{&(0x7f0000002880)=@isdn, 0x80, &(0x7f0000003940)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/2, 0x2}], 0x2, &(0x7f0000003980)=""/4, 0x4}}, {{&(0x7f00000039c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003a40)=""/116, 0x74}, {&(0x7f0000003ac0)=""/38, 0x26}, {&(0x7f0000003b00)=""/97, 0x61}], 0x3}, 0x8000}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003bc0)=""/240, 0xf0}, {&(0x7f0000003cc0)=""/217, 0xd9}], 0x2, &(0x7f0000003e00)=""/53, 0x35}, 0x5}], 0x4, 0x40002100, &(0x7f0000003f80)={r9, r10+60000000}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004400)={&(0x7f0000004180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0x8, [@enum64={0xc, 0xa, 0x0, 0x13, 0x1, 0xf, [{0xa, 0x6, 0x8000}, {0xe, 0x2, 0x800}, {0x7, 0x401, 0xfffffffd}, {0x2, 0x6, 0x800}, {0x7, 0x937, 0x3}, {0x4, 0x1, 0x8}, {0xd, 0xa, 0x2}, {0x10, 0x1ff, 0x86}, {0x9, 0x5, 0xddfd}, {0xd, 0x5, 0x40}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0xe, 0x2, 0x4}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x3}, @union={0x0, 0x9, 0x0, 0x5, 0x1, 0x4, [{0xe, 0x5, 0x4}, {0x0, 0x2, 0x10000}, {0x9, 0x3}, {0xc, 0x0, 0x4}, {0x5, 0x3, 0xfffffffb}, {0x9, 0x5, 0x8}, {0x9, 0x4, 0x5}, {0xf, 0x0, 0x1000}, {0x4, 0x1, 0x2}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x4f, 0x1}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x5f, 0x5f]}}, &(0x7f0000004300)=""/211, 0x160, 0xd3, 0x0, 0xffffffd0}, 0x28) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005700)=@bpf_tracing={0x1a, 0x17, &(0x7f00000044c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, [@exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x3, 0x1, 0x8, 0x0, 0x408}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x6, 0xb, 0x1, 0x100}]}, &(0x7f0000004580)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000045c0)=""/4096, 0x40f00, 0x29, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000055c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000005600)={0x4, 0xc, 0x10000, 0x3}, 0x10, 0x14c0f, 0xffffffffffffffff, 0x6, &(0x7f0000005640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000005680)=[{0x1, 0x5, 0xc, 0x3}, {0x4, 0x2, 0x6, 0xa}, {0x4, 0x3, 0x2, 0x5}, {0x3, 0x3, 0x9, 0x5}, {0x2, 0x4, 0x8, 0x8}, {0x5, 0x3, 0xa, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005840)={{0x1, 0xffffffffffffffff}, &(0x7f00000057c0), &(0x7f0000005800)}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005880)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', r3, r8, 0x2, 0x1, 0x4}, 0x50) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffff3ba, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005a80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000004000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfceb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000040c0)='syzkaller\x00', 0x4, 0x72, &(0x7f0000004100)=""/114, 0x41000, 0x0, '\x00', 0x0, 0x1c, r12, 0x8, &(0x7f0000004440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000004480)={0x3, 0x5, 0xfffff824, 0x1}, 0x10, 0x286f0, r13, 0x1, &(0x7f0000005a00)=[r14, r15, 0xffffffffffffffff, 0xffffffffffffffff, r16, 0xffffffffffffffff], &(0x7f0000005a40)=[{0x2, 0x1, 0x5, 0x7}], 0x10, 0x9}, 0x94) 24.119816088s ago: executing program 4 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x84, @local, 0x4e22, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x9a}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x514}]}}]}, 0x38}}, 0x20008850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 21.093402332s ago: executing program 2 (id=695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb, r3}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 20.981659048s ago: executing program 2 (id=696): socket(0x10, 0x3, 0x0) epoll_create1(0x80000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20.850091257s ago: executing program 4 (id=697): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xa5}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xa5}}}}}}, 0x0) (async) 20.83617761s ago: executing program 4 (id=699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='scmi_rx_done\x00', 0xffffffffffffffff, 0x0, 0x104}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6211, 0x12000000, 0x0, 0x0) connect$x25(r1, &(0x7f0000000a80), 0x12) (async) connect$x25(r1, &(0x7f0000000a80), 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000005000000040000007b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000054066540b8bfb0bf58059be1fec83b3dcdf7db8240c5a45480250a77969b725831d7891ac42365fbcc840d4ebe1b55a70c5c7112590f63d9e6f544bf22539e28c93ceaaa6df8b2cf7391010400000000000075a08481b3675df5f259d4e5ea45af6a44bd02e6e6be59fa5af92413ff6a74dad39f96e184aeec528982e5a9f8ecfbe69587c2a8fd6b20d669fb59187da4edc266b1a8cd38afa6c1d2e4a8e5c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x48050) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) (async) listen(r6, 0x8) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)=' ', 0x1, 0x64890, 0x0, 0xfe68) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040), 0x8) 20.713079217s ago: executing program 4 (id=700): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0x10, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0x10, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, &(0x7f0000001040)) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xd, 0x2020}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='afs_notify_call\x00', r4, 0x0, 0x3}, 0x18) 20.444721966s ago: executing program 1 (id=702): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x7, 0x4, 0x5, 0x8000, 0xffffffffffffffff, 0xfbfffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r0, 0x0, 0x0, 0xffffffffffffff0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000001740)={0xd92, {{0xa, 0x4e20, 0x7fff, @private1, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x449a}}}, 0x108) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000003500000280012800b00010067656e65766500041800028014000700ff0100000000000000a71e951863b0c22c00030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 20.275188054s ago: executing program 1 (id=703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) bind$tipc(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) 20.054047248s ago: executing program 1 (id=705): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x1) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 19.933719285s ago: executing program 2 (id=707): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r4, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000005b80)=""/202, 0xca}], 0x1}, 0x439}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/106, 0x6a}, 0x6}, {{0x0, 0x0, 0x0}, 0xad6a}, {{0x0, 0x0, &(0x7f00000035c0)}, 0x9}], 0x4, 0x0, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x2, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) (async, rerun: 32) r9 = socket(0x1d, 0x2, 0x6) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) 19.932283362s ago: executing program 1 (id=708): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xf, 0x7, 0x5, 0x4, 0xfb, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000d510000100000000000088e089f78ec8d904d011ce59040000000a00000a6c000000060a01040000000000000000026174630000002c00028014000300f4f03b2200000000020007116b619796090001006c3274700000000008000240000000008900010073797a30000000000900020073797a32000000001400000011000100400000e7ff0000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000d510000100000000000088e089f78ec8d904d011ce59040000000a00000a6c000000060a01040000000000000000026174630000002c00028014000300f4f03b2200000000020007116b619796090001006c3274700000000008000240000000008900010073797a30000000000900020073797a32000000001400000011000100400000e7ff0000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 19.843702759s ago: executing program 0 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5da6d360b3"}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=r3, @ANYBLOB="010000000300000000000700000008000300", @ANYRES32=r3, @ANYRESOCT=r0], 0x138}}, 0x0) 19.780674015s ago: executing program 1 (id=710): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.721766854s ago: executing program 4 (id=711): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvfrom$rxrpc(r3, &(0x7f00000004c0)=""/218, 0xda, 0x10000, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000180)) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x8, 0xfffffffffffffff9}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), 0x4) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 19.682140381s ago: executing program 0 (id=712): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) socket(0x10, 0x80002, 0x7ff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) recvmmsg$unix(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x28, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000200f305000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=@newtfilter={0x10c4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {0x0, 0xc}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x108c, 0x2, [@TCA_FLOWER_ACT={0x1080, 0x3, [@m_skbmod={0x107c, 0xe, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3, 0x3, 0x38, 0x9}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xafe3}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0xa8736bbd1ac8b5c2}}}}]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x10c4}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) 19.649645501s ago: executing program 1 (id=713): r0 = socket(0xa, 0x2, 0x3a) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020201603752ac9d03851923f701f3133308e71a8bc224292f88"], 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x2, 0x0, 0x0, 0x5, 0x1, 0x7}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) shutdown(r9, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}, {0x0, 0x2}], 0x2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0xfffff001}]}, 0x10) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffda1, 0x6, 0x0, 0x0, @u64=0x400000000007fff}]}]}, 0x28}}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r13}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 19.16070506s ago: executing program 0 (id=714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f07081c00000028bd7000fbdbdf25050006003c8000000aef4d21ffffff09fe8000000000000000000000000000bb010000000000000002000a0034000000030000000000000005000000000000000000000000a5a263380000000000000000000000011d0004140e000900200300003bd05beab8f4effd4c0a3cee38556a8916eb58bf3c888edcc030678ca87f3facb1fdfd6df800b175b529a4dd3910d6af006fd67d8f9aff04dbb947fef287d78b0ed34ab25c525c9257cdf204bd9fc10aac1b24dee8efe133d2a8758e01000000000000"], 0xe0}}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f00000000c0)=0xa23c, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000006c0)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@gettaction={0x28, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000480)=""/245, 0xf5}], 0x3, &(0x7f0000000580)=""/146, 0x92}, 0x3}], 0x1, 0x2000, &(0x7f0000000680)={0x0, 0x3938700}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'ipvlan1\x00', {}, {0xff}, 0xc, 0x2, 0x54}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'veth1_virt_wifi\x00', 'hsr0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x27, 0x14, 0x0, &(0x7f0000000000)="52e12be89f1a3b7a479dd8bd88a8", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x88) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000ea0f00000008000600000000001800018014000200776c616e310000000000000000000000bc36e3371d926fdcc69189fd5de3a54837d322e7efec8279e51d92641b453be83f75f7479018e7315f90dddcbf61563c0b3be011beac61edc55e68124b0d0e54fe32c9711873832bb61bf1c91f8ed1aa1c33dd42174ebf759048cf2f0c0c836c4e2ba28c6a"], 0x34}}, 0x80) sendto$inet6(r1, &(0x7f0000000700)="be919ba0c90fbc157bfad967549bd7e12ffec4d1fa21616129d512692d40229dfc95fbf98e34f552eab0beea315dd9b304589f4ecc1b0bb80927a4d9fc6294875a0c63dc5466d6a81af7d906d52ede4764ef80ae840696a3255d1c66f93047abb1125c473292c44440c5aa0b1403f1dfbb9785b57109db2705ed639caa6e40949a", 0x81, 0x20000044, &(0x7f00000007c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) 19.160044768s ago: executing program 2 (id=715): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) 18.640772617s ago: executing program 2 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0414f9f4100009040080000000010200020002000008001f00fdff0000", 0x24) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x20040400) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0x7, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 18.638746916s ago: executing program 0 (id=719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18.618137308s ago: executing program 0 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0xfffffffe, 0x25dfdc02, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a3c000000120a010200000000000000000200000009000200737905000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 17.633843426s ago: executing program 0 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r10, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r10, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/183, 0xb7}], 0x1}, 0x1000}], 0x1, 0x2020, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r11, 0x4018f50b, &(0x7f00000001c0)={0x1, 0xe4, 0x2}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.499717769s ago: executing program 3 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r3 = socket(0xa, 0x3, 0x87) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r5, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, &(0x7f0000000180)=0x4) sendmmsg$unix(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xff}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) 15.409135705s ago: executing program 3 (id=735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800001, 0x12, r2, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758", 0x20}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(r7, &(0x7f0000000b00)={0xa, 0xe22}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000c40), 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0xc1) getsockopt$rose(r10, 0x104, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendfile(r0, r1, 0x0, 0x800) 15.245156776s ago: executing program 3 (id=736): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000000500000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 15.215066291s ago: executing program 3 (id=737): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r3 = accept4$vsock_stream(r2, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) pwrite64(r3, &(0x7f00000005c0)="746728649e99e8c7cee8a7a5658f04c3e063ffccadc958dfb739f4f4f4999e6e5f87a4e49b5fd7925db9b9fae336acb9f37acefe0e85c5c2a240e7e231adce21d16883bf62973abfebf0065b005f5c95", 0x50, 0x4) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x18) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@expire={0x110, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {{{@in6=@remote, @in6=@remote, 0x4e24, 0x8, 0x4e22, 0x6, 0xa, 0x0, 0x80, 0x3b, r4, r5}, {@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d2, 0xff}, @in=@private=0xa010101, {0x800, 0x3, 0x0, 0x72, 0x7, 0x2, 0x40}, {0x2, 0x31e, 0x8, 0x10000000000000}, {0xa, 0x1, 0x6}, 0x70bd2d, 0x0, 0x2, 0x3, 0xf6, 0x12}, 0x7f}, [@replay_thresh={0x8, 0xb, 0x9}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2d, 0x3}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x1, @private0, 0xffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4], 0x40}}], 0x1, 0x48040) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) accept4$vsock_stream(r2, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) (async) pwrite64(r3, &(0x7f00000005c0)="746728649e99e8c7cee8a7a5658f04c3e063ffccadc958dfb739f4f4f4999e6e5f87a4e49b5fd7925db9b9fae336acb9f37acefe0e85c5c2a240e7e231adce21d16883bf62973abfebf0065b005f5c95", 0x50, 0x4) (async) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@private1}}, {{}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x18) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r7, 0x0) (async) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@expire={0x110, 0x18, 0x300, 0x70bd2a, 0x25dfdbfe, {{{@in6=@remote, @in6=@remote, 0x4e24, 0x8, 0x4e22, 0x6, 0xa, 0x0, 0x80, 0x3b, r4, r5}, {@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d2, 0xff}, @in=@private=0xa010101, {0x800, 0x3, 0x0, 0x72, 0x7, 0x2, 0x40}, {0x2, 0x31e, 0x8, 0x10000000000000}, {0xa, 0x1, 0x6}, 0x70bd2d, 0x0, 0x2, 0x3, 0xf6, 0x12}, 0x7f}, [@replay_thresh={0x8, 0xb, 0x9}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2d, 0x3}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x1, @private0, 0xffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4], 0x40}}], 0x1, 0x48040) (async) 15.125817102s ago: executing program 3 (id=738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09012bbd7000fddbdf250100000004000180100002800c00018008"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000d91ff11dbd96a5c9be274b74e100", @ANYRES8=r2, @ANYBLOB="00042cbd7000fbdbdf2508000000cc000280c400038018000180120002006563622d63617374362d61767800000014000180040003000500020000000000040003000400018008000180040003003800018008000100900000000400030004000300080001000800000004000300040003000800010003000000040003000500020000000000500001800800010000000000120002006563622d63617374362d6176780000000b000200405d2a2b5ddb000008000100060000000400030004000300120002006563622d63617374362d61767800000004000100"], 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x80) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) ppoll(&(0x7f0000000780)=[{r5, 0x2}, {r1, 0x8}, {0xffffffffffffffff, 0x4c4}, {0xffffffffffffffff, 0x14}], 0x4, &(0x7f00000007c0), &(0x7f0000000800)={[0x4]}, 0x8) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') 15.125151231s ago: executing program 3 (id=739): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x4810) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000001c0)="9fd122ec84cbca48fdc31bf04768691bd15d9f46abd252f9340f99225414387a1913b411b63b1150f249b73712c713e563019102553393ffd9444eb62be8d63efbd7d2dd4ca353116e75377e345dae6a2b0c551f6d5fa42954f8d4cfe5d317dd5f99d11bdb24a5d17773590d2506ab74f5e7123330c050f2413fdcf0764b3ee7b3003055f2c7aa3cee04a60cf9c639ffb159972e9c5a1d7fdd97d3", 0x9b}, {&(0x7f0000000280)="1141b51dcbd68f2e4a2cba4725ab2a2fce79b77c5f78b2bd3d86f9303865ae4cae8332fefcbea3d285324ee2d33f1a4cdbcd934d320dd87643400162f3f5397626e28959fc24805ee37f81420349eea75913b636df9fbba410cb", 0x5a}, {&(0x7f0000000300)="0f103645f36fcba90a7560f47a9a9b6f92d5f8682b35b99aef007128d3368ef15520f6b010cccb76979638e3cc32", 0x2e}, {&(0x7f0000000900)="4bac83819c56604999b970149e7ba54ab47aaf2dc06acd7490cae829e70c346c69f4acb047f3c33ebb6304c7aa4797d3fd655c6b0c9d5628c38909fc90c771487a7f48befb576750c3381b6c08d99eb35e7f61f1b6ea7d0fc6cb09de4537cff5d6839938ca1288bd71d4aab1cf795a52cb5fac5efd15bef05239e28db7aedf9c21b9a925b6e3bdc7bd883423ca9df9d75fc45ca3d07c15bae0d47b38136494db42d252892af427db08d17086dba35c1a9f75c2671fcf1733c9c3511c515b1cab754edd83a8488adda24a767f40c4b54c830d5359d0861ea0c04683839b095416fc69b532eac792333053f5506e73", 0xee}, {&(0x7f0000000a00)="f00dc2e2b817e1de9fd0ecaa8df2518a7426e16c469838fce656578faf62f6ae09ad471091aeb45c6296595329df619cc91a305385845d57099b47709ef070899f4c43d6ced0ee812cffb414d131fe546f2bb053834f8450499193858f9cd28d14689deeeffe58159ae7936b459452298c8e7127fcddedda70d67f3f39b2699145166f30323dbd770cc4aa22f84c91e1bdb4cd55ad268bbbc8d079c59a7b12355d83028f4803235ef7422bed3fe12c5d82e7f9efd26b6a807d1851131301a24e98130b15c3e59d", 0xc7}, {&(0x7f0000000340)="a7dee580136debbba0467066ab048be3d11bf87717431bf08cb800b37f8b9d", 0x1f}], 0x6, 0x0, 0x0, 0x20040000}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b40)=""/73, 0x8}) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c040}, 0x24000010) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) 4.080576285s ago: executing program 32 (id=713): r0 = socket(0xa, 0x2, 0x3a) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020201603752ac9d03851923f701f3133308e71a8bc224292f88"], 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x2, 0x0, 0x0, 0x5, 0x1, 0x7}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) shutdown(r9, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}, {0x0, 0x2}], 0x2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0xfffff001}]}, 0x10) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffda1, 0x6, 0x0, 0x0, @u64=0x400000000007fff}]}]}, 0x28}}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r13}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 4.059665568s ago: executing program 33 (id=711): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvfrom$rxrpc(r3, &(0x7f00000004c0)=""/218, 0xda, 0x10000, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000180)) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x8, 0xfffffffffffffff9}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0), 0x4) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.031531564s ago: executing program 34 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0414f9f4100009040080000000010200020002000008001f00fdff0000", 0x24) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x20040400) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0x7, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 2.017532799s ago: executing program 35 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r10, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r10, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/183, 0xb7}], 0x1}, 0x1000}], 0x1, 0x2020, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r11, 0x4018f50b, &(0x7f00000001c0)={0x1, 0xe4, 0x2}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=739): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x4810) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000001c0)="9fd122ec84cbca48fdc31bf04768691bd15d9f46abd252f9340f99225414387a1913b411b63b1150f249b73712c713e563019102553393ffd9444eb62be8d63efbd7d2dd4ca353116e75377e345dae6a2b0c551f6d5fa42954f8d4cfe5d317dd5f99d11bdb24a5d17773590d2506ab74f5e7123330c050f2413fdcf0764b3ee7b3003055f2c7aa3cee04a60cf9c639ffb159972e9c5a1d7fdd97d3", 0x9b}, {&(0x7f0000000280)="1141b51dcbd68f2e4a2cba4725ab2a2fce79b77c5f78b2bd3d86f9303865ae4cae8332fefcbea3d285324ee2d33f1a4cdbcd934d320dd87643400162f3f5397626e28959fc24805ee37f81420349eea75913b636df9fbba410cb", 0x5a}, {&(0x7f0000000300)="0f103645f36fcba90a7560f47a9a9b6f92d5f8682b35b99aef007128d3368ef15520f6b010cccb76979638e3cc32", 0x2e}, {&(0x7f0000000900)="4bac83819c56604999b970149e7ba54ab47aaf2dc06acd7490cae829e70c346c69f4acb047f3c33ebb6304c7aa4797d3fd655c6b0c9d5628c38909fc90c771487a7f48befb576750c3381b6c08d99eb35e7f61f1b6ea7d0fc6cb09de4537cff5d6839938ca1288bd71d4aab1cf795a52cb5fac5efd15bef05239e28db7aedf9c21b9a925b6e3bdc7bd883423ca9df9d75fc45ca3d07c15bae0d47b38136494db42d252892af427db08d17086dba35c1a9f75c2671fcf1733c9c3511c515b1cab754edd83a8488adda24a767f40c4b54c830d5359d0861ea0c04683839b095416fc69b532eac792333053f5506e73", 0xee}, {&(0x7f0000000a00)="f00dc2e2b817e1de9fd0ecaa8df2518a7426e16c469838fce656578faf62f6ae09ad471091aeb45c6296595329df619cc91a305385845d57099b47709ef070899f4c43d6ced0ee812cffb414d131fe546f2bb053834f8450499193858f9cd28d14689deeeffe58159ae7936b459452298c8e7127fcddedda70d67f3f39b2699145166f30323dbd770cc4aa22f84c91e1bdb4cd55ad268bbbc8d079c59a7b12355d83028f4803235ef7422bed3fe12c5d82e7f9efd26b6a807d1851131301a24e98130b15c3e59d", 0xc7}, {&(0x7f0000000340)="a7dee580136debbba0467066ab048be3d11bf87717431bf08cb800b37f8b9d", 0x1f}], 0x6, 0x0, 0x0, 0x20040000}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b40)=""/73, 0x8}) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c040}, 0x24000010) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 66.022309][ T5817] cgroup: Unknown subsys name 'net' [ 66.170244][ T5817] cgroup: Unknown subsys name 'cpuset' [ 66.179243][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.666445][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.737459][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.746942][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.755432][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.763090][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.771233][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.780390][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.791140][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.810709][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.817496][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.820437][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.825360][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.833531][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.847406][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.848302][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.855403][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.862565][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.873770][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.877575][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.883627][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.897495][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.905289][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.905523][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.920717][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.936303][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.944578][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.421454][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 70.629466][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 70.681190][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.766230][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.840716][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.848465][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.855791][ T5841] bridge_slave_0: entered allmulticast mode [ 70.863340][ T5841] bridge_slave_0: entered promiscuous mode [ 70.885613][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.911192][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.918670][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.925815][ T5841] bridge_slave_1: entered allmulticast mode [ 70.933306][ T5841] bridge_slave_1: entered promiscuous mode [ 71.068146][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.077660][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.085390][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.093272][ T5835] bridge_slave_0: entered allmulticast mode [ 71.100397][ T5835] bridge_slave_0: entered promiscuous mode [ 71.122825][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.130195][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.137515][ T5827] bridge_slave_0: entered allmulticast mode [ 71.144425][ T5827] bridge_slave_0: entered promiscuous mode [ 71.152429][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.159645][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.167182][ T5827] bridge_slave_1: entered allmulticast mode [ 71.174708][ T5827] bridge_slave_1: entered promiscuous mode [ 71.184007][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.193666][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.201050][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.208350][ T5835] bridge_slave_1: entered allmulticast mode [ 71.215505][ T5835] bridge_slave_1: entered promiscuous mode [ 71.227469][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.234606][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.242222][ T5828] bridge_slave_0: entered allmulticast mode [ 71.249366][ T5828] bridge_slave_0: entered promiscuous mode [ 71.294710][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.302562][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.309803][ T5828] bridge_slave_1: entered allmulticast mode [ 71.316987][ T5828] bridge_slave_1: entered promiscuous mode [ 71.375949][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.389308][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.391389][ T5841] team0: Port device team_slave_0 added [ 71.395733][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.408487][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.441025][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.455263][ T5841] team0: Port device team_slave_1 added [ 71.462975][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.472344][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.479988][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.487245][ T5837] bridge_slave_0: entered allmulticast mode [ 71.494174][ T5837] bridge_slave_0: entered promiscuous mode [ 71.504037][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.544861][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.552069][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.559525][ T5837] bridge_slave_1: entered allmulticast mode [ 71.566514][ T5837] bridge_slave_1: entered promiscuous mode [ 71.575290][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.641327][ T5827] team0: Port device team_slave_0 added [ 71.647915][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.654869][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.680942][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.694717][ T5835] team0: Port device team_slave_0 added [ 71.727806][ T5827] team0: Port device team_slave_1 added [ 71.734046][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.741473][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.767439][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.781142][ T5835] team0: Port device team_slave_1 added [ 71.789081][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.800004][ T5828] team0: Port device team_slave_0 added [ 71.834292][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.845244][ T5828] team0: Port device team_slave_1 added [ 71.894809][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.901904][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.927985][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.939023][ T5833] Bluetooth: hci1: command tx timeout [ 71.939240][ T5833] Bluetooth: hci0: command tx timeout [ 71.947396][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.951071][ T5833] Bluetooth: hci4: command tx timeout [ 71.957874][ T5844] Bluetooth: hci2: command tx timeout [ 71.962524][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.993904][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.017160][ T5844] Bluetooth: hci3: command tx timeout [ 72.040488][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.047543][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.074130][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.086144][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.093244][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.119486][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.132299][ T5837] team0: Port device team_slave_0 added [ 72.145495][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.152703][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.178722][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.210164][ T5837] team0: Port device team_slave_1 added [ 72.216422][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.223534][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.249665][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.264618][ T5841] hsr_slave_0: entered promiscuous mode [ 72.271178][ T5841] hsr_slave_1: entered promiscuous mode [ 72.354653][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.362313][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.388383][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.401049][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.408102][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.434341][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.465867][ T5835] hsr_slave_0: entered promiscuous mode [ 72.472403][ T5835] hsr_slave_1: entered promiscuous mode [ 72.478757][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.484535][ T5835] Cannot create hsr debugfs directory [ 72.519931][ T5827] hsr_slave_0: entered promiscuous mode [ 72.526231][ T5827] hsr_slave_1: entered promiscuous mode [ 72.532530][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 72.538632][ T5827] Cannot create hsr debugfs directory [ 72.583165][ T5828] hsr_slave_0: entered promiscuous mode [ 72.589959][ T5828] hsr_slave_1: entered promiscuous mode [ 72.596036][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 72.602438][ T5828] Cannot create hsr debugfs directory [ 72.710172][ T5837] hsr_slave_0: entered promiscuous mode [ 72.716761][ T5837] hsr_slave_1: entered promiscuous mode [ 72.722859][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.729105][ T5837] Cannot create hsr debugfs directory [ 73.148806][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.179481][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.198692][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.217320][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.250208][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.264103][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.276780][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.302039][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.373138][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.385968][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.400897][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.414846][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.514521][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.532756][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.543933][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.554516][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.633568][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.644885][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.664917][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.685008][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.728022][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.742708][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.803960][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.815231][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.841007][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.848241][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.872777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.879897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.906407][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.913561][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.924360][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.931470][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.980330][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.016987][ T5844] Bluetooth: hci2: command tx timeout [ 74.017230][ T5833] Bluetooth: hci0: command tx timeout [ 74.022764][ T5834] Bluetooth: hci4: command tx timeout [ 74.034108][ T5151] Bluetooth: hci1: command tx timeout [ 74.059501][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.097079][ T5844] Bluetooth: hci3: command tx timeout [ 74.099416][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.115504][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.122669][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.139810][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.160952][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.168083][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.221752][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.254058][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.282753][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.289952][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.306004][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.313200][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.349887][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.357087][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.375274][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.382490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.615194][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.751171][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.791475][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.831449][ T5841] veth0_vlan: entered promiscuous mode [ 74.883479][ T5841] veth1_vlan: entered promiscuous mode [ 75.001279][ T5841] veth0_macvtap: entered promiscuous mode [ 75.014144][ T5828] veth0_vlan: entered promiscuous mode [ 75.031233][ T5841] veth1_macvtap: entered promiscuous mode [ 75.045944][ T5827] veth0_vlan: entered promiscuous mode [ 75.069030][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.080908][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.095464][ T5828] veth1_vlan: entered promiscuous mode [ 75.107413][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.120345][ T5827] veth1_vlan: entered promiscuous mode [ 75.133448][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.180036][ T1315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196203][ T1315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.207128][ T1315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.216079][ T1315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.279900][ T5828] veth0_macvtap: entered promiscuous mode [ 75.313507][ T5828] veth1_macvtap: entered promiscuous mode [ 75.410414][ T5827] veth0_macvtap: entered promiscuous mode [ 75.437037][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.451835][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.464623][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.473692][ T5835] veth0_vlan: entered promiscuous mode [ 75.492732][ T5827] veth1_macvtap: entered promiscuous mode [ 75.503148][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.539705][ T1007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.550733][ T1007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.565803][ T1007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575401][ T1007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.589657][ T5835] veth1_vlan: entered promiscuous mode [ 75.596539][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.620957][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.634946][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.668177][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.695739][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.733748][ T1315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784088][ T1315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.807920][ T5837] veth0_vlan: entered promiscuous mode [ 75.813799][ T1315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850431][ T1315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.902004][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.918054][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.931682][ T5835] veth0_macvtap: entered promiscuous mode [ 75.943423][ T5837] veth1_vlan: entered promiscuous mode [ 75.974638][ T5835] veth1_macvtap: entered promiscuous mode [ 76.043940][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.058387][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.096302][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.113110][ T5151] Bluetooth: hci1: command tx timeout [ 76.113153][ T5833] Bluetooth: hci0: command tx timeout [ 76.118650][ T5844] Bluetooth: hci2: command tx timeout [ 76.131288][ T5834] Bluetooth: hci4: command tx timeout [ 76.152772][ T5947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6'. [ 76.162006][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.176040][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.183858][ T5833] Bluetooth: hci3: command tx timeout [ 76.192733][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.214665][ T5837] veth0_macvtap: entered promiscuous mode [ 76.282927][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.292373][ T3483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302078][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.302184][ T3483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.322058][ T5837] veth1_macvtap: entered promiscuous mode [ 76.331821][ T3483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.351761][ T3483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.400902][ T5956] netlink: 233 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.414073][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.461226][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.521043][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.543076][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.579150][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.600342][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.615402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.635486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.765418][ T5960] NFSD: Failed to start, no listeners configured. [ 77.059643][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.084645][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.234477][ T5966] tipc: Started in network mode [ 77.248663][ T5966] tipc: Node identity 0ef0074b9997, cluster identity 4711 [ 77.277151][ T5966] tipc: Enabled bearer , priority 0 [ 77.284984][ T5967] syzkaller0: entered promiscuous mode [ 77.292667][ T5967] syzkaller0: entered allmulticast mode [ 77.304038][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.327267][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.438080][ T5968] tipc: Resetting bearer [ 77.485224][ T5968] tipc: Disabling bearer [ 77.579942][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.609576][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.792926][ T5987] gretap0: entered promiscuous mode [ 78.186865][ T5833] Bluetooth: hci4: command tx timeout [ 78.191935][ T5151] Bluetooth: hci0: command tx timeout [ 78.192316][ T5834] Bluetooth: hci1: command tx timeout [ 78.203318][ T5834] Bluetooth: hci2: command tx timeout [ 78.256909][ T5834] Bluetooth: hci3: command tx timeout [ 78.370118][ T6007] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13'. [ 78.398673][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.777401][ T6035] netlink: 27 bytes leftover after parsing attributes in process `syz.2.19'. [ 78.970382][ T6043] Bluetooth: MGMT ver 1.23 [ 79.022958][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21'. [ 79.258207][ T6055] warning: `syz.3.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.840332][ T6094] Cannot find set identified by id 0 to match [ 79.870322][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.963650][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.017978][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.042208][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 80.202539][ T6105] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 80.234969][ T6103] netlink: 27 bytes leftover after parsing attributes in process `syz.0.34'. [ 80.337912][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.419971][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.487259][ T6113] FAULT_INJECTION: forcing a failure. [ 80.487259][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.523624][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 80.523648][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.523665][ T6113] Call Trace: [ 80.523672][ T6113] [ 80.523681][ T6113] dump_stack_lvl+0x189/0x250 [ 80.523715][ T6113] ? __pfx____ratelimit+0x10/0x10 [ 80.523733][ T6113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.523753][ T6113] ? __pfx__printk+0x10/0x10 [ 80.523776][ T6113] ? __might_fault+0xb0/0x130 [ 80.523811][ T6113] should_fail_ex+0x414/0x560 [ 80.523840][ T6113] _copy_from_user+0x2d/0xb0 [ 80.523862][ T6113] ___sys_sendmsg+0x158/0x2a0 [ 80.523886][ T6113] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.523903][ T6113] ? __lock_acquire+0x6b6/0x2cf0 [ 80.523960][ T6113] ? __might_fault+0xb0/0x130 [ 80.523988][ T6113] __sys_sendmmsg+0x227/0x430 [ 80.524014][ T6113] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.524042][ T6113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.524079][ T6113] ? ksys_write+0x22a/0x250 [ 80.524098][ T6113] ? __pfx_ksys_write+0x10/0x10 [ 80.524120][ T6113] __x64_sys_sendmmsg+0xa0/0xc0 [ 80.524143][ T6113] do_syscall_64+0xfa/0xf80 [ 80.524161][ T6113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.524178][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 80.524199][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.524215][ T6113] RIP: 0033:0x7fca2298f749 [ 80.524236][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.524249][ T6113] RSP: 002b:00007fca23867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.524289][ T6113] RAX: ffffffffffffffda RBX: 00007fca22be5fa0 RCX: 00007fca2298f749 [ 80.524300][ T6113] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 80.524312][ T6113] RBP: 00007fca23867090 R08: 0000000000000000 R09: 0000000000000000 [ 80.524323][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.524333][ T6113] R13: 00007fca22be6038 R14: 00007fca22be5fa0 R15: 00007ffe011a6648 [ 80.524363][ T6113] [ 80.806323][ T6118] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.38'. [ 80.828883][ T6121] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 80.990252][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.061271][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.072378][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.243954][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.265197][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.286990][ T5892] IPVS: starting estimator thread 0... [ 81.377785][ T6142] IPVS: using max 32 ests per chain, 76800 per kthread [ 81.678324][ T6161] netlink: 27 bytes leftover after parsing attributes in process `syz.0.47'. [ 81.814519][ T6169] sctp: [Deprecated]: syz.3.45 (pid 6169) Use of int in maxseg socket option. [ 81.814519][ T6169] Use struct sctp_assoc_value instead [ 81.959046][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 82.199007][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.482965][ T6197] FAULT_INJECTION: forcing a failure. [ 82.482965][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.546391][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 82.556172][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT(full) [ 82.556196][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.556206][ T6197] Call Trace: [ 82.556214][ T6197] [ 82.556222][ T6197] dump_stack_lvl+0x189/0x250 [ 82.556246][ T6197] ? __pfx____ratelimit+0x10/0x10 [ 82.556261][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.556281][ T6197] ? __pfx__printk+0x10/0x10 [ 82.556315][ T6197] should_fail_ex+0x414/0x560 [ 82.556344][ T6197] _copy_from_user+0x2d/0xb0 [ 82.556365][ T6197] __copy_msghdr+0x3c5/0x5b0 [ 82.556390][ T6197] ___sys_sendmsg+0x1a5/0x2a0 [ 82.556412][ T6197] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.556441][ T6197] ? __lock_acquire+0x6b6/0x2cf0 [ 82.556498][ T6197] ? __might_fault+0xb0/0x130 [ 82.556525][ T6197] __sys_sendmmsg+0x227/0x430 [ 82.556552][ T6197] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.556578][ T6197] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.556613][ T6197] ? ksys_write+0x22a/0x250 [ 82.556631][ T6197] ? __pfx_ksys_write+0x10/0x10 [ 82.556653][ T6197] __x64_sys_sendmmsg+0xa0/0xc0 [ 82.556674][ T6197] do_syscall_64+0xfa/0xf80 [ 82.556693][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.556709][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 82.556729][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.556746][ T6197] RIP: 0033:0x7f1bf918f749 [ 82.556761][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.556774][ T6197] RSP: 002b:00007f1bfa0e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.556793][ T6197] RAX: ffffffffffffffda RBX: 00007f1bf93e5fa0 RCX: 00007f1bf918f749 [ 82.556806][ T6197] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.556817][ T6197] RBP: 00007f1bfa0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 82.556828][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.556836][ T6197] R13: 00007f1bf93e6038 R14: 00007f1bf93e5fa0 R15: 00007ffe0b7f1ad8 [ 82.556861][ T6197] [ 82.748152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.783233][ T6208] openvswitch: netlink: IP tunnel dst address not specified [ 82.912018][ T6220] netlink: 27 bytes leftover after parsing attributes in process `syz.1.59'. [ 83.485776][ T6251] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 83.493247][ T6251] team0: Device ipvlan2 failed to register rx_handler [ 84.180978][ T6281] FAULT_INJECTION: forcing a failure. [ 84.180978][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.181585][ T6279] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 84.203253][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 84.203278][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.203288][ T6281] Call Trace: [ 84.203295][ T6281] [ 84.203303][ T6281] dump_stack_lvl+0x189/0x250 [ 84.203328][ T6281] ? __pfx____ratelimit+0x10/0x10 [ 84.203346][ T6281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.203366][ T6281] ? __pfx__printk+0x10/0x10 [ 84.203403][ T6281] should_fail_ex+0x414/0x560 [ 84.203438][ T6281] _copy_from_user+0x2d/0xb0 [ 84.203459][ T6281] __copy_msghdr+0x3c5/0x5b0 [ 84.203490][ T6281] ___sys_sendmsg+0x1a5/0x2a0 [ 84.203512][ T6281] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.203529][ T6281] ? __lock_acquire+0x6b6/0x2cf0 [ 84.203591][ T6281] ? __might_fault+0xb0/0x130 [ 84.203617][ T6281] __sys_sendmmsg+0x227/0x430 [ 84.203640][ T6281] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.203668][ T6281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.203703][ T6281] ? ksys_write+0x22a/0x250 [ 84.203722][ T6281] ? __pfx_ksys_write+0x10/0x10 [ 84.203744][ T6281] __x64_sys_sendmmsg+0xa0/0xc0 [ 84.203765][ T6281] do_syscall_64+0xfa/0xf80 [ 84.203783][ T6281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.203800][ T6281] ? clear_bhb_loop+0x60/0xb0 [ 84.203820][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.203836][ T6281] RIP: 0033:0x7f14f178f749 [ 84.203852][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.203865][ T6281] RSP: 002b:00007f14ef9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.203884][ T6281] RAX: ffffffffffffffda RBX: 00007f14f19e5fa0 RCX: 00007f14f178f749 [ 84.203896][ T6281] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 84.203908][ T6281] RBP: 00007f14ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 84.203919][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.203929][ T6281] R13: 00007f14f19e6038 R14: 00007f14f19e5fa0 R15: 00007ffd44a65e58 [ 84.203957][ T6281] [ 84.219234][ T6279] netlink: 228 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.286873][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 84.456896][ T6279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.566462][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.892342][ T6316] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 84.974957][ T6317] Illegal XDP return value 4294967274 on prog (id 16) dev syz_tun, expect packet loss! [ 85.034589][ T6324] Zero length message leads to an empty skb [ 85.307754][ T6342] block nbd0: not configured, cannot reconfigure [ 85.928966][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 85.968343][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 85.993662][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.020576][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.080872][ T6381] dvmrp1: entered allmulticast mode [ 86.102669][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.104094][ T6381] dvmrp1: left allmulticast mode [ 86.250203][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.259592][ T6389] ip6gre1: entered promiscuous mode [ 86.266213][ T6389] ip6gre1: entered allmulticast mode [ 86.290824][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.316100][ T6371] netlink: 'syz.4.88': attribute type 62 has an invalid length. [ 86.352433][ T6399] __nla_validate_parse: 5 callbacks suppressed [ 86.352450][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 86.579093][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 86.622458][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 86.676052][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 86.714566][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'. [ 86.735315][ T6416] ip6gretap0: entered promiscuous mode [ 86.748694][ T979] cfg80211: failed to load regulatory.db [ 86.759758][ T6416] macvtap1: entered promiscuous mode [ 86.774367][ T6416] macvtap1: entered allmulticast mode [ 86.794095][ T6416] ip6gretap0: entered allmulticast mode [ 86.836312][ T6423] ip6gretap0: left allmulticast mode [ 86.864252][ T6423] ip6gretap0: left promiscuous mode [ 86.906292][ T6426] tipc: Started in network mode [ 86.947534][ T6426] tipc: Node identity 0000f0bf397f0000ffffffffffffffff, cluster identity 4711 [ 87.120509][ T6439] : entered promiscuous mode [ 87.212461][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 87.221738][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 87.222874][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 87.696382][ T6468] netlink: 67 bytes leftover after parsing attributes in process `syz.3.109'. [ 87.868093][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 87.871078][ T6473] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 87.929345][ T6473] bond1 (unregistering): Released all slaves [ 88.721250][ T6525] pimreg: entered allmulticast mode [ 88.759260][ T6527] pimreg: left allmulticast mode [ 88.934575][ T980] IPVS: starting estimator thread 0... [ 89.046663][ T6541] IPVS: using max 28 ests per chain, 67200 per kthread [ 89.445420][ T6559] net_ratelimit: 4 callbacks suppressed [ 89.445439][ T6559] openvswitch: netlink: Message has 4 unknown bytes. [ 89.737193][ T6580] SET target dimension over the limit! [ 89.861960][ T6589] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 90.146045][ T6603] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 90.179118][ T6606] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.496851][ T6582] bond1: entered allmulticast mode [ 90.533260][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.280481][ T6645] dvmrp0: entered allmulticast mode [ 91.521442][ T6656] __nla_validate_parse: 5 callbacks suppressed [ 91.521460][ T6656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.147'. [ 91.583194][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.147'. [ 91.721998][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.884383][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 91.928613][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 92.097585][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 92.255166][ T6689] tipc: Started in network mode [ 92.301744][ T6689] tipc: Node identity aae8551e54b1, cluster identity 4711 [ 92.340652][ T6689] tipc: Enabled bearer , priority 0 [ 92.441107][ T6689] tipc: Resetting bearer [ 92.637433][ T6712] validate_nla: 58 callbacks suppressed [ 92.637451][ T6712] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 92.670021][ T6712] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 92.744702][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 93.020069][ T6688] tipc: Disabling bearer [ 93.922449][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 94.133590][ T6774] netlink: 19 bytes leftover after parsing attributes in process `syz.1.165'. [ 95.040016][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 95.050467][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 95.090870][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.099331][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.184783][ T6827] netlink: 19 bytes leftover after parsing attributes in process `syz.2.180'. [ 95.355045][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.373903][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.520137][ T4575] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.537857][ T4575] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.561987][ T4575] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.573441][ T4575] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.609793][ T6839] netlink: 'syz.4.184': attribute type 4 has an invalid length. [ 95.673990][ T6842] geneve0: entered promiscuous mode [ 95.733420][ T6841] can: request_module (can-proto-0) failed. [ 96.100391][ T6857] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 96.123289][ T6857] bond1 (unregistering): Released all slaves [ 96.426058][ T6880] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 96.601477][ T6898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.679850][ T6907] __nla_validate_parse: 6 callbacks suppressed [ 96.679867][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 96.743614][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 96.873740][ T4575] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.897775][ T6900] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 96.938041][ T4575] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.943344][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 96.955725][ T3483] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.000219][ T3483] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.016478][ T6913] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.024768][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 97.140064][ T6919] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 97.148007][ T6918] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 97.186541][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.212077][ T6918] syz.3.204 (6918) used greatest stack depth: 17688 bytes left [ 97.623069][ T6927] netlink: 'syz.1.207': attribute type 7 has an invalid length. [ 97.992648][ T6957] netlink: 27 bytes leftover after parsing attributes in process `syz.1.211'. [ 98.227604][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 98.447906][ T6967] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.476364][ T6967] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.627652][ T6983] batadv1: entered promiscuous mode [ 98.728681][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'. [ 98.833126][ T6990] tun0: tun_chr_ioctl cmd 1074025672 [ 98.883993][ T6990] tun0: ignored: set checksum disabled [ 99.534377][ T7023] netlink: 27 bytes leftover after parsing attributes in process `syz.3.224'. [ 99.797066][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.881681][ T7050] netlink: 'syz.0.230': attribute type 21 has an invalid length. [ 99.891450][ T7032] netlink: 'syz.4.227': attribute type 10 has an invalid length. [ 99.952925][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.982545][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.999334][ T7032] block nbd0: not configured, cannot reconfigure [ 100.314525][ T7074] bridge0: entered promiscuous mode [ 100.320996][ T7074] macsec1: entered promiscuous mode [ 100.332513][ T7074] bridge0: port 3(macsec1) entered blocking state [ 100.340883][ T7074] bridge0: port 3(macsec1) entered disabled state [ 100.348003][ T7074] macsec1: entered allmulticast mode [ 100.353321][ T7074] bridge0: entered allmulticast mode [ 100.360987][ T7074] macsec1: left allmulticast mode [ 100.363190][ T7075] netlink: 'syz.2.237': attribute type 11 has an invalid length. [ 100.366026][ T7074] bridge0: left allmulticast mode [ 100.380528][ T7074] bridge0: left promiscuous mode [ 101.475194][ T7100] bond0: (slave erspan0): Opening slave failed [ 101.725132][ T7118] netlink: 'syz.2.247': attribute type 2 has an invalid length. [ 101.745097][ T7118] netlink: 'syz.2.247': attribute type 8 has an invalid length. [ 101.766320][ T7118] __nla_validate_parse: 4 callbacks suppressed [ 101.793454][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.247'. [ 101.881935][ T7127] netlink: 7 bytes leftover after parsing attributes in process `syz.4.250'. [ 101.975436][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.983272][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.110093][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.128994][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.349944][ T4575] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.367238][ T4575] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.409810][ T4575] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.430938][ T4575] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.632889][ T7160] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 102.665492][ T7160] bond1 (unregistering): Released all slaves [ 103.123610][ T7199] netlink: 7 bytes leftover after parsing attributes in process `syz.2.263'. [ 103.148412][ T7201] netlink: 200 bytes leftover after parsing attributes in process `syz.0.264'. [ 103.160423][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 103.255010][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 103.264002][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 103.307063][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 103.411399][ T7216] netlink: 'syz.4.268': attribute type 2 has an invalid length. [ 103.424193][ T7216] netlink: 'syz.4.268': attribute type 11 has an invalid length. [ 103.441243][ T7216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.268'. [ 103.480524][ T7222] netlink: 'syz.2.267': attribute type 21 has an invalid length. [ 103.512251][ T7214] sit0: entered promiscuous mode [ 103.532699][ T7214] netlink: 1 bytes leftover after parsing attributes in process `syz.2.267'. [ 103.570675][ T7222] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 103.719352][ T7229] tipc: Started in network mode [ 103.736886][ T7229] tipc: Node identity 22c3d660ad28, cluster identity 4711 [ 103.755811][ T7229] tipc: Enabled bearer , priority 0 [ 103.770017][ T7231] syzkaller0: entered promiscuous mode [ 103.775522][ T7231] syzkaller0: entered allmulticast mode [ 103.833699][ T7229] tipc: Resetting bearer [ 103.876906][ T7228] tipc: Resetting bearer [ 103.908978][ T7228] tipc: Disabling bearer [ 104.232432][ T7259] netlink: 'syz.1.281': attribute type 8 has an invalid length. [ 105.094572][ T7289] ip6gre1: entered promiscuous mode [ 105.106699][ T7289] ip6gre1: entered allmulticast mode [ 105.114149][ T6133] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.127135][ T6133] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.137087][ T7130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.189218][ T7290] validate_nla: 3 callbacks suppressed [ 105.189236][ T7290] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 105.207281][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.378747][ T7153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.485008][ T7310] syzkaller0: entered promiscuous mode [ 105.491941][ T7310] syzkaller0: entered allmulticast mode [ 105.498129][ T7312] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 105.507571][ T7312] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 105.515364][ T7312] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 105.557704][ T7312] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 105.570882][ T7307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.596783][ T7153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.667050][ T7307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.724733][ T7307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.772137][ T7307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.909743][ T1007] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.965065][ T3483] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.018385][ T3483] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.052811][ T3483] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.302097][ T7339] syzkaller0: entered promiscuous mode [ 106.308541][ T7339] syzkaller0: entered allmulticast mode [ 106.330340][ T7341] syzkaller0: entered promiscuous mode [ 106.335875][ T7341] syzkaller0: entered allmulticast mode [ 107.467494][ T7355] openvswitch: netlink: IP tunnel dst address not specified [ 107.716275][ T7370] syzkaller0: entered promiscuous mode [ 107.730825][ T7370] syzkaller0: entered allmulticast mode [ 107.974724][ T7385] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 108.127062][ T7143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.203401][ T7397] __nla_validate_parse: 7 callbacks suppressed [ 108.203418][ T7397] netlink: 204 bytes leftover after parsing attributes in process `syz.4.321'. [ 108.224742][ T7398] syzkaller0: entered promiscuous mode [ 108.232270][ T7398] syzkaller0: entered allmulticast mode [ 108.249611][ T7400] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.323'. [ 108.321369][ T7401] bridge0: port 3(gretap0) entered blocking state [ 108.337616][ T7401] bridge0: port 3(gretap0) entered disabled state [ 108.354846][ T7401] gretap0: entered allmulticast mode [ 108.364157][ T7401] gretap0: entered promiscuous mode [ 108.380526][ T7401] bridge0: port 3(gretap0) entered blocking state [ 108.387358][ T7401] bridge0: port 3(gretap0) entered forwarding state [ 108.534666][ T7411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.976919][ T7143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.057297][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.084404][ T7419] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 109.092688][ T7419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.330'. [ 109.583471][ T7446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.600994][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 109.611471][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 109.641644][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 109.652004][ T6000] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.660568][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 109.662263][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 109.679352][ T6000] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.688232][ T6000] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.698454][ T6000] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.029753][ T7452] netlink: 'syz.0.336': attribute type 6 has an invalid length. [ 110.316478][ T7460] netlink: 73 bytes leftover after parsing attributes in process `syz.0.338'. [ 110.395998][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.404561][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.419648][ T7459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.586447][ T7473] netlink: 84 bytes leftover after parsing attributes in process `syz.0.342'. [ 111.751043][ T7517] bridge_slave_0: default FDB implementation only supports local addresses [ 114.559441][ T7604] __nla_validate_parse: 3 callbacks suppressed [ 114.559460][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.376'. [ 114.726096][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 115.295795][ T7638] netlink: 348 bytes leftover after parsing attributes in process `syz.1.386'. [ 116.186510][ T7647] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.389'. [ 116.218644][ T7647] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.238259][ T7647] bond0: option arp_validate: invalid value (55553) [ 116.241351][ T4575] bond0: (slave bond_slave_0): interface is now down [ 116.263430][ T7651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.391'. [ 116.290119][ T4575] bond0: (slave bond_slave_1): interface is now down [ 116.311629][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.337477][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.344998][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.368017][ T7654] netlink: 91 bytes leftover after parsing attributes in process `syz.4.392'. [ 116.389122][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.398425][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.421070][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.438472][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.460024][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.502705][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.512870][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.541233][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.549556][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.582574][ T6133] bond0: (slave bond_slave_0): interface is now down [ 116.591348][ T6133] bond0: (slave bond_slave_1): interface is now down [ 116.613790][ T6133] bond0: now running without any active interface! [ 116.662532][ T7670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.397'. [ 116.752530][ T7672] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 116.786356][ T7676] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 117.105981][ T7691] netlink: 91 bytes leftover after parsing attributes in process `syz.2.406'. [ 117.219495][ T7698] veth1_to_bond: entered allmulticast mode [ 117.227532][ T7698] veth1_to_bond: entered promiscuous mode [ 117.270399][ T7703] netlink: 'syz.2.408': attribute type 3 has an invalid length. [ 117.271847][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 117.295220][ T7703] netlink: 'syz.2.408': attribute type 7 has an invalid length. [ 117.304148][ T7703] netlink: 'syz.2.408': attribute type 8 has an invalid length. [ 117.312313][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'. [ 117.456869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.553594][ T7699] veth1_to_bond: left promiscuous mode [ 117.562634][ T7699] veth1_to_bond: left allmulticast mode [ 117.636516][ T7718] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 117.995275][ T7696] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 118.756911][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.766378][ T7718] bond0: (slave team0): Enslaving as an active interface with an up link [ 118.984246][ T7741] netlink: 'syz.0.417': attribute type 39 has an invalid length. [ 119.079797][ T7745] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 119.121082][ T7750] netlink: 'syz.3.421': attribute type 39 has an invalid length. [ 119.141817][ T7750] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 119.158987][ T7750] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 119.194520][ T7750] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 119.214561][ T7750] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 119.238480][ T7754] tipc: Enabling not permitted [ 119.265133][ T7754] tipc: Enabling of bearer rejected, failed to enable media [ 119.606542][ T7771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.663934][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.729753][ T7780] bond1: (slave bond0): Enslaving as an active interface with an up link [ 119.920016][ T7793] __nla_validate_parse: 10 callbacks suppressed [ 119.920042][ T7793] netlink: 7 bytes leftover after parsing attributes in process `syz.4.430'. [ 120.170937][ T7783] bond1 (unregistering): (slave bond0): Releasing backup interface [ 120.191560][ T7783] bond1 (unregistering): Released all slaves [ 120.402693][ T30] audit: type=1800 audit(1766600111.760:2): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.435" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=395 res=0 errno=0 [ 120.416774][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 120.431012][ T7814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.437'. [ 120.553591][ T30] audit: type=1804 audit(1766600111.770:3): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.435" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=395 res=1 errno=0 [ 120.637434][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 120.772929][ T7825] xt_CT: No such helper "syz0" [ 121.014613][ T7838] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.270148][ T7846] netlink: 7 bytes leftover after parsing attributes in process `syz.1.446'. [ 121.369809][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 121.390088][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 121.410167][ T7849] netlink: 58 bytes leftover after parsing attributes in process `syz.0.447'. [ 121.430623][ T7854] netlink: 216 bytes leftover after parsing attributes in process `syz.1.449'. [ 121.451510][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 121.533390][ T7868] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 121.582693][ T7868] bond1: entered promiscuous mode [ 121.589642][ T7868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.637815][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.648064][ T7873] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 121.663304][ T7868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.667901][ T7873] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 121.670919][ T7868] IPv6: NLM_F_CREATE should be set when creating new route [ 121.687458][ T7868] IPv6: NLM_F_CREATE should be set when creating new route [ 121.705530][ T7873] bond1: (slave wireguard0): making interface the new active one [ 121.716830][ T7873] wireguard0: entered promiscuous mode [ 121.723504][ T7873] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 121.735672][ T7875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.879862][ T7884] syzkaller0: entered promiscuous mode [ 121.890045][ T7884] syzkaller0: entered allmulticast mode [ 121.920756][ T7884] TC_ACT_REPEAT abuse ? [ 122.051469][ T7893] : entered promiscuous mode [ 122.052552][ T7894] IPVS: length: 129 != 166236666552 [ 122.068527][ T7893] validate_nla: 2 callbacks suppressed [ 122.068544][ T7893] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 122.223602][ T7893] bond1: entered promiscuous mode [ 122.242863][ T7893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.353848][ T7923] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 122.395341][ T7924] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.406732][ T7923] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.527080][ T7934] netlink: 'syz.0.470': attribute type 21 has an invalid length. [ 122.836530][ T7944] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 122.916855][ T30] audit: type=1800 audit(1766600114.280:4): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.474" name="memory.events" dev="tmpfs" ino=438 res=0 errno=0 [ 123.745217][ T7996] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 124.009695][ T8013] netlink: 'syz.3.494': attribute type 3 has an invalid length. [ 124.032201][ T8016] tipc: Enabled bearer , priority 0 [ 124.041125][ T8018] syzkaller0: entered promiscuous mode [ 124.049669][ T8018] syzkaller0: entered allmulticast mode [ 124.058605][ T8016] tipc: Enabling of bearer rejected, already enabled [ 124.070152][ T8016] tipc: Enabling of bearer rejected, already enabled [ 124.079592][ T8016] tipc: Enabling of bearer rejected, already enabled [ 124.089683][ T8016] tipc: Enabling of bearer rejected, already enabled [ 124.126173][ T8020] tipc: Resetting bearer [ 124.160678][ T8020] tipc: Disabling bearer [ 124.183275][ T8023] vlan2: entered promiscuous mode [ 124.190833][ T8023] gretap0: entered promiscuous mode [ 124.260933][ T8023] vlan2: entered promiscuous mode [ 124.335168][ T8023] vlan2: entered promiscuous mode [ 124.440296][ T8023] vlan2: entered promiscuous mode [ 124.594844][ T8023] vlan2: entered promiscuous mode [ 124.699512][ T8023] vlan2: entered promiscuous mode [ 124.842359][ T8023] vlan2: entered promiscuous mode [ 125.000831][ T8042] bond2: option lp_interval: invalid value (0) [ 125.046686][ T8042] bond2: option lp_interval: allowed values 1 - 2147483647 [ 125.088241][ T8042] bond2 (unregistering): Released all slaves [ 125.151380][ T8023] vlan2: entered promiscuous mode [ 125.172692][ T8046] wireguard0: entered promiscuous mode [ 125.179797][ T8046] wireguard0: entered allmulticast mode [ 125.193115][ T8046] team0: Device wireguard0 is of different type [ 125.196677][ T8052] __nla_validate_parse: 18 callbacks suppressed [ 125.196694][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 125.475194][ T8065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 125.489391][ T8067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.509'. [ 125.526753][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 125.568829][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 126.149150][ T8095] tipc: Enabled bearer , priority 0 [ 126.201514][ T8094] tipc: Disabling bearer [ 126.233163][ T8111] netlink: 'syz.0.521': attribute type 2 has an invalid length. [ 126.271480][ T8111] netlink: 119 bytes leftover after parsing attributes in process `syz.0.521'. [ 126.466924][ T8124] netlink: 3 bytes leftover after parsing attributes in process `syz.0.526'. [ 126.481407][ T8124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.496460][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 126.551844][ T8126] wireguard0: entered promiscuous mode [ 126.572991][ T8126] wireguard0: entered allmulticast mode [ 126.631440][ T8126] team0: Device wireguard0 is of different type [ 126.693816][ T8132] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.820109][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.916751][ T8137] bond0: (slave rose0): Enslaving as an active interface with an up link [ 126.951421][ T8132] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.060863][ T8132] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.140636][ T8132] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.235587][ T8164] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 127.271157][ T6133] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.332444][ T6133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.435749][ T8170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.536148][ T3483] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.598292][ T3483] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.856859][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 128.141133][ T8200] tipc: Cannot configure node identity twice [ 128.157962][ T8200] tipc: Cannot configure node identity twice [ 128.461641][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 128.499163][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 129.451873][ T6133] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.520793][ T6133] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.695967][ T6133] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.735514][ T6133] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.493468][ T8319] __nla_validate_parse: 3 callbacks suppressed [ 130.493487][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 130.701802][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 130.732936][ T8331] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 130.752979][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.761296][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.849795][ T8331] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode [ 131.056104][ T8346] ip6gre1: entered promiscuous mode [ 131.074838][ T8346] ip6gre1: entered allmulticast mode [ 131.092878][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.576'. [ 131.128532][ T8346] syzkaller1: entered promiscuous mode [ 131.134558][ T8346] syzkaller1: entered allmulticast mode [ 131.420631][ T8364] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 131.582579][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 131.740528][ T8385] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 132.746103][ T8379] tipc: Enabling of bearer rejected, failed to enable media [ 132.826656][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833176][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937566][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 132.945958][ T8405] vlan3: entered allmulticast mode [ 133.123841][ T8418] netlink: 'syz.2.591': attribute type 8 has an invalid length. [ 133.132420][ T8418] netlink: 'syz.2.591': attribute type 9 has an invalid length. [ 133.143572][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 133.153766][ T8418] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 133.168058][ T8418] netlink: 'syz.2.591': attribute type 11 has an invalid length. [ 133.186347][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 133.300899][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.593'. [ 133.456758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.459217][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'. [ 133.479913][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'. [ 134.052702][ T8462] vetè0_virt_wif: renamed from lo [ 135.456728][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 136.334909][ T8474] dummy0: entered allmulticast mode [ 136.754559][ T8495] __nla_validate_parse: 1 callbacks suppressed [ 136.754576][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 136.931954][ T8495] bond0: (slave bond_slave_1): Releasing backup interface [ 137.031647][ T8507] syz_tun: entered allmulticast mode [ 137.040114][ T8505] vcan0: entered allmulticast mode [ 137.119647][ T8497] delete_channel: no stack [ 137.359016][ T8521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'. [ 137.554809][ T8537] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 137.643491][ T8545] vxcan3: entered allmulticast mode [ 137.674820][ T8539] can: request_module (can-proto-0) failed. [ 137.692931][ T8504] syz_tun: left allmulticast mode [ 137.841740][ T8551] sctp: [Deprecated]: syz.2.627 (pid 8551) Use of int in max_burst socket option. [ 137.841740][ T8551] Use struct sctp_assoc_value instead [ 138.499729][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.599764][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.632848][ T8562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.698470][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 138.725170][ T8578] netlink: 'syz.2.632': attribute type 5 has an invalid length. [ 138.737735][ T8578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 138.818787][ T8572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.824596][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 138.913712][ T8578] geneve2: entered promiscuous mode [ 138.926371][ T8578] geneve2: entered allmulticast mode [ 138.962654][ T6000] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 138.988874][ T8572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.008300][ T6000] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 139.073459][ T8592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.085148][ T8592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.221046][ T8592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.232348][ T8592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.369853][ T8592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.381147][ T8592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.531627][ T8592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.552099][ T8592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.580830][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 139.635900][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 139.695846][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 139.707817][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 139.717253][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.724498][ T8614] bridge0: port 2(bridge_slave_1) entered listening state [ 139.732062][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.739368][ T8614] bridge0: port 1(bridge_slave_0) entered listening state [ 139.973533][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.986063][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.997802][ T8617] syzkaller1: entered promiscuous mode [ 140.003308][ T8617] syzkaller1: entered allmulticast mode [ 140.051853][ T1315] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.061837][ T1315] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.120851][ T1315] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.144249][ T1315] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.196449][ T1315] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.217854][ T1315] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.469656][ T8572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.503356][ T8572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 140.584578][ T8572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.611940][ T8572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 140.742146][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 140.766630][ T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.802222][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 140.816599][ T60] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.851864][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 140.875223][ T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.927692][ T1315] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 140.941192][ T1315] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.975937][ T8669] dvmrp1: entered allmulticast mode [ 141.075050][ T8669] dvmrp1: left allmulticast mode [ 141.242247][ T8680] tipc: Enabled bearer , priority 0 [ 141.265015][ T8680] syzkaller0: entered promiscuous mode [ 141.281442][ T8680] syzkaller0: entered allmulticast mode [ 141.328320][ T8680] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.392828][ T8680] tipc: Resetting bearer [ 141.422033][ T8680] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 141.476897][ T8679] tipc: Resetting bearer [ 141.510673][ T8679] tipc: Disabling bearer [ 142.378830][ T8711] netlink: 'syz.3.668': attribute type 58 has an invalid length. [ 142.387765][ T8711] __nla_validate_parse: 8 callbacks suppressed [ 142.387783][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.668'. [ 142.545492][ T8717] netlink: 324 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.052002][ T8747] 0: reclassify loop, rule prio 0, protocol 800 [ 143.456232][ T8763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.679'. [ 143.468638][ T7131] IPVS: starting estimator thread 0... [ 143.489820][ T8768] netlink: 172 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.516428][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.589445][ T8765] IPVS: using max 36 ests per chain, 86400 per kthread [ 143.688427][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.739675][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.752215][ T8771] netlink: 620 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.761602][ T8771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.680'. [ 143.767062][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.683'. [ 143.781794][ T8771] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 144.105505][ T8801] syzkaller0: entered promiscuous mode [ 144.111359][ T8801] syzkaller0: entered allmulticast mode [ 145.075745][ T8841] macsec1: entered promiscuous mode [ 145.082462][ T8841] macsec1: entered allmulticast mode [ 145.547732][ T8860] netlink: 'syz.1.705': attribute type 14 has an invalid length. [ 146.733681][ T8882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.752115][ T8882] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.787498][ T8882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.793449][ T8882] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 147.006458][ T8882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.033951][ T8882] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 147.079617][ T8882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.103847][ T8882] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 148.100657][ T8931] __nla_validate_parse: 12 callbacks suppressed [ 148.100677][ T8931] netlink: 168 bytes leftover after parsing attributes in process `syz.3.724'. [ 148.137732][ T8932] tipc: Enabling of bearer rejected, failed to enable media [ 148.213480][ T8936] netlink: 'syz.3.725': attribute type 9 has an invalid length. [ 148.226795][ T8936] netlink: 'syz.3.725': attribute type 11 has an invalid length. [ 148.242903][ T8936] netlink: 'syz.3.725': attribute type 12 has an invalid length. [ 148.263008][ T8936] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.725'. [ 148.265674][ T8938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.723'. [ 148.292893][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 148.369078][ T8943] netlink: 80 bytes leftover after parsing attributes in process `syz.3.726'. [ 148.391231][ T8943] Cannot find del_set index 2 as target [ 149.452834][ T8958] netlink: 43 bytes leftover after parsing attributes in process `syz.3.730'. [ 149.529068][ T8962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.634837][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 150.645829][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 165.456784][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.937851][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 169.945731][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 194.262740][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269217][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.016794][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.024037][ C0] bridge0: topology change detected, propagating [ 200.030845][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.038099][ C0] bridge0: topology change detected, propagating [ 230.096929][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.700200][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706536][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.896991][ T31] INFO: task kworker/0:14:7143 blocked for more than 143 seconds. [ 290.904848][ T31] Not tainted syzkaller #0 [ 290.909921][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.918762][ T31] task:kworker/0:14 state:D stack:23480 pid:7143 tgid:7143 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 290.930933][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 290.937688][ T31] Call Trace: [ 290.940955][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.943871][ T31] __schedule+0x14bc/0x5000 [ 290.948522][ T31] ? __pfx___schedule+0x10/0x10 [ 290.953911][ T31] ? schedule+0x91/0x360 [ 290.958791][ T31] schedule+0x165/0x360 [ 290.963184][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.969040][ T31] __mutex_lock+0x7e6/0x1350 [ 290.975335][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.006743][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 291.013054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.039828][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 291.045742][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 291.051720][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 291.057874][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 291.063581][ T31] process_scheduled_works+0xad1/0x1770 [ 291.069310][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.075330][ T31] worker_thread+0x8a0/0xda0 [ 291.080030][ T31] ? __kthread_parkme+0x7b/0x200 [ 291.084985][ T31] kthread+0x711/0x8a0 [ 291.089249][ T31] ? __pfx_worker_thread+0x10/0x10 [ 291.094370][ T31] ? __pfx_kthread+0x10/0x10 [ 291.099005][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.104399][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 291.109733][ T31] ? __pfx_kthread+0x10/0x10 [ 291.114331][ T31] ret_from_fork+0x599/0xb30 [ 291.118997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 291.124146][ T31] ? __switch_to_asm+0x39/0x70 [ 291.129092][ T31] ? __switch_to_asm+0x33/0x70 [ 291.133867][ T31] ? __pfx_kthread+0x10/0x10 [ 291.138739][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.143592][ T31] [ 291.146764][ T31] INFO: task syz.1.713:8883 blocked for more than 143 seconds. [ 291.154308][ T31] Not tainted syzkaller #0 [ 291.159304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.168088][ T31] task:syz.1.713 state:D stack:24536 pid:8883 tgid:8883 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 291.180144][ T31] Call Trace: [ 291.183426][ T31] [ 291.186369][ T31] __schedule+0x14bc/0x5000 [ 291.191082][ T31] ? __pfx___schedule+0x10/0x10 [ 291.195961][ T31] ? schedule+0x91/0x360 [ 291.200333][ T31] schedule+0x165/0x360 [ 291.204506][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.210116][ T31] __mutex_lock+0x7e6/0x1350 [ 291.214721][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.219529][ T31] ? rfkill_unregister+0xc8/0x220 [ 291.224560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.229739][ T31] ? __pfx_device_del+0x10/0x10 [ 291.234607][ T31] ? __cancel_work_sync+0x5c/0x110 [ 291.239771][ T31] rfkill_unregister+0xc8/0x220 [ 291.244664][ T31] nfc_unregister_device+0x96/0x300 [ 291.250114][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 291.255865][ T31] virtual_ncidev_close+0x56/0x90 [ 291.261038][ T31] __fput+0x44c/0xa70 [ 291.265046][ T31] task_work_run+0x1d4/0x260 [ 291.270107][ T31] ? __pfx_task_work_run+0x10/0x10 [ 291.275495][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 291.280920][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 291.286378][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 291.291852][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.296670][ T31] do_syscall_64+0x2d0/0xf80 [ 291.301264][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.306027][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.312258][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.316979][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.322865][ T31] RIP: 0033:0x7f14f178f749 [ 291.327537][ T31] RSP: 002b:00007ffd44a65fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 291.335997][ T31] RAX: 0000000000000000 RBX: 00007f14f19e7da0 RCX: 00007f14f178f749 [ 291.344030][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 291.352124][ T31] RBP: 00007f14f19e7da0 R08: 0000000000000224 R09: 0000001e44a662af [ 291.360347][ T31] R10: 00007f14f19e7cb0 R11: 0000000000000246 R12: 0000000000023d6d [ 291.368536][ T31] R13: 00007f14f19e6270 R14: ffffffffffffffff R15: 00007ffd44a660d0 [ 291.377180][ T31] [ 291.380251][ T31] INFO: task syz.1.713:8885 blocked for more than 143 seconds. [ 291.388463][ T31] Not tainted syzkaller #0 [ 291.393416][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.402359][ T31] task:syz.1.713 state:D stack:25448 pid:8885 tgid:8883 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 291.414454][ T31] Call Trace: [ 291.417807][ T31] [ 291.420917][ T31] __schedule+0x14bc/0x5000 [ 291.425475][ T31] ? __pfx___schedule+0x10/0x10 [ 291.430657][ T31] ? schedule+0x91/0x360 [ 291.435014][ T31] schedule+0x165/0x360 [ 291.439243][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.444711][ T31] __mutex_lock+0x7e6/0x1350 [ 291.449533][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.454331][ T31] ? rfkill_register+0x37/0x8e0 [ 291.459329][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.464381][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 291.470002][ T31] ? device_initialize+0x24b/0x440 [ 291.475187][ T31] rfkill_register+0x37/0x8e0 [ 291.479970][ T31] nfc_register_device+0x14a/0x390 [ 291.485101][ T31] nci_register_device+0x87f/0x9d0 [ 291.490390][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 291.496049][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 291.501463][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 291.506973][ T31] virtual_ncidev_open+0x129/0x1a0 [ 291.512194][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 291.517900][ T31] misc_open+0x2d5/0x350 [ 291.522159][ T31] chrdev_open+0x4cc/0x5e0 [ 291.526744][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.531706][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.538722][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.543694][ T31] do_dentry_open+0x7ce/0x1420 [ 291.548683][ T31] vfs_open+0x3b/0x340 [ 291.552770][ T31] ? path_openat+0x33f3/0x3dd0 [ 291.559636][ T31] path_openat+0x340e/0x3dd0 [ 291.564251][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 291.569973][ T31] ? stack_depot_save_flags+0x40/0x850 [ 291.575446][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 291.581264][ T31] ? getname_flags+0xb8/0x540 [ 291.586039][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.591209][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.596258][ T31] do_filp_open+0x1fa/0x410 [ 291.601033][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.606073][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.610996][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.615354][ T31] do_sys_openat2+0x121/0x200 [ 291.620170][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.625389][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.630426][ T31] __x64_sys_openat+0x138/0x170 [ 291.635353][ T31] do_syscall_64+0xfa/0xf80 [ 291.639922][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.645990][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.650745][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.656825][ T31] RIP: 0033:0x7f14f178f749 [ 291.661281][ T31] RSP: 002b:00007f14ef9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.669846][ T31] RAX: ffffffffffffffda RBX: 00007f14f19e5fa0 RCX: 00007f14f178f749 [ 291.677947][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 291.685935][ T31] RBP: 00007f14f1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.694269][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.702599][ T31] R13: 00007f14f19e6038 R14: 00007f14f19e5fa0 R15: 00007ffd44a65e58 [ 291.710692][ T31] [ 291.713766][ T31] INFO: task syz.2.718:8917 blocked for more than 144 seconds. [ 291.721679][ T31] Not tainted syzkaller #0 [ 291.726695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.735495][ T31] task:syz.2.718 state:D stack:26840 pid:8917 tgid:8916 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 291.747686][ T31] Call Trace: [ 291.750976][ T31] [ 291.753899][ T31] __schedule+0x14bc/0x5000 [ 291.758545][ T31] ? __pfx___schedule+0x10/0x10 [ 291.763415][ T31] ? schedule+0x91/0x360 [ 291.767755][ T31] schedule+0x165/0x360 [ 291.771917][ T31] schedule_preempt_disabled+0x13/0x30 [ 291.777672][ T31] __mutex_lock+0x7e6/0x1350 [ 291.782277][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.787297][ T31] ? __mutex_lock+0x5bb/0x1350 [ 291.792084][ T31] ? misc_open+0x51/0x350 [ 291.796438][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 291.801584][ T31] misc_open+0x51/0x350 [ 291.805755][ T31] chrdev_open+0x4cc/0x5e0 [ 291.810486][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.815531][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 291.821938][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 291.826917][ T31] do_dentry_open+0x7ce/0x1420 [ 291.831694][ T31] vfs_open+0x3b/0x340 [ 291.835755][ T31] ? path_openat+0x33f3/0x3dd0 [ 291.840848][ T31] path_openat+0x340e/0x3dd0 [ 291.845511][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 291.850990][ T31] ? stack_depot_save_flags+0x40/0x850 [ 291.856508][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.862080][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 291.867362][ T31] do_filp_open+0x1fa/0x410 [ 291.872001][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.877128][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.881990][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.886319][ T31] do_sys_openat2+0x121/0x200 [ 291.891490][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.897050][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.901814][ T31] __x64_sys_openat+0x138/0x170 [ 291.906710][ T31] do_syscall_64+0xfa/0xf80 [ 291.911329][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.917472][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.922167][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.928412][ T31] RIP: 0033:0x7f677738f749 [ 291.932856][ T31] RSP: 002b:00007f677824d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.941511][ T31] RAX: ffffffffffffffda RBX: 00007f67775e5fa0 RCX: 00007f677738f749 [ 291.949533][ T31] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 291.957755][ T31] RBP: 00007f6777413f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.965743][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.973863][ T31] R13: 00007f67775e6038 R14: 00007f67775e5fa0 R15: 00007fff0d5a7ec8 [ 291.981913][ T31] [ 291.984992][ T31] [ 291.984992][ T31] Showing all locks held in the system: [ 291.993003][ T31] 1 lock held by khungtaskd/31: [ 291.997964][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 292.008058][ T31] 1 lock held by klogd/5189: [ 292.012657][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 292.022973][ T31] 2 locks held by getty/5592: [ 292.027743][ T31] #0: ffff88814d2320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 292.039276][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 292.049687][ T31] 3 locks held by kworker/0:14/7143: [ 292.054974][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 292.066003][ T31] #1: ffffc900031b7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 292.079897][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 292.091362][ T31] 2 locks held by syz.4.711/8882: [ 292.096388][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 292.106869][ T31] #1: ffff88802277a100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 292.115868][ T31] 2 locks held by syz.1.713/8883: [ 292.120941][ T31] #0: ffff88802277a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 292.130806][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 292.141201][ T31] 3 locks held by syz.1.713/8885: [ 292.146246][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.154749][ T31] #1: ffff888031e49100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 292.164391][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 292.174622][ T31] 1 lock held by syz.2.718/8917: [ 292.179673][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.188274][ T31] 1 lock held by syz.0.723/8928: [ 292.193220][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.201956][ T31] 1 lock held by syz.0.723/8930: [ 292.207029][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.215544][ T31] 1 lock held by syz.0.723/8932: [ 292.220686][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.229319][ T31] 1 lock held by syz.3.739/8986: [ 292.234302][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.242804][ T31] 1 lock held by syz-executor/8992: [ 292.248030][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.256491][ T31] 1 lock held by syz-executor/8993: [ 292.262108][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.270760][ T31] 1 lock held by syz-executor/8995: [ 292.275960][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.284537][ T31] 1 lock held by syz-executor/8997: [ 292.290059][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.298569][ T31] 1 lock held by syz-executor/8999: [ 292.303767][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.312260][ T31] 1 lock held by syz-executor/9005: [ 292.317617][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.326051][ T31] 1 lock held by syz-executor/9006: [ 292.331383][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.340079][ T31] 1 lock held by syz-executor/9008: [ 292.345279][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.354037][ T31] 1 lock held by syz-executor/9010: [ 292.359281][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.367772][ T31] 1 lock held by syz-executor/9012: [ 292.372980][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.381681][ T31] 1 lock held by syz-executor/9018: [ 292.386921][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.395444][ T31] 1 lock held by syz-executor/9019: [ 292.400687][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.409433][ T31] 1 lock held by syz-executor/9021: [ 292.414624][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.426117][ T31] 1 lock held by syz-executor/9023: [ 292.431393][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.440014][ T31] 1 lock held by syz-executor/9025: [ 292.445208][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 292.454026][ T31] [ 292.456437][ T31] ============================================= [ 292.456437][ T31] [ 292.465281][ T31] NMI backtrace for cpu 0 [ 292.465295][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.465306][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.465312][ T31] Call Trace: [ 292.465319][ T31] [ 292.465324][ T31] dump_stack_lvl+0x189/0x250 [ 292.465341][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.465352][ T31] ? __pfx__printk+0x10/0x10 [ 292.465371][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 292.465386][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.465400][ T31] ? __pfx__printk+0x10/0x10 [ 292.465414][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.465430][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 292.465443][ T31] sys_info+0x135/0x170 [ 292.465453][ T31] watchdog+0xf95/0xfe0 [ 292.465469][ T31] ? watchdog+0x20a/0xfe0 [ 292.465487][ T31] kthread+0x711/0x8a0 [ 292.465501][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.465513][ T31] ? __pfx_kthread+0x10/0x10 [ 292.465525][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.465539][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 292.465548][ T31] ? __pfx_kthread+0x10/0x10 [ 292.465560][ T31] ret_from_fork+0x599/0xb30 [ 292.465571][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 292.465584][ T31] ? __switch_to_asm+0x39/0x70 [ 292.465595][ T31] ? __switch_to_asm+0x33/0x70 [ 292.465606][ T31] ? __pfx_kthread+0x10/0x10 [ 292.465617][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.465636][ T31] [ 292.465640][ T31] Sending NMI from CPU 0 to CPUs 1: [ 292.615567][ C1] NMI backtrace for cpu 1 [ 292.615584][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 292.615600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.615609][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 292.615630][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 292.615641][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 292.615655][ C1] RAX: 1eb8d0f26a8b7b00 RBX: ffffffff81978fda RCX: 1eb8d0f26a8b7b00 [ 292.615666][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 292.615676][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 292.615687][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 292.615698][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 292.615708][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 292.615720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.615730][ C1] CR2: 00007fff912fee48 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 292.615743][ C1] Call Trace: [ 292.615750][ C1] [ 292.615756][ C1] default_idle+0x13/0x20 [ 292.615772][ C1] default_idle_call+0x73/0xb0 [ 292.615790][ C1] do_idle+0x1ea/0x520 [ 292.615806][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 292.615823][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 292.615839][ C1] ? __pfx_do_idle+0x10/0x10 [ 292.615859][ C1] ? do_idle+0xc/0x520 [ 292.615875][ C1] cpu_startup_entry+0x44/0x60 [ 292.615891][ C1] start_secondary+0x101/0x110 [ 292.615912][ C1] common_startup_64+0x13e/0x147 [ 292.615939][ C1] [ 292.616595][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 292.616608][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.616627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.616636][ T31] Call Trace: [ 292.616644][ T31] [ 292.616651][ T31] dump_stack_lvl+0x99/0x250 [ 292.616674][ T31] ? __asan_memcpy+0x40/0x70 [ 292.616691][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.616710][ T31] ? __pfx__printk+0x10/0x10 [ 292.616744][ T31] vpanic+0x237/0x6d0 [ 292.616764][ T31] ? __pfx_vpanic+0x10/0x10 [ 292.616784][ T31] ? preempt_schedule_common+0x83/0xd0 [ 292.616808][ T31] panic+0xb9/0xc0 [ 292.616826][ T31] ? __pfx_panic+0x10/0x10 [ 292.616846][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 292.616868][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 292.616894][ T31] watchdog+0xfdf/0xfe0 [ 292.616921][ T31] ? watchdog+0x20a/0xfe0 [ 292.616948][ T31] kthread+0x711/0x8a0 [ 292.616972][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.616993][ T31] ? __pfx_kthread+0x10/0x10 [ 292.617016][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.617039][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 292.617054][ T31] ? __pfx_kthread+0x10/0x10 [ 292.617076][ T31] ret_from_fork+0x599/0xb30 [ 292.617096][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 292.617122][ T31] ? __switch_to_asm+0x39/0x70 [ 292.617141][ T31] ? __switch_to_asm+0x33/0x70 [ 292.617160][ T31] ? __pfx_kthread+0x10/0x10 [ 292.617182][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.617224][ T31] [ 292.944664][ T31] Kernel Offset: disabled [ 292.948971][ T31] Rebooting in 86400 seconds..